$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c57d0d-e861-474b-b383-3d563f8d44e6.roa File: 28c57d0d-e861-474b-b383-3d563f8d44e6.roa (raw, json) Hash identifier: 21j+j+UCrlaTqr2/zeOYSFJ+lBpr5aBkRVFykfGyfpo= Subject key identifier: 0B:E3:55:09:7C:D0:CB:96:4F:51:DA:43:71:46:C3:05:D5:51:AF:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C43988DE9FE6E2DD3DB0AE84247B8FD4EC71ED3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c57d0d-e861-474b-b383-3d563f8d44e6.roa Signing time: Wed 04 Jun 2025 00:41:31 +0000 ROA not before: Wed 04 Jun 2025 00:41:31 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:43:98:8d:e9:fe:6e:2d:d3:db:0a:e8:42:47:b8:fd:4e:c7:1e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 4 00:41:31 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=788963cdaf09e181f7f03c2278f206a4e6492d0445897ab91d9f40eb21d132ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a4:16:16:1b:00:20:dc:4c:7c:61:dc:d0:9b: 9f:4c:e5:3a:4e:8a:ff:ef:21:0c:bc:b6:f1:a5:03: eb:a8:2d:73:d6:07:95:83:9d:b4:22:c3:05:cf:16: 59:1e:af:af:0c:68:bc:08:72:ea:d3:9f:a8:48:2a: a1:41:7b:e2:38:c9:b0:01:a4:7b:a8:ab:ae:32:5f: 49:d5:49:8a:2a:8b:bb:78:4c:b9:e9:1a:85:e3:b6: 00:47:60:0e:b4:7a:b7:16:76:7b:24:84:af:5d:c5: d2:1d:64:5f:51:6a:4f:9e:38:51:53:f9:5a:74:a0: 3f:5f:c9:f7:2e:97:f1:82:c6:e1:a4:bd:a5:60:de: a3:d2:7c:4f:13:cd:54:48:13:cb:39:d5:c9:af:16: da:07:4b:12:e8:af:18:ed:d0:51:49:87:8f:90:50: 0f:f8:ac:18:8a:b8:74:f5:0f:6f:10:86:22:6f:6b: 91:7d:92:07:94:0b:74:f5:b7:1c:3f:06:3e:29:5c: ba:88:d7:a2:56:3c:66:48:71:07:b9:0b:3a:bb:82: 13:d0:90:05:1b:8b:10:c8:d7:2f:49:a9:9c:e7:9f: 82:f9:e5:14:14:11:b5:2b:ce:da:56:7d:4f:6d:5d: 91:a5:3e:68:ef:34:38:a3:4f:22:18:fc:03:a5:2a: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E3:55:09:7C:D0:CB:96:4F:51:DA:43:71:46:C3:05:D5:51:AF:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c57d0d-e861-474b-b383-3d563f8d44e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.96.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:fe:ee:15:8a:24:33:d6:18:c4:23:2c:b2:bb:2d:fc:1b:56: 0d:23:2a:a1:06:98:2a:b0:db:d6:15:ee:04:95:45:ea:6c:a0: 06:33:fb:1b:77:c0:8f:d8:61:65:6c:df:94:3f:36:11:69:ce: 86:ff:ca:55:f7:e0:a8:f0:5c:9c:b7:42:6d:4d:8b:d3:cd:4e: ed:d9:a5:b5:be:78:e2:64:26:6d:81:1f:81:e2:a1:28:d9:89: 91:e9:82:a1:b3:c0:d5:4c:dd:4d:4f:6f:9d:28:16:34:77:0f: 09:9e:88:b3:ee:32:e1:e5:3a:d8:37:60:22:2c:38:38:2a:e5: 6a:4d:e1:84:23:41:4b:25:52:57:ce:1f:4b:1b:8c:54:a3:04: 2d:ce:86:6e:08:6b:51:53:69:f2:fb:2e:23:fe:76:25:db:96: af:a2:38:70:24:63:79:1e:79:78:33:8c:58:6f:c4:86:cb:c8: 45:4c:e7:bb:95:29:51:6c:de:e6:a8:d8:79:18:09:9a:1d:f4: 89:59:a6:13:ae:58:dd:df:63:01:26:74:63:c8:e8:ba:d4:e9: 08:2a:84:64:15:b2:e0:89:bb:a9:51:82:b0:32:fd:29:b8:68: b8:49:00:a3:68:66:3b:c2:2e:6e:87:5f:d4:fe:7e:72:a1:4b: 95:6b:f4:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDEOYjen+bi3T2wroQke4/U7HHtMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDA0MTMxWhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODg5NjNjZGFmMDllMTgxZjdmMDNjMjI3OGYyMDZhNGU2 NDkyZDA0NDU4OTdhYjkxZDlmNDBlYjIxZDEzMmVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLpBYWGwAg3Ex8YdzQm59M5TpOiv/vIQy8tvGlA+uoLXPW B5WDnbQiwwXPFlker68MaLwIcurTn6hIKqFBe+I4ybABpHuoq64yX0nVSYoqi7t4 TLnpGoXjtgBHYA60ercWdnskhK9dxdIdZF9Rak+eOFFT+Vp0oD9fyfcul/GCxuGk vaVg3qPSfE8TzVRIE8s51cmvFtoHSxLorxjt0FFJh4+QUA/4rBiKuHT1D28QhiJv a5F9kgeUC3T1txw/Bj4pXLqI16JWPGZIcQe5Czq7ghPQkAUbixDI1y9JqZznn4L5 5RQUEbUrztpWfU9tXZGlPmjvNDijTyIY/AOlKtAzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC+NVCXzQy5ZPUdpDcUbDBdVRr8IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4YzU3ZDBkLWU4NjEtNDc0Yi1iMzgzLTNkNTYzZjhkNDRlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl2AwDQYJKoZIhvcNAQELBQADggEBACz+7hWKJDPWGMQjLLK7LfwbVg0j KqEGmCqw29YV7gSVRepsoAYz+xt3wI/YYWVs35Q/NhFpzob/ylX34KjwXJy3Qm1N i9PNTu3ZpbW+eOJkJm2BH4HioSjZiZHpgqGzwNVM3U1Pb50oFjR3DwmeiLPuMuHl Otg3YCIsODgq5WpN4YQjQUslUlfOH0sbjFSjBC3Ohm4Ia1FTafL7LiP+diXblq+i OHAkY3keeXgzjFhvxIbLyEVM57uVKVFs3uao2HkYCZod9IlZphOuWN3fYwEmdGPI 6LrU6QgqhGQVsuCJu6lRgrAy/Sm4aLhJAKNoZjvCLm6HX9T+fnKhS5Vr9BA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:35:15 2025 by rpki-client