$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa File: 15dd7280-6c64-4c5f-9920-b8e295ae5383.roa (raw, json) Hash identifier: 1YokqR3wMzzfonb/WUIJuF3Qn4P4BmfwJSA9TOsDe8M= Subject key identifier: 81:66:9D:BF:E9:9C:F8:6B:72:CE:1B:BA:60:71:A7:C1:A7:62:8D:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FFA8BB459F725E2357703F9D63CB615B4B3DF2B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa Signing time: Sat 03 May 2025 00:51:37 +0000 ROA not before: Sat 03 May 2025 00:51:37 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fa:8b:b4:59:f7:25:e2:35:77:03:f9:d6:3c:b6:15:b4:b3:df:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:51:37 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=dcbd40c86464feb843e2324b3131f97dfe3aff2a51a50f74bcab61641040c164, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:db:2b:84:50:19:b7:13:c4:21:b5:a1:58: 0b:a3:d2:bf:f9:97:81:aa:b9:9e:fb:d7:da:ce:66: 5a:00:7b:35:6e:6f:45:cc:c9:fe:12:dc:8a:ae:9c: 5d:f6:e3:bc:ed:0c:79:60:a4:6d:b7:9d:75:c2:71: db:7c:9f:0b:e7:3d:13:74:83:58:93:f9:74:d9:df: 63:6b:b2:da:cc:8c:af:eb:a3:c3:67:f6:8d:bb:82: 8e:ed:37:6c:17:ff:da:db:36:c1:30:d1:4d:6b:38: 66:e2:7d:da:93:73:90:b9:cd:0b:0b:14:a5:17:72: f9:6e:d0:e2:1e:e3:05:b0:0e:0b:83:7b:76:53:f8: 5c:80:44:42:23:0d:b7:ee:18:19:1d:97:6b:b2:22: 0f:35:44:93:f6:bc:26:94:c2:5a:53:c7:c4:b0:43: 6d:4c:37:6f:07:20:49:09:7b:a0:c4:da:48:b9:81: ba:e3:b0:47:9c:46:f4:a4:72:b6:6e:d0:70:90:90: de:86:9c:e5:90:d6:cc:72:01:2c:93:ed:46:da:db: 2f:39:fc:e8:6e:ad:86:38:59:67:8b:6c:1a:76:36: 55:cb:e3:e4:b9:6f:3c:92:81:9c:66:ef:30:1b:5f: 58:24:ba:14:27:69:27:a2:0a:0d:69:98:c0:7b:6b: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:66:9D:BF:E9:9C:F8:6B:72:CE:1B:BA:60:71:A7:C1:A7:62:8D:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.233.0/24 Signature Algorithm: sha256WithRSAEncryption 86:00:6e:a3:5d:e9:1a:e4:32:d5:87:c3:46:68:0d:b6:6c:ff: 60:06:ca:04:c3:86:8e:e8:2e:01:6d:8b:bb:18:b6:ef:ca:1d: 63:41:2a:2f:4d:7e:f1:e6:26:29:eb:db:21:8b:5b:1e:77:a9: 7c:29:7b:93:8f:46:1c:dd:86:8d:3d:c3:dc:38:d7:73:ff:67: a2:c3:cb:b1:21:b8:25:02:c5:e3:86:f0:1a:6e:ce:2f:e5:6b: d3:eb:2f:df:be:79:b4:77:43:d4:5e:ef:79:ef:cc:ab:14:bc: 75:4c:15:33:2b:ef:86:cc:22:a4:1c:92:58:2e:cb:aa:e4:bb: ae:80:56:0e:e8:07:10:ff:88:06:98:c4:67:bd:34:dc:e4:f6: 70:20:eb:62:79:7f:9d:5c:b9:0e:42:c1:5c:ac:ed:9c:28:c0: aa:b5:c5:cd:a2:a8:3f:fb:d5:6e:a8:a1:31:e7:2d:75:02:a3: 3e:0f:56:c2:3a:0f:25:80:a1:9e:a6:ed:07:e5:f7:95:3a:8f: 3b:5f:4a:1c:88:42:92:07:fa:63:f9:5b:33:fa:a9:a9:72:7e: 15:4a:50:0b:6e:d8:63:31:d0:9f:81:27:4b:dd:96:ce:91:90: 55:de:ab:07:16:48:61:bc:8e:63:37:85:51:6c:2c:ae:5c:05: 40:0e:9c:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT/qLtFn3JeI1dwP51jy2FbSz3yswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDA1MTM3WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2JkNDBjODY0NjRmZWI4NDNlMjMyNGIzMTMxZjk3ZGZl M2FmZjJhNTFhNTBmNzRiY2FiNjE2NDEwNDBjMTY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzDNsrhFAZtxPEIbWhWAuj0r/5l4GquZ7719rOZloAezVu b0XMyf4S3IqunF3247ztDHlgpG23nXXCcdt8nwvnPRN0g1iT+XTZ32NrstrMjK/r o8Nn9o27go7tN2wX/9rbNsEw0U1rOGbifdqTc5C5zQsLFKUXcvlu0OIe4wWwDguD e3ZT+FyAREIjDbfuGBkdl2uyIg81RJP2vCaUwlpTx8SwQ21MN28HIEkJe6DE2ki5 gbrjsEecRvSkcrZu0HCQkN6GnOWQ1sxyASyT7Uba2y85/OhurYY4WWeLbBp2NlXL 4+S5bzySgZxm7zAbX1gkuhQnaSeiCg1pmMB7a6FlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgWadv+mc+Gtyzhu6YHGnwadijTwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1ZGQ3MjgwLTZjNjQtNGM1Zi05OTIwLWI4ZTI5NWFlNTM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTekwDQYJKoZIhvcNAQELBQADggEBAIYAbqNd6RrkMtWHw0ZoDbZs/2AG ygTDho7oLgFti7sYtu/KHWNBKi9NfvHmJinr2yGLWx53qXwpe5OPRhzdho09w9w4 13P/Z6LDy7EhuCUCxeOG8Bpuzi/la9PrL9++ebR3Q9Re73nvzKsUvHVMFTMr74bM IqQcklguy6rku66AVg7oBxD/iAaYxGe9NNzk9nAg62J5f51cuQ5CwVys7ZwowKq1 xc2iqD/71W6ooTHnLXUCoz4PVsI6DyWAoZ6m7Qfl95U6jztfShyIQpIH+mP5WzP6 qalyfhVKUAtu2GMx0J+BJ0vdls6RkFXeqwcWSGG8jmM3hVFsLK5cBUAOnFg= -----END CERTIFICATE-----Generated at Sun May 11 12:33:21 2025 by rpki-client