$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46490044-6773-4b79-81b8-184260daedfe.roa File: 46490044-6773-4b79-81b8-184260daedfe.roa (raw, json) Hash identifier: rd8u7SJ1rseWZLyaud5mluXKgA4djgS1Ufc+59OEeJE= Subject key identifier: 23:26:10:13:57:3A:E4:B8:B4:91:5A:A0:A6:C0:4F:F2:BA:DA:DC:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16A34F3C61D1E56F1013B46D21EFE25B26E57083 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46490044-6773-4b79-81b8-184260daedfe.roa Signing time: Tue 15 Apr 2025 00:21:00 +0000 ROA not before: Tue 15 Apr 2025 00:21:00 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a3:4f:3c:61:d1:e5:6f:10:13:b4:6d:21:ef:e2:5b:26:e5:70:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:21:00 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=6da67618e404889bda15fb097886c2c7da227f294795f767ac413a94b12799f2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:6d:30:89:50:f6:46:07:c1:f7:58:96:ec: 9d:1f:fe:9f:e5:a0:ee:19:51:24:ac:f5:d2:13:38: e4:2c:57:8f:c0:79:40:3b:72:97:4a:e5:e7:f7:95: e2:aa:8b:66:6b:bc:c2:20:d7:22:6e:6a:85:8f:9e: 76:29:fe:b7:7c:f4:b3:37:d5:2d:64:df:9d:e4:76: 67:68:84:da:60:f3:7a:5a:2c:0c:dc:09:54:d2:ca: 7d:5d:27:a5:2a:df:d5:72:0e:b4:17:6c:b1:a3:9a: 74:2f:53:5d:d8:45:ca:43:c4:f0:31:57:ef:d9:cf: 2f:f8:29:26:4f:5e:ac:92:ce:0c:84:ef:47:49:1b: 5d:b3:1a:00:93:29:b2:db:e5:cf:49:8b:a2:0f:a9: da:f9:48:52:99:ea:d1:99:5b:9b:93:51:5a:ea:9f: 80:38:d0:57:25:18:aa:e3:a5:bb:8c:32:42:f1:b5: 05:45:ce:40:f8:a9:63:e3:a3:28:d0:9a:72:cc:fc: a9:71:d5:6e:8e:f7:5b:25:ef:09:36:cf:14:76:bf: a9:54:64:e2:85:0c:b0:a7:d7:c9:e4:a3:ee:58:4e: 8f:4e:9c:28:5a:4a:25:c2:21:4b:96:9c:57:34:23: 83:2d:dc:99:51:74:95:6d:af:d9:07:09:f6:a9:58: f7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:26:10:13:57:3A:E4:B8:B4:91:5A:A0:A6:C0:4F:F2:BA:DA:DC:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46490044-6773-4b79-81b8-184260daedfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.120.0/23 Signature Algorithm: sha256WithRSAEncryption 68:0b:6d:6b:23:07:ee:8a:e6:81:18:96:6c:8b:1f:ac:76:02: 5e:06:a8:73:39:3e:34:5f:4d:31:50:a8:fa:6c:5d:7d:85:ed: aa:fa:32:5b:47:27:99:75:c9:7a:9b:c4:d3:14:6b:f4:4a:ff: 05:9e:73:17:21:ae:92:86:43:7f:29:d5:25:96:4e:be:1a:4b: 8c:99:73:02:46:07:ce:3a:3a:af:c9:89:fc:e3:bb:be:71:bc: ff:b9:42:52:96:42:a7:f5:81:19:e9:b4:cb:2c:03:13:ad:75: f8:e8:26:a3:a6:29:11:96:ef:70:96:1d:05:94:d4:04:13:c6: d8:d6:5a:f9:5a:d0:84:f1:d0:9d:45:b2:35:ff:93:0a:94:3c: f3:b8:48:ae:16:dd:bc:40:ac:40:ce:d2:41:6c:cb:02:6d:0c: 14:6a:67:d8:b3:75:2e:4a:c1:5e:5f:8e:e2:ff:ff:3b:8b:c7: 42:4a:29:b8:b1:18:32:08:f8:52:01:44:23:21:1a:a5:82:d5: e1:22:14:5d:f5:40:f9:b7:c7:00:63:fa:65:41:32:ca:de:5b: 27:1a:5d:35:21:5e:8e:34:39:97:61:4a:00:73:e9:ce:f0:02: 4b:24:c2:13:bb:04:12:bb:da:4e:b1:0b:fc:fb:a8:69:3e:b4: 0d:d7:9c:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFqNPPGHR5W8QE7RtIe/iWyblcIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE1MDAyMTAwWhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGE2NzYxOGU0MDQ4ODliZGExNWZiMDk3ODg2YzJjN2Rh MjI3ZjI5NDc5NWY3NjdhYzQxM2E5NGIxMjc5OWYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx520wiVD2RgfB91iW7J0f/p/loO4ZUSSs9dITOOQsV4/A eUA7cpdK5ef3leKqi2ZrvMIg1yJuaoWPnnYp/rd89LM31S1k353kdmdohNpg83pa LAzcCVTSyn1dJ6Uq39VyDrQXbLGjmnQvU13YRcpDxPAxV+/Zzy/4KSZPXqySzgyE 70dJG12zGgCTKbLb5c9Ji6IPqdr5SFKZ6tGZW5uTUVrqn4A40FclGKrjpbuMMkLx tQVFzkD4qWPjoyjQmnLM/Klx1W6O91sl7wk2zxR2v6lUZOKFDLCn18nko+5YTo9O nChaSiXCIUuWnFc0I4Mt3JlRdJVtr9kHCfapWPfNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIyYQE1c65Li0kVqgpsBP8rra3NQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NDkwMDQ0LTY3NzMtNGI3OS04MWI4LTE4NDI2MGRhZWRmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlngwDQYJKoZIhvcNAQELBQADggEBAGgLbWsjB+6K5oEYlmyLH6x2Al4G qHM5PjRfTTFQqPpsXX2F7ar6MltHJ5l1yXqbxNMUa/RK/wWecxchrpKGQ38p1SWW Tr4aS4yZcwJGB846Oq/Jifzju75xvP+5QlKWQqf1gRnptMssAxOtdfjoJqOmKRGW 73CWHQWU1AQTxtjWWvla0ITx0J1FsjX/kwqUPPO4SK4W3bxArEDO0kFsywJtDBRq Z9izdS5KwV5fjuL//zuLx0JKKbixGDII+FIBRCMhGqWC1eEiFF31QPm3xwBj+mVB MsreWycaXTUhXo40OZdhSgBz6c7wAkskwhO7BBK72k6xC/z7qGk+tA3XnBY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:18 2025 by rpki-client