$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8d221b-7c83-4dd1-ba17-96784666216f.roa File: ae8d221b-7c83-4dd1-ba17-96784666216f.roa (raw, json) Hash identifier: /nFKEl5iOoaMh01UjdksrlyYj5kMq5+iZ4pEGam4yaY= Subject key identifier: 50:88:A4:AF:9A:3C:1A:7D:6D:B2:D0:E5:7B:25:EE:94:1A:34:7D:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24FAD7E1070EF83921BD26C1D10D2F0FE8EDA2A8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8d221b-7c83-4dd1-ba17-96784666216f.roa Signing time: Sat 03 May 2025 00:51:17 +0000 ROA not before: Sat 03 May 2025 00:51:17 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.83.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fa:d7:e1:07:0e:f8:39:21:bd:26:c1:d1:0d:2f:0f:e8:ed:a2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:51:17 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=4794095fc233c2fee38dd9cc789f21c24c932b19b48b933cb6b684f0e4fb6fcf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:1b:b2:cf:33:ef:67:cb:01:d4:ea:91:c8: db:cc:25:3c:eb:91:60:f3:f7:70:04:81:d4:07:3a: 0e:33:45:06:7f:f1:ff:4e:ff:c9:40:15:60:0b:a1: 9a:38:83:ee:a9:bf:ac:7c:d7:8b:a3:3f:ae:ff:c1: 33:86:ef:e5:3e:d9:e4:04:2d:ea:96:60:56:d8:26: 63:02:85:53:86:93:0b:9f:e5:d7:a5:76:d2:1d:78: 51:c2:13:28:20:4d:97:4e:25:6f:21:c1:2d:b8:66: 8f:3f:35:57:cc:be:9b:1e:64:15:e0:ab:48:78:c2: 71:5a:6f:15:69:1e:16:0d:12:b8:ae:89:51:d2:74: ed:65:c1:1a:bc:1c:c3:87:28:6b:50:ca:b8:2d:84: 0d:11:fc:2b:a9:e5:f9:27:92:35:03:e1:5c:0b:1f: d2:5a:43:b4:93:fd:67:db:92:df:16:84:2e:75:ec: e8:c3:1f:9d:a8:99:de:74:52:9e:65:9e:c4:f6:7d: 8a:80:b2:09:29:ad:cf:7a:0c:ef:1c:6a:01:eb:01: 39:d5:0e:2f:aa:7e:5a:57:fe:51:48:e6:fa:52:57: cd:8b:b9:bf:97:df:a1:5b:97:5c:d4:d8:a4:71:06: ca:ed:9c:5d:43:16:5d:3b:84:b2:53:b5:f0:84:bf: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:88:A4:AF:9A:3C:1A:7D:6D:B2:D0:E5:7B:25:EE:94:1A:34:7D:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8d221b-7c83-4dd1-ba17-96784666216f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.83.64.0/18 Signature Algorithm: sha256WithRSAEncryption 0c:25:f8:d7:b4:c3:15:16:d9:5b:f7:91:65:28:00:3c:05:1e: 22:3c:30:9f:36:f1:b9:7d:ae:fc:07:d0:ea:20:83:da:eb:22: 66:d3:f0:45:b2:9b:db:ab:49:90:61:66:37:e8:37:c8:e7:60: d4:93:f5:95:62:d0:bc:59:3e:d6:e0:c2:50:a9:95:fc:61:c2: f4:82:6a:36:c0:97:be:a9:b6:29:64:a0:b4:94:9f:4c:41:34: 4f:c2:00:61:23:1c:e7:8d:88:3f:a9:b6:c0:2b:82:da:17:49: 88:4f:72:bf:c1:85:85:57:55:70:70:57:80:87:58:62:7b:d6: c6:2b:28:db:d4:18:56:92:7a:d1:d4:ac:59:28:ac:c5:fd:56: 56:5c:4d:7c:f0:a8:bf:49:e9:40:ab:73:4c:18:c8:29:89:66: b8:04:a1:8c:f2:32:c4:0a:08:55:ad:ae:cb:c5:bd:c2:29:8c: e5:49:5e:21:f1:d2:1d:c7:08:20:9c:6b:dd:e9:d9:73:4e:45: 68:87:72:3f:da:27:59:2b:7b:9a:71:70:03:84:23:ab:4d:34: 7a:a6:c9:1d:c9:a6:e9:f9:70:f8:03:f2:de:d4:95:89:23:95: 48:ad:a7:0c:cd:3d:d6:96:05:d8:e8:92:1d:5e:0e:08:66:8a: 67:1b:65:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJPrX4QcO+DkhvSbB0Q0vD+jtoqgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDA1MTE3WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Nzk0MDk1ZmMyMzNjMmZlZTM4ZGQ5Y2M3ODlmMjFjMjRj OTMyYjE5YjQ4YjkzM2NiNmI2ODRmMGU0ZmI2ZmNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh8RuyzzPvZ8sB1OqRyNvMJTzrkWDz93AEgdQHOg4zRQZ/ 8f9O/8lAFWALoZo4g+6pv6x814ujP67/wTOG7+U+2eQELeqWYFbYJmMChVOGkwuf 5deldtIdeFHCEyggTZdOJW8hwS24Zo8/NVfMvpseZBXgq0h4wnFabxVpHhYNEriu iVHSdO1lwRq8HMOHKGtQyrgthA0R/Cup5fknkjUD4VwLH9JaQ7ST/Wfbkt8WhC51 7OjDH52omd50Up5lnsT2fYqAsgkprc96DO8cagHrATnVDi+qflpX/lFI5vpSV82L ub+X36Fbl1zU2KRxBsrtnF1DFl07hLJTtfCEv1bFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUIikr5o8Gn1tstDleyXulBo0fc4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlOGQyMjFiLTdjODMtNGRkMS1iYTE3LTk2Nzg0NjY2MjE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjU0AwDQYJKoZIhvcNAQELBQADggEBAAwl+Ne0wxUW2Vv3kWUoADwFHiI8 MJ828bl9rvwH0Oogg9rrImbT8EWym9urSZBhZjfoN8jnYNST9ZVi0LxZPtbgwlCp lfxhwvSCajbAl76ptilkoLSUn0xBNE/CAGEjHOeNiD+ptsArgtoXSYhPcr/BhYVX VXBwV4CHWGJ71sYrKNvUGFaSetHUrFkorMX9VlZcTXzwqL9J6UCrc0wYyCmJZrgE oYzyMsQKCFWtrsvFvcIpjOVJXiHx0h3HCCCca93p2XNORWiHcj/aJ1kre5pxcAOE I6tNNHqmyR3Jpun5cPgD8t7UlYkjlUitpwzNPdaWBdjokh1eDghmimcbZfw= -----END CERTIFICATE-----Generated at Sat May 10 19:27:20 2025 by rpki-client