$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa File: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (raw, json) Hash identifier: VGgstVFb4YdjKoOJRhytr2DwUpKLsqjsBxKGoCyLiAw= Subject key identifier: 85:0B:EA:CF:DA:91:D9:A5:92:06:47:7E:3D:29:4F:0C:24:6A:7F:6C Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 73EA78E0EB5B8C0516C045CD5248960F5BDA1F21 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa Signing time: Tue 20 May 2025 21:37:10 +0000 ROA not before: Tue 20 May 2025 21:37:10 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ea:78:e0:eb:5b:8c:05:16:c0:45:cd:52:48:96:0f:5b:da:1f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: May 20 21:37:10 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=fa9033a016b85c0ddd87038c28c5ece06274568d63572313c0408f33f6fe3f43, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:5a:f8:8f:bd:ed:0e:d9:02:0c:2b:dd:02: e4:4f:62:9e:a2:c3:22:83:4d:b1:fe:97:3c:be:bb: 63:e2:d1:d5:dc:27:af:22:d1:f4:84:16:30:7d:0e: 65:8c:e6:dd:3f:c9:cf:2a:3c:d7:20:0a:85:e9:03: 95:a5:dd:04:de:af:3a:b2:b8:e9:c8:57:fb:ee:65: 64:2a:05:17:db:6f:88:e1:d1:9e:7d:b9:fb:86:43: 25:7a:0f:19:aa:8c:39:f5:c6:78:76:af:74:fa:57: 3b:09:5a:ae:05:0e:39:b0:db:19:96:82:dd:f7:72: 20:cc:5c:66:22:73:6c:c8:fa:0e:51:69:7e:4f:b6: 02:0c:27:81:94:42:54:f6:d9:81:e8:fc:fb:19:17: 98:f9:59:0a:b4:f5:24:df:bd:89:50:46:d4:15:fa: de:3f:24:bb:69:0f:de:d2:51:6c:81:2b:89:1c:49: 93:69:0a:cd:22:9a:ad:e3:a3:9d:c0:98:c3:73:1c: 8b:7e:81:2d:d1:5e:05:c4:b1:ab:6f:67:0f:41:f9: de:c1:e2:5e:28:7e:f6:94:5d:ca:ac:9e:72:67:c3: 5d:a2:12:98:19:22:a7:0c:c2:21:0f:20:a0:b7:7f: cb:da:3c:3b:09:87:10:85:8d:b2:21:eb:74:45:e2: 02:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0B:EA:CF:DA:91:D9:A5:92:06:47:7E:3D:29:4F:0C:24:6A:7F:6C X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/24 Signature Algorithm: sha256WithRSAEncryption 28:cc:ab:60:fd:78:4e:c5:be:64:b3:24:61:0e:cb:85:78:43: 7c:06:2e:c3:3a:e6:12:cb:4e:e6:47:4b:a1:e5:c6:7d:89:a8: 71:71:03:60:83:f0:7b:80:06:bc:a0:54:c1:e1:8a:c2:fc:bc: 10:1b:20:12:01:ee:82:e1:3b:aa:83:ec:c7:57:cd:44:ed:22: 8e:79:fb:b0:06:4a:ee:ae:5b:ac:62:25:cc:b8:36:26:59:f2: ef:69:05:2d:97:1c:8e:8c:f7:d3:2b:b9:5b:f0:bd:b4:c3:1d: ce:44:16:c2:d3:1d:a9:d1:3f:61:2f:b3:77:60:1c:8c:4b:b6: 0d:5e:69:99:dd:73:63:6a:e8:c6:f1:e7:6e:2f:c4:c6:b0:cf: ae:19:47:4e:aa:a8:d9:7d:18:53:33:02:f6:26:8f:85:40:f1: 0f:b2:49:b3:3b:e6:a4:d9:f6:60:16:f1:40:1f:5c:db:d2:75: 63:85:34:dc:a0:39:50:af:a0:a9:b7:ec:0a:84:8e:71:bc:2e: 52:88:6d:21:dd:21:28:5f:5a:4f:10:b6:d2:71:8a:ac:bf:af: 04:a7:5a:78:7c:1e:c7:39:d1:e8:66:9e:e0:46:63:68:09:08: 64:95:78:92:ce:e6:ef:b7:0f:c8:cf:ce:3a:79:d5:ed:d7:d7: 92:e3:f9:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc+p44OtbjAUWwEXNUkiWD1vaHyEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNTIwMjEzNzEwWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTkwMzNhMDE2Yjg1YzBkZGQ4NzAzOGMyOGM1ZWNlMDYy NzQ1NjhkNjM1NzIzMTNjMDQwOGYzM2Y2ZmUzZjQzMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG0Fr4j73tDtkCDCvdAuRPYp6iwyKDTbH+lzy+u2Pi0dXc J68i0fSEFjB9DmWM5t0/yc8qPNcgCoXpA5Wl3QTerzqyuOnIV/vuZWQqBRfbb4jh 0Z59ufuGQyV6DxmqjDn1xnh2r3T6VzsJWq4FDjmw2xmWgt33ciDMXGYic2zI+g5R aX5PtgIMJ4GUQlT22YHo/PsZF5j5WQq09STfvYlQRtQV+t4/JLtpD97SUWyBK4kc SZNpCs0imq3jo53AmMNzHIt+gS3RXgXEsatvZw9B+d7B4l4ofvaUXcqsnnJnw12i EpgZIqcMwiEPIKC3f8vaPDsJhxCFjbIh63RF4gLJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhQvqz9qR2aWSBkd+PSlPDCRqf2wwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2IxOWU1OTc1LTFlOTktNDIyNC04Mjg4LWVkM2FmYjRmYzcwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWAwDQYJKoZIhvcNAQELBQADggEBACjMq2D9eE7FvmSzJGEOy4V4Q3wG LsM65hLLTuZHS6Hlxn2JqHFxA2CD8HuABrygVMHhisL8vBAbIBIB7oLhO6qD7MdX zUTtIo55+7AGSu6uW6xiJcy4NiZZ8u9pBS2XHI6M99MruVvwvbTDHc5EFsLTHanR P2Evs3dgHIxLtg1eaZndc2Nq6Mbx524vxMawz64ZR06qqNl9GFMzAvYmj4VA8Q+y SbM75qTZ9mAW8UAfXNvSdWOFNNygOVCvoKm37AqEjnG8LlKIbSHdIShfWk8QttJx iqy/rwSnWnh8Hsc50ehmnuBGY2gJCGSVeJLO5u+3D8jPzjp51e3X15Lj+VE= -----END CERTIFICATE-----Generated at Sat Jun 7 04:16:16 2025 by rpki-client