$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f7726d8-ccb6-4f34-b961-8b864e5561aa.roa File: 9f7726d8-ccb6-4f34-b961-8b864e5561aa.roa (raw, json) Hash identifier: 9/O5PbMqdi1nNcxJaApchF1EUkm0GyX9qrqgaQc3aKw= Subject key identifier: 21:0E:9B:72:33:E2:98:A3:81:FC:F9:A6:4F:BD:C2:C9:F8:2F:E0:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 417159B6F994EA022F66A6899123D56F03DB9966 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f7726d8-ccb6-4f34-b961-8b864e5561aa.roa Signing time: Fri 21 Mar 2025 00:40:12 +0000 ROA not before: Fri 21 Mar 2025 00:40:12 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:71:59:b6:f9:94:ea:02:2f:66:a6:89:91:23:d5:6f:03:db:99:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 21 00:40:12 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:0c:06:e8:51:68:df:11:f1:4d:c1:8c:6a: 29:c9:80:ae:55:89:7d:fc:c8:01:0c:ce:15:0b:2e: 02:00:3a:f5:b1:f8:72:e4:01:f3:6f:99:53:ad:be: 1c:5b:d7:85:df:a9:be:5e:51:cb:26:0b:c0:19:74: 5a:13:d1:19:a9:ae:dc:2b:22:e5:a7:9a:e5:67:08: ca:8f:04:dc:ea:a0:d0:aa:c7:0a:2c:e5:b2:c4:ec: 49:54:2f:d5:77:0c:4d:4a:7f:74:61:3c:a2:15:0a: c9:bd:f5:28:ab:e9:fe:04:25:6f:52:36:7d:86:d1: f0:4e:18:29:c6:9b:48:fb:bf:f8:1c:d7:f3:8a:37: a5:1e:eb:9e:85:50:ab:15:41:ed:21:ab:0d:bb:35: 06:1b:8c:a4:0d:03:00:1c:d3:57:fa:12:d5:76:76: 5d:2b:3a:e3:b8:d3:85:52:d9:e3:5f:be:94:c4:0a: 69:8d:5c:16:51:e7:cf:fc:e2:e5:57:60:52:c0:8d: e5:df:6a:fe:33:eb:86:df:de:07:61:5d:4c:62:ff: 10:22:4f:83:9a:76:8b:c9:0e:e1:7b:4a:c8:c9:9e: e7:be:96:42:8e:3c:68:3e:b0:be:24:1d:c9:fa:b0: 40:ce:d1:c3:b1:b9:6d:c0:48:f7:46:2d:ea:7e:93: 04:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0E:9B:72:33:E2:98:A3:81:FC:F9:A6:4F:BD:C2:C9:F8:2F:E0:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f7726d8-ccb6-4f34-b961-8b864e5561aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.144.0/23 Signature Algorithm: sha256WithRSAEncryption a0:88:e7:e6:22:69:e2:04:aa:55:34:0f:05:48:3c:13:79:70: bd:78:ab:fb:67:17:c3:57:13:32:dc:e8:01:cc:67:31:38:45: f1:a4:14:bd:93:e5:8d:d1:61:68:b2:5e:3d:20:a3:3b:9e:ed: 13:1b:3a:a4:d7:e6:5f:e2:fb:06:a3:59:97:d6:fa:18:b3:47: 7c:c2:db:12:dd:b8:f6:59:41:c3:0b:7a:f4:41:39:69:35:00: ba:ca:d7:c4:ec:1f:d9:fb:f1:4f:8f:dc:3f:b3:f6:82:60:1d: 4a:34:04:ae:9b:63:85:7b:ef:ab:94:07:de:fe:90:43:d2:d4: c0:1f:6f:d0:21:1f:37:e8:6a:55:2c:73:53:a2:66:67:fa:d9: 36:c1:2b:8d:e8:99:0b:7f:13:57:39:c7:0b:64:38:4b:12:05: 7a:58:e7:e7:6a:df:48:c0:42:f2:4b:4d:56:78:9e:f4:c3:77: 4f:9a:51:4c:11:8d:93:81:fd:4b:80:3b:80:6f:92:81:a7:21: 2e:ec:6e:9a:bb:c6:31:33:bc:59:82:5b:7e:2d:bc:53:28:13: 09:e6:cf:bd:d4:2b:e4:d2:b2:bd:9e:59:a0:40:6b:43:84:f5: 7b:f8:50:cf:ed:4b:70:d5:e2:d5:3b:85:2c:0e:df:59:0b:07: 65:51:b6:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQXFZtvmU6gIvZqaJkSPVbwPbmWYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDA0MDEyWhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmVmOTRjNTFjZjVhNzBiYTc4YmQ4YjMwY2M5NThmMDYw MGZkNDg3YjllMDBhZWE1MDJlODBiNzk3NTgwYjIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDISAwG6FFo3xHxTcGMainJgK5ViX38yAEMzhULLgIAOvWx +HLkAfNvmVOtvhxb14Xfqb5eUcsmC8AZdFoT0RmprtwrIuWnmuVnCMqPBNzqoNCq xwos5bLE7ElUL9V3DE1Kf3RhPKIVCsm99Sir6f4EJW9SNn2G0fBOGCnGm0j7v/gc 1/OKN6Ue656FUKsVQe0hqw27NQYbjKQNAwAc01f6EtV2dl0rOuO404VS2eNfvpTE CmmNXBZR58/84uVXYFLAjeXfav4z64bf3gdhXUxi/xAiT4OadovJDuF7SsjJnue+ lkKOPGg+sL4kHcn6sEDO0cOxuW3ASPdGLep+kwRXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIQ6bcjPimKOB/PmmT73Cyfgv4GMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmNzcyNmQ4LWNjYjYtNGYzNC1iOTYxLThiODY0ZTU1NjFhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl5AwDQYJKoZIhvcNAQELBQADggEBAKCI5+YiaeIEqlU0DwVIPBN5cL14 q/tnF8NXEzLc6AHMZzE4RfGkFL2T5Y3RYWiyXj0gozue7RMbOqTX5l/i+wajWZfW +hizR3zC2xLduPZZQcMLevRBOWk1ALrK18TsH9n78U+P3D+z9oJgHUo0BK6bY4V7 76uUB97+kEPS1MAfb9AhHzfoalUsc1OiZmf62TbBK43omQt/E1c5xwtkOEsSBXpY 5+dq30jAQvJLTVZ4nvTDd0+aUUwRjZOB/UuAO4BvkoGnIS7sbpq7xjEzvFmCW34t vFMoEwnmz73UK+TSsr2eWaBAa0OE9Xv4UM/tS3DV4tU7hSwO31kLB2VRtmE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:22:01 2025 by rpki-client