$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa File: a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa (raw, json) Hash identifier: Vaznms/210gKMWrFTd/iDrl9+Cro5oT3jHl/sgLP+RU= Subject key identifier: 3D:2D:D8:6B:D4:9B:F6:42:95:D1:7E:26:77:C4:E9:E9:7D:32:10:A4 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 3F1F9CA397276FCC951FA1D7395CD37E21859781 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa Signing time: Fri 11 Jul 2025 15:00:24 +0000 ROA not before: Fri 11 Jul 2025 15:00:24 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1f:9c:a3:97:27:6f:cc:95:1f:a1:d7:39:5c:d3:7e:21:85:97:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jul 11 15:00:24 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=58c017071f079bf2af20d084654a7a14b854e2e4e37d19a89fb846fbf15c6858, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:6c:1a:ba:b2:ba:64:37:5f:ff:da:e1:0f: 48:62:77:e6:b6:9f:95:73:b5:4e:2c:7a:a7:fb:7b: e9:0e:23:5c:dc:cf:60:a1:7d:57:37:81:d7:9a:70: 4e:ba:41:79:ca:ba:90:d0:47:53:56:54:58:f2:90: d4:f8:27:3e:f9:5c:82:6f:62:0c:77:1d:72:c8:ba: bc:c3:87:1a:e7:c9:a4:b8:ad:88:b9:4a:ea:1e:d7: 9d:2c:0f:af:17:37:9d:a0:fc:a4:b1:e2:ea:3e:a7: 69:ba:9b:20:a6:04:0a:23:84:a7:b3:48:8c:95:30: 12:7b:61:84:5c:a3:81:3f:ee:30:91:6c:f6:7d:bd: e3:d1:b6:d2:ab:c2:e8:c5:66:ea:17:58:bb:d3:61: 43:63:b7:af:60:a8:a7:df:30:2e:44:cd:77:bf:93: 56:ae:60:d9:3d:0c:08:1c:75:39:6c:cb:32:a0:db: 89:83:a0:9b:1d:3d:4f:af:48:e0:b0:5d:63:27:80: 03:07:f9:91:c1:a6:a6:c9:13:74:57:b6:cf:d6:aa: 77:6b:68:02:5a:2c:e4:6c:67:5b:35:e8:fe:d8:cc: fe:79:2e:64:a4:49:91:ca:2a:b1:be:bd:63:c2:9b: d7:c0:0f:b1:0d:94:ab:89:ad:a4:6b:ff:5d:d8:92: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2D:D8:6B:D4:9B:F6:42:95:D1:7E:26:77:C4:E9:E9:7D:32:10:A4 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.10.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:6c:b5:74:63:69:2e:3a:46:21:18:e3:97:8d:9f:6c:cb:b9: 9b:59:59:7a:8e:bc:23:c2:41:9b:40:4b:f1:f9:27:2c:63:7c: 3d:2d:c0:71:ea:1a:af:67:e5:4b:80:78:96:0e:a1:f2:96:bf: 35:ee:57:2f:eb:b9:0e:77:b6:65:b8:5f:7e:59:43:54:f1:c4: 07:71:47:ab:ce:90:a8:08:9b:1d:0b:4f:06:79:b7:d6:6d:39: 37:1e:96:b7:4f:ea:95:73:45:43:cf:08:00:d6:26:5d:bb:f7: 31:c0:41:6f:ca:b5:3c:35:22:b4:59:04:41:43:59:80:4b:ff: c9:bd:fa:ce:6d:73:2c:f3:90:40:c1:05:e5:98:6f:61:03:b4: e5:71:bf:91:bb:55:d7:6d:60:c7:15:e8:8d:5f:d4:bc:1c:05: 18:07:e6:30:8b:46:f7:18:87:37:3f:98:0d:f3:66:8f:67:73: 84:e1:aa:9b:d2:1a:4f:17:78:3e:3a:10:6e:32:d4:19:a3:16: 74:29:6c:e7:78:12:49:81:8b:e4:f2:4e:84:83:95:11:7c:a1: c5:94:65:1e:02:85:14:3c:1b:0b:20:3f:16:ee:46:10:ac:9d: 56:07:69:c8:c4:31:da:2b:ae:81:68:83:20:0d:31:94:71:1d: bd:55:b1:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPx+co5cnb8yVH6HXOVzTfiGFl4EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNzExMTUwMDI0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGMwMTcwNzFmMDc5YmYyYWYyMGQwODQ2NTRhN2ExNGI4 NTRlMmU0ZTM3ZDE5YTg5ZmI4NDZmYmYxNWM2ODU4MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDxmwaurK6ZDdf/9rhD0hid+a2n5VztU4seqf7e+kOI1zc z2ChfVc3gdeacE66QXnKupDQR1NWVFjykNT4Jz75XIJvYgx3HXLIurzDhxrnyaS4 rYi5Suoe150sD68XN52g/KSx4uo+p2m6myCmBAojhKezSIyVMBJ7YYRco4E/7jCR bPZ9vePRttKrwujFZuoXWLvTYUNjt69gqKffMC5EzXe/k1auYNk9DAgcdTlsyzKg 24mDoJsdPU+vSOCwXWMngAMH+ZHBpqbJE3RXts/WqndraAJaLORsZ1s16P7YzP55 LmSkSZHKKrG+vWPCm9fAD7ENlKuJraRr/13Ykn11AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPS3Ya9Sb9kKV0X4md8Tp6X0yEKQwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2EwN2FkZWFlLTUzOGYtNGQ1Ni1iZWJlLTg3ZDFhNGI5YzNiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwowDQYJKoZIhvcNAQELBQADggEBAA5stXRjaS46RiEY45eNn2zLuZtZ WXqOvCPCQZtAS/H5JyxjfD0twHHqGq9n5UuAeJYOofKWvzXuVy/ruQ53tmW4X35Z Q1TxxAdxR6vOkKgImx0LTwZ5t9ZtOTcelrdP6pVzRUPPCADWJl279zHAQW/KtTw1 IrRZBEFDWYBL/8m9+s5tcyzzkEDBBeWYb2EDtOVxv5G7VddtYMcV6I1f1LwcBRgH 5jCLRvcYhzc/mA3zZo9nc4ThqpvSGk8XeD46EG4y1BmjFnQpbOd4EkmBi+TyToSD lRF8ocWUZR4ChRQ8GwsgPxbuRhCsnVYHacjEMdorroFogyANMZRxHb1VsfM= -----END CERTIFICATE-----Generated at Wed Jul 23 01:35:14 2025 by rpki-client