$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5dee519-69aa-4bf0-bdb1-4bfe160bae08.roa File: e5dee519-69aa-4bf0-bdb1-4bfe160bae08.roa (raw, json) Hash identifier: vgOUgjUWGvMiYuDkbLfSsOxb9uQzrV0GWfiESyFsxpo= Subject key identifier: 22:E0:14:7C:58:C9:56:9E:C5:A3:44:B6:FD:7E:AE:4B:8D:62:D0:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C5959BFEE0171893F304236DA651CA49A781E67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5dee519-69aa-4bf0-bdb1-4bfe160bae08.roa Signing time: Sat 10 May 2025 00:30:12 +0000 ROA not before: Sat 10 May 2025 00:30:12 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:59:59:bf:ee:01:71:89:3f:30:42:36:da:65:1c:a4:9a:78:1e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:30:12 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=17eabbc88c76c00506714408e4494376a85dd0b430b6aa4b95d7d338a3ff805f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:59:13:cd:62:cd:50:29:92:b3:89:4b:53: b6:d5:cf:8b:74:19:6f:3d:37:a5:71:58:82:04:e7: a6:b1:a8:65:67:99:d4:48:23:b0:79:d1:f1:f7:57: 96:11:e8:c9:3c:a1:bc:37:dc:98:17:ac:6a:09:bc: 57:06:e6:af:ac:a6:fc:6c:39:8e:a8:4b:33:d1:00: 2a:f9:41:36:e5:91:83:32:d6:6b:aa:48:b2:62:b3: 18:c0:b8:bc:4d:cc:db:cd:82:2c:76:09:56:f1:c0: 3d:06:2c:6a:1b:05:14:19:7a:00:32:9e:70:a6:da: 13:19:45:74:11:3a:55:ab:81:03:db:84:07:7a:a4: ca:e1:78:4d:c4:d3:24:74:6a:a6:bb:40:01:f1:9e: 49:d5:77:b7:d0:b3:b1:ec:38:22:f2:87:6b:f4:63: ff:42:d6:a3:3f:9b:b4:1a:37:68:ab:c2:7d:2a:7b: 98:f9:bb:0b:d3:39:0f:e8:dc:06:e6:9b:31:73:51: c8:58:02:aa:ab:92:50:0f:e9:ef:43:94:93:6d:62: 1e:ac:85:d0:17:d8:2c:1a:72:bb:85:56:1f:a3:67: 0e:7d:a0:03:0c:ac:d5:3c:60:24:2c:41:18:b2:75: e4:8c:ef:1a:d0:da:52:79:3a:88:d9:9a:46:5b:c0: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E0:14:7C:58:C9:56:9E:C5:A3:44:B6:FD:7E:AE:4B:8D:62:D0:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5dee519-69aa-4bf0-bdb1-4bfe160bae08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.8.0/22 Signature Algorithm: sha256WithRSAEncryption bd:e1:9f:bb:1f:fd:c0:ef:e5:23:8e:dc:94:ef:32:82:6e:f6: 48:26:40:a1:1c:0e:1c:dc:ab:81:fb:73:1a:2f:6c:52:a2:3e: 85:39:15:b3:ea:18:45:ab:ad:02:b9:e1:c4:b0:bd:62:7e:ce: 46:71:28:9d:99:5d:25:c2:09:43:9f:2f:90:ae:f3:3d:e2:68: c7:9f:3c:4d:9f:8b:ac:d6:93:aa:f5:03:43:5e:8b:a2:c2:8a: 6e:cd:b0:10:45:9a:95:d9:aa:cb:fb:10:bc:0d:db:bf:74:bb: ad:8c:6b:a1:0a:06:60:cf:f1:71:72:c4:c9:ff:46:08:8f:6f: fc:7e:11:e5:37:28:0c:f3:44:5f:b6:eb:f1:36:c7:a3:20:9c: 43:2a:9b:f6:3b:39:6f:2a:40:37:35:4f:4f:86:63:4a:52:75: 8f:e9:96:5b:f4:ce:48:89:77:e2:3c:81:fe:20:e1:95:d2:ee: 6c:6f:ca:28:51:44:c8:dd:96:c0:cd:cb:ea:15:72:16:bc:b3: 6f:e5:48:5d:e2:b8:40:f0:08:44:a0:4a:9f:8b:0e:e5:e0:e6: c2:9a:c1:40:0b:ae:a7:13:51:26:08:d2:d9:40:7c:a1:3d:79: 27:7a:1a:89:bd:5a:eb:95:d0:60:df:90:5b:6a:bb:e2:8d:d1: f5:39:c4:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTFlZv+4BcYk/MEI22mUcpJp4HmcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAzMDEyWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2VhYmJjODhjNzZjMDA1MDY3MTQ0MDhlNDQ5NDM3NmE4 NWRkMGI0MzBiNmFhNGI5NWQ3ZDMzOGEzZmY4MDVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOOVkTzWLNUCmSs4lLU7bVz4t0GW89N6VxWIIE56axqGVn mdRII7B50fH3V5YR6Mk8obw33JgXrGoJvFcG5q+spvxsOY6oSzPRACr5QTblkYMy 1muqSLJisxjAuLxNzNvNgix2CVbxwD0GLGobBRQZegAynnCm2hMZRXQROlWrgQPb hAd6pMrheE3E0yR0aqa7QAHxnknVd7fQs7HsOCLyh2v0Y/9C1qM/m7QaN2irwn0q e5j5uwvTOQ/o3AbmmzFzUchYAqqrklAP6e9DlJNtYh6shdAX2CwacruFVh+jZw59 oAMMrNU8YCQsQRiydeSM7xrQ2lJ5OojZmkZbwFZ5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIuAUfFjJVp7Fo0S2/X6uS41i0IswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U1ZGVlNTE5LTY5YWEtNGJmMC1iZGIxLTRiZmUxNjBiYWUwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJjlggwDQYJKoZIhvcNAQELBQADggEBAL3hn7sf/cDv5SOO3JTvMoJu9kgm QKEcDhzcq4H7cxovbFKiPoU5FbPqGEWrrQK54cSwvWJ+zkZxKJ2ZXSXCCUOfL5Cu 8z3iaMefPE2fi6zWk6r1A0Nei6LCim7NsBBFmpXZqsv7ELwN2790u62Ma6EKBmDP 8XFyxMn/RgiPb/x+EeU3KAzzRF+26/E2x6MgnEMqm/Y7OW8qQDc1T0+GY0pSdY/p llv0zkiJd+I8gf4g4ZXS7mxvyihRRMjdlsDNy+oVcha8s2/lSF3iuEDwCESgSp+L DuXg5sKawUALrqcTUSYI0tlAfKE9eSd6Gom9WuuV0GDfkFtqu+KN0fU5xK0= -----END CERTIFICATE-----Generated at Tue May 13 01:45:45 2025 by rpki-client