$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa File: d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa (raw, json) Hash identifier: UJQdAU8MT1P1TVYF+1dpNPJo84rRcHbLeuRuBOAnyI0= Subject key identifier: 5D:9A:2B:64:3D:42:65:76:A7:AB:E2:BC:26:5D:05:71:DE:55:BD:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 485E28FECE87A3A40F62CF7CC9013CDABFD0D5CD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa Signing time: Mon 05 May 2025 15:50:14 +0000 ROA not before: Mon 05 May 2025 15:50:14 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5e:28:fe:ce:87:a3:a4:0f:62:cf:7c:c9:01:3c:da:bf:d0:d5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:50:14 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=50d94eb6aa19e7479fae6b0d69a5a8de575e3c002fc400651c3e72fea80f7700, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:03:82:a0:3a:09:17:6f:33:bf:d0:bb:5f: 33:d5:20:e7:c9:38:61:d4:4e:9a:f2:a4:b4:4c:9d: d7:07:e2:35:9d:29:d1:6f:c7:e3:23:b7:fd:78:74: d1:dd:69:8d:e9:25:38:83:d2:f5:24:e1:03:64:db: 5f:21:e9:fe:7d:44:ea:99:c9:ae:74:95:f1:38:f0: 90:3e:e7:78:da:96:b4:ed:76:10:2b:03:d9:76:39: 49:c2:9c:45:81:5b:ed:cc:ae:f9:3d:bb:26:85:6b: cf:15:c2:93:00:13:3c:37:ec:bf:fe:4e:7b:24:bc: 32:95:24:08:0a:12:f7:fc:14:3b:9e:00:dc:0d:4b: 7a:c1:c4:bc:83:3c:e9:99:48:87:a6:49:59:07:17: 66:43:95:c8:36:16:1a:58:0b:7a:ac:7d:14:fe:09: 5f:9f:f5:ce:ac:0a:a0:33:b5:37:b8:e7:e9:e2:92: f2:87:69:fd:00:37:e2:e4:15:f6:a3:30:53:5b:f0: f7:d5:3e:f6:dc:d6:e2:35:27:ad:f4:72:c1:51:1a: 38:bb:7f:5f:bb:92:60:38:e1:34:d6:6c:bd:9b:21: 65:a2:d4:a2:41:f5:ba:a1:10:5f:d9:42:7f:9a:63: 55:9e:9f:fc:29:e8:72:b1:0b:6e:af:06:10:d9:62: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9A:2B:64:3D:42:65:76:A7:AB:E2:BC:26:5D:05:71:DE:55:BD:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.244.0/24 Signature Algorithm: sha256WithRSAEncryption 42:21:43:68:28:23:89:76:9b:38:18:9c:92:c0:9d:d6:f7:18: 6e:32:02:c7:f1:e5:da:99:f8:33:26:5d:3c:ad:3f:cd:d5:e4: 38:4c:cf:e3:ae:84:c7:eb:67:56:e0:b7:cd:15:bf:78:d7:7c: cf:74:7f:bc:7b:48:68:3a:0b:6b:5a:26:09:95:7d:94:f5:1c: d7:40:2f:53:5c:19:10:d6:d2:e2:f1:54:00:78:ae:52:b4:96: 14:83:a3:3f:24:eb:d3:22:45:7d:8e:e9:bf:94:2c:bf:c5:ac: 55:40:21:b3:db:12:58:f1:f7:3b:9f:19:89:dd:8b:41:1f:14: 14:1c:b2:35:74:00:12:22:67:36:84:ed:97:29:56:02:8d:dd: 5b:c7:77:d3:66:11:8b:94:cc:80:d3:bf:75:80:a2:8e:c6:74: d5:34:5e:13:67:63:5c:1c:77:4a:55:e6:6d:bd:1f:57:70:d3: 5d:e5:10:5a:c3:8c:0a:70:3c:ef:5d:db:e8:e0:5a:8c:47:49: c7:0c:61:a7:59:8e:10:2f:26:bc:0e:29:71:92:78:54:9f:67: 16:cc:75:c8:f2:b5:c7:b0:8a:2d:bd:5e:73:d0:0f:eb:ea:5d: 39:84:16:39:85:d9:93:c1:11:8e:67:e8:33:34:8b:89:bc:ab: 11:89:f4:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSF4o/s6Ho6QPYs98yQE82r/Q1c0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTU1MDE0WhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGQ5NGViNmFhMTllNzQ3OWZhZTZiMGQ2OWE1YThkZTU3 NWUzYzAwMmZjNDAwNjUxYzNlNzJmZWE4MGY3NzAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCEQOCoDoJF28zv9C7XzPVIOfJOGHUTprypLRMndcH4jWd KdFvx+Mjt/14dNHdaY3pJTiD0vUk4QNk218h6f59ROqZya50lfE48JA+53jalrTt dhArA9l2OUnCnEWBW+3Mrvk9uyaFa88VwpMAEzw37L/+TnskvDKVJAgKEvf8FDue ANwNS3rBxLyDPOmZSIemSVkHF2ZDlcg2FhpYC3qsfRT+CV+f9c6sCqAztTe45+ni kvKHaf0AN+LkFfajMFNb8PfVPvbc1uI1J630csFRGji7f1+7kmA44TTWbL2bIWWi 1KJB9bqhEF/ZQn+aY1Wen/wp6HKxC26vBhDZYuRjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXZorZD1CZXanq+K8Jl0Fcd5VvVgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyOTUzZDE5LTBlNjItNGQ4Ni1iNjA4LWQxODAzYzVjMmU5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTfQwDQYJKoZIhvcNAQELBQADggEBAEIhQ2goI4l2mzgYnJLAndb3GG4y Asfx5dqZ+DMmXTytP83V5DhMz+OuhMfrZ1bgt80Vv3jXfM90f7x7SGg6C2taJgmV fZT1HNdAL1NcGRDW0uLxVAB4rlK0lhSDoz8k69MiRX2O6b+ULL/FrFVAIbPbEljx 9zufGYndi0EfFBQcsjV0ABIiZzaE7ZcpVgKN3VvHd9NmEYuUzIDTv3WAoo7GdNU0 XhNnY1wcd0pV5m29H1dw013lEFrDjApwPO9d2+jgWoxHSccMYadZjhAvJrwOKXGS eFSfZxbMdcjytcewii29XnPQD+vqXTmEFjmF2ZPBEY5n6DM0i4m8qxGJ9KI= -----END CERTIFICATE-----Generated at Sat May 10 10:25:41 2025 by rpki-client