$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa File: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (raw, json) Hash identifier: Op5lIEV/fzacmHqDeNHJqqH5VkYlqRHVgjVcIw7BqRg= Subject key identifier: 9A:4F:73:FF:EF:63:52:65:66:4F:40:B9:34:FB:BD:BF:02:A5:CB:CF Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 37C52862E779E3BDBAAACA6903CA4434017CF5B0 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa Signing time: Mon 04 Aug 2025 15:00:04 +0000 ROA not before: Mon 04 Aug 2025 15:00:04 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c5:28:62:e7:79:e3:bd:ba:aa:ca:69:03:ca:44:34:01:7c:f5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 15:00:04 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=eb6250ad237cf04d8e6b03d782c7c3a2fa9ba21ce1ca78827b52d565a536c029, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:84:a7:fc:98:63:66:66:4b:70:68:93:2b: 35:cc:06:d2:ab:6d:76:cf:58:21:96:1c:58:9b:46: 78:f9:3d:48:b1:4f:23:67:1e:be:19:04:1a:2e:29: a6:8b:41:59:20:d2:91:42:19:55:36:1d:a5:5f:3b: d9:48:31:7f:33:19:de:b4:c6:50:43:ed:ea:82:8d: 9b:6f:1f:22:34:24:f3:8a:f8:37:95:df:8d:1c:ea: f4:e9:b1:28:72:ad:45:7d:8f:13:c1:83:8c:4f:24: f1:06:3e:f8:34:1a:23:a8:88:e1:00:b2:da:2d:53: f6:9f:40:30:1d:80:6f:38:74:1b:db:7a:a0:54:3a: ab:b8:27:e5:23:2d:8b:f6:d0:c5:bc:9e:9c:88:8b: fd:4c:14:83:df:ca:f6:6d:0f:3f:0a:c6:11:7c:e1: af:4c:24:af:c9:0d:e1:b8:33:00:80:dd:6b:85:79: bb:81:50:17:ee:aa:b3:22:77:ae:72:dc:59:01:f6: 3e:a2:e3:af:46:1a:fb:f3:01:eb:06:e9:87:64:3d: 85:bd:ad:8f:62:a9:d3:a3:b2:1e:c2:c6:a7:e0:e8: 55:8b:37:13:dc:47:cd:65:41:35:a7:00:86:bc:48: c3:62:78:ab:73:3f:e8:35:89:98:97:dc:c4:39:96: 7f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4F:73:FF:EF:63:52:65:66:4F:40:B9:34:FB:BD:BF:02:A5:CB:CF X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.101.0/24 Signature Algorithm: sha256WithRSAEncryption 46:82:9a:dc:14:f8:6e:02:31:7b:46:23:62:97:0c:8b:c0:cf: fb:b4:a5:98:ed:d9:3f:40:8d:16:8e:90:cf:8b:69:bd:07:13: 05:42:6c:4b:1f:f5:7e:85:8f:83:d9:66:ca:80:82:9e:bf:3e: a3:0f:85:7e:6f:99:91:eb:b4:06:73:ec:5c:60:9f:e3:7e:06: c2:be:4a:46:53:57:3f:7c:d7:4f:d2:4e:64:07:d3:6f:ab:85: 45:6f:97:cc:1d:b5:84:9a:ca:aa:40:cc:83:2d:47:57:b3:90: e3:22:36:47:76:c9:b0:c0:f5:8d:7d:7d:fe:fa:ef:03:10:f8: e8:11:b2:bd:b9:48:5b:b6:4f:f6:3d:e9:23:f3:57:c4:90:84: 60:de:14:ba:c6:0e:c0:67:8d:87:3c:f5:08:79:b2:56:e3:ea: c2:81:87:56:64:9d:32:4b:d6:cd:d2:4d:c4:00:00:a0:80:d4: f7:5b:4b:38:67:c4:83:73:4c:93:87:67:e8:c8:84:a3:0c:2b: 5f:a4:e9:1c:48:b4:82:52:42:2f:c4:2b:4f:1b:39:58:b2:c2: b3:ca:7f:09:29:6a:0e:02:55:40:21:25:c0:38:e8:47:a8:21: 91:4b:1c:5f:37:6f:17:08:0d:86:b1:09:c7:a6:fe:2e:fe:36: 5a:e9:11:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN8UoYud54726qsppA8pENAF89bAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwODA0MTUwMDA0WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjYyNTBhZDIzN2NmMDRkOGU2YjAzZDc4MmM3YzNhMmZh OWJhMjFjZTFjYTc4ODI3YjUyZDU2NWE1MzZjMDI5MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu1ISn/JhjZmZLcGiTKzXMBtKrbXbPWCGWHFibRnj5PUix TyNnHr4ZBBouKaaLQVkg0pFCGVU2HaVfO9lIMX8zGd60xlBD7eqCjZtvHyI0JPOK +DeV340c6vTpsShyrUV9jxPBg4xPJPEGPvg0GiOoiOEAstotU/afQDAdgG84dBvb eqBUOqu4J+UjLYv20MW8npyIi/1MFIPfyvZtDz8KxhF84a9MJK/JDeG4MwCA3WuF ebuBUBfuqrMid65y3FkB9j6i469GGvvzAesG6YdkPYW9rY9iqdOjsh7Cxqfg6FWL NxPcR81lQTWnAIa8SMNieKtzP+g1iZiX3MQ5ln9dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmk9z/+9jUmVmT0C5NPu9vwKly88wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2YwMmVmYjFmLThhMTctNGRjNy05YWI0LTljYzIzYmM2OWI5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWUwDQYJKoZIhvcNAQELBQADggEBAEaCmtwU+G4CMXtGI2KXDIvAz/u0 pZjt2T9AjRaOkM+Lab0HEwVCbEsf9X6Fj4PZZsqAgp6/PqMPhX5vmZHrtAZz7Fxg n+N+BsK+SkZTVz9810/STmQH02+rhUVvl8wdtYSayqpAzIMtR1ezkOMiNkd2ybDA 9Y19ff767wMQ+OgRsr25SFu2T/Y96SPzV8SQhGDeFLrGDsBnjYc89Qh5slbj6sKB h1ZknTJL1s3STcQAAKCA1PdbSzhnxINzTJOHZ+jIhKMMK1+k6RxItIJSQi/EK08b OViywrPKfwkpag4CVUAhJcA46EeoIZFLHF83bxcIDYaxCcem/i7+NlrpEd4= -----END CERTIFICATE-----Generated at Thu Aug 21 18:52:02 2025 by rpki-client