$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa File: b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa (raw, json) Hash identifier: bhFQCNXcvwsCZA91Knoy3HAOqNiTij6pEPu3rzBbNzI= Subject key identifier: 43:4A:FE:3A:04:A3:66:0C:23:7E:4D:AD:9C:B7:89:91:4C:7F:2A:94 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 405DE875EDB6BA125C3E15E084286F5F4F04BE58 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa Signing time: Fri 11 Jul 2025 15:00:19 +0000 ROA not before: Fri 11 Jul 2025 15:00:19 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5d:e8:75:ed:b6:ba:12:5c:3e:15:e0:84:28:6f:5f:4f:04:be:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jul 11 15:00:19 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=1c7328184e028a084ff4fdefd051bd284bfce75eacf874b01fe1e6ab7aa25510, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:49:4e:a8:87:9d:19:9e:8d:02:4e:85:94: 43:a4:06:74:d1:cb:6f:3d:3e:42:c9:d4:9e:09:34: fe:26:e2:f5:43:cc:99:bf:4a:90:9b:fc:b3:25:ce: 22:bd:c9:17:c9:c2:16:8b:3b:48:d9:44:77:30:7f: 22:27:19:f3:3f:ca:1f:d4:97:1e:1e:01:65:f8:39: b2:88:bd:e7:b4:73:7c:9b:db:f2:e7:e1:15:b7:db: 62:30:52:d3:e3:7d:71:ea:25:93:74:47:09:eb:a9: f6:a6:27:03:e2:96:5c:84:37:63:ab:4e:51:87:59: 6b:fa:4c:d9:70:68:c9:78:66:1e:3f:46:69:38:0e: 41:fe:c7:ad:1e:ec:d5:ae:25:53:ff:51:cc:e9:06: 80:b0:2b:bf:88:b4:fd:ba:d8:16:50:1d:3c:e0:c9: c4:10:cd:ff:b0:3c:0f:71:5e:0e:dd:95:84:6e:c1: dc:ab:2c:ce:74:b3:95:85:32:a6:94:cb:e7:a9:15: 7e:5c:1c:94:26:2d:0d:00:3f:64:d9:14:14:fb:a7: 20:de:67:4c:11:ab:77:29:f4:35:11:7d:84:20:21: 15:de:3b:b5:0d:45:f8:f1:b7:f7:d4:35:02:0a:a1: 59:96:fc:f6:56:d1:97:8c:d1:27:92:66:6b:e0:58: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4A:FE:3A:04:A3:66:0C:23:7E:4D:AD:9C:B7:89:91:4C:7F:2A:94 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.9.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:a7:21:4f:88:02:ed:10:cb:b2:6e:b3:45:59:83:03:22:d3: 4a:f5:ed:d0:65:f4:0d:c4:0a:bc:2e:5e:1a:2f:b8:cd:96:1f: cd:4f:ed:1b:61:fa:5f:df:bf:27:f3:95:e3:5d:de:09:f5:d1: 30:60:f6:da:69:de:53:ea:a1:d5:00:28:cb:e5:17:6e:9a:9b: 56:cc:85:e5:62:a1:24:66:9b:8e:e2:55:01:62:00:b2:c2:ef: 5b:41:24:db:e4:39:2f:2f:3b:9d:24:c8:68:a5:b6:85:cc:7d: 71:1b:23:53:34:4f:24:b3:fe:96:34:f8:f9:e3:aa:f5:fc:bb: 3d:40:a7:05:78:06:49:9c:a5:46:3c:d7:21:e0:bd:76:43:34: 4f:05:76:fa:8a:af:6f:d1:fb:af:ce:d2:88:f5:78:d7:2f:c0: bc:6e:7c:60:74:24:7f:ac:89:8b:1b:93:e0:72:bd:2a:71:79: 0e:8d:77:ed:e4:53:d6:e5:c8:a2:47:d4:ff:5d:63:8d:ae:2a: a8:3d:52:02:dc:a7:20:05:54:27:4a:bb:00:4a:a5:c3:a6:0a: 30:cb:98:6a:53:e0:f2:8a:b0:91:fa:4d:27:98:39:e3:c5:7c: f0:fe:b1:e8:15:93:72:d8:e2:f0:14:67:f1:fb:9e:99:17:6d: 90:ce:ac:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQF3ode22uhJcPhXghChvX08EvlgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNzExMTUwMDE5WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzczMjgxODRlMDI4YTA4NGZmNGZkZWZkMDUxYmQyODRi ZmNlNzVlYWNmODc0YjAxZmUxZTZhYjdhYTI1NTEwMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6DklOqIedGZ6NAk6FlEOkBnTRy289PkLJ1J4JNP4m4vVD zJm/SpCb/LMlziK9yRfJwhaLO0jZRHcwfyInGfM/yh/Ulx4eAWX4ObKIvee0c3yb 2/Ln4RW322IwUtPjfXHqJZN0RwnrqfamJwPillyEN2OrTlGHWWv6TNlwaMl4Zh4/ Rmk4DkH+x60e7NWuJVP/UczpBoCwK7+ItP262BZQHTzgycQQzf+wPA9xXg7dlYRu wdyrLM50s5WFMqaUy+epFX5cHJQmLQ0AP2TZFBT7pyDeZ0wRq3cp9DURfYQgIRXe O7UNRfjxt/fUNQIKoVmW/PZW0ZeM0SeSZmvgWBUPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ0r+OgSjZgwjfk2tnLeJkUx/KpQwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2I1MTBiOWRiLTc1YjEtNDk1Ny1iZjdmLWYwNWM5NzJjMGJmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwkwDQYJKoZIhvcNAQELBQADggEBAH+nIU+IAu0Qy7Jus0VZgwMi00r1 7dBl9A3ECrwuXhovuM2WH81P7Rth+l/fvyfzleNd3gn10TBg9tpp3lPqodUAKMvl F26am1bMheVioSRmm47iVQFiALLC71tBJNvkOS8vO50kyGiltoXMfXEbI1M0TySz /pY0+PnjqvX8uz1ApwV4BkmcpUY81yHgvXZDNE8FdvqKr2/R+6/O0oj1eNcvwLxu fGB0JH+siYsbk+ByvSpxeQ6Nd+3kU9blyKJH1P9dY42uKqg9UgLcpyAFVCdKuwBK pcOmCjDLmGpT4PKKsJH6TSeYOePFfPD+segVk3LY4vAUZ/H7npkXbZDOrCA= -----END CERTIFICATE-----Generated at Mon Jul 21 23:19:08 2025 by rpki-client