$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c30ae5a-50c2-4463-b773-79404fc3c67d.roa File: 0c30ae5a-50c2-4463-b773-79404fc3c67d.roa (raw, json) Hash identifier: /G3PzZOx2MbyEqz3CW8tS8P+EmHQPHjqSB7DHK9uGfM= Subject key identifier: 1D:7A:3A:43:DF:D8:7A:25:B0:98:81:16:08:8F:F2:72:AC:6F:A8:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C996E14B6F376E933CA9F25742FC3A5EBD13574 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c30ae5a-50c2-4463-b773-79404fc3c67d.roa Signing time: Tue 29 Apr 2025 00:20:16 +0000 ROA not before: Tue 29 Apr 2025 00:20:16 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:99:6e:14:b6:f3:76:e9:33:ca:9f:25:74:2f:c3:a5:eb:d1:35:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:20:16 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=1146deee8fb18853693e5ae764ef1b0e7485fe830c0fab2513833edb74a529cf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:c8:51:b0:30:6d:73:bc:6b:9f:64:47:70: 77:aa:03:c5:1a:01:9d:54:e6:46:78:28:6d:33:f4: 71:87:dd:9e:c9:04:90:3d:40:c5:73:53:11:42:d8: 6e:be:d8:cb:8f:78:9c:52:db:33:a6:63:73:40:a7: e2:5a:5f:91:85:ae:09:b4:23:6d:8c:57:8b:bf:b0: 52:ce:db:2a:d1:b2:1c:f4:08:5d:ec:d7:b0:ee:b6: 2b:26:ce:4b:6f:59:46:6b:68:67:44:bb:6a:ce:45: 66:c1:5d:94:1d:af:65:15:5c:0e:86:36:7a:f0:f2: 61:9f:79:a6:56:7c:ba:9a:fa:ed:5f:56:aa:f7:b7: 1c:f0:c5:3a:b3:1c:ba:c8:40:64:58:6f:08:73:64: 27:03:66:f3:59:5d:da:dc:fa:92:6f:2c:69:eb:ce: 7b:25:d0:6d:72:10:03:93:a8:4d:0f:3f:67:f4:a6: 43:bd:08:a1:86:47:fd:e1:c5:85:83:c3:a6:33:4c: a5:c7:1f:cd:a3:e3:5a:0e:0c:99:02:92:7f:2f:a0: 4b:43:28:b4:0e:35:f7:22:4a:c2:b7:62:05:85:64: ce:48:44:2b:a8:2e:9f:e3:75:e0:7d:70:6e:bf:7c: 2b:fa:93:9f:58:ff:72:46:82:61:0d:72:0e:da:9f: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:3A:43:DF:D8:7A:25:B0:98:81:16:08:8F:F2:72:AC:6F:A8:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c30ae5a-50c2-4463-b773-79404fc3c67d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.150.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:38:9d:73:f9:fb:d3:40:cc:dd:20:d0:2a:e5:35:a2:e0:24: f3:82:10:9a:c6:6c:d2:f5:5c:98:e7:1d:20:34:3a:f9:dd:f2: 19:ab:b1:95:73:d1:b4:72:57:3d:7f:9b:74:1c:f7:b1:10:97: bd:de:7c:bc:13:90:03:81:8e:c3:19:6c:41:04:2c:17:3e:96: a3:60:7a:e8:e4:79:b9:bd:3c:23:96:c2:e7:ad:39:0a:00:93: b1:e0:fb:a8:09:5a:7c:ca:6c:f0:77:1e:ac:d6:3f:ea:a6:af: d9:0b:9a:f5:11:7a:de:d0:49:da:00:0c:d1:b3:63:3b:f9:4a: e4:35:e8:d7:cd:89:45:42:c9:4a:f1:93:0d:61:fb:cc:b2:b7: 3c:7e:e0:b7:81:f3:10:7d:e0:42:5d:26:eb:9f:fe:64:b9:b5: d6:41:b5:6a:d2:9c:39:42:f2:0f:56:08:de:65:27:30:02:ac: 1b:e7:2c:0e:fd:46:f7:0d:f4:ac:95:f9:97:f9:61:00:fa:83: e9:1a:7b:af:fb:69:7d:36:74:af:4d:80:b1:76:8f:d9:2f:ce: ef:13:b2:7e:f0:ac:2b:34:af:4d:64:36:68:4a:a3:ba:1d:41: 75:97:e7:09:36:99:e8:c0:93:06:e3:ac:a6:ef:9a:dd:14:a2: a2:41:35:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXJluFLbzdukzyp8ldC/DpevRNXQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAyMDE2WhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTQ2ZGVlZThmYjE4ODUzNjkzZTVhZTc2NGVmMWIwZTc0 ODVmZTgzMGMwZmFiMjUxMzgzM2VkYjc0YTUyOWNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3jshRsDBtc7xrn2RHcHeqA8UaAZ1U5kZ4KG0z9HGH3Z7J BJA9QMVzUxFC2G6+2MuPeJxS2zOmY3NAp+JaX5GFrgm0I22MV4u/sFLO2yrRshz0 CF3s17DutismzktvWUZraGdEu2rORWbBXZQdr2UVXA6GNnrw8mGfeaZWfLqa+u1f Vqr3txzwxTqzHLrIQGRYbwhzZCcDZvNZXdrc+pJvLGnrznsl0G1yEAOTqE0PP2f0 pkO9CKGGR/3hxYWDw6YzTKXHH82j41oODJkCkn8voEtDKLQONfciSsK3YgWFZM5I RCuoLp/jdeB9cG6/fCv6k59Y/3JGgmENcg7an6GLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHXo6Q9/YeiWwmIEWCI/ycqxvqKYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjMzBhZTVhLTUwYzItNDQ2My1iNzczLTc5NDA0ZmMzYzY3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTZYwDQYJKoZIhvcNAQELBQADggEBAG44nXP5+9NAzN0g0CrlNaLgJPOC EJrGbNL1XJjnHSA0Ovnd8hmrsZVz0bRyVz1/m3Qc97EQl73efLwTkAOBjsMZbEEE LBc+lqNgeujkebm9PCOWwuetOQoAk7Hg+6gJWnzKbPB3HqzWP+qmr9kLmvURet7Q SdoADNGzYzv5SuQ16NfNiUVCyUrxkw1h+8yytzx+4LeB8xB94EJdJuuf/mS5tdZB tWrSnDlC8g9WCN5lJzACrBvnLA79RvcN9KyV+Zf5YQD6g+kae6/7aX02dK9NgLF2 j9kvzu8Tsn7wrCs0r01kNmhKo7odQXWX5wk2mejAkwbjrKbvmt0UoqJBNeo= -----END CERTIFICATE-----Generated at Mon May 12 21:43:14 2025 by rpki-client