$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa File: 881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa (raw, json) Hash identifier: XbF/eCrHveS12PjC8UqAIEnT1JYAu4QHcLoKHhLZobs= Subject key identifier: DE:C0:7B:59:1E:28:8A:00:DB:4C:B4:7B:5E:66:58:F7:DC:56:EA:A4 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 5597C70F1D2DDA77A3DE94EBFB7D54C2115F9942 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa Signing time: Tue 20 May 2025 15:30:55 +0000 ROA not before: Tue 20 May 2025 15:30:55 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:97:c7:0f:1d:2d:da:77:a3:de:94:eb:fb:7d:54:c2:11:5f:99:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: May 20 15:30:55 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=0d001e0e9650adaa5d46ffb70a479341cb77b59c113a32f9c6c9dc51237543a6, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:21:f5:7f:e4:a9:aa:bf:24:3f:d9:a4:1d: 5f:e8:4b:5d:55:83:f2:41:d4:97:d7:98:78:85:ea: b6:71:dc:09:ba:73:e7:2e:f5:41:fa:f4:21:7a:ff: 38:a2:13:a4:40:fa:71:f9:27:02:7c:c0:e3:06:27: 29:ee:89:08:de:b0:bc:45:76:6a:4e:1a:53:bd:05: 99:71:b2:2c:ed:c5:ee:a8:6d:51:8b:d0:a9:8b:cf: c8:1f:d2:b9:2a:85:c9:fb:06:8c:1a:7c:de:15:91: f8:f9:c4:49:63:8b:c2:e6:11:bc:fd:ee:d2:6e:9e: b2:1c:f0:5a:c9:92:5f:e6:60:3d:1c:5f:1f:f1:c0: aa:cf:f3:88:df:77:8b:a9:d0:89:82:d0:d9:7d:74: 8d:de:f1:24:e5:90:36:72:0b:61:9f:3d:54:53:e6: fa:a1:ae:91:1d:5c:ab:53:8f:76:ff:07:b7:8f:cd: 6b:4a:d0:05:8b:0b:df:a8:af:c5:00:7f:f4:32:a0: 5a:e0:8d:ff:27:15:12:16:d2:e6:29:17:60:eb:93: 40:99:9f:a9:4e:3e:e8:b7:c1:d3:aa:a7:55:35:03: 30:e4:7b:9d:fb:60:48:23:99:e9:89:3e:49:37:9e: c2:86:82:5a:bb:e6:11:f9:53:04:4d:be:dc:9b:59: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C0:7B:59:1E:28:8A:00:DB:4C:B4:7B:5E:66:58:F7:DC:56:EA:A4 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/881b03ed-dc50-4f52-a6e6-ddaae971f0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.192.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:e1:c3:9c:fc:ff:dc:42:d2:4b:20:d9:ce:c8:4e:5c:db:14: c2:b5:31:fe:14:71:13:83:13:25:a8:c5:eb:90:c3:ea:7f:38: 52:6d:50:3b:24:55:9f:02:6f:9a:82:a3:9f:63:08:04:d7:64: e2:0b:5e:54:23:d6:c1:09:ae:ff:05:5e:c1:a8:05:d5:f4:68: 07:9c:03:34:e8:a1:9a:f5:ef:02:62:2c:7a:79:c0:d2:b9:ac: f1:84:25:7d:7f:4f:c2:3d:2b:cd:5a:70:66:20:a5:dc:7a:f6: f0:71:cf:23:c6:33:c1:36:bd:ff:fe:54:00:b4:72:32:90:4f: 80:bd:84:ec:83:4d:7d:64:ea:34:85:ba:c5:08:b5:34:b8:a9: 93:03:77:4d:ee:bd:41:bd:6f:60:74:d7:85:ce:f5:25:2d:21: cf:b1:be:f7:90:2e:68:58:f7:bd:00:e1:cb:18:a9:d6:a5:08: 1f:e0:5b:2e:ab:47:18:65:8f:0d:94:74:37:f5:f9:3a:05:a0: 1f:52:1c:ac:b8:35:8a:e7:30:64:91:97:45:30:dd:23:90:eb: ee:85:11:71:d2:aa:5f:78:3f:81:64:db:2c:65:cb:8c:35:78: 18:45:26:61:92:09:39:e8:5d:bb:32:d2:33:1e:1c:87:8e:a5: 98:47:75:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVZfHDx0t2nej3pTr+31UwhFfmUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwNTIwMTUzMDU1WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDAwMWUwZTk2NTBhZGFhNWQ0NmZmYjcwYTQ3OTM0MWNi NzdiNTljMTEzYTMyZjljNmM5ZGM1MTIzNzU0M2E2MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbISH1f+Spqr8kP9mkHV/oS11Vg/JB1JfXmHiF6rZx3Am6 c+cu9UH69CF6/ziiE6RA+nH5JwJ8wOMGJynuiQjesLxFdmpOGlO9BZlxsiztxe6o bVGL0KmLz8gf0rkqhcn7BowafN4Vkfj5xElji8LmEbz97tJunrIc8FrJkl/mYD0c Xx/xwKrP84jfd4up0ImC0Nl9dI3e8STlkDZyC2GfPVRT5vqhrpEdXKtTj3b/B7eP zWtK0AWLC9+or8UAf/QyoFrgjf8nFRIW0uYpF2Drk0CZn6lOPui3wdOqp1U1AzDk e537YEgjmemJPkk3nsKGglq75hH5UwRNvtybWShPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3sB7WR4oigDbTLR7XmZY99xW6qQwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5Lzg4MWIwM2VkLWRjNTAtNGY1Mi1hNmU2LWRkYWFlOTcxZjBlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYycMAwDQYJKoZIhvcNAQELBQADggEBAEvhw5z8/9xC0ksg2c7ITlzbFMK1 Mf4UcRODEyWoxeuQw+p/OFJtUDskVZ8Cb5qCo59jCATXZOILXlQj1sEJrv8FXsGo BdX0aAecAzTooZr17wJiLHp5wNK5rPGEJX1/T8I9K81acGYgpdx69vBxzyPGM8E2 vf/+VAC0cjKQT4C9hOyDTX1k6jSFusUItTS4qZMDd03uvUG9b2B014XO9SUtIc+x vveQLmhY970A4csYqdalCB/gWy6rRxhljw2UdDf1+ToFoB9SHKy4NYrnMGSRl0Uw 3SOQ6+6FEXHSql94P4Fk2yxly4w1eBhFJmGSCTnoXbsy0jMeHIeOpZhHdR4= -----END CERTIFICATE-----Generated at Fri Jun 6 04:03:52 2025 by rpki-client