$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0022bd1b-6926-4965-8a67-25901363fca8.roa File: 0022bd1b-6926-4965-8a67-25901363fca8.roa (raw, json) Hash identifier: oX/HSKp1joEbTSVgr90/ChyurVnqr8lON73NrySqlxg= Subject key identifier: 0A:57:98:B4:01:9A:7D:C6:9A:FA:73:1C:8B:C2:A6:71:A6:95:34:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A306635A45C1BD480E0DDA7F7301DF47B5FEA5E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0022bd1b-6926-4965-8a67-25901363fca8.roa Signing time: Tue 15 Apr 2025 00:40:12 +0000 ROA not before: Tue 15 Apr 2025 00:40:12 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:30:66:35:a4:5c:1b:d4:80:e0:dd:a7:f7:30:1d:f4:7b:5f:ea:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:40:12 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=43370bf6138192e8e4fc5a3d5adc72d00dfae2597642b07cc2f1994df50c794d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:a1:f4:a7:05:45:bc:76:53:03:28:3f:3f: 75:1b:e6:ac:53:17:28:9b:dc:bd:dd:72:20:c0:eb: 75:7c:7d:39:d0:6b:23:57:76:25:d9:66:04:94:d9: 85:3f:ab:13:d5:a8:0f:bf:ed:0d:61:39:99:d8:f4: 8e:bf:1f:d9:25:95:4a:3f:a4:8d:a8:06:4c:50:79: d7:93:e3:ed:e5:82:c0:37:d2:2d:74:ef:c4:f6:e1: 66:bc:09:d2:be:2d:1c:0d:38:98:ce:62:5e:10:11: d8:45:65:19:b3:f5:d3:86:19:a0:24:46:e1:b0:c2: d5:a8:4f:e5:00:6d:13:ac:96:57:b1:7d:90:c8:c8: a1:8c:fc:0d:0e:ed:ce:44:fd:70:b7:37:59:42:8b: 16:4d:3d:62:08:f4:cf:94:1a:bb:bc:40:cc:7c:85: e5:21:4b:32:46:4e:86:0b:36:4d:17:18:51:e9:d8: dd:e2:f8:39:f5:0c:af:ab:53:b0:15:4a:e5:03:e8: 9e:fa:5a:b7:5c:17:66:19:3d:71:23:96:0e:2a:e9: 6a:53:c4:f4:a3:b9:a6:3d:5a:b2:ff:16:68:ab:fc: bc:1a:29:33:f9:37:2d:e8:e1:c1:dd:a4:8a:07:bc: 40:b4:ce:8b:2d:c7:fc:57:c7:9d:c3:26:68:41:b8: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:98:B4:01:9A:7D:C6:9A:FA:73:1C:8B:C2:A6:71:A6:95:34:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0022bd1b-6926-4965-8a67-25901363fca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.104.0/23 Signature Algorithm: sha256WithRSAEncryption aa:84:e6:7c:bb:a6:79:69:4d:8a:12:6a:d1:62:04:86:c7:29: 7e:f1:26:d7:ff:c2:66:88:c3:84:e1:ed:41:58:03:ac:7c:f9: 91:3d:7a:bf:a8:33:50:c1:ba:be:ed:f6:c7:79:cb:37:8d:3d: 36:dd:74:6a:53:32:53:86:79:9b:07:35:c9:f6:ed:3f:96:fb: fd:c4:4c:aa:a5:7f:26:a0:fe:83:c5:b4:74:60:2c:b6:4a:c2: a2:61:e1:f9:7f:f2:d6:cd:fb:3b:26:e8:5d:0a:6a:17:7a:bb: ae:4a:e2:14:e6:70:68:90:ed:fd:1a:a8:82:9d:0e:21:68:67: 61:e7:a5:97:ae:ae:7a:0f:41:74:4b:6b:69:e7:04:a8:89:52: d4:cc:2c:f0:f1:e9:dd:8c:90:43:e7:44:a2:e7:4e:a4:c9:93: 71:e2:b4:f5:a5:d4:d7:d9:c0:e2:99:e9:51:96:af:76:77:48: fc:2e:18:c9:8c:8a:32:c4:57:aa:3c:66:5b:c0:c0:c1:af:0d: 58:32:05:f1:dd:49:85:01:b3:5d:c2:06:ed:77:c3:a7:d9:03: 43:7c:e9:6a:d0:8f:ec:f8:ce:28:c0:76:f6:d0:8f:9e:3a:db: 0f:46:10:e0:39:2a:cd:0f:6d:a2:ea:52:13:1b:1e:63:e8:e1: a8:89:dd:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUejBmNaRcG9SA4N2n9zAd9Htf6l4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE1MDA0MDEyWhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzM3MGJmNjEzODE5MmU4ZTRmYzVhM2Q1YWRjNzJkMDBk ZmFlMjU5NzY0MmIwN2NjMmYxOTk0ZGY1MGM3OTRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDASqH0pwVFvHZTAyg/P3Ub5qxTFyib3L3dciDA63V8fTnQ ayNXdiXZZgSU2YU/qxPVqA+/7Q1hOZnY9I6/H9kllUo/pI2oBkxQedeT4+3lgsA3 0i1078T24Wa8CdK+LRwNOJjOYl4QEdhFZRmz9dOGGaAkRuGwwtWoT+UAbROsllex fZDIyKGM/A0O7c5E/XC3N1lCixZNPWII9M+UGru8QMx8heUhSzJGToYLNk0XGFHp 2N3i+Dn1DK+rU7AVSuUD6J76WrdcF2YZPXEjlg4q6WpTxPSjuaY9WrL/Fmir/Lwa KTP5Ny3o4cHdpIoHvEC0zostx/xXx53DJmhBuPsHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCleYtAGafcaa+nMci8KmcaaVNCAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAwMjJiZDFiLTY5MjYtNDk2NS04YTY3LTI1OTAxMzYzZmNhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl2gwDQYJKoZIhvcNAQELBQADggEBAKqE5ny7pnlpTYoSatFiBIbHKX7x Jtf/wmaIw4Th7UFYA6x8+ZE9er+oM1DBur7t9sd5yzeNPTbddGpTMlOGeZsHNcn2 7T+W+/3ETKqlfyag/oPFtHRgLLZKwqJh4fl/8tbN+zsm6F0Kahd6u65K4hTmcGiQ 7f0aqIKdDiFoZ2HnpZeurnoPQXRLa2nnBKiJUtTMLPDx6d2MkEPnRKLnTqTJk3Hi tPWl1NfZwOKZ6VGWr3Z3SPwuGMmMijLEV6o8ZlvAwMGvDVgyBfHdSYUBs13CBu13 w6fZA0N86WrQj+z4zijAdvbQj5462w9GEOA5Ks0PbaLqUhMbHmPo4aiJ3as= -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:44 2025 by rpki-client