$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa File: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (raw, json) Hash identifier: 7gLrv3/ovX6p/2APm2TGZP0qYAu9Y0U7PmyxuQ8vGgo= Subject key identifier: 31:32:F4:72:4F:F2:DB:E2:12:37:A3:65:CF:24:5B:24:69:14:AD:A2 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 198307C4EC815BCB5C1351DC1FC5482FFEBCB165 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa Signing time: Sat 14 Jun 2025 00:10:17 +0000 ROA not before: Sat 14 Jun 2025 00:10:17 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:83:07:c4:ec:81:5b:cb:5c:13:51:dc:1f:c5:48:2f:fe:bc:b1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Jun 14 00:10:17 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=d10f1ac7faf06c0b460fd7d19e60da9044a239edcf227e220fb3e94f58f2f8e2, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f9:e9:54:84:06:79:bd:2d:6f:be:a8:9e:45: 6c:72:c0:5a:a1:21:63:88:47:2f:b1:43:55:e1:cf: 26:53:df:ed:a1:23:d8:01:b0:46:79:13:b4:9d:86: 58:9e:71:e0:4f:dc:00:15:c2:d3:a7:11:93:18:d0: 33:ac:a3:4e:38:46:7d:0b:20:2d:e0:c4:08:22:50: 34:67:0e:46:ba:f8:f3:83:d0:07:f1:7c:6d:ac:ac: 1f:b6:fe:65:27:e4:3f:de:3a:8f:30:e3:40:58:c5: 02:20:a6:c2:85:6e:b8:9b:51:40:f0:16:63:86:07: 5b:c5:6c:d9:b0:fc:2a:a0:29:e1:1c:b7:a7:bd:da: 37:45:0d:42:6b:b7:54:c5:6d:1f:f0:54:65:78:54: 18:04:72:18:3e:60:29:d1:51:67:a2:fb:c5:79:ce: 60:9a:35:1a:ef:33:1d:3e:a6:2f:0c:fc:b6:74:b6: ea:ac:1d:6a:42:4e:6f:2f:a1:1c:b8:15:87:e7:55: 51:c3:77:6e:10:cc:f9:08:35:54:47:87:bc:25:b7: 57:e8:65:01:63:06:2d:bf:0d:f5:28:67:b7:e5:3d: 3f:f9:18:44:17:61:4c:a2:12:10:f3:7a:87:2b:17: 3d:f5:1d:8f:09:85:b5:e6:5b:c1:25:28:1e:f6:de: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:32:F4:72:4F:F2:DB:E2:12:37:A3:65:CF:24:5B:24:69:14:AD:A2 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.102.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:e1:4b:22:e1:d4:7b:da:77:ad:bc:b5:39:c2:d8:9c:22:fe: c5:0d:ab:d0:a2:ed:c4:eb:84:7e:76:10:ca:09:53:cc:79:c7: 3a:e0:5d:82:7c:de:01:71:6d:7f:63:1d:78:2a:db:6a:60:85: fa:85:66:e1:30:40:bf:7b:05:39:8f:bd:1b:c0:3b:bd:57:51: 92:48:cb:85:95:70:d9:1d:24:85:22:d8:b2:8f:c9:c5:18:1c: ff:e7:87:7d:66:28:b1:4f:6c:45:4a:a4:5f:34:a5:ee:df:77: a4:c3:57:e5:14:ff:db:be:57:eb:ba:20:24:7c:67:72:3d:0c: ac:29:77:c3:21:c9:80:31:6d:36:19:7c:c4:44:bc:47:d0:0e: 3b:cb:6d:25:2b:fe:24:60:40:48:9c:4a:a4:57:a7:f2:bf:ae: 4f:67:3f:63:d3:17:8b:65:41:df:53:aa:b8:b9:eb:55:c6:cd: df:76:c1:a1:bf:5a:c5:5e:19:dd:18:d1:db:78:8a:c0:2e:9c: 4d:6f:55:42:66:c5:f1:00:5d:18:5f:d0:43:6d:bb:6a:ff:19: 0d:49:53:68:51:6f:8a:61:77:b3:8b:9b:b0:92:43:77:04:42: d8:59:75:2f:21:f6:8a:f2:e5:0c:39:ba:e3:dc:d7:21:92:75: 4f:ae:23:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGYMHxOyBW8tcE1HcH8VIL/68sWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNjE0MDAxMDE3WhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTBmMWFjN2ZhZjA2YzBiNDYwZmQ3ZDE5ZTYwZGE5MDQ0 YTIzOWVkY2YyMjdlMjIwZmIzZTk0ZjU4ZjJmOGUyMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDi+elUhAZ5vS1vvqieRWxywFqhIWOIRy+xQ1XhzyZT3+2h I9gBsEZ5E7SdhlieceBP3AAVwtOnEZMY0DOso044Rn0LIC3gxAgiUDRnDka6+POD 0AfxfG2srB+2/mUn5D/eOo8w40BYxQIgpsKFbribUUDwFmOGB1vFbNmw/CqgKeEc t6e92jdFDUJrt1TFbR/wVGV4VBgEchg+YCnRUWei+8V5zmCaNRrvMx0+pi8M/LZ0 tuqsHWpCTm8voRy4FYfnVVHDd24QzPkINVRHh7wlt1foZQFjBi2/DfUoZ7flPT/5 GEQXYUyiEhDzeocrFz31HY8JhbXmW8ElKB723oq7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMTL0ck/y2+ISN6NlzyRbJGkUraIwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzg0ZmEyMzYwLWI5YzYtNDdiZC04NWRjLWJlMzdjZjUyMDVjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWYwDQYJKoZIhvcNAQELBQADggEBAEzhSyLh1Hvad628tTnC2Jwi/sUN q9Ci7cTrhH52EMoJU8x5xzrgXYJ83gFxbX9jHXgq22pghfqFZuEwQL97BTmPvRvA O71XUZJIy4WVcNkdJIUi2LKPycUYHP/nh31mKLFPbEVKpF80pe7fd6TDV+UU/9u+ V+u6ICR8Z3I9DKwpd8MhyYAxbTYZfMREvEfQDjvLbSUr/iRgQEicSqRXp/K/rk9n P2PTF4tlQd9Tqri561XGzd92waG/WsVeGd0Y0dt4isAunE1vVUJmxfEAXRhf0ENt u2r/GQ1JU2hRb4phd7OLm7CSQ3cEQthZdS8h9ory5Qw5uuPc1yGSdU+uIzc= -----END CERTIFICATE-----Generated at Sun Jun 15 09:07:12 2025 by rpki-client