$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67121d2f-f3b8-4002-9880-4ceb53b060ef.roa File: 67121d2f-f3b8-4002-9880-4ceb53b060ef.roa (raw, json) Hash identifier: ADd6WcpUTRnoO1yaPq4pfkqfN1Gn3nnlHJGHE1yP5jM= Subject key identifier: 9B:A0:43:F4:45:4E:BC:D8:88:40:0E:D7:71:D3:E4:5B:89:30:3D:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E598EE60601A53FFC0AC4A2E5D9AA6586F97FDB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67121d2f-f3b8-4002-9880-4ceb53b060ef.roa Signing time: Sat 10 May 2025 00:31:50 +0000 ROA not before: Sat 10 May 2025 00:31:50 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:59:8e:e6:06:01:a5:3f:fc:0a:c4:a2:e5:d9:aa:65:86:f9:7f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:31:50 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=301eb444f3cb95be7cd1d73573bd6d18e8981a8abe88198729527bf870b673b6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:4c:17:62:fa:1c:73:50:c2:a6:f2:cd:20: e8:21:b1:6c:47:f1:6f:78:51:ee:b2:b8:96:6c:46: bb:a1:0a:f5:fa:a3:ad:be:b4:df:63:43:b4:77:dd: 1c:90:11:ec:b6:4c:ae:8f:ce:ae:d0:8e:5a:14:4d: 81:ac:fd:6f:51:cf:3e:60:7d:24:3b:22:d3:0d:d7: 85:6c:b2:3d:93:de:ef:10:89:d0:9e:ed:14:04:12: 7b:b1:65:b6:e7:03:fb:b3:b8:d5:8c:5d:ae:2d:ca: 2c:b4:20:00:80:78:21:cd:ef:0c:66:b8:66:94:32: a9:93:da:70:6d:ff:0a:8d:93:0e:ac:99:3b:76:8d: a2:b0:9f:bc:80:5f:98:86:66:9a:44:c8:97:54:6c: 4b:d9:00:4b:76:d6:41:8e:d5:87:c7:d1:88:e5:25: cf:42:b9:6c:b7:49:af:bf:82:9d:9c:20:04:7b:1e: e4:63:42:7e:e8:af:8d:e6:3f:2b:49:8d:1c:93:d3: a6:c5:fd:7a:f9:1e:48:c2:0e:f7:82:d8:f7:0a:3f: 82:d4:ee:b8:64:a8:bb:64:bb:0e:40:00:4e:96:94: 1e:ed:e3:74:31:e7:12:39:6b:3c:a1:a3:25:d0:0c: dd:aa:4e:b0:95:f4:4d:a6:fe:a3:bd:66:30:2d:1b: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A0:43:F4:45:4E:BC:D8:88:40:0E:D7:71:D3:E4:5B:89:30:3D:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67121d2f-f3b8-4002-9880-4ceb53b060ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.96.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:c5:d9:7d:a6:0e:0d:aa:7a:71:35:78:f3:b9:ba:24:ac:0f: fe:d6:3b:f3:78:d1:12:73:01:bd:e6:3d:5f:30:1a:9e:ee:1e: dd:e4:31:d2:4a:e5:ff:31:b3:bc:97:80:c1:85:60:0c:31:31: a0:5c:75:3b:ec:93:74:b4:b1:82:03:25:b8:01:f5:42:c8:2a: 6e:1c:71:7a:6d:bb:16:09:ab:0e:f9:cf:26:dd:0b:f6:52:24: 96:32:7d:ed:c7:f8:59:84:2b:81:06:1a:b4:2e:cb:61:1f:55: f0:f5:30:bb:3b:7b:64:5e:ab:9e:d7:b4:e0:52:a5:5a:59:ec: fe:ab:95:15:5f:ee:fb:f2:26:b1:4d:eb:ed:a5:c7:5d:38:8a: cd:08:f0:53:8e:03:33:72:b9:fa:46:f5:1d:1e:8b:b8:2d:c0: ce:c0:bf:70:59:fa:62:83:07:e5:10:b1:81:86:43:f8:e0:e6: bf:f3:42:29:59:e4:53:ec:45:19:eb:9a:d8:b1:9b:56:e7:f7: 4c:b6:f9:43:11:c4:e8:c6:63:6e:66:42:1a:39:60:03:ae:7d: c1:57:e0:4a:11:a8:c7:25:2f:20:38:8a:a8:2a:f8:22:e3:71: a0:90:c8:a1:68:5d:9e:55:43:d8:7e:8d:16:52:85:70:f0:66: fe:b4:ab:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDlmO5gYBpT/8CsSi5dmqZYb5f9swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAzMTUwWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDFlYjQ0NGYzY2I5NWJlN2NkMWQ3MzU3M2JkNmQxOGU4 OTgxYThhYmU4ODE5ODcyOTUyN2JmODcwYjY3M2I2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnn0wXYvocc1DCpvLNIOghsWxH8W94Ue6yuJZsRruhCvX6 o62+tN9jQ7R33RyQEey2TK6Pzq7QjloUTYGs/W9Rzz5gfSQ7ItMN14Vssj2T3u8Q idCe7RQEEnuxZbbnA/uzuNWMXa4tyiy0IACAeCHN7wxmuGaUMqmT2nBt/wqNkw6s mTt2jaKwn7yAX5iGZppEyJdUbEvZAEt21kGO1YfH0YjlJc9CuWy3Sa+/gp2cIAR7 HuRjQn7or43mPytJjRyT06bF/Xr5HkjCDveC2PcKP4LU7rhkqLtkuw5AAE6WlB7t 43Qx5xI5azyhoyXQDN2qTrCV9E2m/qO9ZjAtG5vHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUm6BD9EVOvNiIQA7XcdPkW4kwPdQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3MTIxZDJmLWYzYjgtNDAwMi05ODgwLTRjZWI1M2IwNjBlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlmAwDQYJKoZIhvcNAQELBQADggEBAC3F2X2mDg2qenE1ePO5uiSsD/7W O/N40RJzAb3mPV8wGp7uHt3kMdJK5f8xs7yXgMGFYAwxMaBcdTvsk3S0sYIDJbgB 9ULIKm4ccXptuxYJqw75zybdC/ZSJJYyfe3H+FmEK4EGGrQuy2EfVfD1MLs7e2Re q57XtOBSpVpZ7P6rlRVf7vvyJrFN6+2lx104is0I8FOOAzNyufpG9R0ei7gtwM7A v3BZ+mKDB+UQsYGGQ/jg5r/zQilZ5FPsRRnrmtixm1bn90y2+UMRxOjGY25mQho5 YAOufcFX4EoRqMclLyA4iqgq+CLjcaCQyKFoXZ5VQ9h+jRZShXDwZv60qzU= -----END CERTIFICATE-----Generated at Mon May 12 18:20:59 2025 by rpki-client