$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99922d4f-b1fc-43d5-9674-a085ad312500.roa File: 99922d4f-b1fc-43d5-9674-a085ad312500.roa (raw, json) Hash identifier: W2cDADfwkj2cKvTgsqLZhBe/1VaE5Aq4Ew1IjCz/IRo= Subject key identifier: DC:2E:84:C7:E1:BE:B8:B4:3A:DD:56:3A:91:02:69:7C:4F:7B:BF:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4016BCCCE1496054172C59235000B7912D15815F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99922d4f-b1fc-43d5-9674-a085ad312500.roa Signing time: Wed 30 Apr 2025 00:01:22 +0000 ROA not before: Wed 30 Apr 2025 00:01:22 +0000 ROA not after: Wed 04 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 104.153.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:16:bc:cc:e1:49:60:54:17:2c:59:23:50:00:b7:91:2d:15:81:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:01:22 2025 GMT Not After : Jun 4 23:59:59 2025 GMT Subject: serialNumber=7c5a932bac124ff0b497fc68c084adaef4fc9607fef01a4a77f452d57838c52b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:39:18:ce:c7:24:b2:6c:d2:60:fb:a3:ef: 60:17:ca:1c:6b:65:c3:93:fe:53:c0:02:26:8e:da: fa:93:df:40:51:98:ee:e1:23:cc:15:06:2f:34:09: ea:c0:ff:db:b3:51:09:4b:93:39:b2:c6:6a:42:74: d5:48:fb:ef:51:0e:c0:81:46:6a:e8:f3:ce:6f:f5: c8:e9:6d:43:30:ba:31:dc:4e:7b:af:9b:ee:43:2a: 1d:fd:3b:79:01:46:ad:7e:c8:7d:34:92:a9:34:a1: ad:08:de:1f:6c:d6:5b:8e:8d:b5:27:91:7e:29:03: 12:d0:7c:95:7d:b3:ab:48:6e:2b:db:23:da:63:38: 54:05:fa:26:0b:ae:3b:7a:6d:85:68:1c:f0:bf:41: bb:af:1f:e0:8a:b8:f4:68:fa:31:72:03:da:c3:65: c5:2b:41:11:06:39:c3:90:e9:d9:47:cd:70:1f:53: 17:f8:e4:ee:a5:98:3b:ba:4d:74:e5:3f:9b:c7:91: f6:47:c2:b0:44:ba:ae:69:87:c7:b4:52:33:03:4d: 06:e6:94:84:85:85:4b:16:c0:1b:30:8e:3e:f3:a1: 05:cf:7f:09:b2:7a:1c:6e:98:89:50:c7:86:bf:45: 46:1b:8b:99:22:2c:c1:73:c8:be:37:2e:6f:fb:ae: 52:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2E:84:C7:E1:BE:B8:B4:3A:DD:56:3A:91:02:69:7C:4F:7B:BF:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99922d4f-b1fc-43d5-9674-a085ad312500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.153.118.0/24 Signature Algorithm: sha256WithRSAEncryption c0:24:00:81:ae:f9:ac:dd:68:53:6e:5d:fd:cb:85:f4:62:21: 43:1b:42:46:23:dd:63:c7:9d:65:bf:69:e9:00:6e:89:a7:9f: 71:ab:fe:9f:cc:94:38:ec:28:1d:a5:4d:50:00:e6:bf:16:f5: e4:b6:53:98:bb:21:99:b1:f0:a0:17:21:13:b3:b8:1a:c0:12: e5:9a:9e:6e:39:12:96:94:ce:d9:7c:83:96:2d:7e:32:5a:4c: dd:f4:a1:bc:70:c7:aa:25:67:81:0b:8d:71:a8:91:df:e0:ae: cd:67:4d:f0:cb:68:83:ec:31:78:8a:23:78:f7:b7:d7:de:57: b4:25:9a:03:e8:fb:8c:ee:17:6b:17:f6:7c:36:f2:38:fb:e9: dd:c8:24:e2:78:38:49:6b:b5:cd:3f:42:73:d5:43:02:f5:d4: c8:8a:bd:87:ec:35:75:9e:30:8d:28:b7:cc:dc:d8:d3:63:38: 3b:ed:7c:a9:62:ab:e4:96:2e:c2:b0:a0:d0:24:92:98:e7:6a: 42:f0:ed:56:bd:ea:58:2e:b6:fc:10:cf:56:7b:12:fb:8c:58: a0:02:63:44:fd:7e:9c:ad:c6:a7:8c:f4:fb:21:26:98:7b:0d: a3:71:10:c5:33:1d:54:9c:7f:b3:73:b3:f3:3e:c4:d2:c9:32: b8:1c:6a:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQBa8zOFJYFQXLFkjUAC3kS0VgV8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDMwMDAwMTIyWhcNMjUwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzVhOTMyYmFjMTI0ZmYwYjQ5N2ZjNjhjMDg0YWRhZWY0 ZmM5NjA3ZmVmMDFhNGE3N2Y0NTJkNTc4MzhjNTJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMezkYzscksmzSYPuj72AXyhxrZcOT/lPAAiaO2vqT30BR mO7hI8wVBi80CerA/9uzUQlLkzmyxmpCdNVI++9RDsCBRmro885v9cjpbUMwujHc Tnuvm+5DKh39O3kBRq1+yH00kqk0oa0I3h9s1luOjbUnkX4pAxLQfJV9s6tIbivb I9pjOFQF+iYLrjt6bYVoHPC/QbuvH+CKuPRo+jFyA9rDZcUrQREGOcOQ6dlHzXAf Uxf45O6lmDu6TXTlP5vHkfZHwrBEuq5ph8e0UjMDTQbmlISFhUsWwBswjj7zoQXP fwmyehxumIlQx4a/RUYbi5kiLMFzyL43Lm/7rlKLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3C6Ex+G+uLQ63VY6kQJpfE97v/kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5OTIyZDRmLWIxZmMtNDNkNS05Njc0LWEwODVhZDMxMjUwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABomXYwDQYJKoZIhvcNAQELBQADggEBAMAkAIGu+azdaFNuXf3LhfRiIUMb QkYj3WPHnWW/aekAbomnn3Gr/p/MlDjsKB2lTVAA5r8W9eS2U5i7IZmx8KAXIROz uBrAEuWanm45EpaUztl8g5YtfjJaTN30obxwx6olZ4ELjXGokd/grs1nTfDLaIPs MXiKI3j3t9feV7QlmgPo+4zuF2sX9nw28jj76d3IJOJ4OElrtc0/QnPVQwL11MiK vYfsNXWeMI0ot8zc2NNjODvtfKliq+SWLsKwoNAkkpjnakLw7Va96lgutvwQz1Z7 EvuMWKACY0T9fpytxqeM9PshJph7DaNxEMUzHVScf7Nzs/M+xNLJMrgcajw= -----END CERTIFICATE-----Generated at Sat May 10 21:06:40 2025 by rpki-client