$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af71deda-bc43-4d3b-ac30-314953a27a4b.roa File: af71deda-bc43-4d3b-ac30-314953a27a4b.roa (raw, json) Hash identifier: ttgZmplqeiXFlpAAwvYZxLlZV/KIuGnOGkizCZuQpys= Subject key identifier: 66:D4:86:05:13:10:36:26:83:7D:07:51:83:D2:7E:6F:3D:C0:49:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D01BDF526F8B30919F16C0B55376A616BBF6266 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af71deda-bc43-4d3b-ac30-314953a27a4b.roa Signing time: Sat 10 May 2025 00:20:56 +0000 ROA not before: Sat 10 May 2025 00:20:56 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:01:bd:f5:26:f8:b3:09:19:f1:6c:0b:55:37:6a:61:6b:bf:62:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:20:56 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=e03c7c12455fdddb54a9bbaca4e675363e84e2e03e8d4a8c01754f5b8e7202a4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:4b:f8:8a:e8:cd:2e:22:a7:f7:0b:57:a8: 58:45:f9:af:ab:74:e0:cf:a8:e0:2b:6d:4d:07:06: da:d0:b0:7d:94:27:64:ac:f5:f5:c5:9d:1c:80:6b: 30:4a:80:54:13:3b:78:e2:b7:4a:fe:25:6c:38:07: cd:7a:9a:eb:9b:74:5a:d1:21:f2:a0:04:a4:5f:7e: e5:fd:59:7d:0c:cc:77:b4:74:90:7c:f0:d2:0c:b0: 3a:27:ac:6a:24:4d:27:e1:bb:03:b1:fc:59:ff:6a: 5a:99:e6:94:bf:3d:76:73:65:16:be:64:2c:9f:b5: 70:49:5c:70:b8:36:ba:b7:ee:52:08:ca:1d:86:cc: c1:32:d4:60:6c:55:0b:e5:3f:49:29:e4:3f:89:da: c6:45:b3:b2:d7:cb:3e:a2:b1:77:04:9b:46:35:b5: 25:20:61:b2:fe:f7:cd:23:bd:1f:01:0e:b0:b4:e4: 2b:11:71:a5:1f:34:6e:6e:a4:8f:97:30:f7:6e:2e: bc:8b:82:8d:c8:55:83:1f:7a:c6:72:64:e6:9c:95: 55:cb:bf:c9:f9:a1:d2:ab:f2:cf:29:ed:29:af:de: 7c:41:0f:5b:41:13:ea:9e:5f:d1:98:0f:e2:ab:40: d4:4b:fc:3f:17:bc:1d:4d:1a:d8:9f:44:55:e9:65: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D4:86:05:13:10:36:26:83:7D:07:51:83:D2:7E:6F:3D:C0:49:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af71deda-bc43-4d3b-ac30-314953a27a4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.104.0/21 Signature Algorithm: sha256WithRSAEncryption 92:33:a7:64:b0:1e:a7:c1:0f:d9:7d:f1:c9:36:3d:ed:de:41: 4c:1c:ec:b8:2e:dd:ca:77:ce:7d:b6:1d:7d:d3:81:6f:9b:7b: b2:ee:2d:05:70:74:79:d8:28:cb:22:ff:b7:b5:15:d3:27:1f: 78:f2:91:97:42:a0:3f:82:d9:e0:2d:b8:9c:74:35:91:9b:95: 69:96:74:51:ac:4d:8a:d9:c9:d7:88:0d:86:08:21:17:87:ce: c7:e1:cd:b5:9f:79:94:96:14:e7:9d:d2:9c:55:fe:35:f1:1b: 0e:13:ba:bb:52:2a:b5:28:3d:98:be:54:84:14:11:b6:6c:9f: ce:91:7c:87:71:6f:2a:16:34:5b:f4:31:7a:ca:13:81:e3:0b: d0:79:fa:0c:6b:a7:99:99:f2:87:66:b4:66:63:3d:60:e1:66: ed:a8:ac:3d:ff:79:26:ef:ab:d5:8e:9f:99:09:b6:0e:f2:6c: b2:18:80:10:10:1d:41:9e:c2:aa:e1:91:91:6a:a9:03:44:e8: 77:1b:af:41:2d:0f:62:ca:14:d3:ef:61:76:45:7c:0e:3b:5c: 3e:73:cb:3a:d6:c0:ec:c2:00:7d:64:85:4a:57:b1:02:be:05: b0:8e:36:1e:26:6a:b1:68:c3:54:f2:dc:7e:d0:f8:ef:6a:09: 39:66:ce:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXQG99Sb4swkZ8WwLVTdqYWu/YmYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAyMDU2WhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDNjN2MxMjQ1NWZkZGRiNTRhOWJiYWNhNGU2NzUzNjNl ODRlMmUwM2U4ZDRhOGMwMTc1NGY1YjhlNzIwMmE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt+0v4iujNLiKn9wtXqFhF+a+rdODPqOArbU0HBtrQsH2U J2Ss9fXFnRyAazBKgFQTO3jit0r+JWw4B816muubdFrRIfKgBKRffuX9WX0MzHe0 dJB88NIMsDonrGokTSfhuwOx/Fn/alqZ5pS/PXZzZRa+ZCyftXBJXHC4Nrq37lII yh2GzMEy1GBsVQvlP0kp5D+J2sZFs7LXyz6isXcEm0Y1tSUgYbL+980jvR8BDrC0 5CsRcaUfNG5upI+XMPduLryLgo3IVYMfesZyZOaclVXLv8n5odKr8s8p7Smv3nxB D1tBE+qeX9GYD+KrQNRL/D8XvB1NGtifRFXpZcSrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZtSGBRMQNiaDfQdRg9J+bz3ASfYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmNzFkZWRhLWJjNDMtNGQzYi1hYzMwLTMxNDk1M2EyN2E0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjlmgwDQYJKoZIhvcNAQELBQADggEBAJIzp2SwHqfBD9l98ck2Pe3eQUwc 7Lgu3cp3zn22HX3TgW+be7LuLQVwdHnYKMsi/7e1FdMnH3jykZdCoD+C2eAtuJx0 NZGblWmWdFGsTYrZydeIDYYIIReHzsfhzbWfeZSWFOed0pxV/jXxGw4TurtSKrUo PZi+VIQUEbZsn86RfIdxbyoWNFv0MXrKE4HjC9B5+gxrp5mZ8odmtGZjPWDhZu2o rD3/eSbvq9WOn5kJtg7ybLIYgBAQHUGewqrhkZFqqQNE6Hcbr0EtD2LKFNPvYXZF fA47XD5zyzrWwOzCAH1khUpXsQK+BbCONh4marFow1Ty3H7Q+O9qCTlmzl8= -----END CERTIFICATE-----Generated at Sun May 11 12:29:02 2025 by rpki-client