$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa File: 708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa (raw, json) Hash identifier: xR2Loxjbh1rvmd9hstfOKIc/W3uyIMbcvdIdQrTcn7w= Subject key identifier: F4:59:6A:26:C7:3A:D1:13:5E:AC:0C:39:60:B7:51:54:D6:2F:01:0E Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 7BD8CC6E17D91E21239A6A6FB12A113267F62078 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa Signing time: Tue 20 May 2025 15:30:29 +0000 ROA not before: Tue 20 May 2025 15:30:29 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d8:cc:6e:17:d9:1e:21:23:9a:6a:6f:b1:2a:11:32:67:f6:20:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: May 20 15:30:29 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=75468f23ca9ce000283022aa7a76b2cd96e6305e22d2b9c647ac3bcb86ef7517, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:36:08:30:87:d0:77:f1:a2:78:c6:dd:5d: e0:72:22:3e:9e:0d:15:f5:68:16:b2:c8:47:76:c9: 31:c6:6c:9b:17:e5:39:81:6c:36:72:53:11:5d:61: 66:77:15:b1:9a:6e:f9:c2:d1:36:6d:99:13:7a:70: c7:02:5b:3c:cc:13:33:77:0f:bf:28:80:d8:aa:bf: 1f:85:f7:47:c5:f6:e6:5d:08:21:9d:dd:90:7c:d8: 11:09:0c:8c:e8:87:f7:8f:79:49:b7:ea:44:81:61: e0:48:33:c5:f0:ef:46:87:ea:a0:14:86:f5:f9:4f: 4d:18:86:4b:b5:fe:84:ee:bc:5b:c9:7a:66:32:1c: 3e:0c:cf:b7:85:06:44:6a:0f:26:86:e7:ab:2c:55: 52:85:68:55:1b:f9:eb:48:66:05:c1:50:30:bd:43: a6:82:a2:8e:58:cb:55:7e:5b:dc:4c:02:4a:f9:cf: c9:2a:a2:66:3c:d0:f9:2d:18:1f:2d:0d:53:3c:e9: ae:eb:64:a6:38:d3:c2:77:22:72:0a:5b:07:27:0d: 72:be:bd:f2:3b:c0:8f:30:bd:76:93:af:8d:ac:4b: 75:56:b6:1e:7c:78:51:24:52:8d:8b:52:07:bc:f8: 51:3c:e3:79:15:cf:37:a7:6b:e5:19:43:0a:db:da: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:59:6A:26:C7:3A:D1:13:5E:AC:0C:39:60:B7:51:54:D6:2F:01:0E X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/708a8cbd-6d44-4d2f-b6e9-45131391be6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.80.0/21 Signature Algorithm: sha256WithRSAEncryption 94:ab:a4:8c:73:76:69:b4:c9:3f:17:4e:e1:b1:3a:b6:65:f1: 79:22:b0:28:3b:02:93:b2:9a:1a:ff:ca:e5:f6:0e:da:2b:7f: c3:4e:ad:ee:dc:09:c5:9c:98:72:95:33:6b:2c:22:29:12:ac: 6d:7c:77:c1:f6:0c:47:9a:f2:ff:8e:c0:16:42:28:72:cf:e1: db:b9:15:eb:d7:cb:13:24:3b:b3:e3:74:6e:57:e7:f8:52:38: 29:1e:01:5f:94:69:eb:4a:49:cb:14:d8:15:e8:a5:49:77:c7: 7d:e7:77:d8:91:71:fa:31:d2:30:ec:d9:ad:32:0d:56:a8:e3: 96:6c:8e:ca:8f:fa:fe:7e:51:f6:88:4d:70:80:60:b4:a0:7f: bb:24:5c:33:5c:05:f1:22:bf:0f:fb:34:c4:e3:b8:ac:72:02: 04:2d:cc:88:18:a9:04:87:10:96:2b:7f:15:82:5e:67:da:5f: 73:b6:ac:a2:29:06:50:40:6c:fb:6b:b2:e9:07:24:96:ca:8e: 02:73:f2:84:ff:0c:41:73:27:fd:e1:b7:95:8a:d5:a2:ac:5f: 48:6f:73:98:62:6b:5f:da:49:c6:a9:78:28:f2:0a:fa:83:3c: 56:9e:26:dd:54:83:b3:65:ca:ba:3f:67:06:55:8c:25:8a:b8: ed:ec:0e:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe9jMbhfZHiEjmmpvsSoRMmf2IHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwNTIwMTUzMDI5WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTQ2OGYyM2NhOWNlMDAwMjgzMDIyYWE3YTc2YjJjZDk2 ZTYzMDVlMjJkMmI5YzY0N2FjM2JjYjg2ZWY3NTE3MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgkDYIMIfQd/GieMbdXeByIj6eDRX1aBayyEd2yTHGbJsX 5TmBbDZyUxFdYWZ3FbGabvnC0TZtmRN6cMcCWzzMEzN3D78ogNiqvx+F90fF9uZd CCGd3ZB82BEJDIzoh/ePeUm36kSBYeBIM8Xw70aH6qAUhvX5T00Yhku1/oTuvFvJ emYyHD4Mz7eFBkRqDyaG56ssVVKFaFUb+etIZgXBUDC9Q6aCoo5Yy1V+W9xMAkr5 z8kqomY80PktGB8tDVM86a7rZKY408J3InIKWwcnDXK+vfI7wI8wvXaTr42sS3VW th58eFEkUo2LUge8+FE843kVzzena+UZQwrb2rxPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9FlqJsc60RNerAw5YLdRVNYvAQ4wHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzcwOGE4Y2JkLTZkNDQtNGQyZi1iNmU5LTQ1MTMxMzkxYmU2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMycFAwDQYJKoZIhvcNAQELBQADggEBAJSrpIxzdmm0yT8XTuGxOrZl8Xki sCg7ApOymhr/yuX2Dtorf8NOre7cCcWcmHKVM2ssIikSrG18d8H2DEea8v+OwBZC KHLP4du5FevXyxMkO7PjdG5X5/hSOCkeAV+UaetKScsU2BXopUl3x33nd9iRcfox 0jDs2a0yDVao45ZsjsqP+v5+UfaITXCAYLSgf7skXDNcBfEivw/7NMTjuKxyAgQt zIgYqQSHEJYrfxWCXmfaX3O2rKIpBlBAbPtrsukHJJbKjgJz8oT/DEFzJ/3ht5WK 1aKsX0hvc5hia1/aScapeCjyCvqDPFaeJt1Ug7Nlyro/ZwZVjCWKuO3sDs8= -----END CERTIFICATE-----Generated at Fri Jun 6 18:12:15 2025 by rpki-client