$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c2d845ec-c39b-4b99-8358-e671c21de01d.roa File: c2d845ec-c39b-4b99-8358-e671c21de01d.roa (raw, json) Hash identifier: csbzDk5y/0NyBZGp9Sy207oQIseB420kGVoiQRnY5WA= Subject key identifier: 31:CD:3B:22:D5:E3:6E:A8:67:B5:4D:E5:45:AD:C6:DF:62:E8:FB:F1 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 039E4F28631DB7D269249F6E79062DBD50FF82D9 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c2d845ec-c39b-4b99-8358-e671c21de01d.roa Signing time: Tue 20 May 2025 15:30:37 +0000 ROA not before: Tue 20 May 2025 15:30:37 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9e:4f:28:63:1d:b7:d2:69:24:9f:6e:79:06:2d:bd:50:ff:82:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: May 20 15:30:37 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=16d83010b614fbf54e0dfbc12cbaa2d1ac7b6e8b9db7ac5464634b3f6204e8ba, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:58:a5:c6:cb:2d:0a:b8:49:90:64:06:9d:e1: 87:36:88:d8:80:1e:06:ac:81:11:62:2a:21:95:9c: 62:b3:09:65:b9:50:ea:79:91:1f:a8:69:f0:40:ed: 94:4e:91:d4:db:e6:1e:3b:5d:ae:e5:70:d9:18:ee: 1b:ee:f3:78:a8:75:94:49:35:1f:23:fa:17:e0:c9: ee:3a:ac:2a:47:05:7e:8a:2c:ec:29:73:78:23:62: e0:70:ab:e9:36:14:1e:e0:e8:97:a6:89:1a:c5:87: 73:e4:91:88:fc:f8:8c:d4:5e:00:91:b3:e2:e9:53: 89:72:64:32:66:fc:c2:f6:b8:a0:1a:e4:0b:ce:5f: bb:74:14:64:a6:06:57:fe:8a:bd:45:7f:d5:e4:ad: 51:17:6f:b9:64:08:74:35:7c:8c:f9:3f:86:a8:7a: b2:f8:89:35:f7:62:d6:95:58:1d:87:0a:f5:50:24: c2:3a:d9:78:20:34:0d:60:5a:1b:a1:9b:ee:83:27: a8:97:bf:63:ba:02:b5:62:af:61:80:9f:fd:00:6c: 77:05:84:63:19:60:65:da:0c:7a:bd:a2:f8:fa:60: 7b:5c:4e:13:25:59:37:b7:03:1d:0f:82:2c:f8:f5: e8:44:12:4a:a1:46:5d:82:83:89:cc:1f:6e:a0:11: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CD:3B:22:D5:E3:6E:A8:67:B5:4D:E5:45:AD:C6:DF:62:E8:FB:F1 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c2d845ec-c39b-4b99-8358-e671c21de01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.240.0/20 Signature Algorithm: sha256WithRSAEncryption 1d:3a:97:7e:bc:a7:2d:81:5f:f5:7c:96:0e:e4:94:0c:29:16: 92:6e:11:e1:db:14:e5:cb:8b:ff:c7:d3:f4:da:dc:94:d2:58: 23:c1:2b:c1:f9:3a:06:86:1f:71:92:4b:fd:5b:85:17:b4:f5: 15:4c:37:5f:42:15:de:e4:d9:27:a6:ba:67:b5:82:51:a1:61: e3:20:6b:d0:ed:6c:33:b8:fa:22:f5:05:1e:0c:94:01:c8:59: e7:30:81:a0:2a:cd:30:f5:b7:74:fd:a8:f9:2d:ff:c8:3b:5e: d0:13:d3:97:01:05:b8:ca:5c:15:c2:eb:50:a1:dc:c9:c8:e4: 3c:d4:3f:c9:2a:e9:6a:ce:ab:fd:9a:ee:f2:57:b3:1a:13:5b: 64:a5:61:3a:29:85:ee:df:85:ed:a1:65:37:1a:ff:29:37:a9: 2c:34:e9:26:5e:e4:50:d1:a7:f4:6d:58:ac:f8:f7:fb:9a:0c: dc:a5:c0:51:0b:f3:1c:67:b3:a1:67:e5:f3:93:8b:31:4f:d6: a9:d4:e9:5e:2a:dd:7f:95:08:15:a9:20:63:e1:9b:0c:fd:ea: 28:ca:37:f9:2a:dc:f1:05:77:64:d8:ae:80:32:6d:78:44:41: 92:79:25:5f:68:71:38:8c:12:fd:fe:5e:16:f7:15:c4:f4:e0: 10:1d:70:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA55PKGMdt9JpJJ9ueQYtvVD/gtkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwNTIwMTUzMDM3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmQ4MzAxMGI2MTRmYmY1NGUwZGZiYzEyY2JhYTJkMWFj N2I2ZThiOWRiN2FjNTQ2NDYzNGIzZjYyMDRlOGJhMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuWKXGyy0KuEmQZAad4Yc2iNiAHgasgRFiKiGVnGKzCWW5 UOp5kR+oafBA7ZROkdTb5h47Xa7lcNkY7hvu83iodZRJNR8j+hfgye46rCpHBX6K LOwpc3gjYuBwq+k2FB7g6JemiRrFh3PkkYj8+IzUXgCRs+LpU4lyZDJm/ML2uKAa 5AvOX7t0FGSmBlf+ir1Ff9XkrVEXb7lkCHQ1fIz5P4aoerL4iTX3YtaVWB2HCvVQ JMI62XggNA1gWhuhm+6DJ6iXv2O6ArVir2GAn/0AbHcFhGMZYGXaDHq9ovj6YHtc ThMlWTe3Ax0Pgiz49ehEEkqhRl2Cg4nMH26gETzXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMc07ItXjbqhntU3lRa3G32Lo+/EwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2MyZDg0NWVjLWMzOWItNGI5OS04MzU4LWU2NzFjMjFkZTAxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQycPAwDQYJKoZIhvcNAQELBQADggEBAB06l368py2BX/V8lg7klAwpFpJu EeHbFOXLi//H0/Ta3JTSWCPBK8H5OgaGH3GSS/1bhRe09RVMN19CFd7k2Semume1 glGhYeMga9DtbDO4+iL1BR4MlAHIWecwgaAqzTD1t3T9qPkt/8g7XtAT05cBBbjK XBXC61Ch3MnI5DzUP8kq6WrOq/2a7vJXsxoTW2SlYTophe7fhe2hZTca/yk3qSw0 6SZe5FDRp/RtWKz49/uaDNylwFEL8xxns6Fn5fOTizFP1qnU6V4q3X+VCBWpIGPh mwz96ijKN/kq3PEFd2TYroAybXhEQZJ5JV9ocTiMEv3+Xhb3FcT04BAdcB8= -----END CERTIFICATE-----Generated at Fri Jun 6 17:51:43 2025 by rpki-client