$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/915be5e0-8704-4672-8517-f4e70f57903e.roa File: 915be5e0-8704-4672-8517-f4e70f57903e.roa (raw, json) Hash identifier: 8OC0r3Rah1WJ08alnD0Ke80aXzLHf2R8BNc6e1ht0rM= Subject key identifier: 13:FA:7B:77:E4:0A:1F:7C:1F:6B:09:B6:76:19:FE:79:15:4B:BA:E6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70D81AFF24ECADC4206DF324D3087BD33DAA3642 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/915be5e0-8704-4672-8517-f4e70f57903e.roa Signing time: Wed 09 Apr 2025 00:42:08 +0000 ROA not before: Wed 09 Apr 2025 00:42:08 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 99.77.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d8:1a:ff:24:ec:ad:c4:20:6d:f3:24:d3:08:7b:d3:3d:aa:36:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:42:08 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=99b7c06103410b6899d6e74c39a81079bd681957311949ee6ec71009195a6fdb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:3f:fc:23:8c:fd:31:cc:46:fb:b1:4b:67: f0:59:71:1f:97:29:20:fe:7b:d0:42:cb:b6:46:d6: 1a:40:24:7b:05:88:ac:fb:da:5f:b5:45:43:c6:c8: 93:dc:b9:6e:75:7b:0a:89:3f:f8:ba:3a:ba:5f:9a: 22:9d:6d:8b:6b:3f:ee:f3:a1:7f:28:6a:f1:7b:e7: 8d:c7:62:d7:f7:86:8e:df:ca:9d:c2:e2:17:36:5f: c9:08:01:6f:d6:54:1b:c5:63:0e:23:93:68:82:79: f8:58:90:95:fa:bf:bb:1c:58:e3:ba:fd:fb:bf:56: a7:b8:56:b9:2a:07:82:bb:61:7d:f2:98:42:9e:96: fb:7d:86:7d:fc:4f:50:7e:af:ce:57:89:63:d1:f2: d3:1e:52:65:7d:81:d8:3e:1e:ce:e8:cf:14:ae:64: d7:8c:84:e2:68:7d:a1:cb:ba:9f:08:8d:4a:9f:f6: d2:35:3c:27:87:2a:64:f5:19:47:9c:42:87:f8:3d: d7:62:aa:d4:56:a9:9b:41:73:3d:ca:fc:83:08:eb: e1:cf:fe:d1:c5:d5:89:03:40:6c:18:3d:33:e4:a4: 29:2c:33:71:7b:a6:ec:3e:83:69:b1:75:36:f0:21: 27:cf:16:71:9a:eb:9b:fa:46:2a:64:4f:9d:9a:da: 9b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FA:7B:77:E4:0A:1F:7C:1F:6B:09:B6:76:19:FE:79:15:4B:BA:E6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/915be5e0-8704-4672-8517-f4e70f57903e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.191.0/24 Signature Algorithm: sha256WithRSAEncryption 94:f9:5f:7b:c8:7c:80:27:c8:b2:23:03:3e:2c:0b:ed:30:9c: 68:30:57:43:58:1c:40:87:57:d3:4f:07:c7:21:c2:e1:6d:48: fe:16:2a:f2:3e:58:4e:42:5d:a1:44:2f:3e:8a:52:e6:33:a1: cf:2b:85:04:26:2e:35:5f:a1:94:3c:26:97:35:ca:d2:ef:40: 61:d2:97:9d:40:5b:40:45:8f:6e:1f:0c:b2:b5:c9:4e:ab:cb: 67:fd:e1:48:b7:66:81:ee:61:35:32:af:54:06:9c:f0:f2:c4: ef:64:86:fc:19:2f:19:79:32:fa:14:4e:89:73:22:bd:93:ef: 34:c1:b4:31:92:a6:50:f9:82:0c:13:dc:59:14:99:a1:3f:e8: cc:b3:69:af:b3:60:b2:8d:55:5b:c7:3f:ca:60:a0:8a:66:b8: 82:35:33:a9:53:e6:ce:96:76:d6:7c:56:0e:0a:4a:94:c6:4b: 29:57:d6:ac:26:53:05:01:dc:ea:9f:8f:b4:ce:f7:8e:4b:7b: 03:82:d1:07:e9:25:d2:ce:d1:f9:01:27:63:92:26:be:d5:16: af:04:34:78:84:fa:02:76:46:62:66:83:22:d7:3b:99:50:d3: 23:29:c4:2e:c5:44:49:e0:cf:f5:2d:c9:b2:47:59:f4:3b:9d: 04:ab:7e:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcNga/yTsrcQgbfMk0wh70z2qNkIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDA0MjA4WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWI3YzA2MTAzNDEwYjY4OTlkNmU3NGMzOWE4MTA3OWJk NjgxOTU3MzExOTQ5ZWU2ZWM3MTAwOTE5NWE2ZmRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVKD/8I4z9McxG+7FLZ/BZcR+XKSD+e9BCy7ZG1hpAJHsF iKz72l+1RUPGyJPcuW51ewqJP/i6OrpfmiKdbYtrP+7zoX8oavF7543HYtf3ho7f yp3C4hc2X8kIAW/WVBvFYw4jk2iCefhYkJX6v7scWOO6/fu/Vqe4VrkqB4K7YX3y mEKelvt9hn38T1B+r85XiWPR8tMeUmV9gdg+Hs7ozxSuZNeMhOJofaHLup8IjUqf 9tI1PCeHKmT1GUecQof4PddiqtRWqZtBcz3K/IMI6+HP/tHF1YkDQGwYPTPkpCks M3F7puw+g2mxdTbwISfPFnGa65v6RipkT52a2pvVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE/p7d+QKH3wfawm2dhn+eRVLuuYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxNWJlNWUwLTg3MDQtNDY3Mi04NTE3LWY0ZTcwZjU3OTAzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTb8wDQYJKoZIhvcNAQELBQADggEBAJT5X3vIfIAnyLIjAz4sC+0wnGgw V0NYHECHV9NPB8chwuFtSP4WKvI+WE5CXaFELz6KUuYzoc8rhQQmLjVfoZQ8Jpc1 ytLvQGHSl51AW0BFj24fDLK1yU6ry2f94Ui3ZoHuYTUyr1QGnPDyxO9khvwZLxl5 MvoUTolzIr2T7zTBtDGSplD5ggwT3FkUmaE/6Myzaa+zYLKNVVvHP8pgoIpmuII1 M6lT5s6WdtZ8Vg4KSpTGSylX1qwmUwUB3Oqfj7TO945LewOC0QfpJdLO0fkBJ2OS Jr7VFq8ENHiE+gJ2RmJmgyLXO5lQ0yMpxC7FREngz/UtybJHWfQ7nQSrfpk= -----END CERTIFICATE-----Generated at Wed Apr 16 17:17:48 2025 by rpki-client