$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99668ca5-6a45-41c7-8fe3-0d5cd3cf7a5a.roa File: 99668ca5-6a45-41c7-8fe3-0d5cd3cf7a5a.roa (raw, json) Hash identifier: +teSt0ZQWNM2hHzk4wruU7yi2dNWQOTlGk6wgNrQI3Q= Subject key identifier: 33:AE:AF:03:5A:6B:A8:4B:24:F8:56:B9:AC:42:98:FB:48:32:20:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7198617DBA779CE5EA6517037EAE61A62CAFC854 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99668ca5-6a45-41c7-8fe3-0d5cd3cf7a5a.roa Signing time: Fri 25 Apr 2025 00:11:37 +0000 ROA not before: Fri 25 Apr 2025 00:11:37 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:98:61:7d:ba:77:9c:e5:ea:65:17:03:7e:ae:61:a6:2c:af:c8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:11:37 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=7866b6cade44e7d885d9f7fff9f2e75e63a8cec6963bfcdd62be59cbaf9b449e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:d4:95:8a:b2:77:37:db:e2:2c:7f:23:ff: f3:e0:7f:91:7d:0f:c4:84:e3:02:1f:a0:a7:9b:80: 02:28:a9:32:86:df:46:50:af:4f:71:80:1f:b6:42: b9:f2:16:10:3a:66:62:39:11:d4:74:1e:7c:3e:28: 3b:cb:e6:3e:e9:38:7b:3a:6e:3f:a7:3a:4e:4e:ff: 22:0b:f0:f0:b1:ba:1f:fc:72:27:ec:e2:11:cd:a1: d0:0f:e4:25:83:70:15:79:f1:ac:88:63:14:05:9b: 1f:af:f3:04:42:29:91:f5:af:20:b2:4c:c5:82:79: f5:15:12:f0:32:d2:eb:09:0c:7c:f9:c5:36:3a:f9: 66:7e:75:51:c4:53:29:9a:91:69:c2:d8:bc:0e:d0: 2f:0c:8b:81:8e:8a:8f:a1:81:bf:d4:08:56:6d:e1: 06:2c:9e:9b:48:d3:3d:eb:a9:28:81:7d:09:48:f8: c0:18:97:fb:8a:d1:40:26:95:07:02:a6:c2:44:c3: 01:ed:84:39:85:b6:ff:32:82:d8:9b:60:0c:cc:31: 14:af:bf:6a:e2:1d:bb:09:37:7c:65:8d:f1:37:e8: 7e:12:8a:6d:30:48:6f:55:ab:0d:4b:12:db:ba:78: a6:2f:fb:89:bd:02:5f:8a:c5:67:49:a3:1b:2a:0b: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AE:AF:03:5A:6B:A8:4B:24:F8:56:B9:AC:42:98:FB:48:32:20:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99668ca5-6a45-41c7-8fe3-0d5cd3cf7a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.86.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:a4:d6:25:30:38:6d:07:39:e2:e8:c3:ea:11:79:58:f2:20: 10:eb:46:82:c2:81:87:f2:e8:0c:ad:87:5e:8d:ab:cf:00:a9: 14:fc:f9:be:22:6e:d9:ca:5a:5c:f0:b5:9f:7e:27:9b:cf:e1: a7:4c:15:1b:e9:1a:b2:3c:c3:0b:5e:e7:9e:41:0b:55:1e:9c: 6f:39:08:89:c0:d1:a7:53:48:32:1d:71:23:a9:5b:38:bd:31: b5:26:6c:f9:3d:4a:3e:24:e5:92:b0:eb:29:d9:06:0f:a6:b5: 7c:f4:ff:e1:13:90:93:47:ca:03:9e:fd:05:32:5a:d2:06:b4: 69:b1:fc:e4:66:24:5c:54:fa:20:3a:f9:5c:59:8c:11:b5:4d: 63:c0:6b:59:7e:ff:a4:45:3d:64:df:f6:8f:cb:4b:29:3c:57: 7b:5d:ee:ce:a1:fd:9c:f6:e6:05:f1:33:d3:7a:83:cc:f7:89: 5e:93:2c:3e:b4:53:92:a7:3b:63:b6:38:1e:73:ef:68:0c:dd: 43:70:c6:d9:fd:77:dc:14:1f:b8:8c:65:f2:2d:87:c3:22:db: 86:d8:64:f1:b9:3c:4f:b5:a8:8c:c4:b0:a8:81:39:39:23:9b: ed:c7:19:15:af:3f:e6:bd:77:f0:9b:b8:ed:25:aa:5f:28:52: b7:6b:ad:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcZhhfbp3nOXqZRcDfq5hpiyvyFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDAxMTM3WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODY2YjZjYWRlNDRlN2Q4ODVkOWY3ZmZmOWYyZTc1ZTYz YThjZWM2OTYzYmZjZGQ2MmJlNTljYmFmOWI0NDllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtNNSVirJ3N9viLH8j//Pgf5F9D8SE4wIfoKebgAIoqTKG 30ZQr09xgB+2QrnyFhA6ZmI5EdR0Hnw+KDvL5j7pOHs6bj+nOk5O/yIL8PCxuh/8 cifs4hHNodAP5CWDcBV58ayIYxQFmx+v8wRCKZH1ryCyTMWCefUVEvAy0usJDHz5 xTY6+WZ+dVHEUymakWnC2LwO0C8Mi4GOio+hgb/UCFZt4QYsnptI0z3rqSiBfQlI +MAYl/uK0UAmlQcCpsJEwwHthDmFtv8ygtibYAzMMRSvv2riHbsJN3xljfE36H4S im0wSG9Vqw1LEtu6eKYv+4m9Al+KxWdJoxsqC7kFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM66vA1prqEsk+Fa5rEKY+0gyIJkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5NjY4Y2E1LTZhNDUtNDFjNy04ZmUzLTBkNWNkM2NmN2E1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBslYwDQYJKoZIhvcNAQELBQADggEBACyk1iUwOG0HOeLow+oReVjyIBDr RoLCgYfy6Ayth16Nq88AqRT8+b4ibtnKWlzwtZ9+J5vP4adMFRvpGrI8wwte555B C1UenG85CInA0adTSDIdcSOpWzi9MbUmbPk9Sj4k5ZKw6ynZBg+mtXz0/+ETkJNH ygOe/QUyWtIGtGmx/ORmJFxU+iA6+VxZjBG1TWPAa1l+/6RFPWTf9o/LSyk8V3td 7s6h/Zz25gXxM9N6g8z3iV6TLD60U5KnO2O2OB5z72gM3UNwxtn9d9wUH7iMZfIt h8Mi24bYZPG5PE+1qIzEsKiBOTkjm+3HGRWvP+a9d/CbuO0lql8oUrdrrQ8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:24 2025 by rpki-client