$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa File: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (raw, json) Hash identifier: E2UcHyuPngD+8GQZ4xo6KLPK1CTyfoZE6le18teHKq4= Subject key identifier: F4:AD:7A:D4:41:2E:3A:16:D2:C6:F7:5E:46:05:1C:F5:8F:F9:4D:53 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 5B1908DB80AFCD08255955C199FBC3182C3EDAC9 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa Signing time: Tue 20 May 2025 21:37:07 +0000 ROA not before: Tue 20 May 2025 21:37:07 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:19:08:db:80:af:cd:08:25:59:55:c1:99:fb:c3:18:2c:3e:da:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: May 20 21:37:07 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=3a1fe108a2bc9019797262180f2edc1d93749eb7c70eac6923477bb4c322d6a2, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:b6:39:93:5d:56:50:3d:d4:32:74:45:4c: 7e:65:5c:95:66:7e:f2:cf:32:3f:84:0c:58:12:5a: db:e7:5e:12:ab:4f:1e:96:8c:4c:bd:d2:00:ac:b8: 00:b0:51:86:d6:a2:b3:7c:e8:65:dd:1e:74:d2:34: ff:28:a4:2d:19:29:69:51:62:6b:bd:c1:16:97:09: c5:d1:e9:3e:f3:76:a9:d3:0d:63:8b:ee:01:73:04: e1:96:35:02:2d:af:bd:22:3b:a1:b2:1f:7d:7e:27: 40:45:77:29:ac:7b:1e:25:a2:f1:73:a6:07:e3:c7: 2d:1c:08:a9:35:82:f7:17:f1:c4:72:d5:d4:7a:07: 28:bf:03:65:2c:7c:40:34:7a:98:82:d6:6c:9a:53: 91:cb:af:1e:f2:6b:7d:29:f0:f8:0e:07:7b:4b:8c: f3:96:64:9a:9d:c2:aa:d8:fb:48:88:a3:48:77:b5: cf:cc:03:50:17:c6:34:ff:79:e1:8a:04:04:a3:f6: ea:8b:e6:a2:f1:73:fa:c4:f5:04:92:db:6d:9e:8e: 3f:f7:83:b9:67:58:83:35:90:ae:85:6c:9b:29:aa: 93:e0:e8:96:62:fc:c9:36:0c:c0:64:ca:ec:eb:4e: a8:d1:a7:4c:b6:4b:8e:7f:14:00:09:f6:94:a6:bf: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AD:7A:D4:41:2E:3A:16:D2:C6:F7:5E:46:05:1C:F5:8F:F9:4D:53 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.101.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ec:51:e2:8c:63:e0:7f:f2:35:bc:c4:13:93:42:70:2e:09: c0:0e:b8:8b:c2:2c:61:8e:4e:c5:52:b9:36:2b:af:2d:83:07: 63:77:60:75:24:5c:e2:4d:cc:81:9c:4c:64:db:e9:a6:6d:7d: 3e:d1:e7:b5:40:57:0c:d9:e3:14:09:62:cd:93:d2:76:cd:53: ea:f8:34:13:53:af:ae:a8:4c:40:d4:93:bb:08:f0:6c:f8:24: d8:37:34:db:6a:ba:62:b9:11:98:fb:7a:2f:06:0b:89:b9:ec: 16:6f:01:cd:0a:b4:4c:2c:fe:51:69:f5:b3:50:85:b6:8d:12: 49:b0:ca:ea:09:e9:f0:4e:07:28:01:9f:94:50:57:92:67:bb: 9c:d2:9e:32:15:f0:00:98:0c:36:57:b5:5e:d2:d8:f4:86:50: f9:c1:d1:1a:c5:84:85:14:a8:38:63:63:43:23:8d:4e:b0:cf: b8:8b:e2:af:3f:76:d4:64:5c:94:db:4d:9a:6a:ec:53:57:51: 86:17:36:90:07:d8:d5:b0:1c:11:79:c8:a8:9b:2f:93:8a:b4: 40:2f:54:53:87:2f:5c:ac:f0:77:dd:e6:ab:4e:25:85:b5:3a: 4d:df:09:b4:72:89:91:c6:8c:a7:5c:cc:e0:c4:0e:81:e5:26: 3d:0e:ef:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWxkI24CvzQglWVXBmfvDGCw+2skwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNTIwMjEzNzA3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTFmZTEwOGEyYmM5MDE5Nzk3MjYyMTgwZjJlZGMxZDkz NzQ5ZWI3YzcwZWFjNjkyMzQ3N2JiNGMzMjJkNmEyMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkW7Y5k11WUD3UMnRFTH5lXJVmfvLPMj+EDFgSWtvnXhKr Tx6WjEy90gCsuACwUYbWorN86GXdHnTSNP8opC0ZKWlRYmu9wRaXCcXR6T7zdqnT DWOL7gFzBOGWNQItr70iO6GyH31+J0BFdymsex4lovFzpgfjxy0cCKk1gvcX8cRy 1dR6Byi/A2UsfEA0epiC1myaU5HLrx7ya30p8PgOB3tLjPOWZJqdwqrY+0iIo0h3 tc/MA1AXxjT/eeGKBASj9uqL5qLxc/rE9QSS222ejj/3g7lnWIM1kK6FbJspqpPg 6JZi/Mk2DMBkyuzrTqjRp0y2S45/FAAJ9pSmv5hNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9K161EEuOhbSxvdeRgUc9Y/5TVMwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2FlZDc2ZjE3LTViNDctNGU1Yy1hOWZiLWIwMWM2MWQyM2M4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWUwDQYJKoZIhvcNAQELBQADggEBAIHsUeKMY+B/8jW8xBOTQnAuCcAO uIvCLGGOTsVSuTYrry2DB2N3YHUkXOJNzIGcTGTb6aZtfT7R57VAVwzZ4xQJYs2T 0nbNU+r4NBNTr66oTEDUk7sI8Gz4JNg3NNtqumK5EZj7ei8GC4m57BZvAc0KtEws /lFp9bNQhbaNEkmwyuoJ6fBOBygBn5RQV5Jnu5zSnjIV8ACYDDZXtV7S2PSGUPnB 0RrFhIUUqDhjY0MjjU6wz7iL4q8/dtRkXJTbTZpq7FNXUYYXNpAH2NWwHBF5yKib L5OKtEAvVFOHL1ys8Hfd5qtOJYW1Ok3fCbRyiZHGjKdczODEDoHlJj0O7y0= -----END CERTIFICATE-----Generated at Mon Jun 2 16:25:53 2025 by rpki-client