$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53b9504e-a82e-4bf9-be01-2560b7b49d15.roa File: 53b9504e-a82e-4bf9-be01-2560b7b49d15.roa (raw, json) Hash identifier: V/t7FcmcLn+oIqO3M+9p7/cLDlTnwiofVwoilkF+niY= Subject key identifier: 46:A7:9F:F8:DE:CB:E6:B7:2D:44:DC:A4:58:04:3D:CF:9C:CF:6D:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72A19899C73C8F8118B112032887497629AF9A08 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53b9504e-a82e-4bf9-be01-2560b7b49d15.roa Signing time: Fri 21 Mar 2025 00:20:25 +0000 ROA not before: Fri 21 Mar 2025 00:20:25 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a1:98:99:c7:3c:8f:81:18:b1:12:03:28:87:49:76:29:af:9a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 21 00:20:25 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:75:7b:5a:73:63:23:7b:ba:1a:ff:ff:17: 56:fa:66:4a:d2:c0:3b:9e:12:c4:dd:5f:4c:2a:06: 7c:26:52:03:e9:99:56:10:13:b8:0f:87:ae:7b:bf: 49:6a:73:d3:1f:cd:f3:1b:dd:80:d1:25:2b:e2:f4: 28:95:ef:e5:cb:a6:04:d5:ec:fd:71:7e:fc:ad:1a: ad:24:65:14:a4:fe:b4:43:af:0e:37:33:3c:c1:d2: 68:c9:d2:8c:a1:02:2b:74:dc:cf:f1:f7:bf:01:2c: 68:a8:c1:5a:2e:53:32:36:3e:06:46:32:ca:68:66: 64:2c:3d:5a:c9:d3:bc:db:10:5d:8a:dc:89:d6:f0: 12:44:ff:03:fe:62:95:7d:69:6e:69:ad:85:42:b0: 31:c9:16:de:73:cf:a2:20:db:e7:64:48:8a:4c:4b: 03:33:d7:84:c9:ed:01:42:6d:2e:80:67:9e:d9:4e: fe:49:57:ea:86:1f:00:26:88:94:45:97:a4:d1:55: c2:36:b8:3f:2f:29:d4:b5:ee:ff:4f:2e:34:a4:f9: ff:0e:bf:82:16:41:de:67:b4:07:a3:77:87:b3:a5: 19:41:72:9d:b6:33:20:85:ed:bd:5f:c3:0a:f4:bf: e1:90:16:14:01:84:1c:96:58:e4:a4:6a:d9:98:7d: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A7:9F:F8:DE:CB:E6:B7:2D:44:DC:A4:58:04:3D:CF:9C:CF:6D:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53b9504e-a82e-4bf9-be01-2560b7b49d15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.114.0/24 Signature Algorithm: sha256WithRSAEncryption 48:5f:31:d3:a8:03:2f:3a:0d:2e:c1:fe:6f:96:a2:b6:a7:6f: 50:5f:b9:12:47:e4:d7:db:63:c9:98:8a:d0:5e:af:71:00:29: 84:b4:7a:f8:65:bd:8b:33:17:30:36:80:b5:b5:0a:62:54:be: c4:60:49:83:73:b8:94:43:04:fd:07:a0:87:44:5b:b7:ec:07: dc:aa:93:c0:81:e5:df:a5:ea:7b:83:2d:18:8a:c5:27:62:9a: ee:fc:24:df:4d:8a:be:74:48:ee:36:91:ea:b0:a1:ee:09:0c: ae:96:f9:4f:73:6c:cf:a3:e9:8b:f5:0f:e0:ff:f8:53:75:0e: 30:02:79:1c:34:6c:7e:11:13:99:9f:7b:ec:6a:d0:f3:70:8e: 1e:10:b8:74:4f:32:d7:ee:d4:0e:82:2d:5c:6d:82:23:15:31: 58:fe:e8:44:b4:fa:11:f5:51:60:bb:4a:4c:39:b5:0e:16:32: 05:1e:7f:fd:c4:de:59:ff:4f:6e:f8:81:7b:1d:5d:ed:fa:98: c0:86:3a:a7:58:6d:0b:7a:8a:2b:4f:80:8d:71:bc:18:75:ea: fe:1b:b0:7c:4c:18:2e:0e:d4:94:91:16:9b:08:86:0d:ff:7e: 33:a9:d7:36:04:af:15:a2:3b:6d:2d:99:aa:76:7b:0a:1c:29: 58:ad:01:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcqGYmcc8j4EYsRIDKIdJdimvmggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDAyMDI1WhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2ZhMzQ4NWFmMzJmMjc5NTdiNTY0Yzk0NzExM2ZlZDhh ZTdlN2JjZjdiNjdhMGNiNDA5NzQ0Y2M0ZGExNGIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLxnV7WnNjI3u6Gv//F1b6ZkrSwDueEsTdX0wqBnwmUgPp mVYQE7gPh657v0lqc9MfzfMb3YDRJSvi9CiV7+XLpgTV7P1xfvytGq0kZRSk/rRD rw43MzzB0mjJ0oyhAit03M/x978BLGiowVouUzI2PgZGMspoZmQsPVrJ07zbEF2K 3InW8BJE/wP+YpV9aW5prYVCsDHJFt5zz6Ig2+dkSIpMSwMz14TJ7QFCbS6AZ57Z Tv5JV+qGHwAmiJRFl6TRVcI2uD8vKdS17v9PLjSk+f8Ov4IWQd5ntAejd4ezpRlB cp22MyCF7b1fwwr0v+GQFhQBhByWWOSkatmYfYWjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURqef+N7L5rctRNykWAQ9z5zPbZgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzYjk1MDRlLWE4MmUtNGJmOS1iZTAxLTI1NjBiN2I0OWQxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjlnIwDQYJKoZIhvcNAQELBQADggEBAEhfMdOoAy86DS7B/m+Woranb1Bf uRJH5NfbY8mYitBer3EAKYS0evhlvYszFzA2gLW1CmJUvsRgSYNzuJRDBP0HoIdE W7fsB9yqk8CB5d+l6nuDLRiKxSdimu78JN9Nir50SO42keqwoe4JDK6W+U9zbM+j 6Yv1D+D/+FN1DjACeRw0bH4RE5mfe+xq0PNwjh4QuHRPMtfu1A6CLVxtgiMVMVj+ 6ES0+hH1UWC7Skw5tQ4WMgUef/3E3ln/T274gXsdXe36mMCGOqdYbQt6iitPgI1x vBh16v4bsHxMGC4O1JSRFpsIhg3/fjOp1zYErxWiO20tmap2ewocKVitAaU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:23 2025 by rpki-client