$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e391b3-1064-47bc-9cab-3c4d2e04870b.roa File: 99e391b3-1064-47bc-9cab-3c4d2e04870b.roa (raw, json) Hash identifier: tFXQGJrasq9kJ33GZAmR2/Hz+9FP3PELuApWaySrdac= Subject key identifier: E3:E1:58:76:EA:E5:DF:EC:3C:E5:25:DF:0B:3D:DC:66:A7:2D:54:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 515C2F9262B77E16AD5D2F1E0565B11CF525E9B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e391b3-1064-47bc-9cab-3c4d2e04870b.roa Signing time: Wed 23 Apr 2025 00:41:27 +0000 ROA not before: Wed 23 Apr 2025 00:41:27 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 16.56.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5c:2f:92:62:b7:7e:16:ad:5d:2f:1e:05:65:b1:1c:f5:25:e9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 23 00:41:27 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=ab09dddc83071af7b0869f33e8e89aac069c1d0335647d00481a1c58c892c510, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:69:cf:c7:53:ca:18:92:c4:6f:92:7e:d5: 7d:74:78:c3:8b:fb:da:a3:07:85:77:b1:8d:9c:d1: 9c:f9:15:06:ba:0f:fa:2d:8b:c5:61:43:eb:d7:1e: 24:28:84:fc:cc:c7:b4:de:5a:4d:ab:ef:6a:8a:df: cf:e5:21:62:a4:ae:48:2a:e2:6f:d8:9e:59:69:1e: 11:f0:95:ed:33:32:99:3c:45:37:8a:00:26:26:b6: 48:38:55:31:0f:e1:16:31:dd:89:9d:cd:09:a3:ac: 6c:eb:ad:8b:e8:08:b2:02:f0:72:12:53:55:8b:79: 99:5f:55:7a:08:b0:28:37:8e:83:2e:fb:79:55:2b: 78:79:ba:3e:b5:46:29:e5:12:f9:18:48:b2:c6:9a: b5:d5:bc:0f:2c:12:59:73:8c:81:c3:68:3c:2f:5c: 75:a2:75:0d:f1:86:92:69:c1:04:18:5b:13:9e:41: 7d:0f:74:90:a0:f0:37:0f:e3:71:9e:36:1b:ac:e8: 3b:2f:1a:11:5c:11:96:8c:cb:48:12:94:04:1c:98: 41:99:6a:00:c1:7d:1c:30:32:6c:fe:df:f8:f4:a0: 71:2e:e0:9f:c4:20:8d:b7:df:0d:3a:e2:f8:ac:4d: 6a:f3:5a:ab:36:dc:56:f4:40:f5:4d:1b:8d:d7:ba: 0d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E1:58:76:EA:E5:DF:EC:3C:E5:25:DF:0B:3D:DC:66:A7:2D:54:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e391b3-1064-47bc-9cab-3c4d2e04870b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.128.0/19 Signature Algorithm: sha256WithRSAEncryption 33:90:3e:6e:dc:ca:ee:e1:ad:2f:4c:38:5a:91:00:34:cd:67: 1a:3d:e3:e0:06:0b:c9:9c:9e:19:1d:43:c3:a5:a1:24:73:f4: 32:34:aa:2a:12:23:9c:94:e3:3d:ba:65:6b:71:95:01:e7:88: cb:0a:19:5d:c5:93:28:e5:70:ca:08:58:6d:b3:96:89:aa:0a: ac:d4:18:06:51:ce:14:6f:81:ac:a7:7e:28:dc:d0:f0:6e:19: 40:cd:c9:a4:59:1e:a1:bd:cb:41:e8:bc:7c:01:a6:3b:76:37: f1:53:34:20:dd:f0:59:a3:95:ad:db:80:35:56:ad:5b:61:0a: c6:7b:04:9e:42:90:c8:96:e4:32:45:ae:3b:02:91:d7:a9:d3: b5:69:79:aa:30:5c:35:fe:82:51:6b:f1:f2:f1:bc:42:f5:ed: ea:82:2d:9c:7c:5c:e2:01:fb:8a:bf:38:9c:53:96:ab:1c:73: ad:85:54:92:d3:d0:87:ac:e1:c5:d6:a1:d1:a6:c4:b9:9e:ba: ec:36:66:72:b6:2f:c1:ae:c1:b5:35:c8:bb:9b:d3:8d:ff:40: 3f:5d:05:0a:81:e4:26:03:57:f9:ae:bb:12:4f:47:3d:87:fc: d1:c9:24:47:bb:61:1b:f1:1d:0c:54:31:a5:13:fb:8a:cc:21: 17:33:1e:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUVwvkmK3fhatXS8eBWWxHPUl6bcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIzMDA0MTI3WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjA5ZGRkYzgzMDcxYWY3YjA4NjlmMzNlOGU4OWFhYzA2 OWMxZDAzMzU2NDdkMDA0ODFhMWM1OGM4OTJjNTEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLe2nPx1PKGJLEb5J+1X10eMOL+9qjB4V3sY2c0Zz5FQa6 D/oti8VhQ+vXHiQohPzMx7TeWk2r72qK38/lIWKkrkgq4m/YnllpHhHwle0zMpk8 RTeKACYmtkg4VTEP4RYx3YmdzQmjrGzrrYvoCLIC8HISU1WLeZlfVXoIsCg3joMu +3lVK3h5uj61RinlEvkYSLLGmrXVvA8sEllzjIHDaDwvXHWidQ3xhpJpwQQYWxOe QX0PdJCg8DcP43GeNhus6DsvGhFcEZaMy0gSlAQcmEGZagDBfRwwMmz+3/j0oHEu 4J/EII233w064visTWrzWqs23Fb0QPVNG43Xug2XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4+FYdurl3+w85SXfCz3cZqctVKowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5ZTM5MWIzLTEwNjQtNDdiYy05Y2FiLTNjNGQyZTA0ODcwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOIAwDQYJKoZIhvcNAQELBQADggEBADOQPm7cyu7hrS9MOFqRADTNZxo9 4+AGC8mcnhkdQ8OloSRz9DI0qioSI5yU4z26ZWtxlQHniMsKGV3FkyjlcMoIWG2z lomqCqzUGAZRzhRvgaynfijc0PBuGUDNyaRZHqG9y0HovHwBpjt2N/FTNCDd8Fmj la3bgDVWrVthCsZ7BJ5CkMiW5DJFrjsCkdep07VpeaowXDX+glFr8fLxvEL17eqC LZx8XOIB+4q/OJxTlqscc62FVJLT0Ies4cXWodGmxLmeuuw2ZnK2L8GuwbU1yLub 043/QD9dBQqB5CYDV/muuxJPRz2H/NHJJEe7YRvxHQxUMaUT+4rMIRczHsU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:53 2025 by rpki-client