$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1fecfeb1-6716-4dba-8f93-41774a220829.roa File: 1fecfeb1-6716-4dba-8f93-41774a220829.roa (raw, json) Hash identifier: LHYabyp49kVCjzV7wEyU/2eOO5JmdYAzOqtF4KQLgTk= Subject key identifier: 79:42:BE:DD:84:87:33:DD:DE:EC:41:43:72:1B:46:01:85:A2:C3:80 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 473D54DB018DB7B498D2BA6953CB8379EF72F9E2 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1fecfeb1-6716-4dba-8f93-41774a220829.roa Signing time: Fri 11 Jul 2025 15:00:17 +0000 ROA not before: Fri 11 Jul 2025 15:00:17 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3d:54:db:01:8d:b7:b4:98:d2:ba:69:53:cb:83:79:ef:72:f9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jul 11 15:00:17 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=c0c2d3f54d9f6ed9222e51a6b415cf88d8b76429facf3093d88cf156d22a4ea9, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:f6:a5:3a:f0:66:75:da:9e:02:ef:a5:15: cf:dd:a6:51:dc:48:42:e7:04:38:66:df:1e:4b:06: 01:ee:b9:3c:e7:19:c2:02:30:98:03:32:00:08:00: 44:9d:6f:cd:ad:50:b1:aa:94:2d:09:6c:ef:04:e3: 3c:80:77:52:87:8d:99:32:e3:3b:1d:d6:d2:f5:c7: 97:79:42:6d:ed:45:0a:bd:65:cd:0c:68:e5:cf:31: 19:7a:86:1e:f0:1b:92:79:2f:4a:6e:9f:4b:2e:98: 16:db:d3:ca:e4:7e:ea:0f:8b:a4:b5:09:58:31:cc: 5d:fb:3e:20:d2:7e:8f:18:f4:f4:c8:5a:4d:ee:cd: 93:cd:42:be:6a:30:00:9b:c4:f2:8f:c2:24:48:c1: ed:6f:09:39:29:82:ef:4f:9a:2c:6e:17:2e:32:db: c1:22:fc:ad:29:b4:6a:cb:b1:23:73:9a:7d:6a:36: 93:b7:07:63:3a:2b:37:5e:33:fd:97:4e:60:0a:dd: ab:e7:66:f3:9d:6d:55:04:c8:9e:3f:68:b9:39:65: 88:b8:d8:53:6c:82:27:3e:4e:57:83:a4:05:a1:cc: 06:15:c8:73:2d:6d:64:51:8e:40:b2:bd:c1:e1:20: d4:1f:e4:c9:89:75:2b:b6:5d:01:ec:be:b2:f7:d3: 0b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:BE:DD:84:87:33:DD:DE:EC:41:43:72:1B:46:01:85:A2:C3:80 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1fecfeb1-6716-4dba-8f93-41774a220829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/21 Signature Algorithm: sha256WithRSAEncryption 52:e2:ed:ef:cd:57:f7:d1:14:84:68:db:58:52:7a:5f:54:71: 31:78:39:ac:cd:7d:d8:1d:24:de:cd:f7:08:8a:78:a4:7a:fd: fc:a6:db:28:81:3a:51:45:dd:30:f1:fd:4a:96:48:af:61:9b: de:28:39:08:d5:31:b3:1c:9a:bf:e8:cf:d8:5a:21:61:65:d7: d3:d6:75:15:90:f6:c0:f7:d6:45:63:fe:dd:3a:d5:66:3f:95: 12:03:ea:6f:21:ca:17:76:bb:19:be:af:96:9f:31:8d:88:8a: e6:ee:79:5f:ec:56:af:bb:12:34:2a:74:ff:cb:52:2a:ba:62: f1:7a:5e:5a:b8:8c:28:ff:6e:06:a8:59:d6:32:71:d7:04:32: 29:fe:25:3e:2e:20:2b:41:e6:7f:0f:6f:6d:2f:c7:79:7e:90: da:43:2c:30:b8:c2:75:14:38:c3:82:12:79:ec:2e:96:c8:69: cb:52:02:63:28:db:9a:e6:a3:13:7a:fd:8a:bc:b0:af:b6:90: 28:6b:d9:34:35:40:8c:a4:c8:c4:64:a9:59:90:8a:b3:c9:47: 45:68:77:27:8f:ae:b8:11:3d:d9:03:5c:1f:db:50:8c:f1:7d: c9:a6:f6:48:c7:b2:ed:e0:d3:44:08:7d:38:8f:7d:12:cf:19: 84:3b:ed:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURz1U2wGNt7SY0rppU8uDee9y+eIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNzExMTUwMDE3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGMyZDNmNTRkOWY2ZWQ5MjIyZTUxYTZiNDE1Y2Y4OGQ4 Yjc2NDI5ZmFjZjMwOTNkODhjZjE1NmQyMmE0ZWE5MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgXfalOvBmddqeAu+lFc/dplHcSELnBDhm3x5LBgHuuTzn GcICMJgDMgAIAESdb82tULGqlC0JbO8E4zyAd1KHjZky4zsd1tL1x5d5Qm3tRQq9 Zc0MaOXPMRl6hh7wG5J5L0pun0sumBbb08rkfuoPi6S1CVgxzF37PiDSfo8Y9PTI Wk3uzZPNQr5qMACbxPKPwiRIwe1vCTkpgu9PmixuFy4y28Ei/K0ptGrLsSNzmn1q NpO3B2M6KzdeM/2XTmAK3avnZvOdbVUEyJ4/aLk5ZYi42FNsgic+TleDpAWhzAYV yHMtbWRRjkCyvcHhINQf5MmJdSu2XQHsvrL30wsFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeUK+3YSHM93e7EFDchtGAYWiw4AwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzFmZWNmZWIxLTY3MTYtNGRiYS04ZjkzLTQxNzc0YTIyMDgyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgfwAwDQYJKoZIhvcNAQELBQADggEBAFLi7e/NV/fRFIRo21hSel9UcTF4 OazNfdgdJN7N9wiKeKR6/fym2yiBOlFF3TDx/UqWSK9hm94oOQjVMbMcmr/oz9ha IWFl19PWdRWQ9sD31kVj/t061WY/lRID6m8hyhd2uxm+r5afMY2IiubueV/sVq+7 EjQqdP/LUiq6YvF6Xlq4jCj/bgaoWdYycdcEMin+JT4uICtB5n8Pb20vx3l+kNpD LDC4wnUUOMOCEnnsLpbIactSAmMo25rmoxN6/Yq8sK+2kChr2TQ1QIykyMRkqVmQ irPJR0VodyePrrgRPdkDXB/bUIzxfcmm9kjHsu3g00QIfTiPfRLPGYQ77a8= -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:24 2025 by rpki-client