$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa File: 59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa (raw, json) Hash identifier: OflVsS08WX7/X0xq4G4R6xCUbpb62B/r0RL4b40mHNA= Subject key identifier: 29:C8:90:F9:A4:64:8F:77:1D:37:11:6B:E6:0A:39:17:1E:22:85:DD Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 1AED8B7074AA1889178215EEC2AEA9CDBFCDCDB8 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa Signing time: Tue 21 Oct 2025 00:50:10 +0000 ROA not before: Tue 21 Oct 2025 00:50:10 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ed:8b:70:74:aa:18:89:17:82:15:ee:c2:ae:a9:cd:bf:cd:cd:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Oct 21 00:50:10 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=0edae63ae3fbb56b63a861094c7540f011150c262ba49a02f126d527fc340c61, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0b:06:dc:50:f3:83:de:6a:cf:ba:e3:49:f2: 07:94:70:65:b1:da:54:dd:38:54:e4:01:1b:27:d3: 15:8f:c3:3e:3b:55:25:af:5c:03:b3:92:2a:1c:f3: cd:27:f6:96:41:59:3b:de:93:57:92:be:f5:8c:c7: e8:de:5d:b0:f9:e8:21:f9:d4:0d:d1:d6:b7:36:d3: 6c:68:b4:74:dc:10:44:42:eb:95:e0:78:dc:88:15: f1:f9:af:9e:82:6f:ad:08:e2:e1:5f:74:58:2c:f8: 3c:39:87:e3:dd:3b:48:d4:96:b2:60:7d:57:4f:2e: 84:85:41:24:de:aa:70:4f:ee:2a:3d:dc:ac:dd:30: 41:a1:8c:30:f5:25:17:f1:6c:8f:fd:86:70:b9:95: b5:9f:57:3d:2d:a8:60:31:bc:3f:1a:32:a2:1e:6a: f3:7c:b9:f9:12:58:1e:59:08:f6:09:89:fb:d8:b7: 12:57:91:ba:96:c4:57:41:c9:f2:9b:c2:07:b3:48: fe:c4:65:a7:f4:3f:fc:ab:fb:47:e2:73:9b:1f:c9: 94:95:41:15:76:dd:35:62:6f:df:e8:20:86:1d:dd: 8b:80:94:f5:6f:8e:f7:f1:dc:e7:75:1c:e1:01:cf: d7:e4:b3:14:3e:d6:a3:73:6a:f5:af:4b:63:0e:65: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C8:90:F9:A4:64:8F:77:1D:37:11:6B:E6:0A:39:17:1E:22:85:DD X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.4.0/22 Signature Algorithm: sha256WithRSAEncryption 36:3e:31:60:1a:12:77:ce:17:bc:f5:eb:d2:c5:73:6b:98:5f: 12:57:51:8c:ba:33:6b:3f:7e:21:72:eb:28:c6:e4:87:02:2a: c3:9b:d6:d4:09:bb:bf:2a:96:85:f6:76:4c:af:bd:10:ba:6c: 6c:42:6e:64:ed:26:41:77:80:f3:dd:5a:46:c9:f1:de:e9:c1: b9:f7:21:bc:9b:3e:89:2b:8d:0c:84:f3:68:54:18:19:88:87: 85:64:25:52:a2:b9:24:3e:6f:10:03:16:b8:f0:3f:82:b2:01: 1d:eb:ca:6e:fc:58:30:d4:60:10:4d:49:92:13:af:98:21:eb: da:4c:95:07:ec:7b:67:5a:1d:ce:43:41:10:78:14:cb:3f:64: ec:4c:d5:77:ac:e4:69:2e:79:ab:da:ac:16:31:b9:30:bc:18: f3:6d:b8:e8:0a:66:5f:94:dd:f4:b9:ca:76:57:7e:0f:b1:49: 7f:18:7c:f9:7a:5b:5b:d6:39:96:fb:67:d0:bb:9c:f4:ba:5c: 45:7b:ba:cf:55:58:b8:3c:aa:60:99:1b:de:64:fb:27:8e:ec: ff:70:d3:73:0b:8a:44:f6:4d:23:a6:f1:7e:07:fc:64:c5:54: ab:1a:7d:13:85:76:2a:9f:ae:90:dc:3e:db:59:7b:ba:58:45: 2c:20:8f:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGu2LcHSqGIkXghXuwq6pzb/NzbgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUxMDIxMDA1MDEwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWRhZTYzYWUzZmJiNTZiNjNhODYxMDk0Yzc1NDBmMDEx MTUwYzI2MmJhNDlhMDJmMTI2ZDUyN2ZjMzQwYzYxMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZCwbcUPOD3mrPuuNJ8geUcGWx2lTdOFTkARsn0xWPwz47 VSWvXAOzkioc880n9pZBWTvek1eSvvWMx+jeXbD56CH51A3R1rc202xotHTcEERC 65XgeNyIFfH5r56Cb60I4uFfdFgs+Dw5h+PdO0jUlrJgfVdPLoSFQSTeqnBP7io9 3KzdMEGhjDD1JRfxbI/9hnC5lbWfVz0tqGAxvD8aMqIeavN8ufkSWB5ZCPYJifvY txJXkbqWxFdByfKbwgezSP7EZaf0P/yr+0fic5sfyZSVQRV23TVib9/oIIYd3YuA lPVvjvfx3Od1HOEBz9fksxQ+1qNzavWvS2MOZY0ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKciQ+aRkj3cdNxFr5go5Fx4ihd0wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzU5YjNhN2Q2LTI2ZDQtNDgwOS05YmI2LTU0ZDhlYWY4N2NmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgfwQwDQYJKoZIhvcNAQELBQADggEBADY+MWAaEnfOF7z169LFc2uYXxJX UYy6M2s/fiFy6yjG5IcCKsOb1tQJu78qloX2dkyvvRC6bGxCbmTtJkF3gPPdWkbJ 8d7pwbn3IbybPokrjQyE82hUGBmIh4VkJVKiuSQ+bxADFrjwP4KyAR3rym78WDDU YBBNSZITr5gh69pMlQfse2daHc5DQRB4FMs/ZOxM1Xes5GkueavarBYxuTC8GPNt uOgKZl+U3fS5ynZXfg+xSX8YfPl6W1vWOZb7Z9C7nPS6XEV7us9VWLg8qmCZG95k +yeO7P9w03MLikT2TSOm8X4H/GTFVKsafROFdiqfrpDcPttZe7pYRSwgj10= -----END CERTIFICATE-----Generated at Fri Oct 24 17:14:49 2025 by rpki-client