$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0c88a40-44cb-4ee0-a0f5-5f6d559b9c61.roa File: d0c88a40-44cb-4ee0-a0f5-5f6d559b9c61.roa (raw, json) Hash identifier: oKHoAKN7LMRCTNPZkEqbd9DTLCzml7lj1dAlAwWuH7Q= Subject key identifier: 14:16:B3:7F:3A:90:2E:BE:90:C9:53:56:E6:45:C3:CB:A1:15:B9:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A75B19DDF836D97383DB0495737F8C1E5EC1B65 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0c88a40-44cb-4ee0-a0f5-5f6d559b9c61.roa Signing time: Fri 25 Apr 2025 15:10:22 +0000 ROA not before: Fri 25 Apr 2025 15:10:22 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.144.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:75:b1:9d:df:83:6d:97:38:3d:b0:49:57:37:f8:c1:e5:ec:1b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 15:10:22 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=abff12dbd32a8c4d4414adb02a36a29d9393c4a7dbfd09f4aadabb124558c3ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:b9:1a:2c:7e:96:d9:ea:19:a6:c0:66:32: db:03:c5:60:c6:40:45:42:8f:30:41:8c:53:78:fb: 7c:f9:3c:64:c5:f8:b3:6f:bf:b1:4e:00:1e:98:58: 31:a9:2b:a4:09:d2:08:b8:3e:a0:a3:0a:f3:ce:de: 08:94:b4:93:bf:5b:45:86:18:60:d9:90:2d:c3:22: 8d:df:d5:86:b5:68:e9:69:d7:5a:2f:67:2b:cd:fb: 1f:d0:ad:cc:d6:48:ce:80:05:d8:72:32:40:0a:a6: dc:0f:1b:f1:2d:f2:5d:1b:ed:8b:65:68:6d:4d:0c: a7:be:45:84:04:20:51:06:9c:88:82:9c:60:e0:93: 61:cf:30:f1:95:51:2b:3e:ca:99:9d:30:09:cd:b7: 77:f2:fe:c7:67:4b:98:e2:e5:1c:aa:47:4c:8f:e2: 12:99:f8:66:36:e1:71:f9:83:fa:8d:d2:f2:8b:66: a9:d9:bb:80:77:af:12:22:85:ef:d0:ca:81:c2:3a: 3c:de:37:a7:ea:87:6d:6e:d0:50:ef:78:9b:f1:93: 92:72:ed:ac:57:68:ee:3c:d5:3c:42:04:54:78:fd: 34:d7:7d:33:a6:70:2c:79:7c:8e:5f:c8:a1:06:84: 35:2e:02:70:ea:9d:b0:50:a5:50:b7:11:06:b0:b8: 82:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:16:B3:7F:3A:90:2E:BE:90:C9:53:56:E6:45:C3:CB:A1:15:B9:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0c88a40-44cb-4ee0-a0f5-5f6d559b9c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.144.192.0/18 Signature Algorithm: sha256WithRSAEncryption 17:3e:43:71:79:c1:de:58:c8:11:cf:7d:6d:73:3a:4a:74:44: 36:92:87:32:09:60:82:e4:43:d5:cb:e5:e3:c6:19:cd:0d:30: e5:99:0e:d6:04:fd:2e:32:b2:33:1c:2a:40:65:79:ac:63:8a: bb:1a:27:e3:f0:cf:1a:08:a3:4e:23:a8:9e:d1:1c:1b:84:48: 57:4f:54:64:b1:b5:16:0d:79:7e:8e:2f:4d:65:3d:d9:c6:3d: c6:b5:82:6a:39:b1:5e:44:53:1e:67:9c:25:e1:cf:e6:9c:f0: 01:f9:c6:50:5e:df:8c:bd:62:fe:5e:53:0e:a9:2c:4d:c1:5a: 5c:4f:5b:f3:14:19:e8:d4:30:53:f7:a3:6e:a6:06:ce:18:2d: e2:08:3b:81:8a:47:8b:9b:a7:d8:e3:bf:ec:d8:d1:8f:e1:2b: c4:ba:08:33:44:3b:db:c8:25:42:a2:58:61:23:ce:30:41:4c: 0c:ff:1c:4c:92:01:73:9e:a1:a0:ff:15:79:5c:c8:b7:d8:0e: 65:35:be:5b:45:16:fd:ce:5f:3c:8e:f0:a5:95:6a:de:89:57: 44:6c:c4:3f:fc:c7:27:fb:0a:50:dc:42:62:17:ca:61:66:c3: 6d:14:96:e7:01:53:87:f8:96:b7:7b:58:37:06:f0:93:69:84: 72:ee:3e:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUenWxnd+DbZc4PbBJVzf4weXsG2UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MTUxMDIyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmZmMTJkYmQzMmE4YzRkNDQxNGFkYjAyYTM2YTI5ZDkz OTNjNGE3ZGJmZDA5ZjRhYWRhYmIxMjQ1NThjM2VjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWS7kaLH6W2eoZpsBmMtsDxWDGQEVCjzBBjFN4+3z5PGTF +LNvv7FOAB6YWDGpK6QJ0gi4PqCjCvPO3giUtJO/W0WGGGDZkC3DIo3f1Ya1aOlp 11ovZyvN+x/QrczWSM6ABdhyMkAKptwPG/Et8l0b7YtlaG1NDKe+RYQEIFEGnIiC nGDgk2HPMPGVUSs+ypmdMAnNt3fy/sdnS5ji5RyqR0yP4hKZ+GY24XH5g/qN0vKL ZqnZu4B3rxIihe/QyoHCOjzeN6fqh21u0FDveJvxk5Jy7axXaO481TxCBFR4/TTX fTOmcCx5fI5fyKEGhDUuAnDqnbBQpVC3EQawuIJZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFBazfzqQLr6QyVNW5kXDy6EVufwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwYzg4YTQwLTQ0Y2ItNGVlMC1hMGY1LTVmNmQ1NTliOWM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjkMAwDQYJKoZIhvcNAQELBQADggEBABc+Q3F5wd5YyBHPfW1zOkp0RDaS hzIJYILkQ9XL5ePGGc0NMOWZDtYE/S4ysjMcKkBleaxjirsaJ+PwzxoIo04jqJ7R HBuESFdPVGSxtRYNeX6OL01lPdnGPca1gmo5sV5EUx5nnCXhz+ac8AH5xlBe34y9 Yv5eUw6pLE3BWlxPW/MUGejUMFP3o26mBs4YLeIIO4GKR4ubp9jjv+zY0Y/hK8S6 CDNEO9vIJUKiWGEjzjBBTAz/HEySAXOeoaD/FXlcyLfYDmU1vltFFv3OXzyO8KWV at6JV0RsxD/8xyf7ClDcQmIXymFmw20UlucBU4f4lrd7WDcG8JNphHLuPhw= -----END CERTIFICATE-----Generated at Sun Apr 27 21:25:00 2025 by rpki-client