$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f2e5e11c-f4e0-4f91-8ed1-a6cba6c5e288.roa File: f2e5e11c-f4e0-4f91-8ed1-a6cba6c5e288.roa (raw, json) Hash identifier: Y3/Q8j+NLWutwJWm2h4jvdmQEP7JuOAdLIx/lkzkvec= Subject key identifier: 46:06:82:00:61:F9:EC:0F:B8:BB:99:63:B2:7E:4D:65:49:A6:20:69 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 6EB149C2AFA9345D9A2534F04BD844CA0C0BEB33 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f2e5e11c-f4e0-4f91-8ed1-a6cba6c5e288.roa Signing time: Fri 11 Jul 2025 15:00:59 +0000 ROA not before: Fri 11 Jul 2025 15:00:59 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b1:49:c2:af:a9:34:5d:9a:25:34:f0:4b:d8:44:ca:0c:0b:eb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jul 11 15:00:59 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=c40cf802eff42b725a63a2a99ec086009da476e03072f26549898ec1f658c879, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:84:fb:cb:23:42:bb:b5:55:90:ee:72:4a: 15:76:e5:33:91:f7:be:ba:f9:3c:bb:36:46:7c:fe: d6:c1:4f:9b:e5:b0:fa:57:5e:43:16:98:e4:fb:7b: 81:35:a1:0b:e6:94:aa:a0:39:66:02:a7:78:6d:17: 7a:03:c8:cd:2f:0a:4f:b3:fb:0d:4c:6a:4d:05:97: 9f:cb:a4:54:58:94:3a:6e:8d:1c:36:48:73:58:3a: 39:1b:0f:fb:e3:ad:e4:7b:cd:56:28:44:ef:34:4f: 10:92:bf:1a:ad:7e:5c:be:92:ec:cd:cf:93:8b:51: 92:a4:80:4c:d8:c6:a2:19:90:54:79:0e:ba:00:7c: 8d:c5:90:36:25:bf:a5:b0:22:82:2d:24:67:f6:6a: cb:53:fd:0a:2c:3c:ba:20:30:b5:5a:be:b6:38:50: 14:d7:5f:16:59:90:03:dc:34:64:04:61:21:f8:4c: db:b7:d7:6a:27:7b:31:4d:02:c3:64:e2:54:08:f4: 2b:8e:04:a1:90:e1:13:d6:ef:7f:b9:23:b0:c5:e3: a2:4a:a7:dc:24:56:9a:5e:c1:6f:8b:49:08:53:7d: 08:28:74:9b:50:9f:b7:43:31:2f:32:f6:f9:73:92: 89:60:6c:7e:da:5f:e4:23:a2:51:b3:e3:28:d8:32: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:06:82:00:61:F9:EC:0F:B8:BB:99:63:B2:7E:4D:65:49:A6:20:69 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f2e5e11c-f4e0-4f91-8ed1-a6cba6c5e288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/17 Signature Algorithm: sha256WithRSAEncryption 29:73:2e:76:fc:13:db:85:d3:2f:2b:41:a2:53:ba:77:2f:d8: 85:7c:75:fe:f2:3c:fe:c6:f0:0b:52:3b:d7:da:1a:f9:a5:38: 24:9f:92:76:72:14:d0:84:b6:8a:c8:e3:e5:6b:b2:fb:1e:14: 02:c9:77:8b:8d:81:8a:0b:81:33:f0:5e:24:3c:35:67:fe:32: a2:0e:e5:ae:36:68:07:4b:3f:67:07:23:77:f4:b9:a3:0f:17: d5:82:0a:6d:61:82:e8:6f:96:35:9e:4c:b8:5e:da:e0:aa:dc: b0:88:9d:f6:d6:f3:17:f5:3f:33:00:4b:c9:3b:5a:4b:25:c4: 82:2e:54:b3:77:dc:62:0b:08:a4:7a:0f:2d:5f:d9:45:9b:4b: 52:c9:95:56:b5:35:15:6c:20:63:82:53:d9:8b:36:09:57:e3: 18:2d:d4:2b:28:cc:57:79:9f:a1:1d:3e:df:77:8c:6c:bb:f4: 15:ef:43:f5:86:d2:9f:28:71:ef:c1:55:c6:de:e9:9d:4c:f3: 59:3f:61:11:34:94:43:fe:e6:3d:8d:87:9e:eb:1f:55:fa:43: a0:9a:fb:c8:e6:53:0a:6d:15:d9:60:48:7f:5a:62:77:2e:a3: 45:48:d7:0f:69:f9:f8:a0:8b:2b:7e:18:4f:4e:95:17:f0:48: fc:bd:42:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbrFJwq+pNF2aJTTwS9hEygwL6zMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNzExMTUwMDU5WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDBjZjgwMmVmZjQyYjcyNWE2M2EyYTk5ZWMwODYwMDlk YTQ3NmUwMzA3MmYyNjU0OTg5OGVjMWY2NThjODc5MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEUoT7yyNCu7VVkO5yShV25TOR9766+Ty7NkZ8/tbBT5vl sPpXXkMWmOT7e4E1oQvmlKqgOWYCp3htF3oDyM0vCk+z+w1Mak0Fl5/LpFRYlDpu jRw2SHNYOjkbD/vjreR7zVYoRO80TxCSvxqtfly+kuzNz5OLUZKkgEzYxqIZkFR5 DroAfI3FkDYlv6WwIoItJGf2astT/QosPLogMLVavrY4UBTXXxZZkAPcNGQEYSH4 TNu312onezFNAsNk4lQI9CuOBKGQ4RPW73+5I7DF46JKp9wkVppewW+LSQhTfQgo dJtQn7dDMS8y9vlzkolgbH7aX+QjolGz4yjYMt+bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURgaCAGH57A+4u5ljsn5NZUmmIGkwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2YyZTVlMTFjLWY0ZTAtNGY5MS04ZWQxLWE2Y2JhNmM1ZTI4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdgfwAwDQYJKoZIhvcNAQELBQADggEBAClzLnb8E9uF0y8rQaJTuncv2IV8 df7yPP7G8AtSO9faGvmlOCSfknZyFNCEtorI4+VrsvseFALJd4uNgYoLgTPwXiQ8 NWf+MqIO5a42aAdLP2cHI3f0uaMPF9WCCm1hguhvljWeTLhe2uCq3LCInfbW8xf1 PzMAS8k7WkslxIIuVLN33GILCKR6Dy1f2UWbS1LJlVa1NRVsIGOCU9mLNglX4xgt 1CsozFd5n6EdPt93jGy79BXvQ/WG0p8oce/BVcbe6Z1M81k/YRE0lEP+5j2Nh57r H1X6Q6Ca+8jmUwptFdlgSH9aYncuo0VI1w9p+figiyt+GE9OlRfwSPy9QoE= -----END CERTIFICATE-----Generated at Mon Jul 21 23:18:11 2025 by rpki-client