$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8756ab5a-c0b9-47e7-85b9-11c7e70d38d7.roa File: 8756ab5a-c0b9-47e7-85b9-11c7e70d38d7.roa (raw, json) Hash identifier: UuZTHvs+8HqpRtBFXUHVLdzuo81rMbJe8Z/LkOVPGws= Subject key identifier: 41:69:C0:C7:F1:40:0B:98:25:AA:D7:70:64:29:80:9C:74:0D:2B:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 216E807E4F77DB6AD454D8E1D094F63FF01838B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8756ab5a-c0b9-47e7-85b9-11c7e70d38d7.roa Signing time: Sat 10 May 2025 00:31:22 +0000 ROA not before: Sat 10 May 2025 00:31:22 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6e:80:7e:4f:77:db:6a:d4:54:d8:e1:d0:94:f6:3f:f0:18:38:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:31:22 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=e6b86b19c64898728f89378d5088cd6125a2c542b783912295c2d4b964aa0ba4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:cb:fe:52:63:e4:fe:da:72:83:7a:9a:bd: 88:8a:f0:79:d7:9a:0a:df:13:b5:7a:3a:41:6e:7c: 50:25:97:c9:ad:6e:9c:d3:24:0a:de:56:73:4e:08: 3e:57:7b:a9:70:f5:b4:e1:93:ec:03:79:06:d4:24: b3:9a:67:29:8b:6e:1c:a9:53:cc:6a:53:de:88:f7: 20:88:59:ea:e3:8d:32:bf:2a:a6:e4:68:99:fd:fa: 77:8b:3f:a4:6c:5a:6d:33:c7:d0:92:b1:d4:09:0e: e6:4d:2c:e6:e7:e8:40:43:60:c8:1e:93:ef:a0:c4: e6:62:13:ae:07:cd:89:66:b8:5b:ac:db:e2:07:1f: fd:d5:b6:7e:48:86:78:00:7c:8a:66:4a:73:a3:a2: 22:0f:51:f6:fb:ad:d1:47:7e:5f:db:a3:b6:86:c3: 35:76:ae:ed:c3:49:b9:80:e1:b8:38:b5:2e:df:ac: 1e:31:82:db:0a:dd:2b:80:c6:14:25:5d:fe:eb:68: e9:c3:e8:e4:21:4d:f3:d7:ee:78:13:25:f9:d9:c2: 6a:0d:1e:70:a4:4f:59:86:0c:48:2f:93:46:30:5a: ac:11:0a:46:64:ea:45:8b:8a:ff:dd:28:3b:ce:2a: ba:1f:0c:14:68:2c:33:e0:2f:d1:cf:6b:18:4f:80: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:69:C0:C7:F1:40:0B:98:25:AA:D7:70:64:29:80:9C:74:0D:2B:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8756ab5a-c0b9-47e7-85b9-11c7e70d38d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.156.0/23 Signature Algorithm: sha256WithRSAEncryption 90:6e:c8:54:a1:9d:7f:7d:db:f8:a6:84:f0:6d:d6:27:1e:1b: 09:2a:d6:97:46:56:14:e0:c4:7f:fa:2d:19:77:95:7c:7b:80: 79:46:ff:52:c1:51:dc:98:62:3e:fd:14:75:71:5f:22:d2:ca: 97:66:35:d8:b3:e9:24:fe:d6:38:52:ec:b6:2b:09:ef:76:81: 01:f4:f5:df:25:6b:71:e1:0e:bc:92:39:2c:0c:16:e4:77:1f: 9f:87:3f:ce:e1:d0:7f:b4:72:a3:59:12:ad:7c:7d:84:1c:da: 84:d1:1a:4f:bd:f9:8b:aa:9e:7d:81:4c:92:e2:9e:8b:c6:45: ff:b7:eb:df:90:26:3b:8c:51:0e:f0:7d:80:44:cf:b8:1c:20: 55:77:9e:59:28:81:7f:60:36:40:55:bb:56:8d:34:a5:5a:70: 34:e1:dd:25:70:be:66:b3:ce:61:53:88:3d:d8:f7:6c:63:51: ec:8c:84:06:06:d1:9f:c9:b8:f9:09:20:53:72:5d:43:2a:ed: 32:5a:aa:47:2b:53:0f:e4:18:27:10:c3:da:ee:cf:fb:21:37: 2d:c9:df:c3:ec:d7:97:fa:6d:c0:2d:ed:38:b7:53:e0:07:1f: ce:e9:3f:14:f1:cb:f0:18:cb:d9:49:e5:73:2d:34:32:b0:eb: 3e:29:cf:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIW6Afk9322rUVNjh0JT2P/AYOLkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAzMTIyWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmI4NmIxOWM2NDg5ODcyOGY4OTM3OGQ1MDg4Y2Q2MTI1 YTJjNTQyYjc4MzkxMjI5NWMyZDRiOTY0YWEwYmE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZM8v+UmPk/tpyg3qavYiK8HnXmgrfE7V6OkFufFAll8mt bpzTJAreVnNOCD5Xe6lw9bThk+wDeQbUJLOaZymLbhypU8xqU96I9yCIWerjjTK/ KqbkaJn9+neLP6RsWm0zx9CSsdQJDuZNLObn6EBDYMgek++gxOZiE64HzYlmuFus 2+IHH/3Vtn5IhngAfIpmSnOjoiIPUfb7rdFHfl/bo7aGwzV2ru3DSbmA4bg4tS7f rB4xgtsK3SuAxhQlXf7raOnD6OQhTfPX7ngTJfnZwmoNHnCkT1mGDEgvk0YwWqwR CkZk6kWLiv/dKDvOKrofDBRoLDPgL9HPaxhPgK//AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQWnAx/FAC5glqtdwZCmAnHQNK+AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg3NTZhYjVhLWMwYjktNDdlNy04NWI5LTExYzdlNzBkMzhkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl5wwDQYJKoZIhvcNAQELBQADggEBAJBuyFShnX992/imhPBt1iceGwkq 1pdGVhTgxH/6LRl3lXx7gHlG/1LBUdyYYj79FHVxXyLSypdmNdiz6ST+1jhS7LYr Ce92gQH09d8la3HhDrySOSwMFuR3H5+HP87h0H+0cqNZEq18fYQc2oTRGk+9+Yuq nn2BTJLinovGRf+369+QJjuMUQ7wfYBEz7gcIFV3nlkogX9gNkBVu1aNNKVacDTh 3SVwvmazzmFTiD3Y92xjUeyMhAYG0Z/JuPkJIFNyXUMq7TJaqkcrUw/kGCcQw9ru z/shNy3J38Ps15f6bcAt7Ti3U+AHH87pPxTxy/AYy9lJ5XMtNDKw6z4pzyQ= -----END CERTIFICATE-----Generated at Sun Jun 1 04:24:20 2025 by rpki-client