$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa File: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (raw, json) Hash identifier: l4kdgEiUHoYxjDCvJ7S8tQAx/FcLEMamreDVtmEXWdA= Subject key identifier: EF:93:FC:97:0B:4D:E5:4E:0B:82:56:60:EE:50:43:47:98:77:B5:16 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 666E1FFB75E26176DF95B6553B1543636F3BC4CF Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa Signing time: Tue 20 May 2025 21:37:12 +0000 ROA not before: Tue 20 May 2025 21:37:12 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6e:1f:fb:75:e2:61:76:df:95:b6:55:3b:15:43:63:6f:3b:c4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: May 20 21:37:12 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=41eef29d49f782cb830e5b4469613e8393181e12d26fabbdef904c3da06d0fd9, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:87:c0:21:cc:05:68:3b:b9:64:5b:60:73: 3a:d9:12:93:68:af:8e:b8:17:da:fd:3f:24:3a:8f: 99:f1:65:24:bb:51:d1:7e:2a:3b:64:b5:58:3f:f2: 07:da:95:7e:81:4b:08:1b:98:42:f1:0a:15:08:1c: 98:f2:80:ff:d4:87:03:06:ea:e8:0d:5c:c0:d2:e2: c2:db:1b:ae:bb:24:4d:df:3e:ea:38:2e:0d:0e:da: cb:27:38:04:53:b8:49:a3:f4:35:d3:a7:ad:2b:e0: 7d:38:13:5d:c2:25:92:ee:c0:b2:23:e3:1a:9e:fd: ba:8b:87:b8:a9:e7:6f:69:2f:52:84:b1:8a:83:f1: 60:14:ca:8f:3b:54:34:79:c1:89:34:5c:ad:1e:ee: 42:86:2c:61:06:f8:f7:15:c9:cf:f5:78:16:55:26: 1c:20:26:86:aa:44:a9:8b:55:8c:b6:ff:08:09:0e: 1c:1c:79:1d:6a:32:0d:83:bc:c1:ea:bc:84:39:9e: 72:1a:a2:e1:c3:68:5e:fd:0e:18:d2:65:8c:76:a9: 84:98:fb:d9:48:52:71:de:5e:04:5f:45:60:93:49: 7c:c4:d8:2e:af:b3:97:9d:90:75:5a:9c:7e:f3:a0: 78:6a:98:18:23:ef:53:9c:4c:fc:1b:62:ff:82:69: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:93:FC:97:0B:4D:E5:4E:0B:82:56:60:EE:50:43:47:98:77:B5:16 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.97.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:8b:5c:8f:a8:1c:fe:66:6a:95:3e:c8:12:d4:b0:7f:e9:63: 08:d5:23:23:80:da:d1:aa:f6:2c:10:1e:76:9f:7c:58:53:af: 10:d5:29:bf:72:af:d2:5b:08:6b:b6:57:c0:47:6a:61:8b:f0: a3:1c:06:b7:48:e3:ac:fb:e2:08:10:eb:b0:42:d1:44:a4:aa: 4d:e0:43:82:13:c9:dc:26:67:94:79:39:7f:7b:c4:ba:45:ef: b2:26:00:04:86:96:7c:2e:65:69:81:0f:7d:9b:a1:09:7c:55: cb:57:db:3e:db:06:22:60:6e:fd:f3:4d:49:ba:1e:68:f1:be: 2b:74:77:0b:c8:92:1b:e1:df:d6:2e:91:a8:72:9a:09:ff:5a: b5:74:d4:c6:34:a4:33:4e:33:8e:8f:58:e9:5a:c9:c4:58:40: 37:68:5a:9c:af:e3:a0:b7:cf:50:21:a8:c6:e1:37:b5:01:25: ad:95:0c:34:db:33:38:12:a3:2b:76:09:3a:b1:97:30:fe:5b: e9:00:4a:d2:71:54:84:e6:a7:87:48:76:6c:e6:50:56:8b:17: f4:e9:c9:04:ee:b4:4d:cf:70:5e:76:91:2c:c7:0a:d7:45:6e: ee:53:16:5f:e5:2f:39:ab:c8:25:02:2e:09:73:3e:6b:93:58: 1f:ad:62:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZm4f+3XiYXbflbZVOxVDY287xM8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNTIwMjEzNzEyWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWVlZjI5ZDQ5Zjc4MmNiODMwZTViNDQ2OTYxM2U4Mzkz MTgxZTEyZDI2ZmFiYmRlZjkwNGMzZGEwNmQwZmQ5MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiX4fAIcwFaDu5ZFtgczrZEpNor464F9r9PyQ6j5nxZSS7 UdF+KjtktVg/8gfalX6BSwgbmELxChUIHJjygP/UhwMG6ugNXMDS4sLbG667JE3f Puo4Lg0O2ssnOARTuEmj9DXTp60r4H04E13CJZLuwLIj4xqe/bqLh7ip529pL1KE sYqD8WAUyo87VDR5wYk0XK0e7kKGLGEG+PcVyc/1eBZVJhwgJoaqRKmLVYy2/wgJ DhwceR1qMg2DvMHqvIQ5nnIaouHDaF79DhjSZYx2qYSY+9lIUnHeXgRfRWCTSXzE 2C6vs5edkHVanH7zoHhqmBgj71OcTPwbYv+CaQRNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU75P8lwtN5U4LglZg7lBDR5h3tRYwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzk4YzNmOWY4LTllZTMtNDkwOS04ZDQxLTdhYzIxODFmNjM3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWEwDQYJKoZIhvcNAQELBQADggEBAJuLXI+oHP5mapU+yBLUsH/pYwjV IyOA2tGq9iwQHnaffFhTrxDVKb9yr9JbCGu2V8BHamGL8KMcBrdI46z74ggQ67BC 0USkqk3gQ4ITydwmZ5R5OX97xLpF77ImAASGlnwuZWmBD32boQl8VctX2z7bBiJg bv3zTUm6Hmjxvit0dwvIkhvh39Yukahymgn/WrV01MY0pDNOM46PWOlaycRYQDdo Wpyv46C3z1AhqMbhN7UBJa2VDDTbMzgSoyt2CTqxlzD+W+kAStJxVITmp4dIdmzm UFaLF/TpyQTutE3PcF52kSzHCtdFbu5TFl/lLzmryCUCLglzPmuTWB+tYuM= -----END CERTIFICATE-----Generated at Sun Jun 8 04:21:19 2025 by rpki-client