$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa File: 2788fd0d-0141-46b1-b160-e9916a5caddd.roa (raw, json) Hash identifier: sn9iglHPxXCOmaovdAHcIav78XiV0/Mst5gTcaA2jxY= Subject key identifier: F8:30:80:26:69:89:43:BA:A5:D4:6F:B3:9A:20:09:AC:F4:1B:5A:AB Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 16E99529A95D34E8F8964D99A334062BD2D373 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa Signing time: Tue 20 May 2025 15:30:21 +0000 ROA not before: Tue 20 May 2025 15:30:21 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e9:95:29:a9:5d:34:e8:f8:96:4d:99:a3:34:06:2b:d2:d3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: May 20 15:30:21 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=cfcab18c95786a1e4921ea340f8820d280d64f91138fd6e205fbd2e11411d9bf, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:3d:19:bb:83:74:1d:d8:ac:ee:37:86:0e: 7d:81:2d:31:a5:ef:49:52:d6:1b:d9:3a:fb:78:20: 2a:d1:64:3a:f7:c8:54:94:2b:75:72:1b:b5:38:be: c2:9d:2a:a1:40:c0:05:48:56:6c:31:96:78:5d:fb: 36:d0:78:e8:b2:27:5e:de:fe:62:03:ed:d5:a3:5b: 16:d1:fa:b6:ba:cb:a3:24:1f:dd:d6:64:1e:e0:32: 13:0e:d5:7d:96:32:6b:45:30:dc:e8:61:4e:45:a6: 9f:28:ce:16:db:61:ce:8f:65:5d:32:d6:c3:d1:14: 3b:67:e8:a3:18:67:61:9d:f1:f2:f2:fc:ea:b3:44: 7d:ff:0d:64:0f:3d:4f:6e:f6:b1:21:43:d2:c0:e4: d0:04:5d:e3:3e:ff:5a:29:8c:0c:6c:6b:24:9d:ad: 93:a8:6e:f2:28:76:ad:fa:92:35:bb:97:32:43:13: a4:28:20:3c:29:cd:5e:91:bd:88:fb:5f:f9:7e:b1: c6:b1:67:81:ef:1d:d1:bc:7f:6b:e7:00:aa:78:70: c0:c7:24:65:23:70:99:0f:4f:31:ee:eb:ee:df:d1: 93:e0:f5:89:6c:d9:2a:4b:5d:ec:4d:22:4c:19:2a: f6:36:59:50:34:62:d4:dc:70:a5:f3:77:0e:37:f5: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:30:80:26:69:89:43:BA:A5:D4:6F:B3:9A:20:09:AC:F4:1B:5A:AB X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/2788fd0d-0141-46b1-b160-e9916a5caddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.0.0/24 Signature Algorithm: sha256WithRSAEncryption 90:56:d4:bf:2a:aa:ad:93:86:41:62:67:9b:fb:c7:bf:e0:fb: f9:7e:02:4d:c8:75:7b:2c:5d:00:0d:10:bd:0b:2a:5e:49:6f: 09:8c:72:bc:84:ad:f5:3a:39:a5:82:ca:36:ac:a3:83:4f:5a: da:1e:b3:02:a9:e9:29:0d:f0:14:d3:d6:fc:06:2c:b9:df:9d: cd:9d:e3:2c:df:0a:3c:c9:b6:af:43:53:47:b1:ce:26:7f:01: 98:a0:85:b6:eb:b5:8e:7a:65:9e:33:26:3f:ea:b2:20:89:9d: 6a:e2:81:29:a7:79:65:56:20:10:b5:3e:a5:3f:5d:3b:91:5d: 