$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa File: d4afba84-8d51-440d-a653-037c4b7ea55e.roa (raw, json) Hash identifier: FNFihMqm76VKLGLKUriSXIdFdMOkA/AJ4FyefoYs9zg= Subject key identifier: C8:71:6E:B1:85:9D:B0:58:D1:A2:D3:C9:67:F8:AD:32:27:E5:75:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E9901F1ED8835F59713A514A530FFD6A7A4A5F3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa Signing time: Wed 04 Jun 2025 00:41:31 +0000 ROA not before: Wed 04 Jun 2025 00:41:31 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 99.151.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:99:01:f1:ed:88:35:f5:97:13:a5:14:a5:30:ff:d6:a7:a4:a5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 4 00:41:31 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=f2db40f2118921db8a57655b55dc8d29283665eb08213a723a02bbce74e6e6ae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:25:9c:84:e6:41:e0:60:2d:71:89:91:bd: 7c:bd:35:36:6a:72:51:dd:68:c7:06:d4:11:52:4f: 8d:d0:68:5d:86:54:0d:27:8f:a1:31:10:f8:82:1b: 93:20:69:a2:96:40:dc:28:67:ac:24:7c:5e:9a:91: d0:fd:83:7c:69:85:c6:85:3f:97:f6:36:d0:68:94: 41:33:61:32:f7:a0:2d:ae:a7:22:7a:a0:10:cd:f1: df:87:d9:bf:13:26:ba:84:33:2f:42:da:90:2d:90: f3:93:65:9e:cd:5f:64:3d:1c:48:9c:08:2a:57:2c: 41:cb:bb:0b:d1:5d:05:c3:74:75:45:61:f5:eb:ff: f6:87:ee:35:c4:e9:d5:6b:5b:9c:e7:32:67:01:8d: e2:10:f1:22:c7:db:d9:e3:1b:11:b7:b2:b0:3b:cf: e9:dc:33:c1:20:88:08:d5:63:f3:90:42:d7:3d:ab: 00:20:3d:4a:c1:96:2f:d7:29:c6:5d:09:91:3d:82: 09:82:a1:09:51:44:3e:68:b7:db:ac:27:de:da:ac: ea:ca:69:f4:1d:05:48:ef:1f:50:a8:ca:da:cc:ab: 1d:74:51:cd:41:5a:0b:66:b8:a8:fc:6f:cb:23:46: c7:2a:ec:73:e2:d8:d1:a5:3a:44:07:fb:60:fe:2a: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:71:6E:B1:85:9D:B0:58:D1:A2:D3:C9:67:F8:AD:32:27:E5:75:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.96.0/21 Signature Algorithm: sha256WithRSAEncryption c1:ec:91:e7:91:82:dd:07:7d:e8:3a:c6:80:04:7c:55:ce:f7: fa:22:a0:11:60:14:b3:85:68:14:cb:58:9a:0e:c3:e4:69:0a: ec:b8:f8:02:ad:14:b3:e4:8b:06:92:f0:af:49:e6:04:59:3e: 7d:4a:7d:3f:d5:9f:67:ad:44:83:33:e6:21:0d:09:aa:9e:e5: 56:73:2c:f0:49:54:74:a1:eb:13:91:f4:14:22:94:29:ec:46: 11:58:ef:2a:74:8a:81:2f:19:25:3b:16:6d:30:11:40:09:ff: ef:e4:08:4b:39:75:60:a6:1f:e8:93:b0:b2:85:b7:02:02:c5: 2a:48:f5:25:e8:e0:ae:c3:85:fe:9e:13:35:65:87:54:f1:e5: 0d:7a:8f:70:22:82:ba:ee:66:92:5b:19:9e:ee:b6:92:86:ee: 3c:7c:fa:04:d5:a0:fe:9a:ff:c2:0c:22:1f:0b:83:04:b5:02: a7:71:25:b7:7a:49:35:fe:62:91:1c:8b:d0:09:20:4b:d6:75: f0:c2:2e:70:dc:8e:f4:da:ae:ec:d3:2b:30:54:f1:01:3a:67: 4d:6f:49:52:9b:c2:5e:5d:2b:3d:b4:7b:39:da:b9:1f:cb:58: 10:9a:b6:1b:50:4d:9b:9f:cb:70:6f:97:25:93:94:c6:81:0d: 15:da:47:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbpkB8e2INfWXE6UUpTD/1qekpfMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA0MDA0MTMxWhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmRiNDBmMjExODkyMWRiOGE1NzY1NWI1NWRjOGQyOTI4 MzY2NWViMDgyMTNhNzIzYTAyYmJjZTc0ZTZlNmFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7MSWchOZB4GAtcYmRvXy9NTZqclHdaMcG1BFST43QaF2G VA0nj6ExEPiCG5MgaaKWQNwoZ6wkfF6akdD9g3xphcaFP5f2NtBolEEzYTL3oC2u pyJ6oBDN8d+H2b8TJrqEMy9C2pAtkPOTZZ7NX2Q9HEicCCpXLEHLuwvRXQXDdHVF YfXr//aH7jXE6dVrW5znMmcBjeIQ8SLH29njGxG3srA7z+ncM8EgiAjVY/OQQtc9 qwAgPUrBli/XKcZdCZE9ggmCoQlRRD5ot9usJ97arOrKafQdBUjvH1CoytrMqx10 Uc1BWgtmuKj8b8sjRscq7HPi2NGlOkQH+2D+KvSvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyHFusYWdsFjRotPJZ/itMifldawwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0YWZiYTg0LThkNTEtNDQwZC1hNjUzLTAzN2M0YjdlYTU1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl2AwDQYJKoZIhvcNAQELBQADggEBAMHskeeRgt0Hfeg6xoAEfFXO9/oi oBFgFLOFaBTLWJoOw+RpCuy4+AKtFLPkiwaS8K9J5gRZPn1KfT/Vn2etRIMz5iEN Caqe5VZzLPBJVHSh6xOR9BQilCnsRhFY7yp0ioEvGSU7Fm0wEUAJ/+/kCEs5dWCm H+iTsLKFtwICxSpI9SXo4K7Dhf6eEzVlh1Tx5Q16j3AigrruZpJbGZ7utpKG7jx8 +gTVoP6a/8IMIh8LgwS1AqdxJbd6STX+YpEci9AJIEvWdfDCLnDcjvTaruzTKzBU 8QE6Z01vSVKbwl5dKz20eznauR/LWBCathtQTZufy3BvlyWTlMaBDRXaR3k= -----END CERTIFICATE-----Generated at Sun Jun 15 17:19:18 2025 by rpki-client