$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712a2fc7-0d39-4161-9b91-32ead9a8c791.roa File: 712a2fc7-0d39-4161-9b91-32ead9a8c791.roa (raw, json) Hash identifier: bU8IxuLPyW5SYyErIDegtYMQ2i3bkmLQqLRZPRfoUAs= Subject key identifier: 3A:92:9B:D4:A6:3B:F5:B1:8A:CA:C4:30:72:39:D3:2B:14:8B:1E:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A1975178E1755334E3E6CA458C385003A386D15 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712a2fc7-0d39-4161-9b91-32ead9a8c791.roa Signing time: Sat 10 May 2025 00:31:42 +0000 ROA not before: Sat 10 May 2025 00:31:42 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:19:75:17:8e:17:55:33:4e:3e:6c:a4:58:c3:85:00:3a:38:6d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:31:42 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=c3028b828c770ac62e56ea6ebb9b119241f625b00845c21ccb0baaaceedbfd80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:d7:96:1d:af:6f:a8:cd:dd:2b:0f:88:09: 72:f6:b5:28:d6:08:f7:51:53:f6:95:a1:7c:37:11: a4:91:81:0d:9b:bb:5c:d0:92:2b:ca:8c:f7:f4:23: 4d:a9:8c:d2:51:67:33:3f:38:ce:1f:00:85:07:98: 8a:34:79:12:2e:89:d2:be:d8:b0:51:03:c9:be:8e: f3:bc:76:0a:5c:f3:19:74:a2:0a:7b:1e:c4:91:1a: c6:74:a6:95:9a:10:55:a8:ae:3f:b7:7f:c4:3e:c6: dc:2f:83:a1:ed:f3:47:21:6d:60:db:d6:72:cd:ea: 20:a9:61:a0:3b:4f:d4:5b:d0:7d:87:1d:81:33:e4: 70:1b:44:a1:e7:08:18:2b:0f:77:79:67:46:fc:cf: 8b:81:b3:0e:91:88:46:cb:6f:ca:6c:5b:49:13:e2: 47:0c:d8:82:6f:6c:f9:cf:fb:56:c6:76:88:c3:76: de:18:41:0d:dc:4d:d3:e2:e5:b6:19:32:c3:9c:d3: 28:84:06:2f:fb:2c:65:e0:d9:ee:f5:c8:70:2b:a8: 08:7c:81:cc:55:f6:61:2e:f9:d0:df:49:e0:59:ce: 5a:bf:f8:05:c7:dc:79:7b:3d:e4:ee:f2:fe:fb:71: 97:74:cc:5f:77:43:c7:b8:4c:28:bb:eb:7c:44:d9: cc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:92:9B:D4:A6:3B:F5:B1:8A:CA:C4:30:72:39:D3:2B:14:8B:1E:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712a2fc7-0d39-4161-9b91-32ead9a8c791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.0.0/23 Signature Algorithm: sha256WithRSAEncryption 27:2a:cb:46:3f:50:2b:91:69:5a:22:57:94:57:e7:f5:b0:46: 4f:a6:39:15:22:e1:37:d7:01:ef:16:c1:b5:14:87:8e:91:09: 11:a4:0b:c2:38:2f:dc:cd:a1:42:1e:f7:d1:54:55:5f:4f:18: 8d:5b:7d:4c:25:4d:a3:ee:2e:ac:32:b7:e8:a0:d5:54:c0:18: a9:23:f8:7e:36:d0:24:77:b9:24:3c:cb:0a:bc:69:62:f1:6b: d9:de:78:ee:69:97:bf:4b:bc:95:7a:96:19:0e:da:2e:09:40: 29:92:47:b2:62:a1:24:44:2b:33:d7:03:0e:cd:56:07:64:00: 48:78:23:86:2b:58:0c:57:e3:0e:fc:af:b9:e3:22:95:09:d7: 71:fc:74:98:37:d1:05:7c:66:bc:f0:a1:24:fd:d7:ad:d0:4b: 84:d1:6f:46:44:a8:e5:f9:1d:72:2d:f3:31:9a:29:56:7e:81: dc:0c:5f:36:78:28:c7:cd:61:1f:bb:1c:80:16:c6:03:38:8f: f3:13:52:32:e7:e5:2b:08:0c:22:27:ed:a7:d1:b3:dc:93:aa: e1:c5:e0:bf:b6:cd:3b:ab:6a:fa:2b:98:5c:08:9b:bd:34:d1: 0d:7e:e4:e5:b6:50:9a:76:fd:c5:91:b2:7c:23:07:e1:ba:ff: 51:e2:4b:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUehl1F44XVTNOPmykWMOFADo4bRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAzMTQyWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzAyOGI4MjhjNzcwYWM2MmU1NmVhNmViYjliMTE5MjQx ZjYyNWIwMDg0NWMyMWNjYjBiYWFhY2VlZGJmZDgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgL9eWHa9vqM3dKw+ICXL2tSjWCPdRU/aVoXw3EaSRgQ2b u1zQkivKjPf0I02pjNJRZzM/OM4fAIUHmIo0eRIuidK+2LBRA8m+jvO8dgpc8xl0 ogp7HsSRGsZ0ppWaEFWorj+3f8Q+xtwvg6Ht80chbWDb1nLN6iCpYaA7T9Rb0H2H HYEz5HAbRKHnCBgrD3d5Z0b8z4uBsw6RiEbLb8psW0kT4kcM2IJvbPnP+1bGdojD dt4YQQ3cTdPi5bYZMsOc0yiEBi/7LGXg2e71yHArqAh8gcxV9mEu+dDfSeBZzlq/ +AXH3Hl7PeTu8v77cZd0zF93Q8e4TCi763xE2cxhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOpKb1KY79bGKysQwcjnTKxSLHuMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxMmEyZmM3LTBkMzktNDE2MS05YjkxLTMyZWFkOWE4Yzc5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlgAwDQYJKoZIhvcNAQELBQADggEBACcqy0Y/UCuRaVoiV5RX5/WwRk+m ORUi4TfXAe8WwbUUh46RCRGkC8I4L9zNoUIe99FUVV9PGI1bfUwlTaPuLqwyt+ig 1VTAGKkj+H420CR3uSQ8ywq8aWLxa9neeO5pl79LvJV6lhkO2i4JQCmSR7JioSRE KzPXAw7NVgdkAEh4I4YrWAxX4w78r7njIpUJ13H8dJg30QV8ZrzwoST9163QS4TR b0ZEqOX5HXIt8zGaKVZ+gdwMXzZ4KMfNYR+7HIAWxgM4j/MTUjLn5SsIDCIn7afR s9yTquHF4L+2zTuravormFwIm7000Q1+5OW2UJp2/cWRsnwjB+G6/1HiS7E= -----END CERTIFICATE-----Generated at Sun May 11 09:39:52 2025 by rpki-client