$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa File: 20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa (raw, json) Hash identifier: D3PnC+vdjb3qO/iuxSr0+AhMoImZfyI6ZHZHaXCiwLA= Subject key identifier: 3C:6F:AF:F9:9E:06:CF:42:A7:A0:F1:39:BF:5F:65:F7:DF:18:F4:36 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 50914F55D9E22E28BAFAB1C59F20614F1F35021D Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa Signing time: Tue 20 May 2025 15:31:11 +0000 ROA not before: Tue 20 May 2025 15:31:11 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:91:4f:55:d9:e2:2e:28:ba:fa:b1:c5:9f:20:61:4f:1f:35:02:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: May 20 15:31:11 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=9927581acafbf2c883bbc0fab02f264d415cb47a8e320e36ad968b95ce835d0c, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:3a:2f:d9:01:99:16:79:72:4f:5e:37:71: f0:07:3e:1b:8c:8e:2b:4b:84:94:ca:34:34:27:fd: 08:44:a7:55:c8:4b:cd:41:e7:41:46:b7:6d:bf:47: 07:c7:39:d6:fd:8b:6d:88:57:d2:95:d6:0b:0e:5b: 98:20:12:19:90:2f:db:1e:1c:1e:7c:2d:41:be:c1: ed:74:15:16:5f:40:66:f6:46:69:a7:bb:04:32:23: aa:fd:9a:89:cc:a1:07:01:44:84:c3:60:17:41:8d: f6:04:04:3a:57:f1:5d:90:d5:79:ac:0f:9a:49:18: e0:4e:31:11:09:34:47:59:c3:31:44:22:c3:7a:65: 67:38:9d:04:ea:74:6e:a9:c4:8a:fc:f8:79:71:21: 32:00:7d:cc:78:66:f8:40:10:06:02:84:0b:50:b8: 52:6c:fa:92:40:18:7a:4d:6f:40:71:82:26:cc:d6: e7:3a:f6:f7:71:3e:e2:31:d3:36:a4:fd:c5:3a:b2: 20:f3:39:7e:11:93:1b:98:e4:f3:5c:35:fc:f4:d0: c8:22:f8:d1:1d:38:bf:7c:cc:c2:4c:45:ce:e7:dd: c3:4a:98:7a:86:7f:d4:ce:8f:97:1f:7b:1f:e9:93: b9:ac:32:bb:27:9e:ef:8b:6a:28:ae:30:93:fc:0c: 06:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6F:AF:F9:9E:06:CF:42:A7:A0:F1:39:BF:5F:65:F7:DF:18:F4:36 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.2.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:e2:cd:68:a6:be:bc:64:83:7c:96:c1:57:dc:6a:86:53:67: d9:14:40:48:97:61:39:12:95:37:78:43:1d:e3:ae:2d:6a:b4: bd:ea:b4:59:10:88:20:5c:48:9e:6f:a7:f4:f5:8f:6a:6d:3e: b6:d3:44:0d:c3:6f:1d:9a:2c:69:25:16:96:39:54:63:a1:6d: 94:70:eb:66:d9:18:45:10:21:5e:af:62:ea:b4:94:8b:34:8e: c8:28:d5:1e:51:bb:af:22:cb:ad:6a:0d:35:03:d6:62:f4:ef: ee:a1:1e:da:51:0a:38:b3:c2:49:1c:0d:b1:85:4f:a1:1d:18: a0:37:2c:04:92:01:2a:76:5a:e3:64:36:65:73:df:23:e4:03: b1:4b:12:48:4c:5a:8e:89:3f:41:13:d1:24:d7:c1:4e:2f:3c: 5d:4e:41:bb:b0:0e:70:89:fc:53:70:42:29:79:40:73:8a:d0: 56:d3:5f:6a:a9:c6:b6:fe:92:75:b9:a8:fd:80:f1:a4:68:3f: 0a:0c:28:49:df:20:13:9f:88:22:a4:5a:03:6b:60:72:ab:8c: a4:20:ed:cc:d6:1b:7a:88:42:61:2e:f4:59:08:09:59:24:f2: 9d:0b:63:53:12:4a:a8:1c:a6:fa:ac:01:69:0b:9d:94:02:51: 13:dc:02:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUJFPVdniLii6+rHFnyBhTx81Ah0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNTIwMTUzMTExWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OTI3NTgxYWNhZmJmMmM4ODNiYmMwZmFiMDJmMjY0ZDQx NWNiNDdhOGUzMjBlMzZhZDk2OGI5NWNlODM1ZDBjMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT5jov2QGZFnlyT143cfAHPhuMjitLhJTKNDQn/QhEp1XI S81B50FGt22/RwfHOdb9i22IV9KV1gsOW5ggEhmQL9seHB58LUG+we10FRZfQGb2 RmmnuwQyI6r9monMoQcBRITDYBdBjfYEBDpX8V2Q1XmsD5pJGOBOMREJNEdZwzFE IsN6ZWc4nQTqdG6pxIr8+HlxITIAfcx4ZvhAEAYChAtQuFJs+pJAGHpNb0BxgibM 1uc69vdxPuIx0zak/cU6siDzOX4RkxuY5PNcNfz00Mgi+NEdOL98zMJMRc7n3cNK mHqGf9TOj5cfex/pk7msMrsnnu+LaiiuMJP8DAabAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPG+v+Z4Gz0KnoPE5v19l998Y9DYwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzIwY2RlNGRjLTgxZWQtNGQ5Ni1hOGU1LTE1OWE2Y2RjMDc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwIwDQYJKoZIhvcNAQELBQADggEBAAvizWimvrxkg3yWwVfcaoZTZ9kU QEiXYTkSlTd4Qx3jri1qtL3qtFkQiCBcSJ5vp/T1j2ptPrbTRA3Dbx2aLGklFpY5 VGOhbZRw62bZGEUQIV6vYuq0lIs0jsgo1R5Ru68iy61qDTUD1mL07+6hHtpRCjiz wkkcDbGFT6EdGKA3LASSASp2WuNkNmVz3yPkA7FLEkhMWo6JP0ET0STXwU4vPF1O QbuwDnCJ/FNwQil5QHOK0FbTX2qpxrb+knW5qP2A8aRoPwoMKEnfIBOfiCKkWgNr YHKrjKQg7czWG3qIQmEu9FkICVkk8p0LY1MSSqgcpvqsAWkLnZQCURPcAus= -----END CERTIFICATE-----Generated at Fri Jun 6 04:24:36 2025 by rpki-client