$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c9d9a5e-3d00-4bf1-85af-7296e4d19600.roa File: 5c9d9a5e-3d00-4bf1-85af-7296e4d19600.roa (raw, json) Hash identifier: 7UT9XsDGs2PMwVlIlIJuInAccd1N7L6OqvUL2HrsWP0= Subject key identifier: 33:F6:B1:16:E7:C2:AA:38:4A:A4:23:53:EB:6B:7C:E6:73:28:E0:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E7471DA5813FAA105EC09BA07FA484717803677 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c9d9a5e-3d00-4bf1-85af-7296e4d19600.roa Signing time: Sat 10 May 2025 00:40:38 +0000 ROA not before: Sat 10 May 2025 00:40:38 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:74:71:da:58:13:fa:a1:05:ec:09:ba:07:fa:48:47:17:80:36:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:40:38 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=52f0d989996a5a747154c651148a43727e61ee0fb5644bcf887ca2ea5def4462, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:85:f3:50:37:fa:e2:93:8c:66:22:b8:c6:5f: 8a:e9:4b:08:6c:4b:53:f5:ac:ed:6c:b7:95:35:a7: 11:84:c8:22:6d:07:63:2b:5a:20:5c:79:5e:ea:a2: 99:22:8c:4f:9b:a5:c6:bc:2b:f1:a7:59:ae:7b:de: 3f:39:bc:27:59:9e:59:99:62:57:09:b0:11:92:7b: f9:9d:a1:85:8b:7c:26:33:8a:3d:db:a8:50:cd:b9: 77:a6:fc:93:8b:4b:75:cd:35:c3:e3:5a:69:db:cd: 84:8e:05:f2:de:02:d8:75:14:25:c7:7a:c2:3e:52: 7d:10:af:7d:3a:e7:72:5e:8e:6c:8d:e6:fe:f9:57: 20:d3:59:98:62:cb:fe:72:68:a3:4d:c5:50:f8:98: e4:17:2b:8f:d1:4f:9d:dc:34:bf:83:cc:55:e2:af: 75:6b:37:b3:cf:c9:ca:5d:40:fc:a7:19:58:f9:9e: 1c:93:20:4b:71:cf:96:11:81:23:8f:61:41:4e:1a: b6:29:87:ba:70:9b:dd:da:7e:fc:dd:02:e5:63:89: 6d:62:6d:3e:21:3d:62:46:2c:39:c9:0d:28:69:84: 88:7c:f6:0a:37:24:be:36:75:0b:27:54:17:a6:47: c0:f6:5c:a2:a7:9c:4b:45:29:d8:aa:89:6d:90:ae: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F6:B1:16:E7:C2:AA:38:4A:A4:23:53:EB:6B:7C:E6:73:28:E0:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c9d9a5e-3d00-4bf1-85af-7296e4d19600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.120.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:6e:91:fc:86:ab:f9:68:06:0b:94:bc:f1:1e:67:0e:b1:27: c2:03:2e:d8:29:f2:c3:e4:9c:30:2f:ea:e6:b1:b8:62:a7:2f: 0b:5d:7b:2e:c1:82:59:11:e4:57:48:ce:82:50:4b:a1:bc:ae: 4b:a3:56:19:48:f0:bd:ac:84:f2:2b:64:83:92:c9:2e:09:d1: 07:80:26:b5:e3:bb:56:40:fb:34:c4:e5:63:ee:b7:47:e2:4a: 94:98:a0:78:6b:25:69:ed:59:5a:d3:2c:87:72:2f:74:fa:50: 6a:2f:be:dc:a2:c6:75:90:b2:71:22:b0:ca:bf:88:86:b6:7d: 93:6a:13:ba:e7:d1:a7:ac:d5:5a:47:55:88:3f:57:6d:6f:7f: 79:4f:f6:e1:26:2b:b8:9d:d1:6c:f5:5d:33:b3:4c:41:4a:81: 57:ce:30:d9:17:73:98:a2:8d:b8:d9:d5:a9:05:ac:2d:5e:25: e2:1f:b2:f5:3c:b9:c8:e6:e5:91:f5:25:b3:ed:2d:45:c1:96: 32:a2:9c:f5:87:7b:7b:bb:06:8d:d4:63:14:ff:16:9f:84:a5: 12:31:ef:c5:62:06:78:f0:ca:9d:8c:55:c7:43:64:b8:18:c1: cf:ca:4b:aa:c1:df:18:e3:96:bd:95:38:23:56:bb:ce:0d:3d: 78:a4:81:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPnRx2lgT+qEF7Am6B/pIRxeANncwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDA0MDM4WhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmYwZDk4OTk5NmE1YTc0NzE1NGM2NTExNDhhNDM3Mjdl NjFlZTBmYjU2NDRiY2Y4ODdjYTJlYTVkZWY0NDYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPhfNQN/rik4xmIrjGX4rpSwhsS1P1rO1st5U1pxGEyCJt B2MrWiBceV7qopkijE+bpca8K/GnWa573j85vCdZnlmZYlcJsBGSe/mdoYWLfCYz ij3bqFDNuXem/JOLS3XNNcPjWmnbzYSOBfLeAth1FCXHesI+Un0Qr30653JejmyN 5v75VyDTWZhiy/5yaKNNxVD4mOQXK4/RT53cNL+DzFXir3VrN7PPycpdQPynGVj5 nhyTIEtxz5YRgSOPYUFOGrYph7pwm93afvzdAuVjiW1ibT4hPWJGLDnJDShphIh8 9go3JL42dQsnVBemR8D2XKKnnEtFKdiqiW2QrniFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM/axFufCqjhKpCNT62t85nMo4N8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjOWQ5YTVlLTNkMDAtNGJmMS04NWFmLTcyOTZlNGQxOTYwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl3gwDQYJKoZIhvcNAQELBQADggEBAFtukfyGq/loBguUvPEeZw6xJ8ID Ltgp8sPknDAv6uaxuGKnLwtdey7BglkR5FdIzoJQS6G8rkujVhlI8L2shPIrZIOS yS4J0QeAJrXju1ZA+zTE5WPut0fiSpSYoHhrJWntWVrTLIdyL3T6UGovvtyixnWQ snEisMq/iIa2fZNqE7rn0aes1VpHVYg/V21vf3lP9uEmK7id0Wz1XTOzTEFKgVfO MNkXc5iijbjZ1akFrC1eJeIfsvU8ucjm5ZH1JbPtLUXBljKinPWHe3u7Bo3UYxT/ Fp+EpRIx78ViBnjwyp2MVcdDZLgYwc/KS6rB3xjjlr2VOCNWu84NPXikgfY= -----END CERTIFICATE-----Generated at Sun Jun 1 04:47:46 2025 by rpki-client