$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa File: 1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa (raw, json) Hash identifier: URAZLUqZRgNikl7yCX/PiOwv9Cnga6yu/F20aflW540= Subject key identifier: A7:00:AB:E5:6D:64:F7:85:09:3B:07:4C:FC:DC:83:3C:8A:8E:ED:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 470902D2F8C29F650B623536F9890B73ACC25E16 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa Signing time: Sat 10 May 2025 00:31:07 +0000 ROA not before: Sat 10 May 2025 00:31:07 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:09:02:d2:f8:c2:9f:65:0b:62:35:36:f9:89:0b:73:ac:c2:5e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:31:07 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=fbb3d1856827935a210c3c5160b938c6eee1199dccbed2bb97b5940acee30131, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:41:88:d9:a5:99:1f:83:7b:36:d0:0a:3e: 7b:66:89:28:95:22:35:d6:4e:01:27:d0:59:fb:a9: 53:15:34:c5:40:e0:7d:6f:30:df:10:5f:20:06:97: 5f:cb:f3:0e:68:52:a6:68:17:c6:29:80:72:5e:67: ca:4e:66:1e:43:73:90:d6:94:da:b1:ef:75:79:16: 73:f8:f2:4b:f8:cd:83:98:e1:bb:99:71:a5:70:2a: 7b:54:51:ef:c8:af:5c:19:f0:1b:df:32:f7:95:3b: 50:f0:ef:13:96:0f:5b:2a:f9:0a:8b:67:69:be:ff: 82:96:74:5b:77:b6:c4:91:4a:8e:c5:91:6e:fb:be: 6e:b4:4b:b3:16:97:2e:54:fe:e5:56:bd:b5:be:53: 70:23:f4:18:57:1b:7a:51:ec:57:71:4f:56:b8:2f: 6b:86:c7:75:55:fb:b8:49:7a:fb:97:60:eb:0a:a0: 3e:5d:e7:12:8a:dd:b0:20:d7:8e:e7:71:82:48:81: 58:4f:13:c6:cc:1c:72:47:00:74:68:2f:89:1b:f5: cc:2f:8e:d1:ad:78:39:d1:b4:88:12:bd:16:db:4c: 02:08:c1:b6:d5:02:5a:00:a2:31:e7:63:9c:21:18: 37:fe:2b:e5:fd:9c:e2:18:7b:08:bd:69:3d:c8:37: 43:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:00:AB:E5:6D:64:F7:85:09:3B:07:4C:FC:DC:83:3C:8A:8E:ED:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.188.0/24 Signature Algorithm: sha256WithRSAEncryption 81:62:20:c0:dd:2c:49:c1:a4:2a:10:6c:41:21:cf:6a:86:b4: 6a:10:59:44:60:8c:94:87:97:ce:d3:ed:3c:c1:b4:3c:0d:86: de:6b:b0:d1:c0:f2:bc:60:cc:dd:33:fe:03:a7:7b:16:f7:49: 6d:1e:23:0f:e7:ee:c4:f0:06:12:8a:7a:7d:59:9a:68:a4:ef: 74:94:a7:09:28:aa:ff:37:2e:0c:d0:7c:a6:9e:87:52:06:b0: b0:ce:f5:ec:ae:7f:57:f1:10:59:a0:a6:d2:bc:83:81:5d:66: 20:c4:48:05:6c:48:d1:67:9a:ec:dd:94:46:9c:2b:4f:02:38: b5:ed:b4:53:e2:dc:bd:ad:27:6a:96:e2:f8:61:80:99:0b:25: 32:f5:1a:c1:48:f9:4b:fb:13:4c:82:9e:c2:bd:fa:8d:8d:8b: 6c:52:ce:2c:fb:32:c8:8c:06:46:18:df:0f:0b:c8:37:de:51: d5:ad:bb:ed:18:35:87:f0:c1:28:c7:d6:1d:6f:0d:f7:a6:d0: 79:c5:3c:d0:d6:ca:c2:39:ff:f1:7e:4c:e4:c7:7f:55:d2:d8: 13:10:42:63:46:d7:0d:43:ed:c5:45:4b:51:95:1a:36:16:ac: db:fc:6f:b6:61:dc:e8:9c:cd:a9:e5:63:05:4a:6f:c2:b0:cb: c2:e2:a9:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURwkC0vjCn2ULYjU2+YkLc6zCXhYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAzMTA3WhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmIzZDE4NTY4Mjc5MzVhMjEwYzNjNTE2MGI5MzhjNmVl ZTExOTlkY2NiZWQyYmI5N2I1OTQwYWNlZTMwMTMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkgkGI2aWZH4N7NtAKPntmiSiVIjXWTgEn0Fn7qVMVNMVA 4H1vMN8QXyAGl1/L8w5oUqZoF8YpgHJeZ8pOZh5Dc5DWlNqx73V5FnP48kv4zYOY 4buZcaVwKntUUe/Ir1wZ8BvfMveVO1Dw7xOWD1sq+QqLZ2m+/4KWdFt3tsSRSo7F kW77vm60S7MWly5U/uVWvbW+U3Aj9BhXG3pR7FdxT1a4L2uGx3VV+7hJevuXYOsK oD5d5xKK3bAg147ncYJIgVhPE8bMHHJHAHRoL4kb9cwvjtGteDnRtIgSvRbbTAII wbbVAloAojHnY5whGDf+K+X9nOIYewi9aT3IN0NvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpwCr5W1k94UJOwdM/NyDPIqO7acwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmNDcwMTYwLTBmM2QtNGM1YS1hNzVmLTg3NDBmMjAwN2UyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl7wwDQYJKoZIhvcNAQELBQADggEBAIFiIMDdLEnBpCoQbEEhz2qGtGoQ WURgjJSHl87T7TzBtDwNht5rsNHA8rxgzN0z/gOnexb3SW0eIw/n7sTwBhKKen1Z mmik73SUpwkoqv83LgzQfKaeh1IGsLDO9eyuf1fxEFmgptK8g4FdZiDESAVsSNFn muzdlEacK08COLXttFPi3L2tJ2qW4vhhgJkLJTL1GsFI+Uv7E0yCnsK9+o2Ni2xS ziz7MsiMBkYY3w8LyDfeUdWtu+0YNYfwwSjH1h1vDfem0HnFPNDWysI5//F+TOTH f1XS2BMQQmNG1w1D7cVFS1GVGjYWrNv8b7Zh3OiczanlYwVKb8Kwy8LiqTU= -----END CERTIFICATE-----Generated at Sun Jun 1 04:28:39 2025 by rpki-client