$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a41e5-dde6-424c-b8ee-427d2be83488.roa File: 225a41e5-dde6-424c-b8ee-427d2be83488.roa (raw, json) Hash identifier: +I2azwSAKwWQHFwCtUI4ZOAOfzZUG7GtF2lqXzVLIRQ= Subject key identifier: 6E:78:9D:99:47:40:F2:2C:4D:E2:FB:21:95:85:CE:8A:A4:AF:AB:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F1FA9D38A0DDD6B8D8830DD18C9CB33525F9CA5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a41e5-dde6-424c-b8ee-427d2be83488.roa Signing time: Wed 09 Apr 2025 00:40:20 +0000 ROA not before: Wed 09 Apr 2025 00:40:20 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1f:a9:d3:8a:0d:dd:6b:8d:88:30:dd:18:c9:cb:33:52:5f:9c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:40:20 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=79aa42d17fc232c549a633bae5a613746ef95597fac8066e5e93e580c3247d1a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7b:51:d0:e8:76:7b:d2:b8:d9:f5:d9:0a:28: d0:fd:1f:cd:af:3f:7b:bd:71:01:be:96:25:1c:00: 4e:d8:55:5a:9c:3a:8b:a0:7a:f4:39:32:e4:15:e3: 2a:ca:d7:2a:22:5e:21:8d:1d:a8:a9:96:39:be:2c: 27:5d:d3:09:b7:f1:06:bc:48:ee:ed:38:e5:74:e1: 4e:b3:1c:cd:b0:a3:a4:0d:80:03:d5:bd:35:d4:0f: f1:8f:0b:30:87:83:09:c4:78:8d:e6:fa:5a:ae:2d: 54:a7:9f:97:23:ba:10:a8:fc:14:0a:6a:69:36:8f: 8f:df:8e:22:89:8e:5c:1b:6e:52:cf:59:41:21:7a: cb:a2:8d:19:92:2f:74:e8:32:d3:5d:93:6b:66:05: df:d6:ef:3e:d3:78:97:b3:f5:60:72:11:ca:49:01: 53:09:1c:cc:c2:2d:f5:96:97:65:64:0b:69:e9:a5: b7:75:34:b7:34:74:d6:7f:ad:c4:c9:f8:ab:6b:70: 14:5c:c5:9e:e8:cd:38:e0:fb:b0:e7:d1:98:b6:26: 41:a4:55:af:dc:03:38:04:22:df:36:2f:71:4f:3d: c0:fe:74:66:0b:1c:7f:b3:99:98:d9:ef:74:f7:29: d7:11:fd:11:56:5f:ff:40:2e:4d:ab:6e:4c:79:fa: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:78:9D:99:47:40:F2:2C:4D:E2:FB:21:95:85:CE:8A:A4:AF:AB:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/225a41e5-dde6-424c-b8ee-427d2be83488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.130.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:17:30:49:91:be:78:6c:f1:76:f1:be:6c:f9:2c:50:e1:80: 52:b8:7c:ae:84:b3:df:a3:7d:a0:92:bc:6a:8c:2f:38:1f:99: 3a:7a:03:54:6f:77:4e:88:a4:44:bd:b3:d4:0e:fb:73:72:eb: 53:1b:6f:0e:54:d3:5e:74:a6:f5:02:81:d1:d7:e2:6d:6e:85: dd:07:19:f5:62:b7:5c:63:55:15:72:72:b9:e8:a6:58:c7:ad: 21:a6:db:ff:a7:d2:27:74:85:13:a1:ef:56:61:c1:f7:14:00: a7:e5:52:dc:39:91:f8:d8:c5:2b:5f:d8:44:19:8c:69:86:d3: a1:ef:21:42:69:f0:de:ef:10:f1:74:31:ea:a4:b0:98:c3:08: a1:c0:4d:60:da:20:6d:1e:63:c2:80:7b:23:5a:b3:23:5d:97: d2:86:85:29:5f:d7:31:69:51:a0:ce:9b:66:7e:7f:fc:db:0b: 05:12:93:eb:0a:13:4d:31:bf:ec:69:6a:0e:2e:60:dc:30:28: ab:2f:db:22:84:35:ed:9b:b1:b5:33:06:4a:cd:d4:76:b4:c2: a5:4d:1a:aa:90:73:f3:cf:43:0a:fb:4b:51:a5:a6:7a:34:ec: 0f:a3:a8:a8:e5:ca:4e:30:4b:ce:3a:2d:15:60:5e:4d:1a:63: f6:51:0f:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXx+p04oN3WuNiDDdGMnLM1JfnKUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDA0MDIwWhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWFhNDJkMTdmYzIzMmM1NDlhNjMzYmFlNWE2MTM3NDZl Zjk1NTk3ZmFjODA2NmU1ZTkzZTU4MGMzMjQ3ZDFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTe1HQ6HZ70rjZ9dkKKND9H82vP3u9cQG+liUcAE7YVVqc OougevQ5MuQV4yrK1yoiXiGNHaipljm+LCdd0wm38Qa8SO7tOOV04U6zHM2wo6QN gAPVvTXUD/GPCzCHgwnEeI3m+lquLVSnn5cjuhCo/BQKamk2j4/fjiKJjlwbblLP WUEhesuijRmSL3ToMtNdk2tmBd/W7z7TeJez9WByEcpJAVMJHMzCLfWWl2VkC2np pbd1NLc0dNZ/rcTJ+KtrcBRcxZ7ozTjg+7Dn0Zi2JkGkVa/cAzgEIt82L3FPPcD+ dGYLHH+zmZjZ73T3KdcR/RFWX/9ALk2rbkx5+h/ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbnidmUdA8ixN4vshlYXOiqSvqwkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyNWE0MWU1LWRkZTYtNDI0Yy1iOGVlLTQyN2QyYmU4MzQ4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTYIwDQYJKoZIhvcNAQELBQADggEBACsXMEmRvnhs8Xbxvmz5LFDhgFK4 fK6Es9+jfaCSvGqMLzgfmTp6A1Rvd06IpES9s9QO+3Ny61Mbbw5U0150pvUCgdHX 4m1uhd0HGfVit1xjVRVycrnopljHrSGm2/+n0id0hROh71ZhwfcUAKflUtw5kfjY xStf2EQZjGmG06HvIUJp8N7vEPF0MeqksJjDCKHATWDaIG0eY8KAeyNasyNdl9KG hSlf1zFpUaDOm2Z+f/zbCwUSk+sKE00xv+xpag4uYNwwKKsv2yKENe2bsbUzBkrN 1Ha0wqVNGqqQc/PPQwr7S1Glpno07A+jqKjlyk4wS846LRVgXk0aY/ZRD/g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:47 2025 by rpki-client