$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96e165dc-4d07-4326-aacf-c4700465f695.roa File: 96e165dc-4d07-4326-aacf-c4700465f695.roa (raw, json) Hash identifier: +WyoFgbt31ERsVYB30U+3zW7eJi3n1w+X8HURzBqIiY= Subject key identifier: 74:BF:CA:C2:E2:54:AE:F4:A4:96:A7:F2:A0:85:14:12:2B:9E:98:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 356275C989D999DB5A1D2A90DBC635B2F22A9DA6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96e165dc-4d07-4326-aacf-c4700465f695.roa Signing time: Sat 24 May 2025 00:20:32 +0000 ROA not before: Sat 24 May 2025 00:20:32 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 98.130.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:62:75:c9:89:d9:99:db:5a:1d:2a:90:db:c6:35:b2:f2:2a:9d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:20:32 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=766bc64fc924b5a7994ddcdf5da8e4537e6892bcebede676ab5010cecb0686ba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:56:33:d9:84:40:e1:4f:0b:34:c9:7c:89: 97:55:3c:31:f4:dd:84:47:ab:2c:05:71:31:6d:84: 50:1a:39:00:5e:2d:15:22:9c:2c:cc:ec:44:cb:12: 5c:63:df:70:56:b4:c8:eb:43:55:b8:9e:73:0d:b4: 16:be:32:51:22:90:2e:45:c7:e5:c9:b9:95:1b:4a: 95:ba:a4:e0:ad:aa:4e:1d:34:42:1d:8e:1b:6e:d6: 59:a1:25:9f:a5:78:d2:9b:e9:59:23:52:ee:e8:91: ce:c9:ef:2e:91:57:9a:3b:37:8e:d3:9a:76:da:ab: 88:11:2c:66:37:72:72:bd:38:e6:f3:03:0a:7e:e1: ae:0f:fb:da:f1:35:f7:e8:95:cd:f2:4c:58:94:9d: f5:86:f0:14:9f:7e:e7:fc:bf:28:2d:57:74:5d:29: 84:e2:18:52:fe:1f:8d:3b:29:f4:00:47:e9:e9:99: 80:59:29:14:97:e5:09:f2:c4:07:d8:ea:22:67:3c: 7d:0a:b2:34:4b:32:2b:23:91:f1:0b:67:7c:c9:65: 47:be:4a:8c:68:5e:5e:d9:79:de:1e:9e:14:2e:17: b5:b5:44:b6:f2:69:02:ea:da:a5:73:4a:1a:a5:b3: 37:58:e7:a2:24:82:85:37:ef:6c:78:5f:e3:ec:f1: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BF:CA:C2:E2:54:AE:F4:A4:96:A7:F2:A0:85:14:12:2B:9E:98:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96e165dc-4d07-4326-aacf-c4700465f695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.130.0.0/15 Signature Algorithm: sha256WithRSAEncryption 03:38:66:94:f2:0a:d5:9e:4e:13:57:e6:2c:1f:bf:fe:d3:b0: 55:8e:1c:fe:c4:2e:b7:a5:84:37:f0:b1:f8:51:57:95:3e:c8: 83:26:1c:11:88:0a:55:d2:46:84:0d:c9:b5:dd:f3:58:d7:aa: c0:dd:a1:b0:b9:c3:22:38:cf:15:36:7e:aa:81:e4:d4:90:d6: af:83:1b:9a:6d:d2:63:8f:92:c1:c7:f5:23:41:55:a8:c2:ac: 3c:73:f4:77:a8:9b:6d:be:82:53:03:2d:15:84:b0:31:c7:61: 35:92:d6:50:6c:e6:07:c6:54:86:8d:d2:c9:84:ac:b4:aa:0d: a5:81:58:e0:cc:a2:6f:b7:bf:f8:53:0b:6d:2e:78:41:c3:8c: 70:a6:6b:63:dc:17:d6:6b:69:72:03:30:a6:2d:e9:1f:12:62: b0:16:43:cb:a3:3d:41:93:3c:40:94:ff:4d:13:6c:cd:f0:19: ca:3e:cb:39:c4:6b:56:00:a5:71:26:9a:aa:80:e9:0d:e2:f5: cd:06:5e:3c:87:7e:a4:83:3f:32:b3:cb:79:40:bb:14:25:02: 60:da:bf:87:9c:46:9c:54:92:75:a1:c9:91:ab:67:22:5a:1c: 8b:ea:b8:15:43:fe:b7:16:59:52:9c:af:b9:3e:76:6e:41:b4: 9d:d3:6c:b7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNWJ1yYnZmdtaHSqQ28Y1svIqnaYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAyMDMyWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjZiYzY0ZmM5MjRiNWE3OTk0ZGRjZGY1ZGE4ZTQ1Mzdl Njg5MmJjZWJlZGU2NzZhYjUwMTBjZWNiMDY4NmJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0EVYz2YRA4U8LNMl8iZdVPDH03YRHqywFcTFthFAaOQBe LRUinCzM7ETLElxj33BWtMjrQ1W4nnMNtBa+MlEikC5Fx+XJuZUbSpW6pOCtqk4d NEIdjhtu1lmhJZ+leNKb6VkjUu7okc7J7y6RV5o7N47Tmnbaq4gRLGY3cnK9OObz Awp+4a4P+9rxNffolc3yTFiUnfWG8BSffuf8vygtV3RdKYTiGFL+H407KfQAR+np mYBZKRSX5QnyxAfY6iJnPH0KsjRLMisjkfELZ3zJZUe+SoxoXl7Zed4enhQuF7W1 RLbyaQLq2qVzShqlszdY56IkgoU372x4X+Ps8WVNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdL/KwuJUrvSklqfyoIUUEiuemFswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2ZTE2NWRjLTRkMDctNDMyNi1hYWNmLWM0NzAwNDY1ZjY5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFigjANBgkqhkiG9w0BAQsFAAOCAQEAAzhmlPIK1Z5OE1fmLB+//tOwVY4c /sQut6WEN/Cx+FFXlT7IgyYcEYgKVdJGhA3Jtd3zWNeqwN2hsLnDIjjPFTZ+qoHk 1JDWr4Mbmm3SY4+Swcf1I0FVqMKsPHP0d6ibbb6CUwMtFYSwMcdhNZLWUGzmB8ZU ho3SyYSstKoNpYFY4Myib7e/+FMLbS54QcOMcKZrY9wX1mtpcgMwpi3pHxJisBZD y6M9QZM8QJT/TRNszfAZyj7LOcRrVgClcSaaqoDpDeL1zQZePId+pIM/MrPLeUC7 FCUCYNq/h5xGnFSSdaHJkatnIloci+q4FUP+txZZUpyvuT52bkG0ndNstw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:25:06 2025 by rpki-client