$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/197db50e-a85a-4e13-b89b-2e27b2a468c8.roa File: 197db50e-a85a-4e13-b89b-2e27b2a468c8.roa (raw, json) Hash identifier: icuVKxESzHQXC9wdR603qfXhOi0+TWPb75RFpWGlnJg= Subject key identifier: 4D:46:14:43:B0:3E:9B:C7:0B:5B:B7:46:45:43:E4:9E:13:7A:26:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 727904783943C66737BC78D2323C7E24DBA2B22E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/197db50e-a85a-4e13-b89b-2e27b2a468c8.roa Signing time: Sat 10 May 2025 00:20:54 +0000 ROA not before: Sat 10 May 2025 00:20:54 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:79:04:78:39:43:c6:67:37:bc:78:d2:32:3c:7e:24:db:a2:b2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:20:54 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=80949eba941e3f47b11b50fb69cc87214ed9ab6655df6aaa39c881a704d8c44e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:95:51:34:48:10:f4:95:ea:56:05:29:e6: 96:09:ec:e1:af:cd:33:f7:8c:db:a3:05:14:08:66: 08:36:f3:bb:73:1e:09:71:83:7a:d5:2d:8f:e1:50: 14:ba:4e:e2:d5:02:6e:61:ba:91:89:4f:a1:6b:52: 9c:48:20:da:62:62:d4:4e:9e:7e:0c:ba:ce:fb:82: d9:7c:f8:71:a1:2d:89:33:d2:4b:33:b6:41:4f:7c: 73:fe:1d:ce:c8:0f:82:c2:71:e1:51:9c:b9:be:80: b5:57:4a:a8:8e:90:9a:fd:4f:64:10:53:ad:8c:a0: 4f:43:4c:80:14:e4:4f:b5:98:bb:cf:9f:61:4a:20: 88:5b:da:fd:a8:ec:0e:06:ce:00:b5:e6:15:ee:07: 16:db:f8:15:fb:2d:31:8d:a2:6e:52:c8:ae:95:a8: 51:bc:1a:9b:ba:77:34:33:96:b6:bc:46:05:37:b0: 4e:71:b8:39:65:b2:11:ac:0f:1c:0c:02:35:93:bc: 93:7a:05:80:ac:98:19:04:c7:e7:91:17:15:b3:c0: d2:4a:8c:6b:58:de:42:e6:7a:b0:99:4c:f4:08:4a: a1:d3:47:1c:95:fc:a7:74:42:75:bf:24:3c:1c:94: a3:c2:a9:94:66:17:ea:12:ac:52:e9:bc:6e:30:ec: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:46:14:43:B0:3E:9B:C7:0B:5B:B7:46:45:43:E4:9E:13:7A:26:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/197db50e-a85a-4e13-b89b-2e27b2a468c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.104.0/23 Signature Algorithm: sha256WithRSAEncryption d6:64:49:5b:63:78:01:e3:08:41:e3:bb:0e:7f:c7:b8:29:99: 3c:01:5a:8f:99:8a:b9:96:ed:8d:c2:1f:e6:50:e5:e4:8a:14: 9f:84:9c:a4:0a:c0:af:71:4f:d6:09:eb:50:be:fb:66:ed:55: 57:a4:47:0b:68:fe:fb:3b:27:e9:df:b5:df:4c:26:3e:0a:54: 57:fa:ae:ec:cb:9d:b5:3d:d5:86:f7:d6:6f:94:7f:e3:e7:ae: ab:2b:5c:51:8b:77:9b:fb:c6:d5:1f:33:ba:cd:05:c9:72:30: a4:2b:d1:09:28:63:66:05:5d:a7:96:ed:d7:f4:82:b0:e8:95: 48:4f:30:84:af:4a:dc:69:3c:b1:df:d5:82:4c:7b:4c:48:37: 48:00:b5:8f:ee:17:e3:30:72:e3:9f:1d:a7:23:15:e1:d1:b4: e9:98:f1:72:ea:a7:2f:92:03:e7:71:a0:cd:2f:50:b3:4a:05: da:07:f6:2e:b5:db:ca:48:79:76:3b:ed:61:1e:e4:e8:26:26: 97:63:e7:07:52:73:94:ec:60:d3:be:74:85:94:9a:53:d1:e4: 02:7e:73:00:90:56:72:70:67:e3:c1:d7:4f:22:10:2e:82:34: 84:78:c8:47:51:63:1f:0e:f8:9b:fb:c9:ba:58:29:51:1d:62: 97:0b:26:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcnkEeDlDxmc3vHjSMjx+JNuisi4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAyMDU0WhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDk0OWViYTk0MWUzZjQ3YjExYjUwZmI2OWNjODcyMTRl ZDlhYjY2NTVkZjZhYWEzOWM4ODFhNzA0ZDhjNDRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH8ZVRNEgQ9JXqVgUp5pYJ7OGvzTP3jNujBRQIZgg287tz Hglxg3rVLY/hUBS6TuLVAm5hupGJT6FrUpxIINpiYtROnn4Mus77gtl8+HGhLYkz 0ksztkFPfHP+Hc7ID4LCceFRnLm+gLVXSqiOkJr9T2QQU62MoE9DTIAU5E+1mLvP n2FKIIhb2v2o7A4GzgC15hXuBxbb+BX7LTGNom5SyK6VqFG8Gpu6dzQzlra8RgU3 sE5xuDllshGsDxwMAjWTvJN6BYCsmBkEx+eRFxWzwNJKjGtY3kLmerCZTPQISqHT RxyV/Kd0QnW/JDwclKPCqZRmF+oSrFLpvG4w7Dl5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTUYUQ7A+m8cLW7dGRUPknhN6Jl0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5N2RiNTBlLWE4NWEtNGUxMy1iODliLTJlMjdiMmE0NjhjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlmgwDQYJKoZIhvcNAQELBQADggEBANZkSVtjeAHjCEHjuw5/x7gpmTwB Wo+ZirmW7Y3CH+ZQ5eSKFJ+EnKQKwK9xT9YJ61C++2btVVekRwto/vs7J+nftd9M Jj4KVFf6ruzLnbU91Yb31m+Uf+PnrqsrXFGLd5v7xtUfM7rNBclyMKQr0QkoY2YF XaeW7df0grDolUhPMISvStxpPLHf1YJMe0xIN0gAtY/uF+MwcuOfHacjFeHRtOmY 8XLqpy+SA+dxoM0vULNKBdoH9i6128pIeXY77WEe5OgmJpdj5wdSc5TsYNO+dIWU mlPR5AJ+cwCQVnJwZ+PB108iEC6CNIR4yEdRYx8O+Jv7ybpYKVEdYpcLJnM= -----END CERTIFICATE-----Generated at Sat May 10 13:34:25 2025 by rpki-client