$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa File: 4644ff0b-fedf-419f-93c4-1665a93ad50b.roa (raw, json) Hash identifier: XuQeQtTLZd8zVwr+PsZcBUbRqkRXcdPg5uCRs3Ynkw8= Subject key identifier: 0D:5B:D5:8A:D1:13:94:DB:1E:4F:1A:69:1A:D1:78:EE:B8:BC:22:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21919691D48B572D94C4B384C78703990D38BA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa Signing time: Wed 04 Jun 2025 00:41:38 +0000 ROA not before: Wed 04 Jun 2025 00:41:38 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:91:96:91:d4:8b:57:2d:94:c4:b3:84:c7:87:03:99:0d:38:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 4 00:41:38 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=c03c249807bc9292d7b97ec711433e97794055894a3a86a3cac20c4e85487889, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:e1:ba:3b:7a:76:21:77:68:d9:51:13:32: 6a:7b:0c:ed:68:d9:1a:a3:d9:6c:2c:18:cb:20:ff: 7f:0b:85:3c:79:e3:bc:f6:43:d4:77:7b:4f:90:e8: 69:07:5e:de:2d:6f:00:0e:e6:d5:ec:1e:75:1b:43: 2c:c9:26:0f:99:10:e6:b9:25:b2:ba:37:9c:14:4c: f7:e9:7a:d4:06:6e:55:d9:59:fd:ad:89:77:13:b1: af:6a:8d:8e:e9:e1:e7:64:60:c1:ec:d6:dd:d6:c4: 4a:c4:12:33:80:70:ff:39:1c:46:16:69:06:d6:a3: 85:60:23:8e:40:58:08:4c:6d:52:b8:38:90:db:15: 01:8d:50:99:ec:7b:ee:fe:a2:8d:a8:e8:49:d0:af: 0c:72:00:0e:ee:73:d1:ad:29:18:1a:2b:06:be:56: 9c:81:19:74:77:e4:10:1c:b9:14:4c:c7:97:54:b0: 83:08:27:ba:39:e9:87:87:52:f5:47:ee:cf:cf:46: 97:b8:66:98:f8:a5:33:d0:46:ba:e4:f9:6d:14:21: 3e:34:52:f8:f1:a0:c0:5d:44:a4:ea:b7:52:61:35: 7c:02:36:78:dd:60:46:fb:ae:8f:2b:f3:1c:d6:82: dc:db:2e:1e:0c:20:f0:21:eb:f0:26:4f:d8:d2:ec: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5B:D5:8A:D1:13:94:DB:1E:4F:1A:69:1A:D1:78:EE:B8:BC:22:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.80.0/21 Signature Algorithm: sha256WithRSAEncryption ae:a0:7c:5d:c9:62:79:6c:b4:14:95:5d:cc:c1:8e:79:34:c8: cf:72:6a:d2:49:a3:dd:ea:95:30:2f:9f:80:af:0b:2f:cb:50: c3:87:43:64:7e:04:8d:74:6b:77:5f:29:5a:59:64:06:c6:96: 73:f3:8b:92:ba:ad:bd:ef:c2:62:43:a7:82:de:cf:45:54:d8: 6a:10:05:83:a7:20:6f:a5:c5:19:fe:e7:f7:48:fa:3b:b9:94: ba:94:d1:38:da:fe:7b:0a:24:17:20:94:8f:13:f1:12:c4:cf: b9:5c:1a:2f:c9:f3:a3:66:a4:71:46:15:be:f2:ea:22:fb:67: c4:55:b0:d8:86:9d:8e:e7:e7:82:29:5e:61:0e:7c:65:0f:8f: 00:a1:9f:41:c6:2d:6e:1d:06:83:7a:c1:ff:fc:58:d9:c3:b0: 6e:72:07:5a:d1:8d:e5:bd:17:03:e9:fc:19:a9:d7:86:ca:b6: 3e:13:2c:d6:eb:a2:10:0e:c7:0b:46:7c:cf:b5:96:d4:00:75: 4a:dd:ba:61:9c:a1:31:0b:89:20:68:66:f8:ae:0b:04:73:27: cd:ff:b6:58:22:d9:96:2c:0c:d8:1c:43:33:5c:85:3c:34:66: 05:e2:0f:8a:13:a5:91:95:25:ca:1c:97:ef:1c:3b:ab:a2:c9: a4:8b:18:48 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITIZGWkdSLVy2UxLOEx4cDmQ04ujANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA2MDQwMDQxMzhaFw0yNTA3MDkyMzU5NTla MHoxSTBHBgNVBAUTQGMwM2MyNDk4MDdiYzkyOTJkN2I5N2VjNzExNDMzZTk3Nzk0 MDU1ODk0YTNhODZhM2NhYzIwYzRlODU0ODc4ODkxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKsq4bo7enYhd2jZURMyansM7WjZGqPZbCwYyyD/fwuFPHnj vPZD1Hd7T5DoaQde3i1vAA7m1ewedRtDLMkmD5kQ5rklsro3nBRM9+l61AZuVdlZ /a2JdxOxr2qNjunh52RgwezW3dbESsQSM4Bw/zkcRhZpBtajhWAjjkBYCExtUrg4 kNsVAY1Qmex77v6ijajoSdCvDHIADu5z0a0pGBorBr5WnIEZdHfkEBy5FEzHl1Sw gwgnujnph4dS9Ufuz89Gl7hmmPilM9BGuuT5bRQhPjRS+PGgwF1EpOq3UmE1fAI2 eN1gRvuujyvzHNaC3NsuHgwg8CHr8CZP2NLsvtUCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQNW9WK0ROU2x5PGmka0XjuuLwinjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNDY0NGZmMGItZmVkZi00MTlmLTkzYzQtMTY2NWE5M2FkNTBiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA2OXUDANBgkqhkiG9w0BAQsFAAOCAQEArqB8XclieWy0FJVdzMGOeTTIz3Jq 0kmj3eqVMC+fgK8LL8tQw4dDZH4EjXRrd18pWllkBsaWc/OLkrqtve/CYkOngt7P RVTYahAFg6cgb6XFGf7n90j6O7mUupTRONr+ewokFyCUjxPxEsTPuVwaL8nzo2ak cUYVvvLqIvtnxFWw2IadjufngileYQ58ZQ+PAKGfQcYtbh0Gg3rB//xY2cOwbnIH WtGN5b0XA+n8GanXhsq2PhMs1uuiEA7HC0Z8z7WW1AB1St26YZyhMQuJIGhm+K4L BHMnzf+2WCLZliwM2BxDM1yFPDRmBeIPihOlkZUlyhyX7xw7q6LJpIsYSA== -----END CERTIFICATE-----Generated at Sun Jun 29 07:25:46 2025 by rpki-client