2c:3f:d9:07:44:7a:68:7b:dc:59:3a:d1:7d:6a:bb:4f:76:86: 50:9a:01:f6:33:f1:fa:12:8f:f4:cb:d5:47:32:5c:59:12:06: 5b:6c:c0:31:0a:39:2f:be:90:5b:82:e2:f4:9b:7c:0b:b6:16: a6:39:c6:21:d7:ea:9b:3f:08:b7:6f:65:fd:66:b3:62:ee:1f: 62:bb:89:7c:be:72:f1:89:04:16:df:bf:8c:10:2e:42:93:68: e8:89:ac:20:fc:dd:26:94:a6:ef:7d:a2:32:ab:f5:91:b0:b4: b8:43:8b:a7:15:73:19:33:a1:c1:d4:d2:f4:71:e8:45:51:c5: 73:44:17:20 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITFumVKaldNOj4lk2ZozQGK9LTczANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJhMTVkOGFhMTBkNjJkYmRkMzQ4MzI2ODc2YmE1Njc1M2Ni OTliNDY0Y2M0NTUzMjRiMzAeFw0yNTA1MjAxNTMwMjFaFw0yNTA2MjQyMzU5NTla MHoxSTBHBgNVBAUTQGNmY2FiMThjOTU3ODZhMWU0OTIxZWEzNDBmODgyMGQyODBk NjRmOTExMzhmZDZlMjA1ZmJkMmUxMTQxMWQ5YmYxLTArBgNVBAMTJGRkZmJjOTdj LTdiZWQtNDBkZi05NWNhLWU2NjRiMjlkN2IyNzCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJgjPRm7g3Qd2KzuN4YOfYEtMaXvSVLWG9k6+3ggKtFkOvfI VJQrdXIbtTi+wp0qoUDABUhWbDGWeF37NtB46LInXt7+YgPt1aNbFtH6trrLoyQf 3dZkHuAyEw7VfZYya0Uw3OhhTkWmnyjOFtthzo9lXTLWw9EUO2fooxhnYZ3x8vL8 6rNEff8NZA89T272sSFD0sDk0ARd4z7/WimMDGxrJJ2tk6hu8ih2rfqSNbuXMkMT pCggPCnNXpG9iPtf+X6xxrFnge8d0bx/a+cAqnhwwMckZSNwmQ9PMe7r7t/Rk+D1 iWzZKktd7E0iTBkq9jZZUDRi1NxwpfN3Djf1kkcCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBT4MIAmaYlDuqXUb7OaIAms9BtaqzAfBgNVHSMEGDAWgBSRLcYN12Qpgryu f4H+PEwScoAiHzAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzcxODhhYzI0LTA5 Y2MtNGYyMC05ZGJkLWNkOTAwNWQyNzk3ZS9hMTVkOGFhMTBkNjJkYmRkMzQ4MzI2 ODc2YmE1Njc1M2NiOTliNDY0Y2M0NTUzMjRiMy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS82MDJhMjZlNS00YTllLTRlNWUtODlmMC1lZjg5 MTQ5MGQ5YzkvMjc4OGZkMGQtMDE0MS00NmIxLWIxNjAtZTk5MTZhNWNhZGRkLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAt ZWY4OTE0OTBkOWM5L1l0dmROSU1taDJ1bFoxUExtYlJrekVWVEpMTS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADJwADANBgkqhkiG9w0BAQsFAAOCAQEAkFbUvyqqrZOGQWJnm/vHv+D7+X4C Tch1eyxdAA0QvQsqXklvCYxyvISt9To5pYLKNqyjg09a2h6zAqnpKQ3wFNPW/AYs ud+dzZ3jLN8KPMm2r0NTR7HOJn8BmKCFtuu1jnplnjMmP+qyIImdauKBKad5ZVYg ELU+pT9dO5FdLD/ZB0R6aHvcWTrRfWq7T3aGUJoB9jPx+hKP9MvVRzJcWRIGW2zA MQo5L76QW4Li9Jt8C7YWpjnGIdfqmz8It29l/WazYu4fYruJfL5y8YkEFt+/jBAu QpNo6ImsIPzdJpSm732iMqv1kbC0uEOLpxVzGTOhwdTS9HHoRVHFc0QXIA== -----END CERTIFICATE-----Generated at Mon Jun 2 16:44:44 2025 by rpki-client