$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa File: a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa (raw, json) Hash identifier: e54cS+C+RG03iVTUHi8Ohbrjq4NkUVHPTADxGJ1xTSA= Subject key identifier: 95:BF:48:B2:B5:9C:AE:ED:D3:E3:45:A3:C3:7D:97:D5:D8:1C:36:AC Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 6072841F85E9604804905BF4898200B95C79D615 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa Signing time: Mon 31 Mar 2025 16:11:08 +0000 ROA not before: Mon 31 Mar 2025 16:11:08 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:72:84:1f:85:e9:60:48:04:90:5b:f4:89:82:00:b9:5c:79:d6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Mar 31 16:11:08 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:48:91:10:4c:82:5c:3f:9a:58:e0:9d:d6: d7:2d:a9:f2:3c:f1:3d:a2:4a:05:b6:e1:1a:8f:9d: 33:4b:d0:c6:b4:10:1f:af:54:0a:af:16:0e:80:b6: 83:49:91:26:d7:d4:8e:d1:cc:05:4c:14:60:2d:16: ea:76:36:cb:30:8d:5f:72:df:14:69:b0:d8:e9:d2: e8:91:ea:9c:ab:73:9f:b6:13:f0:9c:fc:ec:7f:a3: 18:8c:36:37:37:e4:07:a5:71:49:db:4a:39:cc:fe: a2:a9:2b:3f:e0:30:56:33:44:7d:eb:32:8b:bf:29: 44:a7:35:8f:3c:7c:ff:c5:0f:4b:a3:0c:89:f6:aa: c4:e7:40:4b:f3:2d:57:9b:01:eb:34:71:b6:21:ef: 1c:af:34:c6:53:96:a4:c7:39:7a:94:e4:3e:93:b1: d0:c3:66:9c:f3:15:9b:a3:78:eb:4a:46:48:64:c1: 77:b2:fe:7f:1f:c5:2f:dc:5e:8a:28:84:60:61:e0: 63:b2:56:53:fd:23:02:25:46:a4:75:eb:f8:bb:12: 2e:77:e0:ef:81:f6:96:27:d9:c8:5b:91:7d:47:4b: af:a4:d0:7f:04:a2:98:d8:2d:d3:78:bd:74:c9:09: b3:7a:db:93:54:f2:31:31:97:18:b4:06:29:8f:30: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BF:48:B2:B5:9C:AE:ED:D3:E3:45:A3:C3:7D:97:D5:D8:1C:36:AC X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.10.0/23 Signature Algorithm: sha256WithRSAEncryption 13:7c:b2:0f:d7:b6:7d:b0:80:94:4e:96:f2:6c:cf:e2:ae:1e: f1:80:e4:a2:ad:52:e5:ac:d3:a4:3c:bf:d2:f6:49:62:b3:11: ad:4c:b0:88:63:2b:95:56:66:66:24:4f:18:dc:dc:bc:67:01: 30:73:f9:9c:de:51:46:e0:50:5d:8c:ea:87:17:cc:48:9b:95: b6:b5:a0:75:26:f5:99:49:14:11:2c:d9:09:96:af:76:13:f3: 2a:a0:00:2f:18:32:be:c6:81:2b:de:23:13:e0:19:30:7c:11: e2:5e:c6:8d:ac:b0:d5:12:46:c4:d4:3e:70:3d:58:a1:2d:0c: 1b:46:f3:90:cb:f2:93:46:aa:57:63:ea:8a:da:b6:ca:99:83: 39:26:61:3f:b2:18:7a:85:d3:4f:4d:8e:26:23:42:ab:06:1c: f7:2b:67:af:cc:fc:d4:8e:b5:59:75:27:3e:c3:69:a9:60:46: eb:3c:79:fc:43:ef:39:53:47:8e:78:05:0a:d5:0c:8f:ca:c5: ed:22:37:39:5c:61:53:58:6f:5e:02:88:78:44:ae:6b:13:26: bf:14:3d:ad:8e:81:24:40:a9:24:73:a1:61:a6:1e:67:fd:16: 0c:df:b4:5b:18:68:0b:42:67:ce:71:5e:9f:b9:d1:66:1c:c0: d6:14:98:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYHKEH4XpYEgEkFv0iYIAuVx51hUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwMzMxMTYxMTA4WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODYxZDU2OTI0MTZkYWQ4NmMyMThkYjA4MzMzYmYwMzUw ZGNlZmIyYjk3ZTZmZDdhZjUzMjQ3YTAwMjUxYTIyMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClPUiREEyCXD+aWOCd1tctqfI88T2iSgW24RqPnTNL0Ma0 EB+vVAqvFg6AtoNJkSbX1I7RzAVMFGAtFup2NsswjV9y3xRpsNjp0uiR6pyrc5+2 E/Cc/Ox/oxiMNjc35AelcUnbSjnM/qKpKz/gMFYzRH3rMou/KUSnNY88fP/FD0uj DIn2qsTnQEvzLVebAes0cbYh7xyvNMZTlqTHOXqU5D6TsdDDZpzzFZujeOtKRkhk wXey/n8fxS/cXooohGBh4GOyVlP9IwIlRqR16/i7Ei534O+B9pYn2chbkX1HS6+k 0H8EopjYLdN4vXTJCbN625NU8jExlxi0BimPMHYjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlb9IsrWcru3T40Wjw32X1dgcNqwwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2EwN2FkZWFlLTUzOGYtNGQ1Ni1iZWJlLTg3ZDFhNGI5YzNiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwowDQYJKoZIhvcNAQELBQADggEBABN8sg/Xtn2wgJROlvJsz+KuHvGA 5KKtUuWs06Q8v9L2SWKzEa1MsIhjK5VWZmYkTxjc3LxnATBz+ZzeUUbgUF2M6ocX zEiblba1oHUm9ZlJFBEs2QmWr3YT8yqgAC8YMr7GgSveIxPgGTB8EeJexo2ssNUS RsTUPnA9WKEtDBtG85DL8pNGqldj6oratsqZgzkmYT+yGHqF009NjiYjQqsGHPcr Z6/M/NSOtVl1Jz7DaalgRus8efxD7zlTR454BQrVDI/Kxe0iNzlcYVNYb14CiHhE rmsTJr8UPa2OgSRAqSRzoWGmHmf9FgzftFsYaAtCZ85xXp+50WYcwNYUmJk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:31 2025 by rpki-client