$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa File: bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa (raw, json) Hash identifier: F1FhFx7mzFWGHxPwvGAyYMdo4bsrQXmu89DQkuvDm+M= Subject key identifier: 2C:7A:27:D9:59:8C:65:99:DF:F4:EC:E3:DD:ED:03:5A:18:6D:7B:21 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 34C590DB284546AC9BA3270919E355AA0CAE004C Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa Signing time: Tue 20 May 2025 15:30:41 +0000 ROA not before: Tue 20 May 2025 15:30:41 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c5:90:db:28:45:46:ac:9b:a3:27:09:19:e3:55:aa:0c:ae:00:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: May 20 15:30:41 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=bf34fdf67d926bff85212df5eb0f5e66fe8c4e426fc86edf7da5ccda51a06ab3, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:fa:d2:16:8c:6d:1a:75:52:34:a5:07:3d: f9:69:10:c7:55:e9:ef:29:63:5f:03:7d:5a:06:91: 1b:bb:1c:ad:b4:ea:77:f4:21:3d:38:f8:a3:71:9a: 18:55:a6:b9:23:95:32:6b:ba:50:ba:88:08:61:6c: e6:29:64:13:d8:43:4c:ed:54:53:5d:d7:ea:00:a2: 8e:3f:fe:34:44:1d:bb:1e:53:1f:51:f2:94:61:8c: e0:ce:6d:56:62:52:2d:df:86:ef:ca:24:49:9a:db: 57:7f:18:2a:ce:2d:0e:74:ca:fd:29:e7:84:05:d2: 79:d1:22:e5:3d:2b:be:71:0c:38:fa:09:6d:db:a7: 74:bc:3e:ad:3c:de:7e:97:83:a6:4d:b0:26:45:c4: 55:8c:b5:10:4d:ac:20:10:24:88:3d:e3:3d:29:a7: 2b:30:30:8e:82:5e:50:48:27:85:22:fd:8a:40:ce: 3d:97:e1:88:d8:f5:71:9c:9e:cc:dc:b8:09:8f:90: 9d:4b:9f:22:74:04:40:fb:1f:73:cc:25:3b:5b:b6: ae:39:66:33:64:ec:ec:c6:c7:5b:ed:dd:74:e7:7f: 5c:b8:e2:c1:d4:0c:77:f4:fd:25:16:df:f7:9e:1c: ba:e5:0b:ae:75:3e:44:c3:73:9b:fe:56:a9:ec:06: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7A:27:D9:59:8C:65:99:DF:F4:EC:E3:DD:ED:03:5A:18:6D:7B:21 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.96.0/19 Signature Algorithm: sha256WithRSAEncryption a1:ce:d2:d9:f2:9b:ae:08:0d:85:f7:0e:ab:e4:af:4e:3c:e8: c1:58:a7:ee:9b:65:e6:99:85:84:1b:ad:f6:f0:5f:ff:42:ee: d1:9a:1c:39:00:6f:d9:8d:e2:ff:f7:ad:4f:e5:0a:3f:23:78: 73:55:7d:3b:27:a6:12:13:78:ec:f9:f7:d5:2c:05:8f:73:1a: 94:75:8b:b5:24:9f:a3:b4:cd:18:15:eb:30:cd:7e:de:eb:50: 77:d2:38:92:39:46:94:35:0b:c7:a3:ec:be:37:96:64:63:06: 5d:69:d0:b5:a3:75:39:58:6f:3c:82:5b:c8:cf:6f:ba:29:97: 88:7d:9c:3e:9c:aa:d5:e5:51:e5:e4:16:e9:1d:3f:d2:7a:85: 26:81:8a:b8:ad:55:0c:d1:59:75:c4:ab:c8:e6:a6:c7:5f:51: 1d:a3:c9:22:08:11:e9:a5:ab:fc:f5:56:fa:5a:78:9f:5f:f4: 8e:bf:29:f9:67:32:a7:02:dc:3d:91:ba:d9:05:97:29:dd:7b: 00:42:27:e6:82:2c:98:ef:05:cd:61:f1:92:f8:34:77:ce:b1: 99:10:f1:e9:70:00:47:19:5d:a0:0a:ee:be:77:a1:98:0f:b6: c3:79:a1:c0:0a:22:0c:99:dd:94:6c:88:c6:9f:3c:d9:94:ed: 14:fa:c5:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNMWQ2yhFRqyboycJGeNVqgyuAEwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwNTIwMTUzMDQxWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjM0ZmRmNjdkOTI2YmZmODUyMTJkZjVlYjBmNWU2NmZl OGM0ZTQyNmZjODZlZGY3ZGE1Y2NkYTUxYTA2YWIzMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOwPrSFoxtGnVSNKUHPflpEMdV6e8pY18DfVoGkRu7HK20 6nf0IT04+KNxmhhVprkjlTJrulC6iAhhbOYpZBPYQ0ztVFNd1+oAoo4//jREHbse Ux9R8pRhjODObVZiUi3fhu/KJEma21d/GCrOLQ50yv0p54QF0nnRIuU9K75xDDj6 CW3bp3S8Pq083n6Xg6ZNsCZFxFWMtRBNrCAQJIg94z0ppyswMI6CXlBIJ4Ui/YpA zj2X4YjY9XGcnszcuAmPkJ1LnyJ0BED7H3PMJTtbtq45ZjNk7OzGx1vt3XTnf1y4 4sHUDHf0/SUW3/eeHLrlC651PkTDc5v+VqnsBistAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULHon2VmMZZnf9Ozj3e0DWhhteyEwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2JiMDEwYWJkLWY4NGItNGY0Ny05NmUyLWNlMWE2MjFmOGM1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUycGAwDQYJKoZIhvcNAQELBQADggEBAKHO0tnym64IDYX3Dqvkr0486MFY p+6bZeaZhYQbrfbwX/9C7tGaHDkAb9mN4v/3rU/lCj8jeHNVfTsnphITeOz599Us BY9zGpR1i7Ukn6O0zRgV6zDNft7rUHfSOJI5RpQ1C8ej7L43lmRjBl1p0LWjdTlY bzyCW8jPb7opl4h9nD6cqtXlUeXkFukdP9J6hSaBiritVQzRWXXEq8jmpsdfUR2j ySIIEemlq/z1VvpaeJ9f9I6/KflnMqcC3D2RutkFlyndewBCJ+aCLJjvBc1h8ZL4 NHfOsZkQ8elwAEcZXaAK7r53oZgPtsN5ocAKIgyZ3ZRsiMafPNmU7RT6xf0= -----END CERTIFICATE-----Generated at Fri Jun 6 17:44:12 2025 by rpki-client