$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa File: cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa (raw, json) Hash identifier: 5gNErAzQz3icCC6cjPwCVM9Rzfs+oO/fa4nbo8Z/7fI= Subject key identifier: EB:F9:D6:17:37:BC:F6:69:AD:8A:52:54:81:08:E7:BB:92:7D:CA:30 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 32470B7C820331CF2573A49C82CC6370EC1EBA9C Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa Signing time: Tue 20 May 2025 15:30:37 +0000 ROA not before: Tue 20 May 2025 15:30:37 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:47:0b:7c:82:03:31:cf:25:73:a4:9c:82:cc:63:70:ec:1e:ba:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: May 20 15:30:37 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=6b1127c0668901efd9b6a2a372f9bae27983a76c681d2fdff52c608546a6a645, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:93:97:8c:66:9c:e8:ee:97:db:cd:15:00: 7d:c5:a5:94:c6:fc:b6:44:aa:ca:bf:fa:26:f2:56: 81:bf:17:7f:f8:24:21:e5:9f:87:9e:a1:de:31:bc: b0:4c:97:84:ed:f2:c9:cf:c5:9c:a5:15:c8:60:d2: 71:5d:9a:f4:05:c3:23:4d:f7:5f:20:20:0a:1c:82: 7f:30:36:5d:32:78:d6:e7:b8:14:ac:d1:cb:62:b4: 48:2b:fa:06:e8:cb:d8:f3:18:3d:ef:f8:3b:b8:ba: e3:42:44:38:a3:2d:b8:4b:86:76:76:39:85:eb:41: b6:c7:8b:75:f6:62:ec:20:31:ab:b4:14:8d:bd:be: 20:74:9c:a3:62:09:b5:51:8d:63:ed:c8:3b:5d:ed: 2f:ef:9c:65:b2:f0:6e:25:87:45:9d:65:ce:47:24: 7c:b6:89:da:c0:f7:e8:11:a5:1a:b6:d6:60:6a:2e: e9:5c:18:63:e3:c6:47:5c:dc:3e:c9:ee:d1:86:6a: bb:09:7b:1e:0c:7c:0c:28:95:e0:f1:0a:e7:4f:31: 0b:c5:3d:97:00:3a:e7:1c:98:7a:46:b7:9c:74:15: 0e:7d:4d:53:48:db:3f:81:a6:6c:59:69:54:5a:0d: 82:21:79:11:1d:39:bd:07:8e:bb:85:19:37:ad:4c: bb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F9:D6:17:37:BC:F6:69:AD:8A:52:54:81:08:E7:BB:92:7D:CA:30 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/cfa9fbaf-d677-4bfa-9d13-802dafc8c30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.192.0/19 Signature Algorithm: sha256WithRSAEncryption 6c:b2:4c:f9:dd:c8:22:ec:1e:f8:22:0b:90:f6:c5:a9:33:7b: aa:e0:a8:39:0c:36:0e:92:08:94:01:79:fc:9d:5e:c5:b4:fe: 96:ea:61:1b:29:fb:f5:18:f1:72:11:a3:5d:00:3f:0b:0c:f8: be:54:2c:e0:ad:da:ab:f5:75:50:11:7d:55:dd:32:55:53:d2: 35:7b:f9:23:ea:c2:a2:47:29:f7:d1:8e:fe:18:6e:a4:df:ed: 21:45:aa:10:b9:96:e6:0a:d9:89:d1:7d:0c:d3:dd:a9:0b:b9: 69:d9:dd:8a:42:bc:db:da:7f:b2:42:06:e2:eb:0f:d3:e1:13: 34:95:72:0f:d4:49:b9:98:4a:c7:d4:a2:ac:f6:7e:e0:86:4f: a9:d3:9b:cd:92:0f:d7:8a:10:5a:89:24:0e:d7:5f:92:d3:57: 6d:59:2d:19:33:1c:ec:d7:c4:cc:70:f3:fe:c2:e6:33:6a:de: 7a:ad:b5:0a:06:1f:b6:1a:db:ae:34:cf:74:85:35:80:40:0e: ea:bb:61:4d:71:5e:c9:9e:dd:5a:5e:a2:40:59:03:c3:b3:03: 70:7e:d8:37:53:6e:59:c5:b5:fe:42:d9:e6:21:b8:71:ee:bc: 01:83:1a:6f:1c:73:a0:d8:d4:91:6e:4b:cd:3a:58:a4:98:e7: cc:c1:11:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMkcLfIIDMc8lc6ScgsxjcOweupwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwNTIwMTUzMDM3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjExMjdjMDY2ODkwMWVmZDliNmEyYTM3MmY5YmFlMjc5 ODNhNzZjNjgxZDJmZGZmNTJjNjA4NTQ2YTZhNjQ1MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4RpOXjGac6O6X280VAH3FpZTG/LZEqsq/+ibyVoG/F3/4 JCHln4eeod4xvLBMl4Tt8snPxZylFchg0nFdmvQFwyNN918gIAocgn8wNl0yeNbn uBSs0ctitEgr+gboy9jzGD3v+Du4uuNCRDijLbhLhnZ2OYXrQbbHi3X2YuwgMau0 FI29viB0nKNiCbVRjWPtyDtd7S/vnGWy8G4lh0WdZc5HJHy2idrA9+gRpRq21mBq LulcGGPjxkdc3D7J7tGGarsJex4MfAwoleDxCudPMQvFPZcAOuccmHpGt5x0FQ59 TVNI2z+BpmxZaVRaDYIheREdOb0HjruFGTetTLv1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6/nWFze89mmtilJUgQjnu5J9yjAwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2NmYTlmYmFmLWQ2NzctNGJmYS05ZDEzLTgwMmRhZmM4YzMwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUycMAwDQYJKoZIhvcNAQELBQADggEBAGyyTPndyCLsHvgiC5D2xakze6rg qDkMNg6SCJQBefydXsW0/pbqYRsp+/UY8XIRo10APwsM+L5ULOCt2qv1dVARfVXd MlVT0jV7+SPqwqJHKffRjv4YbqTf7SFFqhC5luYK2YnRfQzT3akLuWnZ3YpCvNva f7JCBuLrD9PhEzSVcg/USbmYSsfUoqz2fuCGT6nTm82SD9eKEFqJJA7XX5LTV21Z LRkzHOzXxMxw8/7C5jNq3nqttQoGH7Ya2640z3SFNYBADuq7YU1xXsme3VpeokBZ A8OzA3B+2DdTblnFtf5C2eYhuHHuvAGDGm8cc6DY1JFuS806WKSY58zBEY0= -----END CERTIFICATE-----Generated at Mon Jun 2 16:32:38 2025 by rpki-client