$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa File: 01f936e1-60a2-4d7f-a949-786fa3430156.roa (raw, json) Hash identifier: x4CdsmmGO8RR/Ic//tdtBk64t+k4IdEkZfBbZ4kUtzY= Subject key identifier: C3:C3:33:49:4E:E7:96:1A:CA:4A:FD:21:D8:F0:85:A6:90:99:8E:3E Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 238B5620495164E2A05ED82E89BCB573C8A8E9B4 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa Signing time: Fri 11 Jul 2025 15:00:25 +0000 ROA not before: Fri 11 Jul 2025 15:00:25 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8b:56:20:49:51:64:e2:a0:5e:d8:2e:89:bc:b5:73:c8:a8:e9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jul 11 15:00:25 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=1907e7644c61ee5b75994c7be5c63c2d001badc648cdc7ae87df8004f4708a8a, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:40:9f:54:03:28:ee:00:ba:18:8f:dd:a7: 0e:00:fc:9a:21:e1:2e:bf:bc:f3:e3:2a:bb:19:ed: d8:e7:0c:53:75:95:71:35:c4:ae:90:61:5b:84:eb: 74:e6:d6:e4:34:68:83:31:af:09:62:3f:ba:f5:a3: e7:c8:d5:0d:d1:c9:e3:14:f0:48:ec:f5:fc:27:60: b9:cf:e1:4b:70:a7:b7:76:ce:66:ec:ba:fe:d3:1b: 43:ef:41:bc:aa:3e:40:2a:bd:4d:10:ca:1c:2d:68: 5f:60:ed:d7:24:4b:3e:47:b3:5e:65:b0:f8:2e:cf: 41:2e:bd:4f:64:03:4d:64:08:e6:1d:69:c6:cc:51: c4:dc:f6:e1:2c:2e:17:e5:91:6e:a9:ae:d2:7c:2e: a8:84:4d:dd:ab:2e:f4:33:c7:cd:d3:3b:0c:7c:16: f1:60:2c:f9:b6:8a:1f:ec:c6:85:96:f3:46:7e:be: b3:6a:6b:3a:e2:93:4a:9b:9f:74:24:1e:81:20:02: 3b:45:2c:a4:41:6b:47:48:87:e2:45:2d:19:b3:9f: 08:96:19:7f:10:4e:54:53:30:03:d4:b1:3c:34:cc: c4:6b:1f:83:83:fa:0c:95:dd:69:7a:19:98:b6:51: 76:6e:23:c1:7f:7d:61:2b:15:a2:02:a8:02:d9:b4: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C3:33:49:4E:E7:96:1A:CA:4A:FD:21:D8:F0:85:A6:90:99:8E:3E X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.10.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:fc:1e:56:89:04:5d:52:8b:e1:ad:ec:9e:38:31:87:7c:e3: 1d:5d:3d:bc:fe:7f:f1:12:fe:b4:0c:e5:46:61:57:5f:7e:c0: ba:fc:2d:bc:a8:46:00:88:59:6e:df:82:7f:4d:37:3c:e3:49: af:d6:ba:b4:96:3b:98:db:7a:89:8f:41:e6:5c:10:d5:5a:dd: b5:46:fe:db:41:7d:73:45:19:49:b4:59:39:c4:54:b6:3b:fb: 05:4e:cb:94:6b:68:bb:b7:3f:79:ed:f5:06:85:c0:ee:c6:74: 46:f4:ed:3f:7d:f7:4b:80:96:a6:ec:aa:ec:64:5d:a0:7f:04: a4:ea:a5:96:db:5d:52:00:f2:cf:8e:af:71:70:fd:61:6a:ca: 4b:a7:a0:fa:0a:11:68:e4:1e:65:b0:b4:58:32:24:6d:5b:ca: 19:53:ba:0a:d6:e5:5e:31:bf:09:65:22:c1:93:b8:1e:d7:0d: 9e:2e:75:d5:c2:8e:1a:55:7b:fb:f9:1e:c6:ef:12:e6:75:21: 3b:eb:06:aa:49:74:b8:c0:f6:51:85:93:86:ae:da:df:61:01: 70:68:78:c7:a3:44:45:cb:85:c2:d5:ef:50:c5:1c:d9:81:11: be:91:6e:b9:81:ca:11:81:4e:5e:23:fe:4e:ee:e8:68:7f:ca: 60:eb:4d:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI4tWIElRZOKgXtguiby1c8io6bQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNzExMTUwMDI1WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTA3ZTc2NDRjNjFlZTViNzU5OTRjN2JlNWM2M2MyZDAw MWJhZGM2NDhjZGM3YWU4N2RmODAwNGY0NzA4YThhMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ2kCfVAMo7gC6GI/dpw4A/Joh4S6/vPPjKrsZ7djnDFN1 lXE1xK6QYVuE63Tm1uQ0aIMxrwliP7r1o+fI1Q3RyeMU8Ejs9fwnYLnP4Utwp7d2 zmbsuv7TG0PvQbyqPkAqvU0QyhwtaF9g7dckSz5Hs15lsPguz0EuvU9kA01kCOYd acbMUcTc9uEsLhflkW6prtJ8LqiETd2rLvQzx83TOwx8FvFgLPm2ih/sxoWW80Z+ vrNqazrik0qbn3QkHoEgAjtFLKRBa0dIh+JFLRmznwiWGX8QTlRTMAPUsTw0zMRr H4OD+gyV3Wl6GZi2UXZuI8F/fWErFaICqALZtFI/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUw8MzSU7nlhrKSv0h2PCFppCZjj4wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzAxZjkzNmUxLTYwYTItNGQ3Zi1hOTQ5LTc4NmZhMzQzMDE1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwowDQYJKoZIhvcNAQELBQADggEBAE38HlaJBF1Si+Gt7J44MYd84x1d Pbz+f/ES/rQM5UZhV19+wLr8LbyoRgCIWW7fgn9NNzzjSa/WurSWO5jbeomPQeZc ENVa3bVG/ttBfXNFGUm0WTnEVLY7+wVOy5RraLu3P3nt9QaFwO7GdEb07T9990uA lqbsquxkXaB/BKTqpZbbXVIA8s+Or3Fw/WFqykunoPoKEWjkHmWwtFgyJG1byhlT ugrW5V4xvwllIsGTuB7XDZ4uddXCjhpVe/v5HsbvEuZ1ITvrBqpJdLjA9lGFk4au 2t9hAXBoeMejREXLhcLV71DFHNmBEb6RbrmByhGBTl4j/k7u6Gh/ymDrTV8= -----END CERTIFICATE-----Generated at Thu Jul 24 08:16:02 2025 by rpki-client