$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa File: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (raw, json) Hash identifier: 1+dDfhy5dmLtQTvSqmfQGOETjpvFT0C7dXM1hA1D7ds= Subject key identifier: DC:27:DD:30:48:8D:35:0B:34:3C:4C:71:9C:C0:98:80:28:C8:EE:8F Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 735BEC3B82C7C8243A6AFF94CD9B5467DB581B61 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa Signing time: Mon 04 Aug 2025 15:00:11 +0000 ROA not before: Mon 04 Aug 2025 15:00:11 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5b:ec:3b:82:c7:c8:24:3a:6a:ff:94:cd:9b:54:67:db:58:1b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 15:00:11 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=53350b599af237b0652226362042f0e05ec6abae29d6a7649155f941aac9e2fd, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:84:24:51:7b:06:5a:76:a9:14:c6:23:30:fd: c7:9b:73:f9:fe:8d:59:dd:c0:84:83:e6:19:98:b3: 0c:9c:25:3a:2f:46:cf:54:77:48:0e:b0:a9:0f:e1: 2a:7b:00:8d:6f:08:02:40:82:58:06:f1:25:bf:89: 3a:80:2a:ca:82:7a:14:a2:d4:1d:da:97:cd:06:3c: d7:5b:99:97:75:1a:ae:51:b5:bf:76:22:b3:4a:b8: 24:0d:61:ef:91:76:97:23:b7:1c:c1:1f:e1:a4:da: fc:ba:69:db:3e:6c:af:59:86:10:bd:3f:ca:98:26: ec:df:c0:70:80:3d:d4:0d:2b:88:44:33:94:36:6c: a8:6e:5c:6f:3d:89:cb:78:b6:ec:46:80:a9:a1:b0: 57:0f:52:c2:54:91:cf:3d:dd:53:73:15:76:cb:de: e4:3c:18:74:69:8e:5b:d4:60:72:90:0b:e8:a4:c8: bd:56:ab:97:aa:f8:eb:eb:45:6e:95:09:41:05:b4: ba:1e:ae:39:5c:32:13:f3:21:3a:0e:7b:cd:4c:ad: f3:71:2c:8f:2a:e5:44:ae:9d:46:2c:16:83:ed:52: 7f:81:f2:ed:c1:13:d9:0a:37:e4:02:08:57:17:65: 46:d1:b5:90:7f:7c:b4:ef:32:e1:17:97:19:38:95: 82:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:27:DD:30:48:8D:35:0B:34:3C:4C:71:9C:C0:98:80:28:C8:EE:8F X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.97.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:2c:93:39:31:5e:ed:e1:ba:e3:aa:1c:59:a0:be:4c:2d:0f: 88:95:15:61:45:69:c2:d9:88:c9:01:f6:b3:1b:be:aa:a6:17: 1b:d8:28:48:c5:aa:65:16:b2:08:51:a3:e9:08:67:35:e3:fc: 7b:7a:6f:1e:d9:89:99:0d:15:29:54:dc:2c:70:28:0d:52:f5: 9e:32:67:fd:e6:92:0e:36:47:d2:c1:42:19:62:d6:62:f8:0f: 97:e0:ac:9f:13:3a:40:a6:69:3f:96:74:18:7c:cd:4f:26:42: 67:0d:9f:09:96:3f:a3:2f:73:09:07:54:6f:f6:d3:5f:05:02: 02:1e:d3:3a:70:b5:d8:6b:b8:e7:9b:6c:40:59:87:e5:cf:89: 97:fe:0c:fb:59:fd:d1:61:f8:f0:58:75:55:23:2e:67:f9:ea: 9e:9a:8b:f7:52:a2:6d:3f:70:c7:29:c1:01:d3:f2:5a:f9:e9: 3c:37:d1:d8:5a:62:38:ce:db:3e:76:a3:d4:e5:44:9f:e5:8e: 9e:88:4c:89:53:07:d9:e2:62:13:61:c0:95:e3:15:e1:c0:d6: b3:cb:2b:74:4f:37:da:cf:f6:ab:f5:0d:1a:07:8d:3d:19:c8: fe:d0:04:50:9f:98:3a:80:d0:3c:d4:6c:83:02:d3:15:c5:7f: 11:d4:48:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc1vsO4LHyCQ6av+UzZtUZ9tYG2EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwODA0MTUwMDExWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzM1MGI1OTlhZjIzN2IwNjUyMjI2MzYyMDQyZjBlMDVl YzZhYmFlMjlkNmE3NjQ5MTU1Zjk0MWFhYzllMmZkMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDthCRRewZadqkUxiMw/cebc/n+jVndwISD5hmYswycJTov Rs9Ud0gOsKkP4Sp7AI1vCAJAglgG8SW/iTqAKsqCehSi1B3al80GPNdbmZd1Gq5R tb92IrNKuCQNYe+RdpcjtxzBH+Gk2vy6ads+bK9ZhhC9P8qYJuzfwHCAPdQNK4hE M5Q2bKhuXG89ict4tuxGgKmhsFcPUsJUkc893VNzFXbL3uQ8GHRpjlvUYHKQC+ik yL1Wq5eq+OvrRW6VCUEFtLoerjlcMhPzIToOe81MrfNxLI8q5USunUYsFoPtUn+B 8u3BE9kKN+QCCFcXZUbRtZB/fLTvMuEXlxk4lYLTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3CfdMEiNNQs0PExxnMCYgCjI7o8wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzk4YzNmOWY4LTllZTMtNDkwOS04ZDQxLTdhYzIxODFmNjM3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWEwDQYJKoZIhvcNAQELBQADggEBAD4skzkxXu3huuOqHFmgvkwtD4iV FWFFacLZiMkB9rMbvqqmFxvYKEjFqmUWsghRo+kIZzXj/Ht6bx7ZiZkNFSlU3Cxw KA1S9Z4yZ/3mkg42R9LBQhli1mL4D5fgrJ8TOkCmaT+WdBh8zU8mQmcNnwmWP6Mv cwkHVG/2018FAgIe0zpwtdhruOebbEBZh+XPiZf+DPtZ/dFh+PBYdVUjLmf56p6a i/dSom0/cMcpwQHT8lr56Tw30dhaYjjO2z52o9TlRJ/ljp6ITIlTB9niYhNhwJXj FeHA1rPLK3RPN9rP9qv1DRoHjT0ZyP7QBFCfmDqA0DzUbIMC0xXFfxHUSAM= -----END CERTIFICATE-----Generated at Wed Aug 6 00:40:52 2025 by rpki-client