$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d387ff7-fed8-4308-a990-1ea058fcb160.roa File: 3d387ff7-fed8-4308-a990-1ea058fcb160.roa (raw, json) Hash identifier: t8CJt3/n/ayXl4hoSSBkfyozX/4/XG/9BT/m/2J2+nw= Subject key identifier: F6:C0:9C:67:E8:A8:E9:5A:5E:70:E5:E0:5A:E1:7E:AC:56:37:6D:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0978502B60FD8ACE51BE0A5E27C27FFCB0F440B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d387ff7-fed8-4308-a990-1ea058fcb160.roa Signing time: Fri 21 Mar 2025 00:40:26 +0000 ROA not before: Fri 21 Mar 2025 00:40:26 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:78:50:2b:60:fd:8a:ce:51:be:0a:5e:27:c2:7f:fc:b0:f4:40:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 21 00:40:26 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:86:9f:ee:cc:54:63:fe:53:ca:42:19:c0:76: 81:4a:60:55:ed:5c:4a:b7:32:58:8a:47:fc:ec:af: 65:d3:56:d0:c2:c8:d4:59:dc:f3:36:bc:9c:ca:22: 83:50:3a:e4:39:58:d4:1b:81:07:58:a0:0a:f4:48: c2:c9:61:ff:07:7b:d2:1f:cb:f3:c7:d9:d2:c2:bb: a1:20:50:e5:c6:05:6b:3f:f9:f5:b0:ae:1c:81:dd: a0:d2:67:cc:02:04:8d:41:8d:ed:00:8f:5f:5c:88: 90:f1:44:fd:4a:81:8b:6c:07:3e:46:11:36:cc:17: f5:ad:51:6a:f9:7f:3d:c7:e5:c0:73:49:60:2f:0d: b3:02:5d:1d:38:bf:70:ef:d0:1d:a9:5c:42:96:93: 6a:14:e8:bc:90:ca:4b:45:07:ed:98:05:ff:13:74: aa:9e:dd:1f:09:c2:77:ec:fe:33:0f:02:d8:12:6d: f5:20:38:35:7f:06:87:7e:40:b6:3d:46:ae:7b:7c: dd:32:c6:6a:90:87:92:14:9d:14:73:26:88:f4:92: 33:97:07:b4:e0:42:db:ab:a9:b6:ea:ca:f1:b7:24: 67:63:79:25:62:18:a7:32:e4:4f:d5:b2:35:cf:a4: 2d:73:07:55:d2:14:58:fd:39:eb:41:b3:a6:53:55: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C0:9C:67:E8:A8:E9:5A:5E:70:E5:E0:5A:E1:7E:AC:56:37:6D:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d387ff7-fed8-4308-a990-1ea058fcb160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.82.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:88:13:2c:b2:82:2e:e1:79:8d:e3:9c:1d:1e:30:0a:22:3e: bf:af:27:fa:7a:5c:99:f4:19:b7:a8:6b:cf:d9:02:5e:1d:0f: 9b:ca:30:60:64:b7:32:fa:a3:52:1d:66:0e:4c:50:74:c0:33: 1f:57:e0:4a:b0:d7:8f:3f:4b:76:70:8d:f8:bb:86:fa:bf:f2: eb:42:40:ce:be:83:f4:fa:d2:32:70:65:06:0c:34:97:3f:dc: 14:be:8f:47:fd:e1:fe:12:d7:eb:ea:14:83:6f:44:1b:5c:f0: 19:d7:8b:3e:17:28:f4:c3:56:4a:fe:19:cb:42:72:74:e7:03: 1f:e7:c0:17:9b:58:24:9b:85:9c:94:05:1a:54:5c:0f:0f:20: c2:45:d2:02:6a:47:f1:5a:75:03:de:3e:41:f3:e7:bf:da:e8: c3:a7:a1:aa:13:5e:83:70:62:b3:9c:21:5a:f2:71:54:2f:47: ae:26:59:79:0d:e4:a2:18:eb:42:c2:d5:15:8e:d6:69:96:55: 06:fe:3c:11:68:9e:e1:32:65:b4:60:49:97:07:d0:ff:d7:11: a6:66:53:68:72:38:65:39:82:e2:60:76:d8:35:d2:43:55:bf: f5:1e:c9:ef:f8:c3:69:ed:3c:91:d4:a2:c5:b7:ec:85:90:2e: bd:f5:70:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCXhQK2D9is5RvgpeJ8J//LD0QLUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDA0MDI2WhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjYxNzU0ZmEzMTY3MDhkMzI1OGQ3ZWFiNThhODJiOWU5 YWYwNDZhYjE3ZDk1MTQ1OGRmMjk1ODAzOTA0ZGVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmhp/uzFRj/lPKQhnAdoFKYFXtXEq3MliKR/zsr2XTVtDC yNRZ3PM2vJzKIoNQOuQ5WNQbgQdYoAr0SMLJYf8He9Ify/PH2dLCu6EgUOXGBWs/ +fWwrhyB3aDSZ8wCBI1Bje0Aj19ciJDxRP1KgYtsBz5GETbMF/WtUWr5fz3H5cBz SWAvDbMCXR04v3Dv0B2pXEKWk2oU6LyQyktFB+2YBf8TdKqe3R8Jwnfs/jMPAtgS bfUgODV/Bod+QLY9Rq57fN0yxmqQh5IUnRRzJoj0kjOXB7TgQturqbbqyvG3JGdj eSViGKcy5E/VsjXPpC1zB1XSFFj9OetBs6ZTVTlJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9sCcZ+io6VpecOXgWuF+rFY3ba8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkMzg3ZmY3LWZlZDgtNDMwOC1hOTkwLTFlYTA1OGZjYjE2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl1IwDQYJKoZIhvcNAQELBQADggEBAEuIEyyygi7heY3jnB0eMAoiPr+v J/p6XJn0Gbeoa8/ZAl4dD5vKMGBktzL6o1IdZg5MUHTAMx9X4Eqw148/S3Zwjfi7 hvq/8utCQM6+g/T60jJwZQYMNJc/3BS+j0f94f4S1+vqFINvRBtc8BnXiz4XKPTD Vkr+GctCcnTnAx/nwBebWCSbhZyUBRpUXA8PIMJF0gJqR/FadQPePkHz57/a6MOn oaoTXoNwYrOcIVrycVQvR64mWXkN5KIY60LC1RWO1mmWVQb+PBFonuEyZbRgSZcH 0P/XEaZmU2hyOGU5guJgdtg10kNVv/Ueye/4w2ntPJHUosW37IWQLr31cM0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:11 2025 by rpki-client