$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/900ade10-d80a-4f71-b1fd-5d0d6a9e697e.roa File: 900ade10-d80a-4f71-b1fd-5d0d6a9e697e.roa (raw, json) Hash identifier: 5BXsHQPUglOtoQUvak/qJwiP/lEB8SwIPU7mrLOGa+k= Subject key identifier: 6B:E6:E4:39:A6:5F:30:DF:21:89:39:39:CA:8D:DE:43:14:AC:D7:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2AF8FB3371919ECC8F2ABD127B9D623F93654036 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/900ade10-d80a-4f71-b1fd-5d0d6a9e697e.roa Signing time: Sat 03 May 2025 00:50:59 +0000 ROA not before: Sat 03 May 2025 00:50:59 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f8:fb:33:71:91:9e:cc:8f:2a:bd:12:7b:9d:62:3f:93:65:40:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:50:59 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=462e2371bdfb1118ce2f1d5e0cfa8a01ae23d1d271473b17749dab8daea7d977, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:ff:b0:c8:1f:a3:39:d1:4e:a0:c0:56:93: bc:1d:76:ce:f4:5d:bf:ca:9a:0e:e4:3a:d4:af:df: 8c:9b:b8:0a:71:b3:46:13:20:6c:3c:8f:6d:9e:ae: c9:0a:d9:1a:c0:30:af:db:a3:64:9a:50:0d:e4:40: ae:99:e2:82:a9:f1:9a:5a:5f:fb:9f:3a:fe:0a:43: ac:aa:8a:97:6e:79:4f:a6:af:94:70:d6:03:a5:d1: 67:90:a9:47:41:4e:bb:56:5d:e3:43:b2:fa:40:ae: e6:5f:d8:be:7c:1f:42:17:c4:5a:40:f2:27:6e:4f: ba:47:75:14:b8:70:00:93:37:e9:91:68:2a:03:63: 5b:3d:a0:28:22:f9:0f:29:23:34:ae:2c:4a:72:5f: f8:8d:a0:75:71:0a:86:a4:f4:de:be:6b:74:9f:3e: 75:b1:48:eb:29:ec:d3:bd:77:de:fd:c1:20:00:1c: dd:91:2a:1f:b3:6f:c6:6f:b5:d5:89:1d:81:ef:98: 4a:fe:22:c8:ae:b4:e2:d6:cb:2f:93:f2:01:fc:4c: 8b:82:6c:96:2f:4e:b6:1b:07:d6:52:fd:23:0a:0b: c1:ac:15:e0:dc:60:f0:e6:5b:f4:2b:49:0a:c0:a5: 37:7f:70:dd:96:0a:aa:e2:48:1c:e8:ad:a4:0c:bd: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E6:E4:39:A6:5F:30:DF:21:89:39:39:CA:8D:DE:43:14:AC:D7:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/900ade10-d80a-4f71-b1fd-5d0d6a9e697e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.253.0/24 Signature Algorithm: sha256WithRSAEncryption 30:b7:99:66:4b:32:dc:f8:7f:0b:7f:de:59:ca:31:5a:7a:ce: b9:3a:38:1a:a8:15:e8:59:ed:b1:85:43:dc:50:51:d2:e0:85: 1a:15:83:0a:db:2a:86:3b:ba:8d:ff:b2:7e:e5:39:7d:d1:a8: bc:f0:85:55:28:a0:03:26:64:5e:92:51:33:ec:d1:22:c9:00: fb:4e:db:57:09:73:4a:7e:e8:02:d4:19:87:80:61:d1:aa:a6: 62:41:4d:1c:bc:47:b0:4d:28:63:f0:bb:e3:31:cd:30:a9:03: d5:83:3d:c0:9d:d2:ec:2e:37:c3:8b:d1:42:06:b3:70:2c:2d: 40:9c:28:75:81:6a:4b:db:33:98:75:4b:db:1c:02:fe:20:d2: 21:82:aa:6e:bb:c4:d8:b5:0d:53:5f:8f:b3:e7:9a:91:3d:c3: 52:f3:fd:35:79:c2:13:8c:91:e4:e0:be:d5:3b:0f:ff:00:81: 72:07:0b:00:12:c7:42:08:fd:29:db:14:82:8e:f2:b9:e8:c3: 5b:26:9f:18:dd:3f:46:3b:29:25:67:ac:54:9d:c0:55:c8:80: 8f:f3:24:9e:66:35:2b:cb:e8:53:f6:eb:bb:74:7f:95:87:04: e2:8b:26:41:a5:42:19:82:0e:01:7b:ba:4b:46:f9:a7:d8:3a: 46:e4:5d:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKvj7M3GRnsyPKr0Se51iP5NlQDYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDA1MDU5WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjJlMjM3MWJkZmIxMTE4Y2UyZjFkNWUwY2ZhOGEwMWFl MjNkMWQyNzE0NzNiMTc3NDlkYWI4ZGFlYTdkOTc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyGP+wyB+jOdFOoMBWk7wdds70Xb/Kmg7kOtSv34ybuApx s0YTIGw8j22erskK2RrAMK/bo2SaUA3kQK6Z4oKp8ZpaX/ufOv4KQ6yqipdueU+m r5Rw1gOl0WeQqUdBTrtWXeNDsvpAruZf2L58H0IXxFpA8iduT7pHdRS4cACTN+mR aCoDY1s9oCgi+Q8pIzSuLEpyX/iNoHVxCoak9N6+a3SfPnWxSOsp7NO9d979wSAA HN2RKh+zb8ZvtdWJHYHvmEr+IsiutOLWyy+T8gH8TIuCbJYvTrYbB9ZS/SMKC8Gs FeDcYPDmW/QrSQrApTd/cN2WCqriSBzoraQMvaWtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa+bkOaZfMN8hiTk5yo3eQxSs16IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwMGFkZTEwLWQ4MGEtNGY3MS1iMWZkLTVkMGQ2YTllNjk3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTf0wDQYJKoZIhvcNAQELBQADggEBADC3mWZLMtz4fwt/3lnKMVp6zrk6 OBqoFehZ7bGFQ9xQUdLghRoVgwrbKoY7uo3/sn7lOX3RqLzwhVUooAMmZF6SUTPs 0SLJAPtO21cJc0p+6ALUGYeAYdGqpmJBTRy8R7BNKGPwu+MxzTCpA9WDPcCd0uwu N8OL0UIGs3AsLUCcKHWBakvbM5h1S9scAv4g0iGCqm67xNi1DVNfj7PnmpE9w1Lz /TV5whOMkeTgvtU7D/8AgXIHCwASx0II/SnbFIKO8rnow1smnxjdP0Y7KSVnrFSd wFXIgI/zJJ5mNSvL6FP267t0f5WHBOKLJkGlQhmCDgF7uktG+afYOkbkXW0= -----END CERTIFICATE-----Generated at Sun May 11 01:38:58 2025 by rpki-client