$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebf71bb-d72e-4713-b9f8-f01cdab094a7.roa File: cebf71bb-d72e-4713-b9f8-f01cdab094a7.roa (raw, json) Hash identifier: 2bWfWh3+x+5m9dMddL+7iroEu6V5St3zXluuSVCXBZY= Subject key identifier: 03:A9:DE:4C:AD:BB:BC:34:E5:15:76:04:B3:8B:D9:01:1A:F9:3B:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4506C226BDC223AE6983EDA65635CBB21AD46E21 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebf71bb-d72e-4713-b9f8-f01cdab094a7.roa Signing time: Sat 24 May 2025 00:20:35 +0000 ROA not before: Sat 24 May 2025 00:20:35 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:06:c2:26:bd:c2:23:ae:69:83:ed:a6:56:35:cb:b2:1a:d4:6e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:20:35 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=ba246b87296fe171a77f15ec6176940095336e6f423fbb6a06d04b6bd8889b27, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:1d:4b:90:f4:cd:59:a4:b2:2d:ec:ce:f5: b7:1c:72:4b:3f:b7:12:da:29:25:15:3b:bc:ed:b1: 3d:b3:e5:7a:e9:c7:6c:48:fd:b2:4b:24:3b:4c:8b: 1f:a8:c7:b9:97:a4:35:eb:73:3e:c9:86:76:8e:fc: a9:3f:3a:fb:86:54:5f:b5:95:39:c8:6c:a0:e4:f0: 44:1b:b2:a1:d2:52:93:4d:4f:5d:db:36:4d:d8:7c: ea:7e:3d:4c:ec:be:f7:65:50:1b:94:87:6b:5f:cf: 43:11:88:c6:cd:d8:d7:d7:3f:7a:61:36:67:6f:87: 93:6b:1a:30:0e:9b:f7:2d:2d:58:95:02:02:8a:2b: d4:6b:06:9e:bf:0a:6d:8b:2c:ae:6f:d8:88:4d:55: be:53:e3:37:f7:34:6c:3e:73:1e:b2:4a:ce:95:50: cd:6d:f8:63:6e:2a:7c:b7:48:fb:b8:f9:a2:25:78: c9:10:07:ab:60:5b:c6:8f:c1:af:a8:55:b0:15:b7: ed:e7:c7:fe:e1:dd:34:7b:ef:67:a7:18:99:f9:29: c8:02:10:da:e4:8e:71:23:e8:b1:50:5e:d2:5f:24: ab:a1:9d:fe:d4:73:85:ed:26:fc:76:77:a3:d6:ed: 00:39:20:d9:f1:14:9d:97:57:19:66:76:e3:d0:8b: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A9:DE:4C:AD:BB:BC:34:E5:15:76:04:B3:8B:D9:01:1A:F9:3B:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebf71bb-d72e-4713-b9f8-f01cdab094a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9b:ac:43:27:0d:74:10:07:5d:2a:8f:5b:77:99:f1:a7:01:5b: fa:8e:f7:26:7c:24:86:9e:a3:00:58:53:34:52:a5:54:e6:83: 70:af:85:de:8a:d9:c4:84:68:90:1c:8d:d9:c8:25:f6:2c:21: 9c:0f:b3:0c:c5:cb:a6:bc:53:44:96:b6:33:0b:64:26:22:5e: 2c:d5:19:78:79:b8:af:aa:6a:83:4c:5b:af:2e:06:72:47:bd: c7:13:c7:5f:ea:8e:c0:25:1d:ad:0c:51:dc:42:d2:2a:9d:22: 1e:be:b2:67:29:7c:ed:98:fb:cc:9b:49:4e:5d:a4:07:d2:af: 0c:b5:9a:b2:88:7d:ea:1e:c4:bc:86:c3:08:99:06:51:a6:2d: 67:c7:90:81:8d:4b:fd:96:4f:bb:12:a5:db:db:d5:0a:4d:a7: 63:46:63:b2:a3:63:50:4b:ed:39:ad:b8:64:76:3e:64:f3:69: a1:38:d8:f3:97:e8:87:af:ec:f5:db:4e:20:23:ed:98:5c:83: 52:a1:d0:ac:36:6a:02:05:5f:1f:35:ef:48:74:f2:93:fe:79: 51:42:fb:6c:3b:07:07:87:7f:0e:cc:e2:68:7b:80:6b:b7:5f: 50:80:ba:25:3b:19:ea:1c:24:dc:ca:ff:43:53:cf:c7:b5:09: 64:81:b0:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURQbCJr3CI65pg+2mVjXLshrUbiEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAyMDM1WhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTI0NmI4NzI5NmZlMTcxYTc3ZjE1ZWM2MTc2OTQwMDk1 MzM2ZTZmNDIzZmJiNmEwNmQwNGI2YmQ4ODg5YjI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxJB1LkPTNWaSyLezO9bcccks/txLaKSUVO7ztsT2z5Xrp x2xI/bJLJDtMix+ox7mXpDXrcz7JhnaO/Kk/OvuGVF+1lTnIbKDk8EQbsqHSUpNN T13bNk3YfOp+PUzsvvdlUBuUh2tfz0MRiMbN2NfXP3phNmdvh5NrGjAOm/ctLViV AgKKK9RrBp6/Cm2LLK5v2IhNVb5T4zf3NGw+cx6ySs6VUM1t+GNuKny3SPu4+aIl eMkQB6tgW8aPwa+oVbAVt+3nx/7h3TR772enGJn5KcgCENrkjnEj6LFQXtJfJKuh nf7Uc4XtJvx2d6PW7QA5INnxFJ2XVxlmduPQi+hHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA6neTK27vDTlFXYEs4vZARr5O2gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlYmY3MWJiLWQ3MmUtNDcxMy1iOWY4LWYwMWNkYWIwOTRhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdjlgAwDQYJKoZIhvcNAQELBQADggEBAJusQycNdBAHXSqPW3eZ8acBW/qO 9yZ8JIaeowBYUzRSpVTmg3Cvhd6K2cSEaJAcjdnIJfYsIZwPswzFy6a8U0SWtjML ZCYiXizVGXh5uK+qaoNMW68uBnJHvccTx1/qjsAlHa0MUdxC0iqdIh6+smcpfO2Y +8ybSU5dpAfSrwy1mrKIfeoexLyGwwiZBlGmLWfHkIGNS/2WT7sSpdvb1QpNp2NG Y7KjY1BL7TmtuGR2PmTzaaE42POX6Iev7PXbTiAj7Zhcg1Kh0Kw2agIFXx8170h0 8pP+eVFC+2w7BweHfw7M4mh7gGu3X1CAuiU7GeocJNzK/0NTz8e1CWSBsJA= -----END CERTIFICATE-----Generated at Sun Jun 1 04:58:48 2025 by rpki-client