$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a42a738c-9b5f-415d-a4cc-d638a82f8193.roa File: a42a738c-9b5f-415d-a4cc-d638a82f8193.roa (raw, json) Hash identifier: h0roVg8bY637Jk3zpT0OIvJYW55BShHhpfwdnZJ1J1g= Subject key identifier: EC:1B:E8:6C:E1:4B:55:6B:14:09:68:92:4E:53:7B:70:04:D1:F5:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E1B26698F54315E7044BDC6432BA7578715274A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a42a738c-9b5f-415d-a4cc-d638a82f8193.roa Signing time: Sat 10 May 2025 00:20:21 +0000 ROA not before: Sat 10 May 2025 00:20:21 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1b:26:69:8f:54:31:5e:70:44:bd:c6:43:2b:a7:57:87:15:27:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:20:21 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=c1995d16b9caff61e311e46015eb5e609598003b05d8908b21ba4fb3f5e6b495, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:23:66:43:66:52:33:c6:50:51:31:f5:1c: 25:32:16:08:10:b6:47:0c:d3:49:1d:47:9a:fc:fb: dd:d2:1b:6e:d1:ec:3e:4c:f6:a0:ef:98:48:bb:29: 9c:75:9d:79:ad:27:7c:ee:28:dd:b0:f0:0f:4a:c3: 25:d4:ab:e0:6e:7b:8a:bf:d3:61:38:96:05:7c:72: 4a:2e:81:ef:9d:03:41:3a:67:27:8d:ab:aa:91:e5: c4:82:d2:59:52:13:fe:d5:34:03:0d:32:6f:61:3b: 1e:24:19:9c:11:e4:a2:8e:25:f0:d0:f1:9e:20:3a: bd:1d:a0:c6:8d:28:07:c5:14:8d:15:89:1f:22:dd: 18:ba:02:b9:fe:78:b3:ff:ed:a5:7c:f1:cb:f8:91: bf:9a:4b:80:18:4c:c2:02:d8:ba:e6:f8:9f:85:ae: 81:42:bf:f3:5b:07:66:81:94:22:17:87:a5:62:58: 37:a8:2c:01:04:1f:e9:cc:e3:df:22:3f:58:ea:6a: 54:17:ea:13:74:c5:96:96:4c:01:a4:bc:8d:10:2c: 08:3f:71:3c:90:bd:94:39:bd:bf:8a:c5:58:54:37: 1d:a9:07:0c:ff:06:34:ba:b0:e8:51:31:5c:ba:8a: ae:1b:0a:2c:df:d9:34:90:73:dd:68:e2:23:90:7d: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1B:E8:6C:E1:4B:55:6B:14:09:68:92:4E:53:7B:70:04:D1:F5:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a42a738c-9b5f-415d-a4cc-d638a82f8193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.122.0/24 Signature Algorithm: sha256WithRSAEncryption 03:82:52:be:c9:b7:f7:8f:77:6f:75:e3:94:2d:27:1d:58:52: 66:cc:1a:9b:a1:43:3c:48:d9:6d:7a:c8:40:90:37:74:07:7e: 74:26:75:26:01:c4:73:50:1c:a5:10:f0:8d:dc:27:9c:69:8b: f7:3c:26:b4:55:36:65:0b:e2:b6:1d:b3:80:13:67:ac:4b:5f: 7f:a8:54:12:94:fe:ef:3b:fb:83:6a:c8:9f:a2:28:45:02:4b: 3d:6b:01:d8:f2:d2:35:e8:11:cb:96:9b:c2:fc:ba:69:73:5a: a7:33:f0:5b:73:9a:cc:ee:b8:05:8e:b3:0c:5a:39:f8:6e:ac: 56:41:88:bc:bd:7c:9c:95:a1:53:dc:77:c3:e8:56:b1:64:39: c4:7f:a2:bb:48:68:01:39:a4:96:a6:33:c8:82:ca:ca:9a:61: 6b:06:03:f3:d4:bf:46:1b:17:0e:5d:e9:ac:50:db:19:c1:fc: b8:47:92:02:26:9c:e2:fd:65:78:bc:83:f2:5e:61:f7:d5:11: 55:4b:76:ed:00:5e:49:3f:29:d3:c3:e9:c5:fd:30:ac:d6:af: 65:37:0e:2b:c3:97:32:43:20:29:5c:d2:d1:82:a9:85:8a:80: de:06:ff:e0:62:55:c6:c1:df:aa:56:b7:30:fd:de:a9:90:d3: 74:b0:55:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUThsmaY9UMV5wRL3GQyunV4cVJ0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAyMDIxWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTk5NWQxNmI5Y2FmZjYxZTMxMWU0NjAxNWViNWU2MDk1 OTgwMDNiMDVkODkwOGIyMWJhNGZiM2Y1ZTZiNDk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2NSNmQ2ZSM8ZQUTH1HCUyFggQtkcM00kdR5r8+93SG27R 7D5M9qDvmEi7KZx1nXmtJ3zuKN2w8A9KwyXUq+Bue4q/02E4lgV8ckouge+dA0E6 ZyeNq6qR5cSC0llSE/7VNAMNMm9hOx4kGZwR5KKOJfDQ8Z4gOr0doMaNKAfFFI0V iR8i3Ri6Arn+eLP/7aV88cv4kb+aS4AYTMIC2Lrm+J+FroFCv/NbB2aBlCIXh6Vi WDeoLAEEH+nM498iP1jqalQX6hN0xZaWTAGkvI0QLAg/cTyQvZQ5vb+KxVhUNx2p Bwz/BjS6sOhRMVy6iq4bCizf2TSQc91o4iOQfYKHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7BvobOFLVWsUCWiSTlN7cATR9RcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0MmE3MzhjLTliNWYtNDE1ZC1hNGNjLWQ2MzhhODJmODE5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjlnowDQYJKoZIhvcNAQELBQADggEBAAOCUr7Jt/ePd29145QtJx1YUmbM GpuhQzxI2W16yECQN3QHfnQmdSYBxHNQHKUQ8I3cJ5xpi/c8JrRVNmUL4rYds4AT Z6xLX3+oVBKU/u87+4NqyJ+iKEUCSz1rAdjy0jXoEcuWm8L8umlzWqcz8Ftzmszu uAWOswxaOfhurFZBiLy9fJyVoVPcd8PoVrFkOcR/ortIaAE5pJamM8iCysqaYWsG A/PUv0YbFw5d6axQ2xnB/LhHkgImnOL9ZXi8g/JeYffVEVVLdu0AXkk/KdPD6cX9 MKzWr2U3DivDlzJDIClc0tGCqYWKgN4G/+BiVcbB36pWtzD93qmQ03SwVSo= -----END CERTIFICATE-----Generated at Sun Jun 1 04:22:34 2025 by rpki-client