$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87e4908-56e8-4607-9eaa-66bc2b561735.roa File: e87e4908-56e8-4607-9eaa-66bc2b561735.roa (raw, json) Hash identifier: nKMujpDY1VrJPtVi6AlzRwe07zdRNSHO2KU2PiB+97Y= Subject key identifier: 24:22:9A:C2:24:3F:16:D9:8E:01:4E:0C:F2:FF:76:6A:F0:8B:56:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E11354F80EA86F31AFBC4F21458F8DC288B3769 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87e4908-56e8-4607-9eaa-66bc2b561735.roa Signing time: Fri 30 May 2025 00:42:06 +0000 ROA not before: Fri 30 May 2025 00:42:06 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:11:35:4f:80:ea:86:f3:1a:fb:c4:f2:14:58:f8:dc:28:8b:37:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:42:06 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=40d9a9dbdededd4fbc9363505b8103654baf4a509d89a31bfb4a6346bc42ff2f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:d1:1a:7b:f3:09:a5:f8:8c:99:83:9c:eb: dd:93:21:d8:78:09:c9:43:62:23:92:a9:48:a9:0c: 53:6e:1d:4b:d3:c3:79:76:ab:72:68:d6:03:59:93: 10:8d:14:35:7d:e0:28:40:d1:af:45:12:c2:ed:f4: e3:80:04:b5:64:3b:b8:b6:be:18:ef:36:25:50:44: 9b:18:f4:7b:cf:9a:c3:c6:12:31:c2:a5:11:e4:1b: bb:dc:26:91:ee:95:85:58:b7:f1:36:e7:92:9c:df: 69:23:6e:ee:9d:f1:a1:39:c1:7c:b2:55:c1:7f:5d: 4f:a7:96:93:f2:c6:ed:af:a7:a0:7c:90:ed:06:8f: 3d:39:d6:25:b4:61:80:bc:44:f2:a2:e4:fb:d1:e9: 82:70:e5:37:5e:99:7d:03:8b:9a:e0:17:87:51:45: 3c:d0:18:ef:8a:dc:40:e6:7a:7d:cd:48:b0:01:28: 8e:b8:d8:dc:b5:8e:a0:63:d3:1a:93:05:31:8a:b0: c2:7d:07:34:3d:84:16:53:7f:16:3c:5a:7e:91:47: d5:e4:86:1d:01:10:9a:da:a0:5d:be:39:c8:72:1b: 46:a6:71:07:db:5f:ea:48:5e:b7:4d:69:c3:53:96: a8:06:f3:97:e1:4a:ee:6e:7c:c7:c7:ac:d4:73:3d: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:22:9A:C2:24:3F:16:D9:8E:01:4E:0C:F2:FF:76:6A:F0:8B:56:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87e4908-56e8-4607-9eaa-66bc2b561735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.128.0/24 Signature Algorithm: sha256WithRSAEncryption a9:d2:30:73:ce:85:ef:11:41:6d:5c:8c:ff:f1:19:3c:1c:5a: 5d:67:70:36:2b:7d:44:6b:90:5f:63:97:cb:d5:4d:e7:08:b2: 98:a9:15:94:32:63:54:e6:b0:9a:7c:74:0c:28:2a:94:b2:12: f4:37:e8:b2:03:a3:23:7f:3d:88:eb:25:80:0c:87:f1:98:5a: 6d:fa:4c:db:d5:99:b9:a7:ad:8e:e4:f2:b2:e1:f8:75:be:27: 12:56:18:a8:0a:d3:42:56:02:da:9d:fb:54:de:7e:68:c7:8a: e8:de:d8:67:39:8d:67:ca:0b:33:d7:ff:5e:ef:ac:7c:1a:39: d7:45:4c:c8:0c:8e:08:22:cc:53:a4:4a:8c:d5:41:ef:89:0f: 26:26:58:a1:24:5c:09:2f:d6:7e:68:60:99:58:8a:bc:ce:d7: 0b:8b:26:95:0e:b0:89:6b:bc:fb:bd:54:68:9d:54:d8:c5:3f: 4e:b8:b7:13:76:f6:c2:9f:26:82:4a:28:2d:65:03:62:4c:55: 28:8a:32:2b:14:37:b2:ea:d3:e1:94:c5:f1:88:32:96:29:7a: b1:27:ec:de:bf:7d:fd:67:f7:37:8c:3d:1d:ab:95:37:20:64: 16:94:3a:17:75:25:10:21:94:20:7c:3e:26:a3:73:61:3b:85: 98:9d:34:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPhE1T4DqhvMa+8TyFFj43CiLN2kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDA0MjA2WhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGQ5YTlkYmRlZGVkZDRmYmM5MzYzNTA1YjgxMDM2NTRi YWY0YTUwOWQ4OWEzMWJmYjRhNjM0NmJjNDJmZjJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCel9Eae/MJpfiMmYOc692TIdh4CclDYiOSqUipDFNuHUvT w3l2q3Jo1gNZkxCNFDV94ChA0a9FEsLt9OOABLVkO7i2vhjvNiVQRJsY9HvPmsPG EjHCpRHkG7vcJpHulYVYt/E255Kc32kjbu6d8aE5wXyyVcF/XU+nlpPyxu2vp6B8 kO0Gjz051iW0YYC8RPKi5PvR6YJw5TdemX0Di5rgF4dRRTzQGO+K3EDmen3NSLAB KI642Ny1jqBj0xqTBTGKsMJ9BzQ9hBZTfxY8Wn6RR9Xkhh0BEJraoF2+OchyG0am cQfbX+pIXrdNacNTlqgG85fhSu5ufMfHrNRzPfUFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJCKawiQ/FtmOAU4M8v92avCLVoowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4N2U0OTA4LTU2ZTgtNDYwNy05ZWFhLTY2YmMyYjU2MTczNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTYAwDQYJKoZIhvcNAQELBQADggEBAKnSMHPOhe8RQW1cjP/xGTwcWl1n cDYrfURrkF9jl8vVTecIspipFZQyY1TmsJp8dAwoKpSyEvQ36LIDoyN/PYjrJYAM h/GYWm36TNvVmbmnrY7k8rLh+HW+JxJWGKgK00JWAtqd+1TefmjHiuje2Gc5jWfK CzPX/17vrHwaOddFTMgMjggizFOkSozVQe+JDyYmWKEkXAkv1n5oYJlYirzO1wuL JpUOsIlrvPu9VGidVNjFP064txN29sKfJoJKKC1lA2JMVSiKMisUN7Lq0+GUxfGI MpYperEn7N6/ff1n9zeMPR2rlTcgZBaUOhd1JRAhlCB8Piajc2E7hZidNGo= -----END CERTIFICATE-----Generated at Wed Jun 4 11:24:42 2025 by rpki-client