$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa File: 15dd7280-6c64-4c5f-9920-b8e295ae5383.roa (raw, json) Hash identifier: xdaXCXi8BjddL5cY0gCTaY4rfGlDAnCRso0G5N9x1ww= Subject key identifier: 7C:CA:5F:4F:02:8C:E7:2C:A8:E3:89:77:C1:EF:AB:F9:C3:05:35:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5426D6D4A092C28484170A092CB6A8612E974BA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa Signing time: Wed 28 May 2025 00:51:21 +0000 ROA not before: Wed 28 May 2025 00:51:21 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:26:d6:d4:a0:92:c2:84:84:17:0a:09:2c:b6:a8:61:2e:97:4b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:51:21 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=f268dab461c18d74ad44f7a8f7b655937019d8b518f75dd460a25419f0107a50, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:10:4d:ca:e4:f8:0a:38:da:26:c8:bf:c7: bc:23:c6:0a:af:bb:0c:64:3d:f4:79:d8:86:7c:69: 18:b5:19:c9:ed:3b:6e:f8:6b:c8:d0:ff:22:b7:75: 69:92:6f:fc:47:d1:66:22:86:78:dc:97:a5:93:07: f3:05:2d:a8:b4:bd:af:52:58:ca:75:85:4d:65:38: aa:54:78:2d:8c:dd:79:6e:47:0b:05:80:be:4b:3a: 8d:0b:7c:59:82:75:3b:99:3d:a1:f8:af:4d:4d:4b: 12:ba:a7:8e:5d:c9:a0:34:b0:f6:10:14:eb:e2:57: 8d:37:7e:a3:3e:46:db:d1:63:d1:c1:fa:b2:ad:85: c5:a3:cc:46:39:d7:21:59:82:a0:1f:6c:b5:ce:91: 81:62:3c:fd:94:a2:5a:1d:5f:5e:46:8f:b3:a1:9e: f1:80:5a:5b:84:a6:17:2a:0d:a3:90:b9:93:bf:a4: b6:20:07:d7:f0:44:e4:d3:18:c6:b6:a7:6e:f2:45: e1:28:b6:1f:29:69:9c:59:c1:97:5b:45:c1:71:45: 55:66:4d:69:b5:89:b5:f1:63:ea:f9:fd:bc:4c:2c: de:a1:a3:a8:4f:7e:17:3d:e1:cf:73:63:a3:7d:a9: 4d:2c:91:11:0c:8d:6a:92:03:55:c2:c0:ed:25:d4: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:5F:4F:02:8C:E7:2C:A8:E3:89:77:C1:EF:AB:F9:C3:05:35:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.233.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:55:b2:ba:5a:6b:e8:a8:c3:6f:e9:70:d2:eb:6d:2d:10:3b: 8f:ed:dd:ea:ac:8e:d6:33:55:e3:00:34:4d:ee:46:26:e7:36: 5e:bd:3d:02:4e:e8:a7:12:c2:d3:21:51:14:a1:4a:a0:fb:d3: 21:bc:2a:dc:42:44:14:ff:81:58:77:db:07:e6:1c:df:a1:f7: 18:08:ab:4c:34:2b:62:0d:b4:6e:1d:5c:c6:7d:7e:d2:91:a2: fe:92:97:89:0a:9d:84:e4:e5:7d:89:f0:09:fd:14:61:85:2e: 17:8d:8b:cc:5c:8a:0d:1e:10:d6:40:14:fd:9e:7a:13:40:b5: 4c:5f:a2:af:71:c8:5e:14:2a:df:62:8d:10:47:d8:9e:91:be: c0:f0:6c:94:85:8b:16:d6:0b:3a:9a:44:6b:9e:79:48:c0:62: b4:24:d7:3e:52:c6:16:b0:1c:df:88:ee:af:c9:32:2f:76:34: a4:00:b8:87:a0:97:98:fc:e4:f8:c9:74:97:53:8d:f6:d8:54: f0:75:6e:87:b7:88:d4:a1:d2:f0:1f:2b:ed:cb:07:a7:52:ea: 80:cd:40:6b:2c:ff:23:55:ce:27:53:fc:9f:b1:4b:b3:76:95: 31:4a:72:8a:a3:5a:63:43:9a:c4:c0:74:4f:f3:c3:e7:99:7a: 3b:99:df:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVCbW1KCSwoSEFwoJLLaoYS6XS6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDA1MTIxWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjY4ZGFiNDYxYzE4ZDc0YWQ0NGY3YThmN2I2NTU5Mzcw MTlkOGI1MThmNzVkZDQ2MGEyNTQxOWYwMTA3YTUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuWRBNyuT4CjjaJsi/x7wjxgqvuwxkPfR52IZ8aRi1Gcnt O274a8jQ/yK3dWmSb/xH0WYihnjcl6WTB/MFLai0va9SWMp1hU1lOKpUeC2M3Xlu RwsFgL5LOo0LfFmCdTuZPaH4r01NSxK6p45dyaA0sPYQFOviV403fqM+RtvRY9HB +rKthcWjzEY51yFZgqAfbLXOkYFiPP2UolodX15Gj7OhnvGAWluEphcqDaOQuZO/ pLYgB9fwROTTGMa2p27yReEoth8paZxZwZdbRcFxRVVmTWm1ibXxY+r5/bxMLN6h o6hPfhc94c9zY6N9qU0skREMjWqSA1XCwO0l1JWhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfMpfTwKM5yyo44l3we+r+cMFNRwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1ZGQ3MjgwLTZjNjQtNGM1Zi05OTIwLWI4ZTI5NWFlNTM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTekwDQYJKoZIhvcNAQELBQADggEBAC5Vsrpaa+iow2/pcNLrbS0QO4/t 3eqsjtYzVeMANE3uRibnNl69PQJO6KcSwtMhURShSqD70yG8KtxCRBT/gVh32wfm HN+h9xgIq0w0K2INtG4dXMZ9ftKRov6Sl4kKnYTk5X2J8An9FGGFLheNi8xcig0e ENZAFP2eehNAtUxfoq9xyF4UKt9ijRBH2J6RvsDwbJSFixbWCzqaRGueeUjAYrQk 1z5SxhawHN+I7q/JMi92NKQAuIegl5j85PjJdJdTjfbYVPB1boe3iNSh0vAfK+3L B6dS6oDNQGss/yNVzidT/J+xS7N2lTFKcoqjWmNDmsTAdE/zw+eZejuZ3xY= -----END CERTIFICATE-----Generated at Sun Jun 1 05:08:36 2025 by rpki-client