$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e0cc1c-bcfe-419e-8a59-2910f188f118.roa File: 18e0cc1c-bcfe-419e-8a59-2910f188f118.roa (raw, json) Hash identifier: Ap7ZFxVKIIvPMqFYt/w9iq0V6bDrlxn/4P3UWj+c2iQ= Subject key identifier: 90:F6:DF:19:F0:49:B0:42:67:40:D6:55:5F:5B:48:D6:38:6D:4E:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40367F5DB82343090E852D7C4ED7BBD0FB63CB7E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e0cc1c-bcfe-419e-8a59-2910f188f118.roa Signing time: Sat 10 May 2025 00:41:19 +0000 ROA not before: Sat 10 May 2025 00:41:19 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:36:7f:5d:b8:23:43:09:0e:85:2d:7c:4e:d7:bb:d0:fb:63:cb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:41:19 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=9c240c56d328130ba0b0d401dba914498d806d019eabe20cfa8b671ab38526ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:ea:ac:ec:bd:79:42:73:0b:71:de:c9:9e: fd:9e:a6:e1:d1:5a:5b:f6:40:c2:b3:83:9a:ac:c1: a3:ad:28:42:6e:ad:81:f9:a0:af:f1:7b:a0:6a:61: 13:84:83:a0:ce:58:93:67:6b:aa:47:37:1e:e9:43: 17:8a:01:0c:1b:84:a2:4a:20:8b:52:32:3d:29:1f: de:1d:5d:19:93:2a:1a:c7:ae:e0:9c:6c:b9:c0:99: 32:09:09:53:1b:14:b1:90:df:2d:07:d1:4f:2d:02: eb:e1:fb:9e:0c:fa:66:fc:26:41:f8:43:7f:70:d8: ae:aa:f6:44:de:3d:9e:cd:62:cb:85:d6:7e:0e:4a: a5:ad:9f:dd:ea:29:bd:a3:df:61:ce:45:3e:12:9d: ab:8f:8c:1d:03:9f:32:de:33:07:ef:be:ba:8f:c5: 7d:0d:1c:e6:16:c5:00:9a:14:ed:9d:99:23:41:e9: b5:53:ac:ce:cf:60:0c:60:3e:15:27:f9:0f:ec:3f: fd:e2:07:84:1d:de:07:11:90:3b:7e:2e:93:2b:c7: 1b:af:4a:b5:21:08:4c:10:68:50:45:d5:04:38:43: b0:58:49:de:46:af:81:d8:9a:02:74:9d:70:8d:48: 67:08:1f:59:56:dc:49:8f:d5:dc:3a:38:f7:c3:43: 65:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F6:DF:19:F0:49:B0:42:67:40:D6:55:5F:5B:48:D6:38:6D:4E:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18e0cc1c-bcfe-419e-8a59-2910f188f118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.168.0/21 Signature Algorithm: sha256WithRSAEncryption a9:a4:b9:00:cd:0c:09:47:47:66:46:9b:34:6f:e8:62:ba:fc: b9:e2:b4:34:dd:9c:9c:da:fd:54:a4:b0:71:15:ec:92:09:04: e0:22:72:fb:22:f8:85:48:b9:78:aa:d7:a9:ae:91:5e:54:f2: 57:a6:b2:93:18:16:d1:b4:a1:5f:d5:fe:29:89:ae:9c:9f:37: 70:a8:6e:4b:1c:2c:c8:08:ef:6b:f2:5d:cb:46:8d:92:b6:79: cd:3e:c6:3c:f8:a3:f9:8b:b1:ac:77:b0:89:f0:1e:6c:bb:bf: e2:2e:51:c5:36:44:a0:69:ad:ee:f4:fb:ce:25:51:28:1a:1f: a2:7c:62:b1:d9:4a:98:60:6c:83:5a:7a:09:07:dd:c2:d3:7b: e4:a0:b7:12:06:69:0e:e9:8f:30:9b:a7:52:08:60:63:64:6e: 23:f6:26:a2:e7:f3:ba:b8:ac:f2:ac:78:ad:81:0e:57:3a:8b: 36:36:17:dd:ec:f6:4a:8d:14:5f:00:cb:b2:64:c5:d3:20:a1: df:39:1a:10:d2:d8:76:db:c7:c4:3b:22:1d:ba:50:46:0f:70: 44:bc:39:c2:10:cc:a1:71:00:5d:26:56:8d:e6:9c:1b:2a:50: 2f:39:21:6d:a4:a1:73:73:97:a6:82:be:e7:dd:b3:43:47:7c: 83:57:7d:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQDZ/XbgjQwkOhS18Tte70Ptjy34wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDA0MTE5WhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzI0MGM1NmQzMjgxMzBiYTBiMGQ0MDFkYmE5MTQ0OThk ODA2ZDAxOWVhYmUyMGNmYThiNjcxYWIzODUyNmVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Heqs7L15QnMLcd7Jnv2epuHRWlv2QMKzg5qswaOtKEJu rYH5oK/xe6BqYROEg6DOWJNna6pHNx7pQxeKAQwbhKJKIItSMj0pH94dXRmTKhrH ruCcbLnAmTIJCVMbFLGQ3y0H0U8tAuvh+54M+mb8JkH4Q39w2K6q9kTePZ7NYsuF 1n4OSqWtn93qKb2j32HORT4SnauPjB0DnzLeMwfvvrqPxX0NHOYWxQCaFO2dmSNB 6bVTrM7PYAxgPhUn+Q/sP/3iB4Qd3gcRkDt+LpMrxxuvSrUhCEwQaFBF1QQ4Q7BY Sd5Gr4HYmgJ0nXCNSGcIH1lW3EmP1dw6OPfDQ2VFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkPbfGfBJsEJnQNZVX1tI1jhtTnUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4ZTBjYzFjLWJjZmUtNDE5ZS04YTU5LTI5MTBmMTg4ZjExOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl6gwDQYJKoZIhvcNAQELBQADggEBAKmkuQDNDAlHR2ZGmzRv6GK6/Lni tDTdnJza/VSksHEV7JIJBOAicvsi+IVIuXiq16mukV5U8lemspMYFtG0oV/V/imJ rpyfN3CobkscLMgI72vyXctGjZK2ec0+xjz4o/mLsax3sInwHmy7v+IuUcU2RKBp re70+84lUSgaH6J8YrHZSphgbINaegkH3cLTe+SgtxIGaQ7pjzCbp1IIYGNkbiP2 JqLn87q4rPKseK2BDlc6izY2F93s9kqNFF8Ay7JkxdMgod85GhDS2Hbbx8Q7Ih26 UEYPcES8OcIQzKFxAF0mVo3mnBsqUC85IW2koXNzl6aCvufds0NHfINXfZ8= -----END CERTIFICATE-----Generated at Sun Jun 1 04:40:58 2025 by rpki-client