$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edb45c4e-a0b6-471b-a016-e9b2a212afe3.roa File: edb45c4e-a0b6-471b-a016-e9b2a212afe3.roa (raw, json) Hash identifier: KEb0FbAXgFiME1VrxlFStEVRA5sbeOh1NAJLgWDitYE= Subject key identifier: AF:82:FD:88:0E:0D:2E:A7:0D:A7:CE:63:98:2C:B3:9D:96:16:65:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B9A26FB66A81BBA84E4AABE3763657CD8C2E333 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edb45c4e-a0b6-471b-a016-e9b2a212afe3.roa Signing time: Sat 03 May 2025 00:51:09 +0000 ROA not before: Sat 03 May 2025 00:51:09 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.82.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9a:26:fb:66:a8:1b:ba:84:e4:aa:be:37:63:65:7c:d8:c2:e3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:51:09 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=f313aa2964eabed6f78bb837e9c3d7e0cd40e6e047a114f9642e9ceb9369f2ad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:e4:8e:5f:20:2d:73:3f:b5:68:a7:2d:7d: a9:3e:eb:53:1a:d6:bf:3c:3c:73:75:96:b1:63:4a: 16:ba:66:ea:44:3f:1d:8b:a7:45:8c:dd:13:a9:c5: a0:36:17:c9:ab:a1:99:a0:dd:6b:69:68:01:9c:35: 45:8b:6a:b3:58:22:28:b2:63:a9:39:5f:93:d7:29: 6b:74:11:40:7b:7f:97:30:5a:f0:30:ce:49:c2:c2: 64:b7:71:de:cc:d3:8d:73:b7:82:68:7f:69:c1:f3: 3b:a0:25:55:2c:1a:c8:03:ef:0d:fc:6f:cd:c1:9e: 49:4c:6f:38:7c:80:32:0f:46:8d:44:b4:a3:89:47: 9f:d6:11:44:52:87:4a:32:11:cb:4b:2c:e1:1b:34: a2:e0:c3:98:da:d2:a6:e9:97:e6:e8:b0:ad:4b:91: ac:cc:5b:09:d2:91:c0:f4:84:9f:2b:b0:b8:97:8f: 6d:12:ff:94:96:17:be:eb:55:56:5e:0c:79:e7:9f: 71:fb:3a:5d:e0:d9:eb:cb:44:2f:5c:18:f7:bc:12: 68:ae:0a:8f:81:65:cb:db:e2:e8:8b:16:c4:37:fa: cf:48:ba:dc:ee:76:2a:36:4d:e2:70:9a:fc:a4:97: 8a:89:a2:ba:02:57:8a:df:bc:b6:04:71:1f:2c:34: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:82:FD:88:0E:0D:2E:A7:0D:A7:CE:63:98:2C:B3:9D:96:16:65:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edb45c4e-a0b6-471b-a016-e9b2a212afe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.82.175.0/24 Signature Algorithm: sha256WithRSAEncryption 69:ca:97:e1:7f:de:4f:56:3d:05:fd:8c:3a:97:16:49:64:c0: 7b:6d:2e:be:0e:65:c6:5e:c3:3d:95:aa:de:de:fc:60:9d:57: 72:f7:57:81:d9:6d:51:e8:9c:a2:5c:79:9f:c2:74:6c:08:59: b5:dc:8a:bd:4c:91:07:00:b0:dc:8b:22:05:42:ca:0e:89:31: d5:7b:bc:f8:02:9e:53:43:9b:40:61:e6:16:19:07:41:ce:41: c6:54:6e:0e:7c:ab:54:ad:90:d6:e9:e0:74:c9:8c:54:f1:90: 82:07:94:10:78:a9:ae:a3:7c:b4:b4:2c:d2:0d:17:34:37:e3: a6:f6:3b:84:60:12:aa:0a:eb:c9:b2:ca:b6:f4:0c:32:81:24: b9:51:f1:bc:3c:92:1b:0a:ce:9a:cc:a8:f1:8e:96:71:73:c7: 9d:d1:fd:03:82:a1:5a:f7:8c:28:ff:4e:3b:03:e4:32:62:78: 98:38:43:cb:8f:c0:32:b3:d1:f0:e1:3b:40:41:9d:a6:60:ca: 53:00:26:d8:6f:b9:05:ba:02:90:cd:be:4e:62:9b:16:d9:12: ee:c9:89:f5:ac:4c:ee:e0:78:a1:09:fc:45:49:4c:5e:70:9e: 17:2b:02:80:95:8a:b9:b1:42:a2:b3:94:09:6a:04:e7:67:72: 8a:23:54:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS5om+2aoG7qE5Kq+N2NlfNjC4zMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDA1MTA5WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzEzYWEyOTY0ZWFiZWQ2Zjc4YmI4MzdlOWMzZDdlMGNk NDBlNmUwNDdhMTE0Zjk2NDJlOWNlYjkzNjlmMmFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbXeSOXyAtcz+1aKctfak+61Ma1r88PHN1lrFjSha6ZupE Px2Lp0WM3ROpxaA2F8mroZmg3WtpaAGcNUWLarNYIiiyY6k5X5PXKWt0EUB7f5cw WvAwzknCwmS3cd7M041zt4Jof2nB8zugJVUsGsgD7w38b83BnklMbzh8gDIPRo1E tKOJR5/WEURSh0oyEctLLOEbNKLgw5ja0qbpl+bosK1LkazMWwnSkcD0hJ8rsLiX j20S/5SWF77rVVZeDHnnn3H7Ol3g2evLRC9cGPe8EmiuCo+BZcvb4uiLFsQ3+s9I utzudio2TeJwmvykl4qJoroCV4rfvLYEcR8sNIfZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr4L9iA4NLqcNp85jmCyznZYWZUIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkYjQ1YzRlLWEwYjYtNDcxYi1hMDE2LWU5YjJhMjEyYWZlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjUq8wDQYJKoZIhvcNAQELBQADggEBAGnKl+F/3k9WPQX9jDqXFklkwHtt Lr4OZcZewz2Vqt7e/GCdV3L3V4HZbVHonKJceZ/CdGwIWbXcir1MkQcAsNyLIgVC yg6JMdV7vPgCnlNDm0Bh5hYZB0HOQcZUbg58q1StkNbp4HTJjFTxkIIHlBB4qa6j fLS0LNINFzQ346b2O4RgEqoK68myyrb0DDKBJLlR8bw8khsKzprMqPGOlnFzx53R /QOCoVr3jCj/TjsD5DJieJg4Q8uPwDKz0fDhO0BBnaZgylMAJthvuQW6ApDNvk5i mxbZEu7JifWsTO7geKEJ/EVJTF5wnhcrAoCVirmxQqKzlAlqBOdncoojVHU= -----END CERTIFICATE-----Generated at Mon May 5 09:37:46 2025 by rpki-client