$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa File: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (raw, json) Hash identifier: uf9sQ/v4+XBK+YMSVkvqfN16m0oEgd4FelAXBN1vi0o= Subject key identifier: 28:F0:1D:EC:1B:1B:07:C1:0D:96:A3:1D:E6:5A:9D:0A:46:7E:1F:3C Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 3F6B5E3255966D2CD76B61985FB09AEA8371F91F Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa Signing time: Wed 09 Jul 2025 00:10:21 +0000 ROA not before: Wed 09 Jul 2025 00:10:21 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6b:5e:32:55:96:6d:2c:d7:6b:61:98:5f:b0:9a:ea:83:71:f9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Jul 9 00:10:21 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=b14de6e6cc38392c050e6621108e64b1c2450e131c4f72d5f586a819eab1565a, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:fe:ae:c0:fa:e8:db:cf:4c:db:db:05:90: 6f:f3:d0:9e:25:7f:b2:cb:d9:66:14:60:14:cf:4b: 20:77:0a:0b:a5:03:6c:2b:3b:e6:aa:56:25:7f:d4: 1e:bb:34:1e:7c:3f:51:35:96:08:a7:7b:e1:b8:d9: 0c:fa:2c:36:fa:fe:d9:b5:1b:35:4f:c6:03:f1:5a: b5:9a:e9:ea:d4:9d:a5:f4:58:f4:6a:7b:4b:a4:5c: 48:1b:49:69:3f:f3:7c:db:0f:45:ec:4f:78:38:8d: 24:3e:87:3b:ef:ce:e4:d6:f6:4e:d9:d5:bc:7a:e9: de:5c:65:e4:f7:57:51:06:c2:b6:e8:6a:47:ab:42: e6:df:99:e6:4a:a6:22:ad:33:5a:fc:e7:95:4b:e6: 86:26:b1:e1:12:62:ac:e2:10:15:c8:a4:b1:1c:6f: ec:66:ee:3e:1a:1c:f3:07:26:fb:1e:27:04:0b:dc: 0c:83:20:9d:b6:ba:25:29:12:1c:23:40:33:cc:27: af:20:b2:39:b4:45:af:60:a7:99:d8:a1:0b:96:cd: 26:d8:d2:b2:42:0a:8e:9f:a8:b6:08:fd:f0:8b:5f: ac:e8:d0:4f:fc:d8:1d:76:6e:96:62:87:15:b3:08: 77:cf:d0:71:6f:ee:a2:6e:ea:cf:30:29:ac:4d:d4: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F0:1D:EC:1B:1B:07:C1:0D:96:A3:1D:E6:5A:9D:0A:46:7E:1F:3C X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.102.0/24 Signature Algorithm: sha256WithRSAEncryption 11:27:cb:49:ec:87:fb:e8:62:bf:b5:16:27:30:5c:3f:87:8d: fd:c0:c8:00:82:21:4a:bc:e6:eb:07:9a:2f:89:82:5e:fe:b8: 9c:49:84:62:c5:57:4e:b9:2b:b5:0c:b8:fa:f6:8c:16:fa:ca: ad:00:93:40:48:88:9c:87:ad:ff:2a:3a:1b:fe:8b:8e:4c:73: cf:ac:16:b9:49:48:36:c7:87:e9:bc:78:4e:8b:e5:ad:e9:93: 16:eb:c4:3c:90:0d:1b:2a:6c:67:84:0c:fc:bb:df:d7:47:0b: b1:d5:f8:10:23:60:2b:ec:2f:6e:2f:d9:ff:11:18:ec:50:21: 81:0d:4e:09:ad:1c:e2:e9:d8:e2:66:6d:91:e8:f1:be:a3:e7: 9e:d4:47:a2:59:a2:4c:03:cb:e3:d7:7c:c5:f5:b6:01:71:db: b3:a8:89:77:c5:86:4f:22:d6:34:8d:23:1b:ca:da:08:ed:c7: df:8c:02:4b:25:af:53:3a:ae:8d:89:1d:4d:29:71:34:ad:50: 95:00:99:31:f4:d2:ba:c1:8c:31:d5:2c:e3:e7:d2:87:d9:29: be:8e:f8:36:a3:27:00:d9:4b:53:27:00:0b:98:fc:91:2f:38: 92:52:d1:3d:68:dd:15:5e:f2:a5:86:f9:fa:4a:62:b6:b5:cf: d2:57:42:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP2teMlWWbSzXa2GYX7Ca6oNx+R8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNzA5MDAxMDIxWhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTRkZTZlNmNjMzgzOTJjMDUwZTY2MjExMDhlNjRiMWMy NDUwZTEzMWM0ZjcyZDVmNTg2YTgxOWVhYjE1NjVhMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDbP6uwPro289M29sFkG/z0J4lf7LL2WYUYBTPSyB3Cgul A2wrO+aqViV/1B67NB58P1E1lgine+G42Qz6LDb6/tm1GzVPxgPxWrWa6erUnaX0 WPRqe0ukXEgbSWk/83zbD0XsT3g4jSQ+hzvvzuTW9k7Z1bx66d5cZeT3V1EGwrbo akerQubfmeZKpiKtM1r855VL5oYmseESYqziEBXIpLEcb+xm7j4aHPMHJvseJwQL 3AyDIJ22uiUpEhwjQDPMJ68gsjm0Ra9gp5nYoQuWzSbY0rJCCo6fqLYI/fCLX6zo 0E/82B12bpZihxWzCHfP0HFv7qJu6s8wKaxN1BAXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKPAd7BsbB8ENlqMd5lqdCkZ+HzwwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzg0ZmEyMzYwLWI5YzYtNDdiZC04NWRjLWJlMzdjZjUyMDVjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWYwDQYJKoZIhvcNAQELBQADggEBABEny0nsh/voYr+1FicwXD+Hjf3A yACCIUq85usHmi+Jgl7+uJxJhGLFV065K7UMuPr2jBb6yq0Ak0BIiJyHrf8qOhv+ i45Mc8+sFrlJSDbHh+m8eE6L5a3pkxbrxDyQDRsqbGeEDPy739dHC7HV+BAjYCvs L24v2f8RGOxQIYENTgmtHOLp2OJmbZHo8b6j557UR6JZokwDy+PXfMX1tgFx27Oo iXfFhk8i1jSNIxvK2gjtx9+MAkslr1M6ro2JHU0pcTStUJUAmTH00rrBjDHVLOPn 0ofZKb6O+DajJwDZS1MnAAuY/JEvOJJS0T1o3RVe8qWG+fpKYra1z9JXQg8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:56 2025 by rpki-client