$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa File: 67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa (raw, json) Hash identifier: QJoMADFIn+pyT+m7eo/AftNrhglH1zQeD0K3T3eIuew= Subject key identifier: 51:8D:74:22:D0:2E:2D:76:79:7C:CC:29:28:43:4A:6E:7B:F5:77:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3325D90C0D988EF405B3DCB09DBCA2EA9912E5A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa Signing time: Fri 21 Mar 2025 00:31:07 +0000 ROA not before: Fri 21 Mar 2025 00:31:07 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:25:d9:0c:0d:98:8e:f4:05:b3:dc:b0:9d:bc:a2:ea:99:12:e5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 21 00:31:07 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:a6:f4:3a:cf:c3:e9:3d:6f:d3:1f:9e:cf: 5e:b6:51:16:a0:90:c0:93:e2:f1:75:1e:66:ef:bd: 57:dc:19:1b:a3:39:49:fd:63:2e:3d:11:55:09:80: 2d:3c:dd:76:7b:80:f9:73:50:b2:19:8d:67:b4:d9: ec:20:26:f8:93:ff:56:9f:0b:6f:00:38:da:4d:38: 7f:05:7c:d0:3d:43:3f:05:d3:5e:9d:9f:8d:55:8e: 42:5b:de:90:20:ed:e8:d9:0a:03:ce:ce:a3:ef:87: b4:f0:7e:bc:17:d7:03:ed:7c:a8:dd:a5:5f:ec:6b: bd:6a:b1:2c:03:06:88:bc:1f:d4:0b:00:be:ef:08: 16:a1:19:95:32:db:37:bf:48:69:85:49:8d:8d:39: 20:9c:07:c5:b1:8d:3a:65:52:80:ef:bb:c0:72:02: 3c:ed:4b:d4:77:e8:05:9e:32:4e:b7:59:69:30:2f: f5:45:3f:ba:db:5d:8c:84:9c:cf:df:cc:55:8c:85: e1:dc:7f:54:63:4c:0c:c6:cf:66:c9:20:81:95:af: 74:b4:84:e9:28:58:72:d6:45:74:ee:cf:8b:77:5b: 16:17:cf:8b:05:92:8a:04:df:de:e0:9d:31:c7:08: 95:a9:cf:8c:b8:00:17:ca:f8:9b:4f:9a:2f:b7:17: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8D:74:22:D0:2E:2D:76:79:7C:CC:29:28:43:4A:6E:7B:F5:77:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.185.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:97:5b:6b:d4:5a:b4:8b:9f:52:a5:f7:6a:6d:79:cb:e9:9d: e4:c0:99:3c:7e:fb:81:4f:62:2e:bb:11:22:f6:6e:4a:4f:84: 31:22:1b:da:2d:21:25:8e:7c:a6:fc:0a:84:cf:f5:c3:62:ac: 55:eb:2e:1b:2f:99:80:68:53:3e:5c:2c:c5:e5:fb:3c:b3:fa: 39:96:c5:66:6a:1e:46:ef:0f:1e:b5:a1:80:c2:cb:8c:7f:71: 2c:ce:fd:7f:79:88:95:d7:e6:d2:e4:f6:a0:85:c0:b9:9a:55: 5b:95:f0:e3:d2:99:4a:7e:c7:b7:b1:17:b8:40:e3:33:e9:dc: d0:11:42:92:29:4b:32:55:8a:38:fc:f5:42:cc:e5:2b:ae:b2: 87:a8:00:af:d2:20:8b:68:6d:44:fb:2d:c6:e4:c1:1c:73:48: 29:97:bc:92:d3:c4:f4:78:45:b7:7c:21:ee:9a:54:53:a7:38: 6c:9b:1e:f0:66:af:89:a1:47:28:8d:08:1f:c9:0d:f0:c4:1d: 1f:72:c7:5e:af:69:5f:09:3c:85:ba:0a:f5:fc:67:6b:bf:fd: 76:1a:6f:a3:f2:d1:e4:74:3c:fb:ed:c0:0a:a1:c1:aa:40:ac: f4:a5:45:03:42:49:61:a6:7e:71:42:9d:d9:71:e2:ba:ef:6b: 64:9b:35:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMyXZDA2YjvQFs9ywnbyi6pkS5aIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDAzMTA3WhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmU4MmM3YmNmODE0MDJhNzYxM2UyNTEzNmQ4NmE4MGEw MGJkNTc4YjUzMWEwN2Q5ZDYxMjdmYjU5YzFiNjQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCch6b0Os/D6T1v0x+ez162URagkMCT4vF1HmbvvVfcGRuj OUn9Yy49EVUJgC083XZ7gPlzULIZjWe02ewgJviT/1afC28AONpNOH8FfNA9Qz8F 016dn41VjkJb3pAg7ejZCgPOzqPvh7TwfrwX1wPtfKjdpV/sa71qsSwDBoi8H9QL AL7vCBahGZUy2ze/SGmFSY2NOSCcB8WxjTplUoDvu8ByAjztS9R36AWeMk63WWkw L/VFP7rbXYyEnM/fzFWMheHcf1RjTAzGz2bJIIGVr3S0hOkoWHLWRXTuz4t3WxYX z4sFkooE397gnTHHCJWpz4y4ABfK+JtPmi+3F/W/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUY10ItAuLXZ5fMwpKENKbnv1d1EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3ZTYzZDRmLTUzODQtNGQ3ZC1hNTQzLTgyZjIzYjhmMWRjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl7kwDQYJKoZIhvcNAQELBQADggEBAFuXW2vUWrSLn1Kl92ptecvpneTA mTx++4FPYi67ESL2bkpPhDEiG9otISWOfKb8CoTP9cNirFXrLhsvmYBoUz5cLMXl +zyz+jmWxWZqHkbvDx61oYDCy4x/cSzO/X95iJXX5tLk9qCFwLmaVVuV8OPSmUp+ x7exF7hA4zPp3NARQpIpSzJVijj89ULM5SuusoeoAK/SIItobUT7LcbkwRxzSCmX vJLTxPR4Rbd8Ie6aVFOnOGybHvBmr4mhRyiNCB/JDfDEHR9yx16vaV8JPIW6CvX8 Z2u//XYab6Py0eR0PPvtwAqhwapArPSlRQNCSWGmfnFCndlx4rrva2SbNYo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:57 2025 by rpki-client