$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/490da442-9a78-4422-8ee9-ded4482ab131.roa File: 490da442-9a78-4422-8ee9-ded4482ab131.roa (raw, json) Hash identifier: yAqCQ+ZWfuC6xBoe6Tqt0sCKEv4MTMuy7zsocJBbTEA= Subject key identifier: 43:6A:2C:97:1C:3B:C2:C5:62:4F:25:CF:96:D3:7C:23:6A:9A:76:DA Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 0D99EB5457BEFC2CA03D02DC39B0DB04114A5334 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/490da442-9a78-4422-8ee9-ded4482ab131.roa Signing time: Mon 19 May 2025 18:52:06 +0000 ROA not before: Mon 19 May 2025 18:52:06 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:99:eb:54:57:be:fc:2c:a0:3d:02:dc:39:b0:db:04:11:4a:53:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: May 19 18:52:06 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=36bdcb2d80f36c9a78a72a629f4c8bdc6e1f0b8e680b6a20b68e1fbda86c88d8, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:b5:43:43:8e:35:82:c4:0d:78:61:f8:5b: d6:2e:87:55:ca:6e:aa:3b:24:56:64:92:05:2c:6b: 6b:d5:69:5b:5b:3e:1d:85:0f:cc:34:41:d7:a6:32: dc:03:9c:e4:91:14:66:63:5f:49:95:a0:0b:23:e7: d5:ff:61:12:23:d3:52:dc:15:2f:5c:35:3b:73:2f: 57:8a:df:71:ea:81:d4:72:4c:1e:a7:e7:eb:3d:5d: 1e:00:03:07:34:58:0e:0c:8c:06:08:ce:db:87:54: cb:30:e7:02:4a:4a:ed:f8:99:e8:55:40:27:92:69: 46:35:d6:2d:fc:29:4a:7c:5e:ec:eb:6b:9b:eb:f6: 12:36:02:55:44:e2:be:39:d2:66:40:f7:d1:14:1d: 5e:24:ef:6c:d0:fa:07:e4:85:52:3e:39:33:68:a9: 4c:e0:da:b6:56:00:e6:16:43:b2:ac:b8:d2:f0:e1: d7:24:fc:37:27:42:3c:99:18:f4:f9:03:2d:f2:54: 3f:82:06:d5:d3:5d:cc:ae:43:f9:fe:a4:cc:42:c0: 17:2d:b4:e8:da:4b:0b:f9:08:42:85:65:63:8b:19: bf:1d:02:10:7e:1f:3b:0e:b6:a3:6e:2d:49:5c:56: da:bc:bc:ad:10:18:99:a7:3f:93:b6:93:64:0c:34: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6A:2C:97:1C:3B:C2:C5:62:4F:25:CF:96:D3:7C:23:6A:9A:76:DA X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/490da442-9a78-4422-8ee9-ded4482ab131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/19 Signature Algorithm: sha256WithRSAEncryption 3a:47:68:33:83:23:33:9d:37:54:5b:f7:09:93:5a:f1:37:6e: 8c:00:e2:90:3b:22:31:b8:44:8d:48:34:b6:e7:71:24:55:e4: 6d:55:b2:9b:a0:a6:c5:0d:9c:51:0b:6d:62:2e:78:8c:6c:18: 51:cb:27:d9:eb:d1:fd:f1:97:5a:22:3a:24:4f:fd:c4:fd:e1: b5:b6:f9:bd:be:9a:67:05:ce:18:11:86:cd:98:bb:1e:27:25: e2:f7:77:79:46:73:39:47:5a:4e:82:5d:a3:d5:46:c7:2d:95: f8:ed:e4:b5:58:d6:ad:42:6c:67:94:89:c6:fd:f6:e0:8a:4f: 21:3b:92:9a:10:89:f0:bc:be:a4:d6:b5:6a:0d:d1:73:cc:ea: 1b:dc:65:5d:32:4c:3a:e1:fc:5f:2b:6c:bc:be:ef:12:79:e1: a3:8d:4d:a6:ce:14:cb:fd:41:50:a8:83:70:8d:f7:c0:52:c6: 99:d7:9e:7b:28:27:a1:af:62:dc:a3:ed:f9:b2:d2:f5:8a:91: b0:aa:bb:4b:3f:be:87:c5:80:2c:ed:2d:46:41:ac:67:8c:34: 4e:70:97:e0:f2:fa:93:15:44:4b:2a:0d:bd:17:66:37:07:ee: 2c:15:49:bf:7f:4f:de:b9:aa:d1:2d:37:3f:76:7c:6d:56:5b: c5:c7:d3:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDZnrVFe+/CygPQLcObDbBBFKUzQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNTE5MTg1MjA2WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmJkY2IyZDgwZjM2YzlhNzhhNzJhNjI5ZjRjOGJkYzZl MWYwYjhlNjgwYjZhMjBiNjhlMWZiZGE4NmM4OGQ4MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvc7VDQ441gsQNeGH4W9Yuh1XKbqo7JFZkkgUsa2vVaVtb Ph2FD8w0QdemMtwDnOSRFGZjX0mVoAsj59X/YRIj01LcFS9cNTtzL1eK33HqgdRy TB6n5+s9XR4AAwc0WA4MjAYIztuHVMsw5wJKSu34mehVQCeSaUY11i38KUp8Xuzr a5vr9hI2AlVE4r450mZA99EUHV4k72zQ+gfkhVI+OTNoqUzg2rZWAOYWQ7KsuNLw 4dck/DcnQjyZGPT5Ay3yVD+CBtXTXcyuQ/n+pMxCwBcttOjaSwv5CEKFZWOLGb8d AhB+HzsOtqNuLUlcVtq8vK0QGJmnP5O2k2QMNHl5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ2oslxw7wsViTyXPltN8I2qadtowHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzQ5MGRhNDQyLTlhNzgtNDQyMi04ZWU5LWRlZDQ0ODJhYjEzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGKWAwDQYJKoZIhvcNAQELBQADggEBADpHaDODIzOdN1Rb9wmTWvE3bowA 4pA7IjG4RI1INLbncSRV5G1VspugpsUNnFELbWIueIxsGFHLJ9nr0f3xl1oiOiRP /cT94bW2+b2+mmcFzhgRhs2Yux4nJeL3d3lGczlHWk6CXaPVRsctlfjt5LVY1q1C bGeUicb99uCKTyE7kpoQifC8vqTWtWoN0XPM6hvcZV0yTDrh/F8rbLy+7xJ54aON TabOFMv9QVCog3CN98BSxpnXnnsoJ6GvYtyj7fmy0vWKkbCqu0s/vofFgCztLUZB rGeMNE5wl+Dy+pMVREsqDb0XZjcH7iwVSb9/T965qtEtNz92fG1WW8XH06k= -----END CERTIFICATE-----Generated at Mon Jun 2 16:47:53 2025 by rpki-client