$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa File: cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa (raw, json) Hash identifier: 3v17plZcgPqytUUIvJlMtHNeqeyiMYMZfiwnYXZSMgU= Subject key identifier: 43:48:05:6E:D7:C5:93:32:1D:52:01:C3:D4:99:C6:92:9F:F3:E9:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0FBA03CFA6B8C97F5B3CA5704FD28F51B0401F77 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa Signing time: Tue 15 Apr 2025 00:31:32 +0000 ROA not before: Tue 15 Apr 2025 00:31:32 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 99.151.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ba:03:cf:a6:b8:c9:7f:5b:3c:a5:70:4f:d2:8f:51:b0:40:1f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 15 00:31:32 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=227d5b8a3057c27b6ae2d210bb1e10ccf418ef8380a32b6128dd23650394196b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:16:33:fe:72:f2:e8:61:2e:16:ad:72:77: 9f:8b:4a:5f:89:92:5a:fe:95:f9:88:c5:e9:44:30: 1c:15:b0:14:2a:dd:7c:44:d8:b7:2f:03:bc:d5:0b: d1:48:80:a5:42:20:12:51:e1:9a:23:5d:4f:3c:39: 25:0a:28:e5:3c:94:3a:82:38:9d:9f:e1:6f:11:53: d9:fc:d9:e8:2f:c0:8a:36:5c:40:82:2a:bb:ec:15: e1:f3:b3:58:a3:3d:bd:53:fe:96:28:c5:a6:1a:17: 2b:1c:68:5e:48:76:4d:f5:aa:32:5b:fe:17:71:36: 55:07:ff:e6:92:4f:1e:8e:08:7f:de:3f:b1:81:42: c7:50:7b:a2:d8:b0:26:2a:b8:dd:8a:bc:0c:be:a2: 77:80:e8:ab:07:53:39:aa:72:4a:06:e2:e0:cf:36: c9:2c:bd:a2:df:d0:b1:d1:e0:98:02:ba:c0:79:6d: e4:9d:08:2b:91:eb:0f:7d:6d:83:46:1a:42:87:02: 29:2b:81:04:14:86:94:7f:a7:5a:82:5e:43:fd:6b: ed:ec:3b:e2:ec:e2:5d:23:e2:1b:de:a3:e2:e0:b3: 23:5d:07:6a:0c:df:0a:e5:a3:c7:d0:d6:8d:52:2f: 03:8d:52:5b:93:bc:45:5e:48:b7:ee:c6:82:53:fe: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:48:05:6E:D7:C5:93:32:1D:52:01:C3:D4:99:C6:92:9F:F3:E9:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.190.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:35:b9:1c:c7:22:26:04:1f:c6:98:78:bd:43:2a:98:6e:89: 51:e7:cd:4d:02:56:4e:a7:3b:3c:56:b8:a0:3a:e6:93:36:e6: 01:56:04:77:17:7b:72:85:8d:66:78:b5:75:97:c2:ce:06:54: b4:9f:0e:41:fc:52:2c:36:8e:a3:08:f2:7f:3f:1a:db:72:02: 90:e5:80:c2:fd:42:99:8b:4b:c3:d2:47:97:fb:13:e8:f8:97: 8b:89:e5:05:c5:ff:4b:1a:85:a4:e8:ee:79:d3:32:6c:4e:28: b5:cc:68:91:50:0a:a4:0c:aa:a8:2e:90:5f:dc:d9:1b:e4:96: 1d:d7:0c:d4:64:c8:0a:e9:51:70:a4:5e:a1:15:21:0f:7e:50: 74:89:ea:c0:96:2a:91:f9:c2:14:17:e0:d9:42:66:75:bf:be: b0:54:b2:4f:06:0b:5a:fe:70:12:64:b7:ba:32:16:d3:7e:46: bd:12:03:21:77:14:7a:9d:a5:01:2b:a0:06:b4:c1:8d:b0:f6: dc:cf:dc:5c:4f:da:52:21:90:95:1e:ae:60:56:90:61:9b:ab: 0e:aa:e0:f3:39:69:ff:70:6d:02:0b:42:2c:76:b1:4f:12:80: 97:10:2f:e1:8e:84:d6:10:7c:84:c8:6b:5d:4e:bb:1d:63:cf: d4:98:06:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD7oDz6a4yX9bPKVwT9KPUbBAH3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE1MDAzMTMyWhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjdkNWI4YTMwNTdjMjdiNmFlMmQyMTBiYjFlMTBjY2Y0 MThlZjgzODBhMzJiNjEyOGRkMjM2NTAzOTQxOTZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmiRYz/nLy6GEuFq1yd5+LSl+Jklr+lfmIxelEMBwVsBQq 3XxE2LcvA7zVC9FIgKVCIBJR4ZojXU88OSUKKOU8lDqCOJ2f4W8RU9n82egvwIo2 XECCKrvsFeHzs1ijPb1T/pYoxaYaFyscaF5Idk31qjJb/hdxNlUH/+aSTx6OCH/e P7GBQsdQe6LYsCYquN2KvAy+oneA6KsHUzmqckoG4uDPNsksvaLf0LHR4JgCusB5 beSdCCuR6w99bYNGGkKHAikrgQQUhpR/p1qCXkP9a+3sO+Ls4l0j4hveo+LgsyNd B2oM3wrlo8fQ1o1SLwONUluTvEVeSLfuxoJT/j3lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ0gFbtfFkzIdUgHD1JnGkp/z6Q8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlYmU4MTFjLWZmZDAtNGZhOS05OGVkLTdiOTg2ODU4MDllMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl74wDQYJKoZIhvcNAQELBQADggEBAJ81uRzHIiYEH8aYeL1DKphuiVHn zU0CVk6nOzxWuKA65pM25gFWBHcXe3KFjWZ4tXWXws4GVLSfDkH8Uiw2jqMI8n8/ GttyApDlgML9QpmLS8PSR5f7E+j4l4uJ5QXF/0sahaTo7nnTMmxOKLXMaJFQCqQM qqgukF/c2Rvklh3XDNRkyArpUXCkXqEVIQ9+UHSJ6sCWKpH5whQX4NlCZnW/vrBU sk8GC1r+cBJkt7oyFtN+Rr0SAyF3FHqdpQEroAa0wY2w9tzP3FxP2lIhkJUermBW kGGbqw6q4PM5af9wbQILQix2sU8SgJcQL+GOhNYQfITIa11Oux1jz9SYBpw= -----END CERTIFICATE-----Generated at Wed Apr 16 16:46:46 2025 by rpki-client