$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/915be5e0-8704-4672-8517-f4e70f57903e.roa File: 915be5e0-8704-4672-8517-f4e70f57903e.roa (raw, json) Hash identifier: a7M18nbhqHJKcK9Tf8zqAqgQeKgyDq3U9+8gVO9bOL0= Subject key identifier: 03:6A:68:BE:CB:07:5F:B6:BD:81:F4:09:13:6B:AF:B5:A7:52:BA:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28080CAAAC9F1331488264111AE3BFF11EC050B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/915be5e0-8704-4672-8517-f4e70f57903e.roa Signing time: Tue 24 Jun 2025 00:40:16 +0000 ROA not before: Tue 24 Jun 2025 00:40:16 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 99.77.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:08:0c:aa:ac:9f:13:31:48:82:64:11:1a:e3:bf:f1:1e:c0:50:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:40:16 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=bd4bf54a073f8d8b8c6e4f5b9fbf253ec70232f12d89afca7e3ae17633caf82f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:28:a5:fd:fd:74:37:8e:8d:3a:7a:40:a6: 94:24:52:a8:84:36:e5:b0:c0:0e:b7:8c:e0:8b:ec: 79:fa:32:5a:4d:eb:44:31:97:e4:02:62:02:10:50: 5e:23:98:b8:6e:10:b8:63:7e:40:d8:6e:72:76:00: 18:9d:8e:bf:1a:52:20:97:95:0d:be:eb:35:d4:eb: 64:46:d5:24:fe:08:b2:69:b6:f9:14:2a:a9:2e:e9: a3:25:08:94:98:39:05:a2:22:48:11:19:8e:18:00: bb:3a:01:5e:3c:3b:88:0d:fa:d9:a4:be:e5:43:2e: ba:1b:23:c6:34:13:97:a1:c3:e1:76:d4:f1:29:00: a2:cf:90:99:3f:10:89:34:8e:51:38:e7:62:03:26: e7:eb:f2:5e:5b:59:76:1c:6a:c3:70:92:ec:ea:3e: 83:53:96:18:4f:1c:ed:ca:b0:c3:65:12:19:0e:db: 4c:81:36:09:b1:ad:57:47:7a:1e:f4:ab:21:00:33: c6:d4:25:77:25:56:b6:57:68:aa:57:43:f2:b3:72: 82:46:e6:d0:f6:90:b8:d1:33:af:b9:f0:cc:fb:d3: 07:1f:bb:00:fa:e7:24:88:0e:f8:b6:6c:0c:87:8f: d3:81:9c:70:3b:72:2b:c5:07:65:36:db:4e:42:e9: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6A:68:BE:CB:07:5F:B6:BD:81:F4:09:13:6B:AF:B5:A7:52:BA:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/915be5e0-8704-4672-8517-f4e70f57903e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.191.0/24 Signature Algorithm: sha256WithRSAEncryption b5:ac:3c:4e:d3:50:ef:aa:6a:5c:a8:9f:b9:c1:8b:e5:98:0b: 4e:69:9f:eb:0a:0e:00:94:2e:61:ca:2d:aa:2a:99:44:89:b7: fd:b9:d2:a4:73:0b:44:1e:0b:c8:c7:5c:88:d9:16:8a:fc:6e: bc:63:00:2f:98:fe:d2:d1:57:cf:b0:de:04:fa:df:df:09:79: e5:79:3b:4a:7c:9f:46:9c:f9:54:24:3f:e5:42:30:4b:7f:38: 98:a1:d9:38:6a:cb:bf:e3:fb:44:a2:53:ff:49:49:82:44:f8: 5f:36:8e:06:ce:3f:60:8c:38:1c:c7:df:e0:91:ab:a5:ee:f3: 5a:f2:ce:74:dc:5c:55:c1:19:80:c5:4e:54:33:fa:af:51:a5: 59:fe:24:8a:74:9e:92:24:e6:e1:b3:f5:cd:d7:fb:e2:ae:ce: 47:3b:e8:a1:6a:fe:df:93:2e:ff:ab:d7:28:96:85:c2:89:b3: 51:40:a0:70:eb:47:ca:f8:f4:10:af:79:be:24:f3:08:e3:d6: 50:38:c5:fe:3f:8b:55:3b:5d:59:de:ef:6b:90:b3:42:c7:40: 5d:9c:25:99:69:cc:32:2e:78:30:3c:82:19:e6:47:ba:68:4e: ce:fd:5e:32:0f:34:50:a5:67:ae:63:be:b6:ad:5d:b8:c0:f7: 9f:d6:96:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKAgMqqyfEzFIgmQRGuO/8R7AULYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDA0MDE2WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDRiZjU0YTA3M2Y4ZDhiOGM2ZTRmNWI5ZmJmMjUzZWM3 MDIzMmYxMmQ4OWFmY2E3ZTNhZTE3NjMzY2FmODJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/3Sil/f10N46NOnpAppQkUqiENuWwwA63jOCL7Hn6MlpN 60Qxl+QCYgIQUF4jmLhuELhjfkDYbnJ2ABidjr8aUiCXlQ2+6zXU62RG1ST+CLJp tvkUKqku6aMlCJSYOQWiIkgRGY4YALs6AV48O4gN+tmkvuVDLrobI8Y0E5ehw+F2 1PEpAKLPkJk/EIk0jlE452IDJufr8l5bWXYcasNwkuzqPoNTlhhPHO3KsMNlEhkO 20yBNgmxrVdHeh70qyEAM8bUJXclVrZXaKpXQ/KzcoJG5tD2kLjRM6+58Mz70wcf uwD65ySIDvi2bAyHj9OBnHA7civFB2U2205C6TD3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA2povssHX7a9gfQJE2uvtadSuskwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxNWJlNWUwLTg3MDQtNDY3Mi04NTE3LWY0ZTcwZjU3OTAzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTb8wDQYJKoZIhvcNAQELBQADggEBALWsPE7TUO+qalyon7nBi+WYC05p n+sKDgCULmHKLaoqmUSJt/250qRzC0QeC8jHXIjZFor8brxjAC+Y/tLRV8+w3gT6 398JeeV5O0p8n0ac+VQkP+VCMEt/OJih2Thqy7/j+0SiU/9JSYJE+F82jgbOP2CM OBzH3+CRq6Xu81ryznTcXFXBGYDFTlQz+q9RpVn+JIp0npIk5uGz9c3X++Kuzkc7 6KFq/t+TLv+r1yiWhcKJs1FAoHDrR8r49BCveb4k8wjj1lA4xf4/i1U7XVne72uQ s0LHQF2cJZlpzDIueDA8ghnmR7poTs79XjIPNFClZ65jvratXbjA95/Wlmw= -----END CERTIFICATE-----Generated at Thu Jul 3 05:08:29 2025 by rpki-client