$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb299997-6adf-4ab5-8d91-7cfb36ead1b2.roa File: eb299997-6adf-4ab5-8d91-7cfb36ead1b2.roa (raw, json) Hash identifier: fTRFcZrcCwJBZYbxvXxUnXm60PqGvpDGU5nUToAVyE8= Subject key identifier: 36:53:0D:34:F3:E0:43:50:BC:A8:75:21:E7:FC:D8:71:15:F5:AE:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1AB42F6C46E6E133FCCB47A30841236F335A68E7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb299997-6adf-4ab5-8d91-7cfb36ead1b2.roa Signing time: Wed 09 Apr 2025 00:42:02 +0000 ROA not before: Wed 09 Apr 2025 00:42:02 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 99.77.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b4:2f:6c:46:e6:e1:33:fc:cb:47:a3:08:41:23:6f:33:5a:68:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:42:02 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=679dc5e1defe1badd32e12a3718c485a4aed2139be18d6b63029345daefd1ca8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:06:d6:d6:29:04:b5:bc:b9:74:0b:ec:1a: 17:0b:31:ec:af:e6:d0:de:46:a5:f8:99:07:74:b9: 5f:08:f2:b1:a2:b0:64:05:8d:b2:bc:09:68:f4:6b: 5a:c5:c2:2b:95:59:c2:a1:76:bc:df:04:d2:2d:dc: e2:cc:ab:bb:3a:02:a8:96:88:00:c4:a1:43:ab:8e: 7a:9b:d2:68:ff:37:6e:4b:6b:7f:09:0b:98:bd:f8: b6:98:11:bc:80:9d:4a:7b:1b:b9:06:18:75:59:49: 34:22:e6:98:74:38:05:af:fa:9b:aa:5c:a6:08:65: e6:02:84:7a:4b:80:0f:c8:3a:52:97:7b:f0:6e:d6: 77:5d:cd:dd:80:d9:b9:4b:3f:29:fa:fb:52:a5:e7: e7:aa:22:c0:db:88:d9:f7:3c:d2:15:dc:0d:d9:81: 6b:8a:2c:83:c3:1a:3e:17:2c:82:b2:e8:03:52:a6: 91:fe:10:86:4f:10:eb:b1:7b:31:00:82:2d:0c:f4: f4:10:36:e0:ea:f7:0c:0d:ec:d7:9c:39:82:7b:04: 75:97:78:80:51:55:0e:58:89:c9:43:c3:df:50:8b: 94:69:f4:75:5c:db:e0:71:74:b7:b2:07:68:e5:44: ff:45:1e:df:ad:73:bf:38:8d:26:39:75:cf:f6:d5: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:53:0D:34:F3:E0:43:50:BC:A8:75:21:E7:FC:D8:71:15:F5:AE:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb299997-6adf-4ab5-8d91-7cfb36ead1b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.151.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:1c:2d:ad:18:01:a4:e7:70:24:21:36:00:b5:8b:70:c0:5a: 8f:ef:43:b2:0a:90:28:27:9b:d8:fe:ec:a0:be:1d:ec:2a:6f: 4b:51:2b:7b:b9:91:76:f4:d2:e4:67:d6:aa:3f:e7:12:5a:88: ec:47:bf:f9:0d:2f:7a:07:2c:e2:f7:01:30:e1:24:bf:ac:89: 33:76:1f:91:34:77:20:87:18:48:92:19:21:1d:1b:6f:d8:80: e4:8a:40:a5:84:ee:3d:30:de:d8:9d:99:e3:44:63:22:26:46: 5a:69:a4:eb:1e:8a:53:f5:8f:65:3b:c1:44:e0:83:9c:a6:9e: 35:97:c9:05:b7:ff:b5:77:72:f5:78:37:5e:cf:a7:79:dd:2c: 56:cf:48:be:68:47:6b:53:16:a7:b4:f4:3f:5c:6b:54:83:93: 8c:f2:fc:3c:fd:5f:b8:9b:d1:23:c5:d2:8c:6e:23:6a:97:a1: 5d:10:26:b1:b1:47:75:70:b2:77:c9:46:a8:5c:d5:11:2d:dc: 56:b4:a4:4d:a9:64:82:bd:27:a4:58:13:e2:75:a4:96:ec:a7: 0d:90:b8:ed:6d:8b:2a:bb:e5:3d:ff:35:bc:dc:96:1f:7b:90: 35:45:f6:24:c5:21:b2:8e:cc:2c:2d:78:90:cc:74:4b:92:a4: 9c:9c:ae:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGrQvbEbm4TP8y0ejCEEjbzNaaOcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDA0MjAyWhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzlkYzVlMWRlZmUxYmFkZDMyZTEyYTM3MThjNDg1YTRh ZWQyMTM5YmUxOGQ2YjYzMDI5MzQ1ZGFlZmQxY2E4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLqAbW1ikEtby5dAvsGhcLMeyv5tDeRqX4mQd0uV8I8rGi sGQFjbK8CWj0a1rFwiuVWcKhdrzfBNIt3OLMq7s6AqiWiADEoUOrjnqb0mj/N25L a38JC5i9+LaYEbyAnUp7G7kGGHVZSTQi5ph0OAWv+puqXKYIZeYChHpLgA/IOlKX e/Bu1nddzd2A2blLPyn6+1Kl5+eqIsDbiNn3PNIV3A3ZgWuKLIPDGj4XLIKy6ANS ppH+EIZPEOuxezEAgi0M9PQQNuDq9wwN7NecOYJ7BHWXeIBRVQ5YiclDw99Qi5Rp 9HVc2+BxdLeyB2jlRP9FHt+tc784jSY5dc/21TLbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNlMNNPPgQ1C8qHUh5/zYcRX1rswwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViMjk5OTk3LTZhZGYtNGFiNS04ZDkxLTdjZmIzNmVhZDFiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTZcwDQYJKoZIhvcNAQELBQADggEBAD4cLa0YAaTncCQhNgC1i3DAWo/v Q7IKkCgnm9j+7KC+Hewqb0tRK3u5kXb00uRn1qo/5xJaiOxHv/kNL3oHLOL3ATDh JL+siTN2H5E0dyCHGEiSGSEdG2/YgOSKQKWE7j0w3tidmeNEYyImRlpppOseilP1 j2U7wUTgg5ymnjWXyQW3/7V3cvV4N17Pp3ndLFbPSL5oR2tTFqe09D9ca1SDk4zy /Dz9X7ib0SPF0oxuI2qXoV0QJrGxR3VwsnfJRqhc1REt3Fa0pE2pZIK9J6RYE+J1 pJbspw2QuO1tiyq75T3/Nbzclh97kDVF9iTFIbKOzCwteJDMdEuSpJycruY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:22 2025 by rpki-client