$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9274b8c-5fee-48b1-a042-21403b2c6ec8.roa File: a9274b8c-5fee-48b1-a042-21403b2c6ec8.roa (raw, json) Hash identifier: TvpBdvlX164yo10E8Jp04FSlAM+/S5Mn6D7HvUFmj+E= Subject key identifier: 62:B2:67:BD:9D:0D:A0:9C:2F:D1:58:59:0D:E1:71:B6:E5:25:A9:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 718A22EA9C53068470D1F3ECABFD58E18B9C6321 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9274b8c-5fee-48b1-a042-21403b2c6ec8.roa Signing time: Wed 28 May 2025 00:50:20 +0000 ROA not before: Wed 28 May 2025 00:50:20 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 99.82.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8a:22:ea:9c:53:06:84:70:d1:f3:ec:ab:fd:58:e1:8b:9c:63:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:50:20 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=2bc570cd6803d28b5aaa23f137ebc0d314d8a357d637dfb1ee2c953c6007bd38, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1c:a8:c2:b6:bd:c1:9e:db:3d:8a:ec:0b:a9: 34:a5:d6:3b:c5:31:22:3b:b6:72:c0:49:15:e2:6a: 60:ef:f8:8c:e9:9d:95:0f:15:61:14:ed:96:46:34: 0b:11:51:12:d7:45:f3:96:ce:c4:40:11:d7:a0:fc: 0c:9a:c9:c2:d3:b6:a0:46:df:0d:00:89:03:b6:56: ec:15:09:f0:3d:88:d8:6c:4a:2b:7d:d1:ba:c3:3f: 11:23:0e:42:1c:65:ca:f3:99:ba:9f:3d:e2:31:ad: 6d:5d:59:e8:ae:90:06:21:ac:50:2a:98:84:ab:92: 0d:5c:f7:b2:dd:cb:e0:a4:34:8f:62:2c:8d:05:3d: cf:b3:c5:e1:8b:9f:ea:bd:44:a4:70:9c:13:63:f9: bc:10:3c:16:24:a4:95:f8:0a:44:6f:71:ce:56:44: b9:61:16:b8:55:5a:4c:54:90:93:e0:f9:09:56:6d: ec:1e:bb:8a:a2:22:b6:a4:7a:f1:4c:b2:ae:6d:5e: a2:c3:6f:0f:30:3b:3e:df:a5:1c:81:82:29:ee:92: ce:c1:5f:a0:36:c5:73:b8:52:67:a2:24:9f:1a:22: 49:d7:58:3c:e2:66:cb:6b:da:7f:92:8b:09:14:dd: 98:ea:20:0b:e1:7d:da:2d:b7:e0:09:44:9c:b5:9f: 39:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B2:67:BD:9D:0D:A0:9C:2F:D1:58:59:0D:E1:71:B6:E5:25:A9:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9274b8c-5fee-48b1-a042-21403b2c6ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.82.167.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:af:39:52:c0:48:35:5d:cf:fc:ba:bc:0e:f9:50:d2:6c:e2: f4:b6:be:61:78:ce:13:71:d9:3d:60:4c:0b:43:2c:85:e5:7e: ae:b8:30:34:20:90:0b:71:bd:ec:7a:aa:8d:65:ff:4e:a6:37: 86:92:9c:77:62:8c:84:b4:2f:ec:ce:4a:80:01:0b:b9:d9:ca: 47:82:ca:5e:75:84:22:26:9e:63:d7:c8:62:98:db:49:36:69: 79:c4:7a:0a:7e:78:b5:da:71:30:14:92:2e:19:a8:fc:69:2e: 2e:c4:25:1c:8d:10:64:3c:7d:51:7c:60:0a:2f:80:9d:aa:1c: 7a:d9:01:61:11:a1:de:32:f9:39:0a:98:5e:b6:89:dc:f4:01: b8:74:af:b2:96:0b:0c:06:4f:3e:62:3f:0f:ef:e3:f2:92:8d: a7:aa:fd:64:ef:75:01:9c:25:db:72:11:b4:97:80:7a:f0:cb: 18:b4:50:90:45:27:85:97:f9:14:7d:49:ab:0d:c0:54:0f:26: 7e:26:f5:dc:50:b3:38:82:54:e7:71:d7:ed:c2:c3:fd:54:91: e1:a9:48:df:0a:25:45:58:f1:68:31:9c:c0:f5:0d:46:fa:bd: 14:b9:8c:31:c1:fd:e0:7f:ac:0d:d2:54:5f:d2:38:6e:a0:49: 67:74:d8:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcYoi6pxTBoRw0fPsq/1Y4YucYyEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDA1MDIwWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmM1NzBjZDY4MDNkMjhiNWFhYTIzZjEzN2ViYzBkMzE0 ZDhhMzU3ZDYzN2RmYjFlZTJjOTUzYzYwMDdiZDM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQHKjCtr3Bnts9iuwLqTSl1jvFMSI7tnLASRXiamDv+Izp nZUPFWEU7ZZGNAsRURLXRfOWzsRAEdeg/AyaycLTtqBG3w0AiQO2VuwVCfA9iNhs Sit90brDPxEjDkIcZcrzmbqfPeIxrW1dWeiukAYhrFAqmISrkg1c97Ldy+CkNI9i LI0FPc+zxeGLn+q9RKRwnBNj+bwQPBYkpJX4CkRvcc5WRLlhFrhVWkxUkJPg+QlW beweu4qiIrakevFMsq5tXqLDbw8wOz7fpRyBginuks7BX6A2xXO4UmeiJJ8aIknX WDziZstr2n+SiwkU3ZjqIAvhfdott+AJRJy1nzmTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYrJnvZ0NoJwv0VhZDeFxtuUlqZcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5Mjc0YjhjLTVmZWUtNDhiMS1hMDQyLTIxNDAzYjJjNmVjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjUqcwDQYJKoZIhvcNAQELBQADggEBAG+vOVLASDVdz/y6vA75UNJs4vS2 vmF4zhNx2T1gTAtDLIXlfq64MDQgkAtxvex6qo1l/06mN4aSnHdijIS0L+zOSoAB C7nZykeCyl51hCImnmPXyGKY20k2aXnEegp+eLXacTAUki4ZqPxpLi7EJRyNEGQ8 fVF8YAovgJ2qHHrZAWERod4y+TkKmF62idz0Abh0r7KWCwwGTz5iPw/v4/KSjaeq /WTvdQGcJdtyEbSXgHrwyxi0UJBFJ4WX+RR9SasNwFQPJn4m9dxQsziCVOdx1+3C w/1UkeGpSN8KJUVY8WgxnMD1DUb6vRS5jDHB/eB/rA3SVF/SOG6gSWd02DM= -----END CERTIFICATE-----Generated at Sun Jun 1 04:33:01 2025 by rpki-client