$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e78d06-eac0-4f0b-9226-d243d21015c3.roa File: 81e78d06-eac0-4f0b-9226-d243d21015c3.roa (raw, json) Hash identifier: pKwJk5scDpZR0HOL+jtR25nSuJRZgzXMAVwjVHxliIw= Subject key identifier: F9:7F:09:17:DE:30:E5:01:31:5C:5B:FA:52:46:A3:78:3D:99:5E:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31EB18411E1794CC13E439CC6B18F6319FB5FB26 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e78d06-eac0-4f0b-9226-d243d21015c3.roa Signing time: Sat 10 May 2025 00:40:32 +0000 ROA not before: Sat 10 May 2025 00:40:32 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:eb:18:41:1e:17:94:cc:13:e4:39:cc:6b:18:f6:31:9f:b5:fb:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:40:32 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=79d39a3db75f3f678bf689de6e19260f3bc258d2e5d2730a111b2adc959ab701, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:73:a5:a4:f7:62:ac:32:42:2f:89:b7:65: 4c:85:e3:39:4f:b9:c5:b4:91:43:5a:59:ba:a1:90: 5d:43:40:1a:33:a7:27:54:ee:65:99:0d:48:7a:15: 24:6e:fb:02:44:2a:6f:51:c6:b5:ba:49:e6:fa:52: fe:2a:dd:5b:a2:ab:be:cd:39:ae:74:0f:b8:92:ee: c7:6b:aa:c1:87:68:a7:9c:fe:7f:07:3e:71:bc:b8: 09:1d:cd:38:d2:a7:aa:c9:95:b2:79:30:9d:ef:c3: a3:ba:80:d1:2c:ac:ef:95:49:39:79:1f:a7:e1:c7: 4e:28:28:0c:61:4e:ee:a7:c8:0c:57:ce:ea:39:c5: 59:9b:0e:30:ab:fb:1b:6d:da:ba:4e:28:7b:42:b9: 86:41:fc:bf:94:02:eb:14:3b:0c:af:09:e2:51:6f: 2f:d4:2f:bf:c9:19:e2:09:4b:86:b0:e1:34:7c:41: 98:6a:35:e3:36:ae:9e:24:82:20:c1:40:47:87:dc: ad:73:ee:90:e9:b3:e5:cc:f8:40:97:3f:69:d3:b4: 61:43:9b:b2:53:71:01:f7:7a:5d:d0:cd:49:a5:86: 8d:b6:ee:0e:a4:ca:fe:b6:b4:3c:0c:5a:7c:d9:89: 62:23:9b:5a:74:f0:2b:50:4a:ea:a4:97:7b:ce:48: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:09:17:DE:30:E5:01:31:5C:5B:FA:52:46:A3:78:3D:99:5E:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e78d06-eac0-4f0b-9226-d243d21015c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.96.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:4a:5b:22:08:42:f5:74:51:1e:fa:eb:16:00:4c:c6:0a:bb: a3:df:ff:37:bd:15:71:c5:62:87:6d:77:45:14:45:66:5c:1f: 2e:26:1f:d1:2b:0d:1d:1b:d1:da:6b:9a:2f:b4:5e:c5:7b:65: bd:a9:e6:1e:c6:63:92:f0:37:32:07:bb:fc:89:43:b8:1b:45: a5:54:9d:35:57:75:27:bd:55:2a:60:e0:12:a8:9a:79:f9:ef: 52:2c:c2:51:c6:af:c8:67:de:6d:ed:0c:8f:58:ed:38:10:cb: eb:d2:b4:61:50:5e:45:a6:db:7b:fb:09:33:17:a6:a5:59:8c: 13:74:9c:2e:e3:b2:31:56:8a:ea:65:56:bc:06:6f:ca:85:cd: b0:44:ab:da:c6:45:c2:7c:7d:24:e8:38:02:c0:b1:eb:e5:18: d5:ea:9c:a4:2e:15:81:aa:72:30:d3:1f:52:11:b0:5f:b0:e4: d2:9a:e0:7e:84:d0:1b:2c:a4:f6:06:9b:d2:1b:a6:18:20:c8: dc:cf:62:b1:98:02:69:2a:8d:c5:ea:e2:ed:68:1b:10:56:33: 3a:a9:89:43:6b:c1:12:0c:4c:e9:9b:58:3a:9c:84:b7:fe:67: 67:58:80:07:49:6d:7c:4d:72:a5:b5:b0:71:6a:ab:59:b2:17: 6e:57:ba:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMesYQR4XlMwT5DnMaxj2MZ+1+yYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDA0MDMyWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWQzOWEzZGI3NWYzZjY3OGJmNjg5ZGU2ZTE5MjYwZjNi YzI1OGQyZTVkMjczMGExMTFiMmFkYzk1OWFiNzAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDj2HOlpPdirDJCL4m3ZUyF4zlPucW0kUNaWbqhkF1DQBoz pydU7mWZDUh6FSRu+wJEKm9RxrW6Seb6Uv4q3Vuiq77NOa50D7iS7sdrqsGHaKec /n8HPnG8uAkdzTjSp6rJlbJ5MJ3vw6O6gNEsrO+VSTl5H6fhx04oKAxhTu6nyAxX zuo5xVmbDjCr+xtt2rpOKHtCuYZB/L+UAusUOwyvCeJRby/UL7/JGeIJS4aw4TR8 QZhqNeM2rp4kgiDBQEeH3K1z7pDps+XM+ECXP2nTtGFDm7JTcQH3el3QzUmlho22 7g6kyv62tDwMWnzZiWIjm1p08CtQSuqkl3vOSIrLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+X8JF94w5QExXFv6UkajeD2ZXoEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxZTc4ZDA2LWVhYzAtNGYwYi05MjI2LWQyNDNkMjEwMTVjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl2AwDQYJKoZIhvcNAQELBQADggEBAGxKWyIIQvV0UR766xYATMYKu6Pf /ze9FXHFYodtd0UURWZcHy4mH9ErDR0b0dprmi+0XsV7Zb2p5h7GY5LwNzIHu/yJ Q7gbRaVUnTVXdSe9VSpg4BKomnn571IswlHGr8hn3m3tDI9Y7TgQy+vStGFQXkWm 23v7CTMXpqVZjBN0nC7jsjFWiuplVrwGb8qFzbBEq9rGRcJ8fSToOALAsevlGNXq nKQuFYGqcjDTH1IRsF+w5NKa4H6E0BsspPYGm9IbphggyNzPYrGYAmkqjcXq4u1o GxBWMzqpiUNrwRIMTOmbWDqchLf+Z2dYgAdJbXxNcqW1sHFqq1myF25XuiA= -----END CERTIFICATE-----Generated at Sun May 11 15:35:31 2025 by rpki-client