$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8354722-950a-41e5-bc40-b7d3a30ec98a.roa File: c8354722-950a-41e5-bc40-b7d3a30ec98a.roa (raw, json) Hash identifier: PVyviAyo8cXh/xptlbPBC149KBSidfo2trfonezshtg= Subject key identifier: 24:9C:3D:00:38:BE:A2:CA:57:72:07:03:33:A9:14:CA:7C:55:ED:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 49688A22B89A2A36CD4B64B73E009720791F9D89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8354722-950a-41e5-bc40-b7d3a30ec98a.roa Signing time: Wed 28 May 2025 00:50:18 +0000 ROA not before: Wed 28 May 2025 00:50:18 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.78.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:68:8a:22:b8:9a:2a:36:cd:4b:64:b7:3e:00:97:20:79:1f:9d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:50:18 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=17b42dd4fc6362ff319bc29ecaca92561b4f5b33c52b5bba1c4633ffe805ca48, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e0:b2:31:c5:b9:15:bf:23:d6:73:1f:d6:3c: 10:95:63:3a:1f:16:0a:d9:40:3a:63:65:99:21:74: 9d:b4:a9:5d:c9:8e:f6:1d:7e:5c:a2:9b:d9:73:67: 34:a3:ac:0d:c9:72:c2:d2:94:22:8d:ca:fe:bf:73: 7a:32:5f:3a:01:ca:ed:71:71:40:f0:38:aa:8a:df: ba:76:be:1d:b1:76:36:00:c0:4f:30:55:f1:81:ff: 4e:45:cc:ac:41:ca:54:d4:52:fa:32:2e:6e:e2:43: 8f:04:32:e4:b2:a9:88:8d:bb:1a:a0:21:01:fb:2e: 0a:41:6b:e4:3a:ed:8e:33:52:1a:ba:92:45:b6:3e: 9e:32:36:af:3f:dc:b7:c4:76:29:ec:f4:e9:fa:eb: d2:04:9c:49:0b:22:5f:82:08:78:52:d6:ef:b6:a7: b1:ec:2e:70:87:25:91:f1:d2:59:a5:47:f7:a5:1a: 3e:22:fd:84:83:48:59:15:ed:cc:3c:02:77:ae:29: 2f:c3:b5:26:34:14:a6:dd:8d:18:a2:f5:5f:d2:26: 98:2c:35:63:72:af:e1:51:61:3a:02:ef:05:82:9d: 3e:21:7e:fa:a1:66:3e:46:73:f5:e0:f1:ea:b0:4e: 3c:6b:a9:3e:d5:22:ad:3c:43:4f:63:f0:e0:d4:88: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9C:3D:00:38:BE:A2:CA:57:72:07:03:33:A9:14:CA:7C:55:ED:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8354722-950a-41e5-bc40-b7d3a30ec98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.78.0.0/18 Signature Algorithm: sha256WithRSAEncryption 54:83:ad:27:7b:5b:6e:1c:05:82:e6:54:d7:78:68:12:fa:b8: 4e:91:e0:f2:f7:73:0a:cc:2a:16:76:e0:ed:01:64:c4:7b:0e: 59:40:ac:30:d5:29:6b:6a:6c:4c:5b:39:3a:bf:b6:8b:4d:3c: c0:fa:07:06:74:fb:78:cc:52:68:32:56:82:9f:ba:ad:a9:6a: d8:25:27:f6:76:54:f0:fb:c3:01:ad:4a:6f:04:46:c6:e1:08: 12:60:3a:17:8c:e8:76:6a:5c:b9:eb:2b:05:1d:e7:5e:3e:33: 8d:1f:dd:2f:0a:4e:a2:50:34:77:33:a8:0d:05:8d:36:6f:75: 36:ee:81:b4:2a:87:c2:4f:5c:ff:25:47:a9:4f:6a:c8:99:20: 25:51:f6:ac:d0:e6:38:cb:11:76:40:64:63:c5:3e:3e:12:71: 30:c7:af:f5:ab:aa:65:fb:9f:13:75:70:09:ac:1f:b2:83:4a: af:c7:45:00:8c:fc:d7:8a:1e:31:b2:dd:ea:f6:14:49:6c:4e: 60:da:a9:91:b8:f1:76:3d:1f:af:3c:c1:3d:81:68:a1:69:7d: ac:05:61:c6:28:93:7f:e9:0b:f0:66:87:e0:64:8b:44:2b:d4: 7d:17:d8:b6:82:71:8e:d1:94:30:15:35:ab:28:13:e6:5c:1a: bb:69:4b:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSWiKIriaKjbNS2S3PgCXIHkfnYkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDA1MDE4WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2I0MmRkNGZjNjM2MmZmMzE5YmMyOWVjYWNhOTI1NjFi NGY1YjMzYzUyYjViYmExYzQ2MzNmZmU4MDVjYTQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg4LIxxbkVvyPWcx/WPBCVYzofFgrZQDpjZZkhdJ20qV3J jvYdflyim9lzZzSjrA3JcsLSlCKNyv6/c3oyXzoByu1xcUDwOKqK37p2vh2xdjYA wE8wVfGB/05FzKxBylTUUvoyLm7iQ48EMuSyqYiNuxqgIQH7LgpBa+Q67Y4zUhq6 kkW2Pp4yNq8/3LfEdins9On669IEnEkLIl+CCHhS1u+2p7HsLnCHJZHx0lmlR/el Gj4i/YSDSFkV7cw8AneuKS/DtSY0FKbdjRii9V/SJpgsNWNyr+FRYToC7wWCnT4h fvqhZj5Gc/Xg8eqwTjxrqT7VIq08Q09j8ODUiH87AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJJw9ADi+ospXcgcDM6kUynxV7VswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4MzU0NzIyLTk1MGEtNDFlNS1iYzQwLWI3ZDNhMzBlYzk4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjTgAwDQYJKoZIhvcNAQELBQADggEBAFSDrSd7W24cBYLmVNd4aBL6uE6R 4PL3cwrMKhZ24O0BZMR7DllArDDVKWtqbExbOTq/totNPMD6BwZ0+3jMUmgyVoKf uq2patglJ/Z2VPD7wwGtSm8ERsbhCBJgOheM6HZqXLnrKwUd514+M40f3S8KTqJQ NHczqA0FjTZvdTbugbQqh8JPXP8lR6lPasiZICVR9qzQ5jjLEXZAZGPFPj4ScTDH r/WrqmX7nxN1cAmsH7KDSq/HRQCM/NeKHjGy3er2FElsTmDaqZG48XY9H688wT2B aKFpfawFYcYok3/pC/Bmh+Bki0Qr1H0X2LaCcY7RlDAVNasoE+ZcGrtpS6k= -----END CERTIFICATE-----Generated at Sun Jun 1 04:43:11 2025 by rpki-client