$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa File: 51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa (raw, json) Hash identifier: sfZbR3+t941I9u9wVNTgzRP6rSLzjOBW6Nw5Wgchrfk= Subject key identifier: BF:66:AE:F0:62:51:F5:BC:CB:55:ED:3B:FC:0F:48:67:0F:DF:3A:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E9395C65FDA2BA2B559B5C35144EEDD4AC4E295 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa Signing time: Fri 14 Mar 2025 00:52:20 +0000 ROA not before: Fri 14 Mar 2025 00:52:20 +0000 ROA not after: Fri 18 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:93:95:c6:5f:da:2b:a2:b5:59:b5:c3:51:44:ee:dd:4a:c4:e2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 14 00:52:20 2025 GMT Not After : Apr 18 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:ab:c6:6e:93:d8:98:c0:d3:09:82:01:1c: f4:5c:18:62:39:65:2c:8f:7e:dd:ad:fd:9d:ef:52: 88:34:38:c1:dd:2a:c0:9c:b2:0d:c2:81:41:06:e2: d6:8e:bb:1d:a6:f0:f0:07:fc:d6:5c:4e:e4:10:8a: 2c:52:10:b4:e4:03:59:8f:bd:0b:f4:fb:4c:63:84: 20:63:35:02:10:7d:8b:db:51:38:93:ac:4f:70:98: 7e:84:9e:44:03:15:24:94:d3:d1:a0:52:0a:53:46: ec:c9:84:5c:9e:78:b5:39:db:ae:43:12:f6:cd:23: 58:27:40:cc:98:4a:90:72:0e:2a:1f:b5:aa:c0:87: ee:0a:8a:74:3f:8f:f5:00:9a:b7:91:75:c8:47:23: 16:98:0d:63:c5:87:81:d6:dd:36:25:17:a5:ef:40: f2:5b:03:bb:0d:31:dd:17:44:dd:b7:27:cc:22:8e: 81:62:0b:d1:0b:29:ff:6e:74:84:3c:02:86:86:55: f8:89:ff:cb:2b:82:e5:7d:19:e8:9c:16:22:a0:ee: 3d:b7:db:2d:18:26:36:c3:ca:88:11:b0:bf:c5:0d: 8f:ae:97:6c:31:5f:55:a5:2a:ca:7d:ef:3f:39:2a: 35:be:1b:c7:6e:a3:ed:ed:c1:54:8b:35:98:d8:b1: bf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:66:AE:F0:62:51:F5:BC:CB:55:ED:3B:FC:0F:48:67:0F:DF:3A:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.248.0/24 Signature Algorithm: sha256WithRSAEncryption 76:2f:2e:1f:e6:98:1d:24:98:d1:b1:9e:e9:dc:59:d8:bc:35: 0f:8b:ca:ff:e5:50:37:ca:39:30:28:a1:86:dc:57:9e:08:1e: 71:15:08:d0:7f:35:6f:d6:14:d2:5a:9f:0c:14:65:a1:f9:83: dc:20:93:09:8b:75:c7:c4:49:7d:af:a5:e4:59:dc:38:a2:72: a5:c6:fb:a6:2e:5c:c1:ba:94:e3:dc:65:1c:22:eb:bc:4d:82: ec:b0:8c:72:7b:0a:1f:c9:82:77:cf:a3:4a:68:de:0d:4b:4d: c3:04:32:4e:26:5f:f9:a0:1d:4c:06:71:39:a3:15:1d:57:20: e1:b0:05:d4:2f:8b:23:cf:fc:ef:1a:4d:15:83:6f:41:9f:e4: d8:0b:00:1f:ed:bc:2f:92:a0:bd:f9:8b:de:4d:02:b9:43:1e: 45:58:6a:04:af:bc:2d:39:89:f1:ab:4c:5e:2a:ff:98:7f:d7: 3d:d1:5c:39:61:6c:74:93:e1:a1:83:2b:91:d4:6d:5b:6d:8c: a8:35:75:8e:02:ab:3a:a5:d4:e4:28:3b:1a:65:92:1d:9d:c6: 48:99:b4:39:06:c2:d1:95:06:2b:8c:ba:e6:6b:bc:ee:24:09: fc:9a:f0:c7:c1:7d:1c:4a:a3:ab:e8:0c:18:f5:79:3a:7f:2d: 8b:70:1c:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHpOVxl/aK6K1WbXDUUTu3UrE4pUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE0MDA1MjIwWhcNMjUwNDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjUyOTg1YzMwMGU5ZWQ5MzMyZjYyNzlmYWQ1MWEwZGEy NmIxYTBjNWEyYzlhMjFlZTA4YjA0ZmJjMmI3ODJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVzavGbpPYmMDTCYIBHPRcGGI5ZSyPft2t/Z3vUog0OMHd KsCcsg3CgUEG4taOux2m8PAH/NZcTuQQiixSELTkA1mPvQv0+0xjhCBjNQIQfYvb UTiTrE9wmH6EnkQDFSSU09GgUgpTRuzJhFyeeLU5265DEvbNI1gnQMyYSpByDiof tarAh+4KinQ/j/UAmreRdchHIxaYDWPFh4HW3TYlF6XvQPJbA7sNMd0XRN23J8wi joFiC9ELKf9udIQ8AoaGVfiJ/8srguV9GeicFiKg7j232y0YJjbDyogRsL/FDY+u l2wxX1WlKsp97z85KjW+G8duo+3twVSLNZjYsb/5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv2au8GJR9bzLVe07/A9IZw/fOvMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxZGE0ZGJjLTc4ZDgtNDZhZC04YmQzLTY5ZWRkYjNhOTZlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTfgwDQYJKoZIhvcNAQELBQADggEBAHYvLh/mmB0kmNGxnuncWdi8NQ+L yv/lUDfKOTAooYbcV54IHnEVCNB/NW/WFNJanwwUZaH5g9wgkwmLdcfESX2vpeRZ 3DiicqXG+6YuXMG6lOPcZRwi67xNguywjHJ7Ch/JgnfPo0po3g1LTcMEMk4mX/mg HUwGcTmjFR1XIOGwBdQviyPP/O8aTRWDb0Gf5NgLAB/tvC+SoL35i95NArlDHkVY agSvvC05ifGrTF4q/5h/1z3RXDlhbHST4aGDK5HUbVttjKg1dY4Cqzql1OQoOxpl kh2dxkiZtDkGwtGVBiuMuuZrvO4kCfya8MfBfRxKo6voDBj1eTp/LYtwHHI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:56 2025 by rpki-client