$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee097c-78c8-4c75-866c-6092e78e76d5.roa File: 22ee097c-78c8-4c75-866c-6092e78e76d5.roa (raw, json) Hash identifier: tU0R5dxjT/bl/3sJzuqkzLU8j+M91rBajzmd1YuH9IE= Subject key identifier: BB:D4:0F:8A:69:BE:88:BA:16:1E:54:4C:9A:44:F9:D3:38:10:AF:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BE5DA113DF6BA7E3481A844842E45FD3DF17030 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee097c-78c8-4c75-866c-6092e78e76d5.roa Signing time: Fri 30 May 2025 00:50:50 +0000 ROA not before: Fri 30 May 2025 00:50:50 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e5:da:11:3d:f6:ba:7e:34:81:a8:44:84:2e:45:fd:3d:f1:70:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:50:50 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=be5508b612fe81c40665945df332ad6d90f17ccb6fc563e2e9b79d635201c0f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:54:34:0f:fd:72:5d:64:4e:91:98:60:ee: 35:99:44:82:db:96:e1:30:3c:51:d2:53:87:82:20: d4:67:92:3f:85:88:3f:5d:c1:dc:98:a9:2a:8b:e7: 44:47:77:e7:ad:00:8d:c3:09:39:f5:d9:95:26:ea: f5:64:0e:d2:95:19:54:1d:d4:84:36:f0:29:d1:dc: 13:92:a7:bd:b0:98:bc:4d:65:b4:a1:1b:54:ed:04: fe:14:5c:a0:28:2f:8f:65:8f:06:c5:64:b2:3d:c5: be:47:2c:a8:e1:b0:10:c6:7b:0f:32:d5:f3:71:33: 66:0f:ce:10:4f:55:cb:5d:aa:1e:ca:a6:b8:41:31: 87:31:4b:82:e3:f5:1c:bf:a3:7c:91:8b:f4:dd:e5: 30:2d:07:53:2c:86:4f:a5:a8:3b:8b:7e:e9:26:6e: 56:af:0f:9a:36:5c:9c:dc:05:a3:99:ee:5e:e9:8f: da:63:17:7a:c2:c6:1a:c6:37:1f:44:59:a9:ae:7f: 35:81:f4:37:16:43:fd:35:9d:c6:e3:85:90:ae:40: e7:c5:5a:b3:3e:fc:24:77:0c:27:4d:8d:0a:94:42: 5f:df:b3:28:96:22:88:6c:c0:22:ec:25:ee:2a:78: d7:40:7c:20:18:dd:06:00:41:67:92:93:12:0c:4a: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D4:0F:8A:69:BE:88:BA:16:1E:54:4C:9A:44:F9:D3:38:10:AF:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee097c-78c8-4c75-866c-6092e78e76d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.128.0/18 Signature Algorithm: sha256WithRSAEncryption d0:a1:3d:7b:b7:7a:a1:7e:e5:88:a0:24:29:c7:e8:5c:6e:9c: 60:01:50:d7:c0:4d:78:d3:dd:66:84:33:28:cf:3f:e1:32:c8: 06:e3:cc:b8:81:63:66:01:d4:c8:e0:d8:23:5c:e6:8e:d9:6f: 7d:73:aa:cd:06:bc:42:10:fd:d7:a6:33:5e:b3:fd:86:d4:d9: 98:f5:c0:2b:2d:0c:18:3f:d7:7b:70:c4:5c:cd:e1:2d:14:e9: 09:9a:64:f5:6a:e6:c5:77:b1:8a:ab:09:23:e3:bb:c5:e8:9b: e9:54:94:cd:23:93:b9:72:26:ec:08:94:28:6f:cb:78:29:fb: 42:55:33:13:8b:a5:46:34:57:f8:f3:ce:66:e3:6b:50:42:b6: 6f:d9:41:50:66:26:03:5c:53:f7:15:1d:f1:23:da:56:a4:c3: ea:79:51:07:0a:b0:e2:bb:f7:9b:34:61:3c:00:c2:53:92:5b: f3:f6:fd:39:a4:1f:22:11:98:6a:b1:76:19:2b:d6:97:30:50: f4:fb:02:fc:e7:b0:fc:3b:50:62:fa:d3:20:81:36:fe:ca:42: 46:15:34:62:d4:ef:83:a3:14:df:06:21:ae:94:97:65:e5:fc: bc:3b:43:c8:ec:9a:ae:55:9c:68:5f:32:42:c1:23:a5:f4:69: ee:b3:d0:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS+XaET32un40gahEhC5F/T3xcDAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDA1MDUwWhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTU1MDhiNjEyZmU4MWM0MDY2NTk0NWRmMzMyYWQ2ZDkw ZjE3Y2NiNmZjNTYzZTJlOWI3OWQ2MzUyMDFjMGYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOGVQ0D/1yXWROkZhg7jWZRILbluEwPFHSU4eCINRnkj+F iD9dwdyYqSqL50RHd+etAI3DCTn12ZUm6vVkDtKVGVQd1IQ28CnR3BOSp72wmLxN ZbShG1TtBP4UXKAoL49ljwbFZLI9xb5HLKjhsBDGew8y1fNxM2YPzhBPVctdqh7K prhBMYcxS4Lj9Ry/o3yRi/Td5TAtB1Mshk+lqDuLfukmblavD5o2XJzcBaOZ7l7p j9pjF3rCxhrGNx9EWamufzWB9DcWQ/01ncbjhZCuQOfFWrM+/CR3DCdNjQqUQl/f syiWIohswCLsJe4qeNdAfCAY3QYAQWeSkxIMSnq5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu9QPimm+iLoWHlRMmkT50zgQrxkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyZWUwOTdjLTc4YzgtNGM3NS04NjZjLTYwOTJlNzhlNzZkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjTYAwDQYJKoZIhvcNAQELBQADggEBANChPXu3eqF+5YigJCnH6FxunGAB UNfATXjT3WaEMyjPP+EyyAbjzLiBY2YB1Mjg2CNc5o7Zb31zqs0GvEIQ/demM16z /YbU2Zj1wCstDBg/13twxFzN4S0U6QmaZPVq5sV3sYqrCSPju8Xom+lUlM0jk7ly JuwIlChvy3gp+0JVMxOLpUY0V/jzzmbja1BCtm/ZQVBmJgNcU/cVHfEj2lakw+p5 UQcKsOK795s0YTwAwlOSW/P2/TmkHyIRmGqxdhkr1pcwUPT7AvznsPw7UGL60yCB Nv7KQkYVNGLU74OjFN8GIa6Ul2Xl/Lw7Q8jsmq5VnGhfMkLBI6X0ae6z0Kg= -----END CERTIFICATE-----Generated at Sun Jun 1 04:34:35 2025 by rpki-client