$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa File: b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa (raw, json) Hash identifier: okshEdXEbXxc4Wpixwz4zcjsAvyQ8yfN87L52n2Uwsk= Subject key identifier: 2E:03:21:CE:C9:3D:FB:1D:D1:91:80:66:81:36:FB:1B:F8:F0:5D:B8 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 5D64C9F0D7BB56B16E5782C1C0AC146F46FD31D1 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa Signing time: Tue 05 Aug 2025 15:00:20 +0000 ROA not before: Tue 05 Aug 2025 15:00:20 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:64:c9:f0:d7:bb:56:b1:6e:57:82:c1:c0:ac:14:6f:46:fd:31:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Aug 5 15:00:20 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=42800bc3eff9840343d3cf2523ecd3b0a05125368b0095c0008a3c547829edaa, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:c3:0d:d0:82:4b:da:7e:b3:38:9f:b7:ad: 7b:24:12:88:f0:75:ed:5f:ee:e4:46:88:80:15:83: 43:74:44:38:1d:e7:b2:f3:c4:27:4d:65:98:c9:ff: af:e4:8f:4c:e6:dd:b2:35:c9:ef:ad:e8:2b:da:ef: 8e:40:15:5d:09:97:d8:f1:91:ec:4c:04:7f:df:f5: 36:db:c9:f4:3b:9d:33:23:42:ad:90:b3:4e:be:17: 6e:9d:2f:57:72:d0:18:db:01:9c:43:b8:21:24:2a: a6:92:9a:f4:3e:a6:89:4f:97:93:ec:bb:f3:17:52: f8:cb:88:fe:d1:54:49:74:08:57:b9:e7:34:3e:df: 62:f2:87:f9:c8:f4:f8:c9:e6:36:37:a4:fe:37:40: 57:5a:f0:87:14:8b:88:f2:8c:63:41:0e:2c:47:96: c3:c7:30:a5:d2:39:1e:09:eb:d1:1d:97:9f:23:83: 27:da:1a:80:b8:89:e5:9c:6c:2a:11:db:44:9b:ef: d5:7e:2c:33:e3:62:ff:15:7f:9f:55:1c:fb:4f:33: c2:46:4c:76:ca:00:84:f9:b1:76:70:ce:2e:ea:0d: b5:e5:05:d9:3b:10:32:50:83:f7:90:e9:0b:83:9e: 6c:d8:fe:b1:35:dd:ad:eb:bf:32:99:56:0f:ed:82: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:03:21:CE:C9:3D:FB:1D:D1:91:80:66:81:36:FB:1B:F8:F0:5D:B8 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.92.0/22 Signature Algorithm: sha256WithRSAEncryption 10:10:f8:45:a3:9b:2b:53:4d:56:5c:f6:ca:fa:42:d9:77:3d: 6b:96:74:7e:ec:d9:a4:d2:81:4b:3d:18:5a:a5:3b:f6:85:92: 90:40:88:48:67:0c:b9:c4:24:e0:11:15:a7:b1:7c:18:9f:95: fa:14:4c:5b:d1:a7:06:e7:ab:14:03:1b:fd:11:be:d4:70:2d: 4f:e5:52:06:dc:f9:ac:d3:37:f3:7d:90:05:f1:e1:99:83:2b: 96:89:59:ec:0d:c1:00:00:e3:af:cf:48:01:c0:34:1d:35:e5: 47:86:d3:3d:15:66:22:da:9b:2c:c7:bf:d5:b9:8f:81:72:81: 7a:fb:10:ff:5b:06:20:8f:ce:73:4b:e2:fa:c9:42:26:23:f2: fb:42:8a:3e:a9:e0:4e:4c:73:a7:23:18:00:ab:16:bc:5f:d9: 8e:a3:63:7e:e5:99:af:7b:d8:41:bf:00:63:be:0b:e3:0d:4a: 22:51:8f:ae:e4:a7:e8:11:29:a0:47:43:24:d7:10:5a:43:ac: e3:e5:8d:be:98:56:82:89:5c:08:ad:68:18:ec:53:3a:fe:47: 42:02:88:36:cd:8a:9e:00:53:9d:71:5a:28:a5:26:71:0b:07: 89:87:09:69:64:dc:1e:2c:b9:c6:25:e3:86:98:9d:62:41:a3: 49:c9:e8:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXWTJ8Ne7VrFuV4LBwKwUb0b9MdEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjUwODA1MTUwMDIwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjgwMGJjM2VmZjk4NDAzNDNkM2NmMjUyM2VjZDNiMGEw NTEyNTM2OGIwMDk1YzAwMDhhM2M1NDc4MjllZGFhMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/ssMN0IJL2n6zOJ+3rXskEojwde1f7uRGiIAVg0N0RDgd 57LzxCdNZZjJ/6/kj0zm3bI1ye+t6Cva745AFV0Jl9jxkexMBH/f9TbbyfQ7nTMj Qq2Qs06+F26dL1dy0BjbAZxDuCEkKqaSmvQ+polPl5Psu/MXUvjLiP7RVEl0CFe5 5zQ+32Lyh/nI9PjJ5jY3pP43QFda8IcUi4jyjGNBDixHlsPHMKXSOR4J69Edl58j gyfaGoC4ieWcbCoR20Sb79V+LDPjYv8Vf59VHPtPM8JGTHbKAIT5sXZwzi7qDbXl Bdk7EDJQg/eQ6QuDnmzY/rE13a3rvzKZVg/tgkm3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULgMhzsk9+x3RkYBmgTb7G/jwXbgwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2IxMTIxZGZlLThiNzctNDg1Mi04NTA0LTNiMTFjMjdlZTVmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIycFwwDQYJKoZIhvcNAQELBQADggEBABAQ+EWjmytTTVZc9sr6Qtl3PWuW dH7s2aTSgUs9GFqlO/aFkpBAiEhnDLnEJOARFaexfBiflfoUTFvRpwbnqxQDG/0R vtRwLU/lUgbc+azTN/N9kAXx4ZmDK5aJWewNwQAA46/PSAHANB015UeG0z0VZiLa myzHv9W5j4FygXr7EP9bBiCPznNL4vrJQiYj8vtCij6p4E5Mc6cjGACrFrxf2Y6j Y37lma972EG/AGO+C+MNSiJRj67kp+gRKaBHQyTXEFpDrOPljb6YVoKJXAitaBjs Uzr+R0ICiDbNip4AU51xWiilJnELB4mHCWlk3B4sucYl44aYnWJBo0nJ6Lc= -----END CERTIFICATE-----Generated at Wed Aug 6 05:20:47 2025 by rpki-client