$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa File: 46d95802-c80e-48cb-8f8e-746d414d0f7f.roa (raw, json) Hash identifier: 7JyXLlgLw0F2W7P9ypHxkXoAjGbbyQHdcgwId0H46ww= Subject key identifier: 65:9B:A9:5A:42:A4:6A:F9:E8:E7:57:3B:4F:8E:7F:63:6C:91:9C:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23232C017BD3C946926CA211141A3B65A43A449C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa Signing time: Sat 24 May 2025 00:21:12 +0000 ROA not before: Sat 24 May 2025 00:21:12 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:23:2c:01:7b:d3:c9:46:92:6c:a2:11:14:1a:3b:65:a4:3a:44:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:21:12 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=e85b65a7c90faf5aff04b066303f752b2ca008c46749026b971b1b9252b521f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:4a:90:8f:b6:6e:df:0c:ea:58:ba:7f:b1: 83:35:a9:26:6a:22:23:e4:d0:68:ce:7b:c7:3a:8c: 14:16:d3:4d:cb:29:2c:60:98:97:49:69:3b:32:58: 4f:53:4f:1e:37:b1:39:24:0c:e9:6d:e0:f4:b0:cb: f7:b1:a4:26:2c:48:75:b4:0b:83:9d:74:3c:2d:a5: b5:93:d8:91:0b:b2:45:d8:63:70:84:87:55:25:41: 74:95:5a:4d:ac:5f:93:49:80:4f:cb:1f:f6:d3:f0: 52:96:11:15:56:58:72:42:a0:9f:d8:ac:b7:5c:0e: 68:31:f5:08:cf:e7:b9:2c:79:8d:4f:46:78:0f:e2: 8f:2b:bd:f5:a4:7d:19:8d:1a:77:38:19:66:fb:24: 65:a5:e7:cc:0c:6c:02:dd:8c:46:9b:e1:57:0f:62: ed:67:ba:82:4e:49:6e:d4:5e:ad:f1:2a:52:86:93: d2:72:35:e9:c7:dc:9a:45:48:1f:b8:3b:d8:52:c2: 2e:65:3b:c1:a3:1e:de:cb:5b:e9:57:cb:26:2e:66: a0:d8:dd:32:66:b4:7f:46:97:9f:c5:02:32:32:3c: fd:77:87:e3:54:1a:4b:5c:b2:d2:d3:3c:e0:77:94: 81:b2:50:c8:29:02:6d:bb:70:04:20:4e:6c:b9:a6: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9B:A9:5A:42:A4:6A:F9:E8:E7:57:3B:4F:8E:7F:63:6C:91:9C:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.237.0/24 Signature Algorithm: sha256WithRSAEncryption d4:1b:90:cf:19:e6:a5:14:73:ea:df:c6:7e:99:a5:d3:45:53: da:40:bf:3e:3b:77:a5:2b:23:99:44:5e:0b:7a:e2:8a:30:fa: 2e:a4:ff:c4:ad:6e:fc:79:76:5e:d2:bc:d0:e5:7e:31:79:9e: 69:fd:8d:4a:b1:af:78:88:e6:68:db:38:d4:32:ab:82:31:54: 47:91:cf:ef:e8:c1:66:ef:69:5f:79:09:f3:28:b2:e7:a1:48: bc:c4:e9:7d:77:fe:5e:b6:12:a5:e4:f9:78:3d:b1:28:86:57: d6:bf:54:4d:17:f1:33:e2:29:aa:42:d6:a8:62:73:db:13:48: 6d:2d:8b:7d:02:12:69:27:5d:86:74:0f:44:04:33:d2:74:a7: 76:83:72:e6:a1:c1:fc:fc:73:a3:9a:42:88:4d:a4:4c:ce:63: 93:25:f5:a3:4e:6a:2e:e3:28:32:95:08:34:07:68:2e:e2:96: 3a:c3:81:73:47:fc:9a:17:e9:68:7e:b8:f0:41:67:50:05:91: 5d:1d:aa:c3:4d:d2:20:b3:50:e6:3a:34:79:bf:34:19:56:57: c1:2b:65:48:a9:ae:8b:1e:00:c2:49:24:b0:69:f6:f9:2d:71: 3a:c2:c8:30:c2:81:4b:02:11:88:5c:1f:2f:fa:ee:6b:2e:b8: 16:dc:3d:b9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIyMsAXvTyUaSbKIRFBo7ZaQ6RJwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAyMTEyWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODViNjVhN2M5MGZhZjVhZmYwNGIwNjYzMDNmNzUyYjJj YTAwOGM0Njc0OTAyNmI5NzFiMWI5MjUyYjUyMWYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCa10qQj7Zu3wzqWLp/sYM1qSZqIiPk0GjOe8c6jBQW003L KSxgmJdJaTsyWE9TTx43sTkkDOlt4PSwy/expCYsSHW0C4OddDwtpbWT2JELskXY Y3CEh1UlQXSVWk2sX5NJgE/LH/bT8FKWERVWWHJCoJ/YrLdcDmgx9QjP57kseY1P RngP4o8rvfWkfRmNGnc4GWb7JGWl58wMbALdjEab4VcPYu1nuoJOSW7UXq3xKlKG k9JyNenH3JpFSB+4O9hSwi5lO8GjHt7LW+lXyyYuZqDY3TJmtH9Gl5/FAjIyPP13 h+NUGktcstLTPOB3lIGyUMgpAm27cAQgTmy5ptSXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZZupWkKkavno51c7T45/Y2yRnOswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2ZDk1ODAyLWM4MGUtNDhjYi04ZjhlLTc0NmQ0MTRkMGY3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTe0wDQYJKoZIhvcNAQELBQADggEBANQbkM8Z5qUUc+rfxn6ZpdNFU9pA vz47d6UrI5lEXgt64oow+i6k/8Stbvx5dl7SvNDlfjF5nmn9jUqxr3iI5mjbONQy q4IxVEeRz+/owWbvaV95CfMosuehSLzE6X13/l62EqXk+Xg9sSiGV9a/VE0X8TPi KapC1qhic9sTSG0ti30CEmknXYZ0D0QEM9J0p3aDcuahwfz8c6OaQohNpEzOY5Ml 9aNOai7jKDKVCDQHaC7iljrDgXNH/JoX6Wh+uPBBZ1AFkV0dqsNN0iCzUOY6NHm/ NBlWV8ErZUiproseAMJJJLBp9vktcTrCyDDCgUsCEYhcHy/67msuuBbcPbk= -----END CERTIFICATE-----Generated at Sun Jun 1 04:41:53 2025 by rpki-client