$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa File: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (raw, json) Hash identifier: u7ywYwMfDLvPhVDc0oj7jR+s0/hqb4YZSa0GlK5cWwo= Subject key identifier: C7:58:6D:60:00:57:65:8B:92:57:95:19:B6:36:99:15:7E:B9:B7:EE Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 381B7DB2B27CD30DB8C19B6876C25CFFA0A4527C Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa Signing time: Wed 09 Jul 2025 00:10:16 +0000 ROA not before: Wed 09 Jul 2025 00:10:16 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1b:7d:b2:b2:7c:d3:0d:b8:c1:9b:68:76:c2:5c:ff:a0:a4:52:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Jul 9 00:10:16 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=b909db4d44869a45531f6aa5e9b881b0bd6d8a13052d10da25d9b0e883009c64, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3f:02:a5:c5:9c:2b:80:7d:40:f0:be:bc:cb: e6:a6:0e:3c:1d:77:19:11:19:16:17:52:b1:8e:43: 41:2b:a4:c3:5c:a5:4a:8e:1a:90:cc:33:b2:f2:79: 06:2f:41:b6:18:86:f5:53:26:ea:40:d9:7a:ee:55: b9:3b:0c:46:da:43:cc:21:31:c5:53:36:85:e9:24: 85:74:3d:79:4d:0c:e6:56:fb:31:25:e2:4c:f7:79: ce:9c:ec:65:8a:10:a1:c8:a9:20:0e:80:9b:5a:b4: 59:0a:89:38:fa:92:97:c0:c1:6b:6a:84:bc:89:cb: 37:ac:4f:1c:1c:80:26:a8:06:6b:bf:eb:5c:41:06: 63:1b:07:8a:c5:76:1e:88:c7:20:9e:87:14:92:4c: a9:e2:fe:83:63:08:86:9c:64:9b:0a:40:19:67:4a: f6:39:63:3e:c2:90:7b:af:f6:40:a3:02:21:c6:61: e1:a4:3c:dd:54:ba:ac:98:f1:c4:01:a5:17:4b:ac: fc:5b:78:a7:96:c3:2d:03:6e:62:54:a8:e2:5f:59: 00:a9:c9:a0:99:c1:22:86:f5:ea:26:4f:7d:32:3c: 87:bc:c1:75:54:9e:fa:a9:49:65:f7:86:ef:38:ab: d6:96:17:8a:7b:9e:1d:f7:32:9a:94:e4:0d:a2:b1: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:58:6D:60:00:57:65:8B:92:57:95:19:B6:36:99:15:7E:B9:B7:EE X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.100.0/24 Signature Algorithm: sha256WithRSAEncryption 91:bd:74:7d:39:a9:44:6f:87:4f:3a:a9:9f:51:db:0d:e5:5a: 1f:07:ce:e5:01:84:5d:cb:45:6e:b9:a8:3a:d8:52:c7:4c:7f: 00:5e:ef:e0:57:71:65:2d:de:51:5b:6e:94:ff:1c:44:b9:6d: 0e:94:51:bc:1a:f3:f1:f9:f0:2f:4c:b2:96:c8:31:5c:88:27: 95:be:86:78:25:8c:ee:a6:2c:48:10:54:f8:9a:22:4e:98:d3: d1:a5:9b:f6:0d:29:2c:59:4e:bd:2d:23:72:3c:37:69:64:c7: fd:89:9f:44:33:9f:71:d6:7b:24:64:c1:0b:3b:30:55:47:9e: 39:4a:c6:eb:06:b2:b8:a4:f2:52:3a:3a:92:9d:98:ba:8e:68: ef:38:d1:29:26:27:7d:2b:8a:58:f7:68:90:20:09:ab:48:e3: 29:fb:80:bf:12:07:e3:00:9d:8a:a9:ca:61:d6:b5:de:a7:fb: 02:9b:b0:fa:c5:97:3f:7e:74:55:ed:27:e5:c5:0e:85:3c:67: ad:c4:7a:f2:58:79:12:71:57:0e:3c:23:d2:88:51:ab:43:60: b6:2c:d7:73:7f:15:64:71:fe:9a:82:ae:7b:3c:3d:c9:a4:70: 63:63:47:99:0a:8e:82:9b:7d:15:31:71:7d:57:8c:e7:19:b8: f7:69:16:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOBt9srJ80w24wZtodsJc/6CkUnwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNzA5MDAxMDE2WhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTA5ZGI0ZDQ0ODY5YTQ1NTMxZjZhYTVlOWI4ODFiMGJk NmQ4YTEzMDUyZDEwZGEyNWQ5YjBlODgzMDA5YzY0MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnPwKlxZwrgH1A8L68y+amDjwddxkRGRYXUrGOQ0ErpMNc pUqOGpDMM7LyeQYvQbYYhvVTJupA2XruVbk7DEbaQ8whMcVTNoXpJIV0PXlNDOZW +zEl4kz3ec6c7GWKEKHIqSAOgJtatFkKiTj6kpfAwWtqhLyJyzesTxwcgCaoBmu/ 61xBBmMbB4rFdh6IxyCehxSSTKni/oNjCIacZJsKQBlnSvY5Yz7CkHuv9kCjAiHG YeGkPN1UuqyY8cQBpRdLrPxbeKeWwy0DbmJUqOJfWQCpyaCZwSKG9eomT30yPIe8 wXVUnvqpSWX3hu84q9aWF4p7nh33MpqU5A2isaUvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx1htYABXZYuSV5UZtjaZFX65t+4wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzA1YmE5Y2E1LWE5YTktNGRlZi05YzcxLTBjZjQ3ZDA2ZmUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWQwDQYJKoZIhvcNAQELBQADggEBAJG9dH05qURvh086qZ9R2w3lWh8H zuUBhF3LRW65qDrYUsdMfwBe7+BXcWUt3lFbbpT/HES5bQ6UUbwa8/H58C9MspbI MVyIJ5W+hngljO6mLEgQVPiaIk6Y09Glm/YNKSxZTr0tI3I8N2lkx/2Jn0Qzn3HW eyRkwQs7MFVHnjlKxusGsrik8lI6OpKdmLqOaO840SkmJ30rilj3aJAgCatI4yn7 gL8SB+MAnYqpymHWtd6n+wKbsPrFlz9+dFXtJ+XFDoU8Z63EevJYeRJxVw48I9KI UatDYLYs13N/FWRx/pqCrns8PcmkcGNjR5kKjoKbfRUxcX1XjOcZuPdpFnM= -----END CERTIFICATE-----Generated at Mon Aug 4 14:22:38 2025 by rpki-client