$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d88e47ad-805d-4e85-a905-4da3418fe143.roa File: d88e47ad-805d-4e85-a905-4da3418fe143.roa (raw, json) Hash identifier: RrnhazKDkIGqvw9FBFOoY4EW/DaGCgQFUS98Yg+IJxw= Subject key identifier: 5A:92:EE:5A:B4:59:3A:EE:1A:D4:C6:29:B4:7F:BE:90:CD:B6:71:33 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25641DBECECD4D1E03208DBF29DC30E7F600BF4E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d88e47ad-805d-4e85-a905-4da3418fe143.roa Signing time: Fri 21 Mar 2025 00:41:51 +0000 ROA not before: Fri 21 Mar 2025 00:41:51 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:64:1d:be:ce:cd:4d:1e:03:20:8d:bf:29:dc:30:e7:f6:00:bf:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 21 00:41:51 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:a7:0a:12:84:5c:a8:5b:e7:3a:f9:fa:7e: 3a:87:76:24:19:16:8c:1e:f8:31:91:25:13:f0:e7: 97:bc:16:97:8a:3f:ee:c4:be:c1:dc:86:d2:00:5e: f7:ca:25:ad:36:44:cc:99:45:5f:d7:c4:8c:75:ff: b1:52:25:28:99:5a:f8:80:3d:de:1b:86:3c:b3:d2: b2:73:57:3c:d1:55:65:16:73:02:e9:b4:57:30:0a: 8c:b4:c2:fe:e5:2c:6c:79:74:5f:9c:2e:59:61:0f: 24:97:65:30:6d:31:e3:c2:96:35:10:e5:18:c5:4d: e6:90:7d:35:61:0e:ec:68:bc:47:00:c6:eb:b8:e9: d0:9e:8b:1d:a2:19:b0:0e:d9:aa:a2:de:4a:f5:2c: e8:51:22:30:f0:70:d1:f7:1c:6d:35:b3:af:bb:b6: 9c:12:05:9f:91:0a:9b:25:3f:1d:48:79:d9:19:45: 31:f1:3e:df:2e:ca:cc:9b:22:1c:46:82:7b:63:04: a8:74:de:45:5f:73:ea:98:69:25:66:89:5c:99:31: 8f:a3:72:e8:0e:05:0e:5d:cc:d1:64:b6:87:41:a1: 59:9e:0a:92:33:c2:89:c5:f3:41:02:9a:73:27:97: 64:6b:92:48:0d:df:4b:47:65:31:69:dc:a7:db:e9: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:92:EE:5A:B4:59:3A:EE:1A:D4:C6:29:B4:7F:BE:90:CD:B6:71:33 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d88e47ad-805d-4e85-a905-4da3418fe143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.88.0/23 Signature Algorithm: sha256WithRSAEncryption 02:56:dd:47:3a:92:e0:05:61:92:b6:07:93:3c:18:9f:9d:bc: af:13:67:45:14:79:54:d8:f1:a6:c7:65:a5:ae:6d:bd:63:29: 4a:44:55:a7:21:0e:a3:b7:1e:11:a8:6c:ee:53:fe:eb:f4:be: 41:60:28:95:d2:9b:4b:92:dc:a1:0b:42:9b:9d:13:f6:29:fe: 34:1d:85:fb:d0:1e:9c:9a:37:d5:9e:24:a2:b0:12:18:76:a5: d7:25:1e:a9:20:a0:68:1d:c4:47:f3:79:f4:b3:85:62:f9:c0: 53:d3:d7:3d:dd:9a:60:65:b1:d3:8b:7b:63:c3:fd:ec:f7:29: 94:09:dd:dc:92:06:c3:76:74:ad:db:c7:7f:aa:b2:41:a0:1e: f9:65:eb:89:be:e8:46:68:d5:58:0d:94:db:50:82:3f:82:85: c4:dc:ec:f7:cb:09:8c:f2:36:36:bc:ba:06:e1:ed:24:9c:5f: e6:24:e7:a2:b1:77:b6:7b:de:e3:52:21:f2:97:51:7b:98:a2: c7:82:6e:59:fe:c0:93:0e:f8:76:f2:69:4c:a9:c9:5e:0e:f4: a7:a3:9d:a8:2c:ff:ee:85:d2:fd:28:64:07:0c:0e:d3:6e:1f: 4e:ed:ca:e7:14:80:4d:bf:c2:31:85:28:91:71:09:59:36:4c: 9f:9d:98:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJWQdvs7NTR4DII2/Kdww5/YAv04wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDA0MTUxWhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjUzNDVhZjdmNzVmMTFkNTY5M2M4MjU2MjIxM2Q1ZTZk OWNmODZiZmExM2I3MDUwN2NiNTRlN2M3ZGU5OWU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWFqcKEoRcqFvnOvn6fjqHdiQZFowe+DGRJRPw55e8FpeK P+7EvsHchtIAXvfKJa02RMyZRV/XxIx1/7FSJSiZWviAPd4bhjyz0rJzVzzRVWUW cwLptFcwCoy0wv7lLGx5dF+cLllhDySXZTBtMePCljUQ5RjFTeaQfTVhDuxovEcA xuu46dCeix2iGbAO2aqi3kr1LOhRIjDwcNH3HG01s6+7tpwSBZ+RCpslPx1IedkZ RTHxPt8uysybIhxGgntjBKh03kVfc+qYaSVmiVyZMY+jcugOBQ5dzNFktodBoVme CpIzwonF80ECmnMnl2RrkkgN30tHZTFp3Kfb6aIbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWpLuWrRZOu4a1MYptH++kM22cTMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4OGU0N2FkLTgwNWQtNGU4NS1hOTA1LTRkYTM0MThmZTE0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl1gwDQYJKoZIhvcNAQELBQADggEBAAJW3Uc6kuAFYZK2B5M8GJ+dvK8T Z0UUeVTY8abHZaWubb1jKUpEVachDqO3HhGobO5T/uv0vkFgKJXSm0uS3KELQpud E/Yp/jQdhfvQHpyaN9WeJKKwEhh2pdclHqkgoGgdxEfzefSzhWL5wFPT1z3dmmBl sdOLe2PD/ez3KZQJ3dySBsN2dK3bx3+qskGgHvll64m+6EZo1VgNlNtQgj+ChcTc 7PfLCYzyNja8ugbh7SScX+Yk56Kxd7Z73uNSIfKXUXuYoseCbln+wJMO+HbyaUyp yV4O9Kejnags/+6F0v0oZAcMDtNuH07tyucUgE2/wjGFKJFxCVk2TJ+dmP0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:59 2025 by rpki-client