$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa File: d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa (raw, json) Hash identifier: VP9oOLhlDkN5jNWxLOpH1MpFSIe85NZsWmPGeUL4x6k= Subject key identifier: 1B:CA:9B:A9:4D:7F:BB:8E:33:F6:1A:9D:5D:25:02:19:43:86:7C:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 73529C171153CE4A05A7741E1996DE997923B200 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa Signing time: Wed 09 Apr 2025 00:50:18 +0000 ROA not before: Wed 09 Apr 2025 00:50:18 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:52:9c:17:11:53:ce:4a:05:a7:74:1e:19:96:de:99:79:23:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:50:18 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:42:8e:54:e1:8a:11:fa:15:b2:bb:49:76: 3d:c4:e7:aa:c0:94:59:20:59:94:f4:b9:55:43:84: 6b:3e:e3:32:e5:89:92:d2:94:6e:4e:fd:06:8c:08: ac:7e:82:47:f8:23:46:59:98:5e:b2:db:87:a6:e9: 87:ba:b3:b8:36:d1:4f:ff:f7:2c:f2:78:9f:4d:40: 73:08:58:c5:b2:db:12:68:fa:39:9a:de:e6:40:94: 00:af:58:cd:e5:98:e5:4f:9b:0f:79:3c:6d:9e:7c: 60:90:40:83:fc:f0:0f:cd:24:28:71:d0:31:4f:f1: c1:e6:88:96:b9:82:53:c3:1c:ac:99:1d:67:03:bb: 9c:50:b4:39:f1:02:de:b2:dc:b2:f4:cc:36:13:b9: 03:db:09:cc:f2:6b:cd:b0:d0:cb:4a:b7:fc:67:d1: ce:e4:65:a0:29:2e:86:9e:5b:8f:d4:7e:50:88:be: f1:fa:87:19:77:8e:37:13:12:e0:cf:1e:c1:59:65: be:55:ae:c0:fc:ca:d3:99:b5:b9:5b:99:cd:5c:3f: e1:7c:c0:0f:06:c8:ef:c4:33:b7:90:c9:2c:e0:e8: e1:6f:5c:b6:82:ff:4d:52:ea:f3:23:8f:d7:64:f5: 27:22:56:cb:95:31:c4:b6:4b:7b:ce:45:98:eb:b4: 1c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CA:9B:A9:4D:7F:BB:8E:33:F6:1A:9D:5D:25:02:19:43:86:7C:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.244.0/24 Signature Algorithm: sha256WithRSAEncryption 94:46:ff:f9:8e:c2:df:3c:e5:7e:97:83:96:fb:ed:31:62:2a: d7:c3:9a:0e:7f:53:5c:04:e4:99:da:a5:db:f8:99:3b:a8:3e: 0f:87:eb:42:99:29:56:df:4f:31:3e:f7:1d:43:b0:8a:b2:db: 74:14:3a:91:58:1c:44:66:fa:95:55:e6:51:e9:46:66:88:1b: 8d:bd:d7:69:25:87:52:19:16:30:6f:72:bf:ce:6e:a1:67:a0: 1c:87:5f:81:0d:9c:78:f2:a7:ca:90:57:1b:dc:5c:49:03:cd: e4:35:6d:f0:89:15:98:7e:c2:94:1e:37:ad:13:d1:17:5e:89: 91:f0:b2:ae:3a:7d:64:5d:ae:a9:a8:03:a5:96:87:1d:30:f4: 41:75:11:f1:89:0b:55:6b:b6:f1:c2:5c:b8:77:0d:ad:87:76: 90:65:67:5c:24:21:62:86:72:c6:c9:a6:9b:e2:45:b4:6b:c7: 73:90:63:32:38:a5:16:9c:95:87:b6:fa:e3:a0:33:c6:26:96: f5:b9:e4:6c:53:5e:b3:01:c8:7c:c9:48:dc:8d:26:3a:5d:57: f7:45:9b:49:2a:d1:85:a2:32:6c:67:de:29:b2:5c:54:bd:cc: bf:12:d0:9a:29:28:26:96:26:ab:12:d9:7e:54:c9:76:ba:71: 51:f7:93:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc1KcFxFTzkoFp3QeGZbemXkjsgAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDA1MDE4WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTI4MWEwY2ZhMGFkY2MwZWJiYzIxMjExZTEyMTViYWIy NGZmMjM2ZTI4YzMzMGIyYWZkY2QxYmVmNzQ1MzgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS0EKOVOGKEfoVsrtJdj3E56rAlFkgWZT0uVVDhGs+4zLl iZLSlG5O/QaMCKx+gkf4I0ZZmF6y24em6Ye6s7g20U//9yzyeJ9NQHMIWMWy2xJo +jma3uZAlACvWM3lmOVPmw95PG2efGCQQIP88A/NJChx0DFP8cHmiJa5glPDHKyZ HWcDu5xQtDnxAt6y3LL0zDYTuQPbCczya82w0MtKt/xn0c7kZaApLoaeW4/UflCI vvH6hxl3jjcTEuDPHsFZZb5VrsD8ytOZtblbmc1cP+F8wA8GyO/EM7eQySzg6OFv XLaC/01S6vMjj9dk9SciVsuVMcS2S3vORZjrtBwnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG8qbqU1/u44z9hqdXSUCGUOGfPYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyOTUzZDE5LTBlNjItNGQ4Ni1iNjA4LWQxODAzYzVjMmU5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTfQwDQYJKoZIhvcNAQELBQADggEBAJRG//mOwt885X6Xg5b77TFiKtfD mg5/U1wE5Jnapdv4mTuoPg+H60KZKVbfTzE+9x1DsIqy23QUOpFYHERm+pVV5lHp RmaIG42912klh1IZFjBvcr/ObqFnoByHX4ENnHjyp8qQVxvcXEkDzeQ1bfCJFZh+ wpQeN60T0RdeiZHwsq46fWRdrqmoA6WWhx0w9EF1EfGJC1VrtvHCXLh3Da2HdpBl Z1wkIWKGcsbJppviRbRrx3OQYzI4pRaclYe2+uOgM8YmlvW55GxTXrMByHzJSNyN JjpdV/dFm0kq0YWiMmxn3imyXFS9zL8S0JopKCaWJqsS2X5UyXa6cVH3kw8= -----END CERTIFICATE-----Generated at Thu Apr 10 07:38:03 2025 by rpki-client