$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa File: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (raw, json) Hash identifier: CRYRJoPyW+KoKcsZ+/fYeWU5rXhRYHyUz+X4wALsjlc= Subject key identifier: 48:9A:43:13:DB:63:04:F1:B6:DE:2F:F3:B5:EF:5C:93:AB:E6:03:6C Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 336FFC25624F87F62497781F1141A229BC468C9C Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa Signing time: Tue 20 May 2025 21:37:07 +0000 ROA not before: Tue 20 May 2025 21:37:07 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6f:fc:25:62:4f:87:f6:24:97:78:1f:11:41:a2:29:bc:46:8c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: May 20 21:37:07 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=99186bc1a73bf33dae8df8609fde7c8c9df3fbaeba8ad55daf411cb0ce0ae1b8, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6a:4f:f6:40:a2:d7:df:32:42:9c:c2:30:27: c5:10:b2:5b:e7:74:d0:4c:c9:d1:59:26:6e:dd:23: 2c:c2:39:f9:78:c5:5d:4e:10:a0:6f:70:6d:c6:c4: 7c:dd:60:8f:0d:b4:3a:dc:e7:0e:f6:c1:0b:43:43: 8e:3a:65:55:52:bc:c9:8e:27:23:5b:85:99:ee:a2: 5a:ad:6e:47:59:1d:7f:70:ee:45:9e:e9:4d:1f:b7: 0d:87:d7:be:0d:97:c7:1a:ee:1f:a9:12:90:ab:89: b6:8e:9d:cd:63:7c:5f:0e:06:45:2f:43:95:49:c5: 5f:d4:a5:31:0f:7a:a3:a3:97:9c:db:e2:98:3a:94: ad:36:0a:09:cb:ac:d2:0d:ba:8a:5b:8e:4e:d2:b1: f6:56:b8:39:61:12:d1:7f:11:5d:e4:a8:9b:86:29: 0b:d8:b8:d7:90:77:16:3f:89:a6:41:41:40:4c:7b: 42:ff:c3:39:55:42:84:61:a8:0d:bf:52:80:2b:8d: 7b:36:91:b2:fe:d2:db:21:cc:19:2f:70:99:ac:6e: 7f:c7:02:4d:bb:4f:30:89:17:9b:37:e8:8b:b1:ed: 61:e6:55:c4:27:55:cf:1e:68:12:71:9e:46:4a:81: e6:91:79:8f:f1:a3:13:ec:63:1f:96:c1:ed:55:8c: ec:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9A:43:13:DB:63:04:F1:B6:DE:2F:F3:B5:EF:5C:93:AB:E6:03:6C X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.101.0/24 Signature Algorithm: sha256WithRSAEncryption 10:1e:35:b8:bc:8f:98:3b:ab:19:e4:3b:ce:aa:bd:88:d2:ee: cb:92:b1:32:69:11:15:ff:fd:a2:de:19:a5:0e:37:37:c4:8f: 62:2f:ae:6b:12:27:48:73:69:d0:be:06:11:fa:d4:b3:75:9d: 40:bf:71:f0:9d:4b:f4:0e:e3:3e:b2:53:4d:05:22:67:0e:7d: b6:8e:21:77:8b:09:b0:1b:51:ad:65:17:35:b2:5b:a6:e6:c3: c7:53:4c:e8:23:6e:d3:4d:14:63:d6:05:89:1b:d2:c1:18:0f: 7f:66:7d:9a:46:76:2b:05:a9:5f:aa:da:d6:90:51:0a:bb:6d: 51:e5:a4:75:ae:76:ff:78:87:3c:17:f0:de:7d:3d:e2:f9:f1: a6:a2:b3:9c:88:a1:e5:7a:44:5b:a6:e6:f9:4e:3d:ca:5b:78: 62:79:d6:dc:1e:b9:93:21:a0:b3:36:83:f1:be:79:54:12:aa: 59:3c:a7:5c:31:d5:7f:1d:a5:ef:c1:ad:3d:e0:01:44:79:b1: 9a:fd:58:b6:32:24:29:97:db:45:a3:a8:5c:a3:e3:42:25:8f: 1b:67:38:b2:5e:8e:4b:af:14:b3:84:bf:53:24:8d:d4:fe:b2: 04:be:bf:11:68:fa:12:b8:76:c0:c1:e4:86:6d:8a:50:0d:2a: 0c:07:45:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM2/8JWJPh/Ykl3gfEUGiKbxGjJwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNTIwMjEzNzA3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OTE4NmJjMWE3M2JmMzNkYWU4ZGY4NjA5ZmRlN2M4Yzlk ZjNmYmFlYmE4YWQ1NWRhZjQxMWNiMGNlMGFlMWI4MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYak/2QKLX3zJCnMIwJ8UQslvndNBMydFZJm7dIyzCOfl4 xV1OEKBvcG3GxHzdYI8NtDrc5w72wQtDQ446ZVVSvMmOJyNbhZnuolqtbkdZHX9w 7kWe6U0ftw2H174Nl8ca7h+pEpCribaOnc1jfF8OBkUvQ5VJxV/UpTEPeqOjl5zb 4pg6lK02CgnLrNINuopbjk7SsfZWuDlhEtF/EV3kqJuGKQvYuNeQdxY/iaZBQUBM e0L/wzlVQoRhqA2/UoArjXs2kbL+0tshzBkvcJmsbn/HAk27TzCJF5s36Iux7WHm VcQnVc8eaBJxnkZKgeaReY/xoxPsYx+Wwe1VjOzjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSJpDE9tjBPG23i/zte9ck6vmA2wwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2YwMmVmYjFmLThhMTctNGRjNy05YWI0LTljYzIzYmM2OWI5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWUwDQYJKoZIhvcNAQELBQADggEBABAeNbi8j5g7qxnkO86qvYjS7suS sTJpERX//aLeGaUONzfEj2IvrmsSJ0hzadC+BhH61LN1nUC/cfCdS/QO4z6yU00F ImcOfbaOIXeLCbAbUa1lFzWyW6bmw8dTTOgjbtNNFGPWBYkb0sEYD39mfZpGdisF qV+q2taQUQq7bVHlpHWudv94hzwX8N59PeL58aais5yIoeV6RFum5vlOPcpbeGJ5 1tweuZMhoLM2g/G+eVQSqlk8p1wx1X8dpe/BrT3gAUR5sZr9WLYyJCmX20WjqFyj 40IljxtnOLJejkuvFLOEv1MkjdT+sgS+vxFo+hK4dsDB5IZtilANKgwHRY4= -----END CERTIFICATE-----Generated at Mon Jun 2 16:29:55 2025 by rpki-client