$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f0598d0-c3d9-49d7-a2f2-3ed195e4de27.roa File: 5f0598d0-c3d9-49d7-a2f2-3ed195e4de27.roa (raw, json) Hash identifier: 8s+u702ZOAEA4Ojp28YxqVZtkfzn4MUSom5JyMUusGI= Subject key identifier: 1D:EA:2D:29:85:FA:40:79:FD:DF:4F:18:E7:7F:86:33:9D:37:33:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51D2BDC04B9E8D0C3A828379FCC9CA2A2E186FC2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f0598d0-c3d9-49d7-a2f2-3ed195e4de27.roa Signing time: Mon 30 Jun 2025 15:22:26 +0000 ROA not before: Mon 30 Jun 2025 15:22:26 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d2:bd:c0:4b:9e:8d:0c:3a:82:83:79:fc:c9:ca:2a:2e:18:6f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:22:26 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=e79e71799d6e5916bd35a9d592b4c7142fa2945dd0f3734335d22e740a5ca9ae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:47:e9:85:24:2d:cd:ea:a7:56:00:47:03: 5b:84:e2:78:44:7c:09:8b:71:ca:bd:06:96:9f:a9: 5c:b2:0a:c6:f7:32:d9:b8:b0:c6:0f:f6:d3:00:05: b5:52:1d:23:3a:86:40:7d:49:f4:a5:62:b0:16:5f: 88:c6:ab:6b:5b:5f:3c:e1:9d:7b:1f:ef:17:66:78: 91:dd:8b:1e:27:96:c8:ac:5d:2c:82:3e:dc:64:14: 2e:7c:1d:96:c3:e9:02:f3:52:09:2b:9b:4c:d8:cc: c0:88:51:07:d5:39:59:d6:34:42:86:76:63:27:df: 1b:c0:dc:3b:c2:4b:fb:99:72:ff:10:6b:3e:6f:d6: e3:77:b3:c1:e4:be:06:f6:4b:02:2a:56:10:11:63: 40:60:d9:15:a3:89:b3:a2:9f:44:52:54:34:14:37: ba:54:b4:ad:21:3d:61:5a:0e:55:25:ff:f7:3c:7f: 14:64:85:ef:88:bc:57:b3:c5:4c:2d:93:4a:11:3d: 36:f5:fe:f9:b8:69:fd:87:ae:a1:7b:b3:4c:6c:3d: 2e:1f:7a:6d:d9:50:6a:da:fd:82:d9:78:2d:b9:de: 56:ff:aa:98:59:3e:f0:ab:9a:1b:e6:a8:42:4c:c1: 67:41:cd:14:a4:1e:dd:99:4a:2b:16:0a:58:a0:a8: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EA:2D:29:85:FA:40:79:FD:DF:4F:18:E7:7F:86:33:9D:37:33:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f0598d0-c3d9-49d7-a2f2-3ed195e4de27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.24.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:72:1c:f5:ea:1e:88:6c:52:06:7b:19:db:dc:c3:0d:f8:07: cd:c4:66:de:6d:ff:09:22:7f:9c:4e:97:7f:d0:5f:04:2e:f0: f7:1e:f3:65:98:4f:93:65:72:84:d6:c4:2e:12:d8:b4:94:dc: b0:ca:9b:c9:54:9a:ba:48:be:8d:31:89:bf:2a:d7:a2:58:e5: b6:bf:12:7f:b9:b0:e2:05:8d:df:5f:1c:11:f2:ee:0f:5f:7c: a8:17:6b:25:04:0d:d1:ce:70:b9:be:ab:14:e8:dd:0a:a4:c0: bf:35:40:58:34:52:e1:d6:0d:03:38:45:e8:36:04:80:7d:cd: 91:91:5c:28:67:a0:7c:2e:45:4f:95:9f:10:0a:4c:42:b8:8e: 83:22:f5:88:0e:6b:54:32:7c:c4:01:90:5f:64:bd:99:2a:3b: 33:a7:7e:7f:04:bd:58:37:3d:01:6f:a7:21:20:cd:56:51:ed: f2:84:27:d4:f8:59:8f:f2:c3:d5:d2:23:0f:1a:32:b2:08:a6: fc:5a:64:f6:68:9a:ae:34:f7:91:65:53:03:f4:74:5c:a0:e9: e5:09:7e:83:72:a5:fc:6b:39:a9:43:81:32:14:04:f2:07:7f: e1:0e:08:46:5f:d7:79:bc:18:3d:44:5a:74:68:af:cb:20:5f: 71:8f:fa:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUdK9wEuejQw6goN5/MnKKi4Yb8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTUyMjI2WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzllNzE3OTlkNmU1OTE2YmQzNWE5ZDU5MmI0YzcxNDJm YTI5NDVkZDBmMzczNDMzNWQyMmU3NDBhNWNhOWFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzQEfphSQtzeqnVgBHA1uE4nhEfAmLccq9BpafqVyyCsb3 Mtm4sMYP9tMABbVSHSM6hkB9SfSlYrAWX4jGq2tbXzzhnXsf7xdmeJHdix4nlsis XSyCPtxkFC58HZbD6QLzUgkrm0zYzMCIUQfVOVnWNEKGdmMn3xvA3DvCS/uZcv8Q az5v1uN3s8Hkvgb2SwIqVhARY0Bg2RWjibOin0RSVDQUN7pUtK0hPWFaDlUl//c8 fxRkhe+IvFezxUwtk0oRPTb1/vm4af2HrqF7s0xsPS4fem3ZUGra/YLZeC253lb/ qphZPvCrmhvmqEJMwWdBzRSkHt2ZSisWCligqDuBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHeotKYX6QHn9308Y53+GM503M4UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmMDU5OGQwLWMzZDktNDlkNy1hMmYyLTNlZDE5NWU0ZGUyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlhgwDQYJKoZIhvcNAQELBQADggEBAC5yHPXqHohsUgZ7Gdvcww34B83E Zt5t/wkif5xOl3/QXwQu8Pce82WYT5NlcoTWxC4S2LSU3LDKm8lUmrpIvo0xib8q 16JY5ba/En+5sOIFjd9fHBHy7g9ffKgXayUEDdHOcLm+qxTo3QqkwL81QFg0UuHW DQM4Reg2BIB9zZGRXChnoHwuRU+VnxAKTEK4joMi9YgOa1QyfMQBkF9kvZkqOzOn fn8EvVg3PQFvpyEgzVZR7fKEJ9T4WY/yw9XSIw8aMrIIpvxaZPZomq4095FlUwP0 dFyg6eUJfoNypfxrOalDgTIUBPIHf+EOCEZf13m8GD1EWnRor8sgX3GP+s0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:26 2025 by rpki-client