$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712a2fc7-0d39-4161-9b91-32ead9a8c791.roa File: 712a2fc7-0d39-4161-9b91-32ead9a8c791.roa (raw, json) Hash identifier: EptJGQCFqUACXSpje7+F/e2yeGwhEvkqLsCHdygZ+1g= Subject key identifier: 11:98:4F:CD:63:77:BF:77:38:89:A5:7D:2E:02:02:18:EA:2C:43:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5815EEC2542F67CD64FB4346291E214CEB0EC9AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712a2fc7-0d39-4161-9b91-32ead9a8c791.roa Signing time: Wed 04 Jun 2025 00:30:56 +0000 ROA not before: Wed 04 Jun 2025 00:30:56 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:15:ee:c2:54:2f:67:cd:64:fb:43:46:29:1e:21:4c:eb:0e:c9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 4 00:30:56 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=333bffe7fecd2c56ca11dc87595a15889c5d5007dee059131eaaca928a2363b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:88:95:7b:66:ca:41:8b:5a:f9:79:9a:f0: 98:c3:0c:d7:7c:d2:9f:c2:d0:da:26:fd:57:42:aa: b2:ab:a2:31:bf:47:53:72:ef:0b:2a:64:78:03:a9: 2a:9e:b7:73:4c:50:1d:ac:55:1e:b5:b9:17:7a:5f: 17:88:11:98:c0:3e:43:a5:ed:0b:c3:2f:08:8a:b5: 3c:e0:04:e9:3d:e4:9a:ab:a2:d2:66:7b:59:62:79: 7a:4f:95:ab:84:c5:57:ef:15:aa:1e:fb:84:9a:69: 8b:ac:82:7e:60:eb:d5:2d:0f:a6:22:e7:10:60:ff: 9a:0b:f7:31:7f:74:37:8f:6a:d8:9d:4b:a7:b8:93: 58:16:00:21:90:32:de:65:85:00:77:48:f9:43:e3: e7:b2:ac:de:b4:2b:b1:77:a1:1d:b6:3b:26:c1:23: 2e:4f:0a:4e:74:81:76:fc:93:f0:68:69:35:b8:0a: 5d:2b:ca:94:28:bc:f4:33:2c:52:09:ce:8e:c3:7e: 17:14:fa:b2:13:38:2f:55:b8:72:fd:31:49:d3:b8: fe:d3:7d:44:8c:79:dd:61:5b:0a:2d:cd:c8:6d:36: 5f:0e:f7:29:49:e4:ee:a4:0a:53:aa:79:d5:c9:4f: 70:ff:e3:a2:4e:47:25:49:ba:54:d9:71:9d:28:a5: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:98:4F:CD:63:77:BF:77:38:89:A5:7D:2E:02:02:18:EA:2C:43:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712a2fc7-0d39-4161-9b91-32ead9a8c791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.0.0/23 Signature Algorithm: sha256WithRSAEncryption b8:fa:c4:4a:52:28:2c:72:db:bd:49:17:ab:2a:65:d3:5a:c8: 52:a5:f3:cd:43:48:fa:39:b4:6d:cd:70:22:77:33:03:86:51: c7:63:25:0e:02:05:ff:d8:18:ed:9c:a0:54:2f:eb:b8:bb:ef: f7:b2:e9:69:1e:eb:6a:5b:59:b5:94:2a:1c:08:40:37:5b:5a: f4:d0:89:6a:54:f7:90:e7:59:91:df:e3:ca:13:bd:a5:69:46: ad:b6:2b:80:3f:37:c5:64:5a:e0:77:50:e6:e5:b4:1d:6e:a7: 74:2d:09:59:b2:32:05:66:6d:58:fa:a5:cb:a5:c2:1a:97:74: 94:69:5e:8b:9b:a7:e3:82:15:54:f4:99:62:95:71:dc:61:d5: 98:d7:1c:f4:43:5d:25:af:01:4d:20:e5:29:a9:af:50:6b:0c: bd:c1:51:97:1f:81:c9:3c:fa:94:8f:04:14:de:6a:2b:70:bb: c6:0a:c8:55:cb:2d:08:81:2c:6c:61:d7:bf:8c:2e:8a:98:12: 90:98:0f:49:b8:1b:c8:c1:0c:78:63:92:fc:0f:1d:fd:39:a9: 2a:14:6f:84:7f:fe:a7:7e:07:a6:07:59:f2:c7:6a:42:d6:5d: 27:6c:10:28:fd:d0:cc:fd:c7:10:6e:1f:0d:f2:b6:2d:7e:30: d9:44:47:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWBXuwlQvZ81k+0NGKR4hTOsOyawwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDAzMDU2WhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzNiZmZlN2ZlY2QyYzU2Y2ExMWRjODc1OTVhMTU4ODlj NWQ1MDA3ZGVlMDU5MTMxZWFhY2E5MjhhMjM2M2IwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC52YiVe2bKQYta+Xma8JjDDNd80p/C0Nom/VdCqrKrojG/ R1Ny7wsqZHgDqSqet3NMUB2sVR61uRd6XxeIEZjAPkOl7QvDLwiKtTzgBOk95Jqr otJme1lieXpPlauExVfvFaoe+4SaaYusgn5g69UtD6Yi5xBg/5oL9zF/dDePatid S6e4k1gWACGQMt5lhQB3SPlD4+eyrN60K7F3oR22OybBIy5PCk50gXb8k/BoaTW4 Cl0rypQovPQzLFIJzo7DfhcU+rITOC9VuHL9MUnTuP7TfUSMed1hWwotzchtNl8O 9ylJ5O6kClOqedXJT3D/46JORyVJulTZcZ0opRevAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEZhPzWN3v3c4iaV9LgICGOosQ7IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxMmEyZmM3LTBkMzktNDE2MS05YjkxLTMyZWFkOWE4Yzc5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlgAwDQYJKoZIhvcNAQELBQADggEBALj6xEpSKCxy271JF6sqZdNayFKl 881DSPo5tG3NcCJ3MwOGUcdjJQ4CBf/YGO2coFQv67i77/ey6Wke62pbWbWUKhwI QDdbWvTQiWpU95DnWZHf48oTvaVpRq22K4A/N8VkWuB3UObltB1up3QtCVmyMgVm bVj6pculwhqXdJRpXoubp+OCFVT0mWKVcdxh1ZjXHPRDXSWvAU0g5Smpr1BrDL3B UZcfgck8+pSPBBTeaitwu8YKyFXLLQiBLGxh17+MLoqYEpCYD0m4G8jBDHhjkvwP Hf05qSoUb4R//qd+B6YHWfLHakLWXSdsECj90Mz9xxBuHw3yti1+MNlER8o= -----END CERTIFICATE-----Generated at Sat Jun 14 07:00:42 2025 by rpki-client