$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/2dde36c0-2f63-460e-82c0-69cf2908a539.roa File: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (raw, json) Hash identifier: OuWiwzEsh3/Q35XoUFHEEwFEcQDfAPIlL5A9OWx8lFg= Subject key identifier: A1:12:7C:8D:92:9A:CB:E7:28:87:FE:5C:E3:7D:0C:57:A2:DF:24:67 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 77D8EE43BF7CA70B4C63F73FD51CE8A3CDD6C405 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/2dde36c0-2f63-460e-82c0-69cf2908a539.roa Signing time: Sat 14 Jun 2025 00:10:07 +0000 ROA not before: Sat 14 Jun 2025 00:10:07 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d8:ee:43:bf:7c:a7:0b:4c:63:f7:3f:d5:1c:e8:a3:cd:d6:c4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Jun 14 00:10:07 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=c501edd81644ce322013fc9e6d9a9d88202185b77ac41489d61543be1ed85336, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:81:97:d2:c9:ea:96:f7:89:e1:b0:9c:a7:e8: 4d:5a:f7:ac:e7:17:6d:59:d2:9a:4c:af:a8:73:81: 68:9c:02:9b:25:47:83:a0:27:b8:93:c4:0c:34:bd: 49:8b:32:9c:46:37:6f:78:eb:1e:2d:25:93:de:60: 9a:3d:4a:2b:69:92:55:7e:42:6d:2a:e8:06:69:73: 8c:47:3b:6a:97:8b:87:13:9d:9b:3a:73:3a:0d:7d: 75:25:93:b1:54:c4:90:5a:9f:be:d9:90:38:03:e9: fc:c6:06:d1:c0:cd:79:d2:2b:44:ff:89:fd:92:5d: 5a:1d:cc:15:1d:b0:8f:c3:5a:56:04:4c:15:0e:0c: 86:99:e1:44:cc:92:3c:31:45:75:9d:17:92:aa:b7: 84:fb:dd:f9:73:e3:29:47:90:d1:f6:00:d6:ea:54: 74:c9:e9:1c:55:9f:34:12:f4:2f:86:a4:37:ae:92: a3:6d:de:bc:d6:1e:eb:69:c8:b5:4a:f3:20:aa:2a: ca:47:33:83:84:e9:c0:cb:1f:06:0d:78:14:fd:66: c4:a9:68:ae:d0:1d:1c:27:16:43:68:4f:7a:04:8a: eb:6d:21:d8:0a:de:3e:ee:04:81:ac:02:71:68:1d: ae:79:03:ae:54:b9:d6:45:0c:7d:3b:52:d8:f8:30: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:12:7C:8D:92:9A:CB:E7:28:87:FE:5C:E3:7D:0C:57:A2:DF:24:67 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/2dde36c0-2f63-460e-82c0-69cf2908a539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.99.0/24 Signature Algorithm: sha256WithRSAEncryption 63:5a:8a:5a:94:32:46:28:95:dd:9a:22:a1:c8:b7:83:18:25: cb:1b:5d:c3:5f:a1:d3:5a:71:58:fd:43:a9:13:f6:cc:dd:1c: 92:44:71:23:25:3f:b5:8b:a0:b3:7e:ac:19:9b:4a:99:c3:4d: 3f:c4:9a:b6:eb:64:cc:99:05:46:19:c9:b1:55:45:63:29:20: 28:26:ac:51:6b:34:0d:e5:14:a2:45:21:49:45:6d:d1:5d:32: f4:c2:86:39:45:5a:57:3c:93:a0:d1:67:72:7c:43:e1:f1:f9: 86:98:27:b7:35:0b:0e:fd:34:ef:fe:42:07:19:b5:dd:49:60: 25:be:e3:da:c8:ab:f6:7a:1e:6a:9d:55:56:52:97:ac:c8:56: 9d:48:67:fd:67:46:eb:fb:bb:2d:a0:db:a5:6d:2c:30:34:85: 05:d4:76:aa:77:7b:d8:da:c7:94:95:c9:f8:68:22:d5:c5:86: b0:d1:e1:f2:ca:9e:2f:59:c0:ea:00:19:67:47:79:5f:3b:da: 26:b4:13:e3:1e:15:cd:07:5f:d6:6e:08:a6:ff:fb:03:f8:b4: 5c:ef:dc:06:2f:82:37:d8:79:44:4a:54:e0:dc:c6:c2:6b:81: 99:4f:44:78:d5:7c:2f:95:f4:c0:00:40:f1:25:55:50:21:10: 3c:8f:80:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd9juQ798pwtMY/c/1Rzoo83WxAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNjE0MDAxMDA3WhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTAxZWRkODE2NDRjZTMyMjAxM2ZjOWU2ZDlhOWQ4ODIw MjE4NWI3N2FjNDE0ODlkNjE1NDNiZTFlZDg1MzM2MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvgZfSyeqW94nhsJyn6E1a96znF21Z0ppMr6hzgWicApsl R4OgJ7iTxAw0vUmLMpxGN2946x4tJZPeYJo9SitpklV+Qm0q6AZpc4xHO2qXi4cT nZs6czoNfXUlk7FUxJBan77ZkDgD6fzGBtHAzXnSK0T/if2SXVodzBUdsI/DWlYE TBUODIaZ4UTMkjwxRXWdF5Kqt4T73flz4ylHkNH2ANbqVHTJ6RxVnzQS9C+GpDeu kqNt3rzWHutpyLVK8yCqKspHM4OE6cDLHwYNeBT9ZsSpaK7QHRwnFkNoT3oEiutt IdgK3j7uBIGsAnFoHa55A65UudZFDH07Utj4MKeBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoRJ8jZKay+coh/5c430MV6LfJGcwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzJkZGUzNmMwLTJmNjMtNDYwZS04MmMwLTY5Y2YyOTA4YTUzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWMwDQYJKoZIhvcNAQELBQADggEBAGNailqUMkYold2aIqHIt4MYJcsb XcNfodNacVj9Q6kT9szdHJJEcSMlP7WLoLN+rBmbSpnDTT/EmrbrZMyZBUYZybFV RWMpICgmrFFrNA3lFKJFIUlFbdFdMvTChjlFWlc8k6DRZ3J8Q+Hx+YaYJ7c1Cw79 NO/+QgcZtd1JYCW+49rIq/Z6HmqdVVZSl6zIVp1IZ/1nRuv7uy2g26VtLDA0hQXU dqp3e9jax5SVyfhoItXFhrDR4fLKni9ZwOoAGWdHeV872ia0E+MeFc0HX9ZuCKb/ +wP4tFzv3AYvgjfYeURKVODcxsJrgZlPRHjVfC+V9MAAQPElVVAhEDyPgKQ= -----END CERTIFICATE-----Generated at Sun Jun 15 13:01:06 2025 by rpki-client