$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa File: 01f936e1-60a2-4d7f-a949-786fa3430156.roa (raw, json) Hash identifier: 2XQ3guG6VQFbbHv97GMBTry/BrU7iA7OHBNu409Cdko= Subject key identifier: 5F:C4:6D:5C:5B:90:E1:AD:2D:CB:A0:83:1D:6A:C2:C6:5F:D0:A3:BA Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 23AC49D5DD77A285018AE03B7670F34AC86C12B2 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa Signing time: Mon 01 Sep 2025 15:50:25 +0000 ROA not before: Mon 01 Sep 2025 15:50:25 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ac:49:d5:dd:77:a2:85:01:8a:e0:3b:76:70:f3:4a:c8:6c:12:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Sep 1 15:50:25 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=e0c1f7717cd261ed69e4d557e8a4bb10a0b8b14c4c00250b44dedd49f280f0cd, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:a9:1a:24:44:5f:54:ec:00:df:d8:63:ca: b1:c4:56:ca:1c:c3:36:1f:18:09:41:a8:05:b2:45: f2:18:41:f1:47:06:6b:2b:ab:09:19:ea:28:30:e6: 1d:96:06:9a:2f:73:fd:7c:8f:27:48:dc:66:ee:24: 85:01:d5:58:f2:70:33:b2:6a:b3:f0:ad:9f:e1:c2: 2b:2b:1a:4a:73:97:21:02:8d:82:e8:45:a6:36:ab: 59:0e:a4:ab:18:a9:8e:c2:af:16:c5:ff:80:d8:45: ff:9f:f3:e2:0a:c5:12:3f:61:56:dd:68:bf:e3:8b: 6d:46:08:be:56:f5:61:91:15:64:8e:06:0e:e7:de: ff:11:9d:4d:6e:69:b6:55:c8:41:32:f9:a6:c1:96: 43:3f:02:c6:c1:9e:69:91:cd:91:15:7f:20:92:83: 76:38:1c:11:f5:df:53:72:ef:8e:f2:e7:0e:fc:1e: 06:2c:0d:bc:a3:64:3e:5b:00:86:43:a1:25:46:36: 0e:0b:92:58:e7:51:0d:72:94:cf:e9:50:40:89:cc: d0:32:24:9a:d6:d8:f8:a5:a3:f2:27:df:83:de:58: 64:25:25:7c:58:78:91:be:c0:75:81:59:35:df:89: 83:48:d3:c7:91:68:1c:f0:f6:22:4e:08:6b:b3:d7: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C4:6D:5C:5B:90:E1:AD:2D:CB:A0:83:1D:6A:C2:C6:5F:D0:A3:BA X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.10.0/23 Signature Algorithm: sha256WithRSAEncryption 59:89:67:95:20:5c:3f:35:3e:96:e3:f3:82:d4:eb:f8:25:6a: 51:7e:5c:a3:b5:e2:e9:ce:c0:a9:87:7a:37:39:49:b1:ce:0d: bf:82:16:49:37:1e:9a:a0:32:d9:24:df:2a:b8:8b:76:7f:0b: 0c:3c:09:53:0f:90:04:88:62:b5:51:16:4a:4d:b5:0b:05:cb: 34:97:76:cd:bd:ec:5b:25:a5:4c:1f:70:df:1b:12:55:cd:97: e3:d2:6a:58:11:9c:a7:62:8e:a4:f6:79:b5:1d:9d:26:3e:f9: 18:3f:e6:bc:e5:31:32:0f:11:23:45:d5:a0:54:b7:f6:10:09: 9f:9c:4f:01:89:62:a6:48:79:c7:0c:4c:bc:fd:0b:51:4c:80: 99:bc:b0:4b:16:2d:7f:5c:f1:22:21:4d:46:a3:bf:3c:88:8b: d4:58:89:08:44:fe:74:16:ca:31:94:e5:5c:8d:a5:4d:b7:fc: 8a:12:66:c7:6d:b7:d0:f7:03:71:a9:2d:5b:90:3e:7f:26:9b: cb:ca:c1:cd:91:a9:e4:f9:d6:67:f0:34:6e:ea:9f:59:d0:73: 6f:d5:08:e7:9c:20:c9:2f:ac:57:63:db:5a:fb:8c:e7:b5:ca: 4c:af:0a:5f:af:e5:07:f1:6e:28:5a:4c:36:0e:16:8a:42:b6: 27:33:42:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI6xJ1d13ooUBiuA7dnDzSshsErIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwOTAxMTU1MDI1WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGMxZjc3MTdjZDI2MWVkNjllNGQ1NTdlOGE0YmIxMGEw YjhiMTRjNGMwMDI1MGI0NGRlZGQ0OWYyODBmMGNkMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwkakaJERfVOwA39hjyrHEVsocwzYfGAlBqAWyRfIYQfFH BmsrqwkZ6igw5h2WBpovc/18jydI3GbuJIUB1VjycDOyarPwrZ/hwisrGkpzlyEC jYLoRaY2q1kOpKsYqY7CrxbF/4DYRf+f8+IKxRI/YVbdaL/ji21GCL5W9WGRFWSO Bg7n3v8RnU1uabZVyEEy+abBlkM/AsbBnmmRzZEVfyCSg3Y4HBH131Ny747y5w78 HgYsDbyjZD5bAIZDoSVGNg4LkljnUQ1ylM/pUECJzNAyJJrW2Pilo/In34PeWGQl JXxYeJG+wHWBWTXfiYNI08eRaBzw9iJOCGuz18d/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX8RtXFuQ4a0ty6CDHWrCxl/Qo7owHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzAxZjkzNmUxLTYwYTItNGQ3Zi1hOTQ5LTc4NmZhMzQzMDE1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwowDQYJKoZIhvcNAQELBQADggEBAFmJZ5UgXD81Ppbj84LU6/glalF+ XKO14unOwKmHejc5SbHODb+CFkk3HpqgMtkk3yq4i3Z/Cww8CVMPkASIYrVRFkpN tQsFyzSXds297FslpUwfcN8bElXNl+PSalgRnKdijqT2ebUdnSY++Rg/5rzlMTIP ESNF1aBUt/YQCZ+cTwGJYqZIeccMTLz9C1FMgJm8sEsWLX9c8SIhTUajvzyIi9RY iQhE/nQWyjGU5VyNpU23/IoSZsdtt9D3A3GpLVuQPn8mm8vKwc2RqeT51mfwNG7q n1nQc2/VCOecIMkvrFdj21r7jOe1ykyvCl+v5QfxbihaTDYOFopCticzQmk= -----END CERTIFICATE-----Generated at Sun Sep 7 13:54:31 2025 by rpki-client