$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/82100f84-33b5-43a7-a078-7090448b8504.roa File: 82100f84-33b5-43a7-a078-7090448b8504.roa (raw, json) Hash identifier: EuO2R/vcT3O8zKeWPqVFyE3yhJNYL5TOIQQFXef/hRg= Subject key identifier: 80:9A:F5:66:E1:71:F4:0F:20:4E:9B:64:40:C7:45:D7:A3:0C:B8:15 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 6B6E6C1EEB62E17AF96CDA80B2EF13C2248EB5EA Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/82100f84-33b5-43a7-a078-7090448b8504.roa Signing time: Tue 20 May 2025 21:37:11 +0000 ROA not before: Tue 20 May 2025 21:37:11 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6e:6c:1e:eb:62:e1:7a:f9:6c:da:80:b2:ef:13:c2:24:8e:b5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: May 20 21:37:11 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=07ec3ec01f64793d78b1f63b5e2afaf1ab57b6aec0c119fbe97ce7ccd1873b7d, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:bf:77:34:2d:98:de:92:4e:9f:73:10:c2: e1:cf:0c:c3:47:64:87:10:49:3c:02:6a:28:e5:5e: 53:55:ec:14:6f:af:27:09:5b:ca:22:2f:4c:41:51: b3:6f:7e:7a:16:92:42:fd:c4:bb:cd:a5:b8:c4:f3: 9f:2d:95:d9:4a:fc:46:61:fc:7d:c3:ae:31:17:e0: b7:90:bf:f6:a8:36:50:21:32:a1:aa:cf:b8:17:59: 84:33:52:9b:28:4b:ad:67:64:8c:7b:f1:af:3b:a9: 0f:41:a2:6c:28:b3:42:ac:70:ed:3a:de:27:1e:cb: 31:23:59:59:60:88:0a:31:60:16:2e:3a:18:dc:d8: e6:d3:2f:bc:ea:99:08:f5:9c:9c:96:47:31:25:7f: 41:bb:f4:a5:3a:08:6b:a0:7c:9e:3f:cd:c1:1d:f4: 7e:53:95:e3:ad:fc:fe:22:32:57:1d:55:a1:e9:09: aa:fa:d6:2c:30:1f:4e:c0:83:34:98:32:7e:1d:c3: 2b:94:0e:d6:ad:e0:13:bc:e3:ef:bd:53:d1:c5:bd: 21:92:d2:c5:49:6f:25:b3:90:29:5a:d7:e8:77:36: ca:9e:c8:82:f4:c0:f9:85:d8:d8:34:a3:56:08:99: e8:43:9e:af:c0:2c:02:b8:85:c7:d0:40:80:b2:e6: 60:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9A:F5:66:E1:71:F4:0F:20:4E:9B:64:40:C7:45:D7:A3:0C:B8:15 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/82100f84-33b5-43a7-a078-7090448b8504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f5:ef:c0:2f:ff:00:3f:2f:a7:23:83:a7:2e:6c:fc:92:23: 34:c3:0e:94:ea:39:bd:0c:85:e0:7e:cf:b8:2a:1e:91:33:51: b5:26:11:a2:f2:ff:cf:41:a9:75:77:52:4a:75:33:15:af:7b: 39:44:58:a5:d4:d8:7b:e3:0c:0f:ca:c3:27:b7:30:a9:37:e1: bb:36:93:28:b4:da:48:1d:fb:95:cc:f4:f7:ec:5f:46:92:b7: 24:57:94:aa:d2:31:86:1b:57:f4:fe:d3:48:46:a9:7a:3d:41: 88:cc:fd:b5:c5:8d:cd:71:3a:ff:d6:3b:13:8e:4d:16:76:54: 1a:64:3b:c1:f9:0d:77:5c:60:c2:ed:98:b7:06:28:46:c2:99: b4:0a:98:40:44:33:0f:e6:ba:e7:40:89:63:fd:cc:fe:e0:b1: cb:93:2b:50:81:1e:56:50:36:4f:e3:2e:33:70:0e:da:0d:b3: 04:39:8a:99:36:53:17:27:09:50:23:e3:85:81:17:0a:0c:ae: 70:4c:14:d9:a9:c9:16:f9:ca:fe:88:9e:51:e7:bd:19:6a:c4: ec:d2:74:7f:f4:cf:3b:6d:f2:10:8d:05:79:f7:8d:6c:48:d1: b5:9d:d7:75:3c:47:09:35:c9:c6:24:3c:00:e6:53:65:82:2e: 8a:e7:46:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa25sHuti4Xr5bNqAsu8TwiSOteowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNTIwMjEzNzExWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2VjM2VjMDFmNjQ3OTNkNzhiMWY2M2I1ZTJhZmFmMWFi NTdiNmFlYzBjMTE5ZmJlOTdjZTdjY2QxODczYjdkMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsib93NC2Y3pJOn3MQwuHPDMNHZIcQSTwCaijlXlNV7BRv rycJW8oiL0xBUbNvfnoWkkL9xLvNpbjE858tldlK/EZh/H3DrjEX4LeQv/aoNlAh MqGqz7gXWYQzUpsoS61nZIx78a87qQ9Bomwos0KscO063iceyzEjWVlgiAoxYBYu Ohjc2ObTL7zqmQj1nJyWRzElf0G79KU6CGugfJ4/zcEd9H5TleOt/P4iMlcdVaHp Car61iwwH07AgzSYMn4dwyuUDtat4BO84++9U9HFvSGS0sVJbyWzkCla1+h3Nsqe yIL0wPmF2Ng0o1YImehDnq/ALAK4hcfQQICy5mCpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgJr1ZuFx9A8gTptkQMdF16MMuBUwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzgyMTAwZjg0LTMzYjUtNDNhNy1hMDc4LTcwOTA0NDhiODUwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWAwDQYJKoZIhvcNAQELBQADggEBAGv178Av/wA/L6cjg6cubPySIzTD DpTqOb0MheB+z7gqHpEzUbUmEaLy/89BqXV3Ukp1MxWvezlEWKXU2HvjDA/Kwye3 MKk34bs2kyi02kgd+5XM9PfsX0aStyRXlKrSMYYbV/T+00hGqXo9QYjM/bXFjc1x Ov/WOxOOTRZ2VBpkO8H5DXdcYMLtmLcGKEbCmbQKmEBEMw/muudAiWP9zP7gscuT K1CBHlZQNk/jLjNwDtoNswQ5ipk2UxcnCVAj44WBFwoMrnBMFNmpyRb5yv6InlHn vRlqxOzSdH/0zztt8hCNBXn3jWxI0bWd13U8Rwk1ycYkPADmU2WCLornRoE= -----END CERTIFICATE-----Generated at Mon Jun 2 16:42:06 2025 by rpki-client