$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa File: 59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa (raw, json) Hash identifier: MgVIPpccllEwO76LrUErqNh6OsDPZoTkIsyTKnfH0pg= Subject key identifier: 35:C1:B2:CA:2B:EF:6D:7E:8C:7F:63:57:4B:41:4C:BE:78:CE:BF:2B Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 4DBC49EB34551BBCCF4BD18ABA8CC7964BCE95C6 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa Signing time: Tue 20 May 2025 15:31:13 +0000 ROA not before: Tue 20 May 2025 15:31:13 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bc:49:eb:34:55:1b:bc:cf:4b:d1:8a:ba:8c:c7:96:4b:ce:95:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: May 20 15:31:13 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=88e9fab0f39a9ad830993c976a2fbfa9bed9ac15f95206c7911128241ecde8eb, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:f4:14:1b:3c:7d:2d:b9:14:b4:85:58:85: e8:ba:b2:65:e0:c0:a6:47:b1:99:9b:f5:a9:d0:f1: 8c:4c:8c:40:73:c6:90:29:b8:7d:bc:e5:68:53:65: 21:f7:bd:6c:e0:bd:27:4b:bc:7c:b8:12:7f:33:d4: 78:23:c1:36:30:bc:87:91:a5:37:8d:ff:ac:d4:34: 6e:e8:dd:8d:1b:14:c5:b3:41:aa:b7:ef:44:0e:91: 6f:46:d9:d9:84:ab:88:aa:9f:81:b3:4c:d5:ed:0e: 69:6d:f6:d5:a3:bd:67:92:78:6b:ba:8c:6b:90:b4: cc:f1:73:cf:3f:b0:7c:3d:ac:5e:5d:94:dc:cd:52: 34:dc:7a:78:06:7b:39:ef:a1:18:de:e6:9c:f1:e0: 62:47:5c:70:57:e9:e6:22:37:a4:97:ff:91:c5:69: 51:c5:17:92:66:7d:c4:7c:34:d8:01:76:04:2b:cf: bd:fb:8e:fc:2d:a4:77:63:ab:cb:76:ea:84:ab:5b: b7:da:34:fb:ff:2c:f3:ac:43:3d:7d:87:67:77:e9: c2:ed:94:d7:83:3b:cc:12:77:77:f5:c5:83:a1:3d: 01:f0:f3:c3:e2:1c:d8:b9:4c:ed:17:4c:6e:b7:bf: 50:7b:d6:67:80:17:43:2a:0e:ce:08:4e:bf:29:2e: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C1:B2:CA:2B:EF:6D:7E:8C:7F:63:57:4B:41:4C:BE:78:CE:BF:2B X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.4.0/22 Signature Algorithm: sha256WithRSAEncryption 41:65:11:e1:9a:dc:51:01:51:68:c8:cb:a7:85:85:87:a8:02: 40:5c:51:e1:1d:d1:a8:70:e9:67:39:13:60:a0:69:c7:00:e4: 67:65:55:fe:1d:9d:4d:d1:b5:cb:8c:f0:77:fc:70:9b:4c:d5: 06:d1:93:48:4c:d3:d4:55:d4:ca:26:d3:79:44:81:6b:57:92: 9b:f6:58:50:84:c4:26:9e:df:e3:f2:51:2a:16:4d:29:23:5e: 88:bd:d5:1d:6e:52:1e:fe:e8:de:1b:d1:dd:47:fe:24:fe:e0: da:f4:88:6d:4b:cb:c1:96:8c:7e:1f:79:b2:d4:95:8a:d6:d7: 57:44:8a:44:7a:49:16:33:57:5a:ef:b6:a9:d5:1e:26:f1:40: 8f:4e:ad:3c:b2:bf:15:b3:57:e6:6d:11:35:76:90:d5:ba:b3: 5e:6e:d8:c2:0f:09:99:54:40:a1:00:e6:fc:82:c5:b1:b3:81: 3e:f0:b2:bc:8b:87:83:56:2e:d6:3e:54:73:ff:75:2b:c9:24: bc:8c:31:d6:dd:de:18:62:32:cb:5b:4f:8d:fc:2c:70:e9:72: c3:f9:93:8b:0d:12:42:61:84:55:21:46:15:17:89:df:0b:1e: 9b:ba:c7:d8:74:35:63:9f:0a:10:c7:e7:b6:fb:27:23:64:c7: ce:0e:03:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTbxJ6zRVG7zPS9GKuozHlkvOlcYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNTIwMTUzMTEzWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGU5ZmFiMGYzOWE5YWQ4MzA5OTNjOTc2YTJmYmZhOWJl ZDlhYzE1Zjk1MjA2Yzc5MTExMjgyNDFlY2RlOGViMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqbvQUGzx9LbkUtIVYhei6smXgwKZHsZmb9anQ8YxMjEBz xpApuH285WhTZSH3vWzgvSdLvHy4En8z1HgjwTYwvIeRpTeN/6zUNG7o3Y0bFMWz Qaq370QOkW9G2dmEq4iqn4GzTNXtDmlt9tWjvWeSeGu6jGuQtMzxc88/sHw9rF5d lNzNUjTcengGeznvoRje5pzx4GJHXHBX6eYiN6SX/5HFaVHFF5JmfcR8NNgBdgQr z737jvwtpHdjq8t26oSrW7faNPv/LPOsQz19h2d36cLtlNeDO8wSd3f1xYOhPQHw 88PiHNi5TO0XTG63v1B71meAF0MqDs4ITr8pLqPrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNcGyyivvbX6Mf2NXS0FMvnjOvyswHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzU5YjNhN2Q2LTI2ZDQtNDgwOS05YmI2LTU0ZDhlYWY4N2NmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgfwQwDQYJKoZIhvcNAQELBQADggEBAEFlEeGa3FEBUWjIy6eFhYeoAkBc UeEd0ahw6Wc5E2CgaccA5GdlVf4dnU3RtcuM8Hf8cJtM1QbRk0hM09RV1Mom03lE gWtXkpv2WFCExCae3+PyUSoWTSkjXoi91R1uUh7+6N4b0d1H/iT+4Nr0iG1Ly8GW jH4febLUlYrW11dEikR6SRYzV1rvtqnVHibxQI9OrTyyvxWzV+ZtETV2kNW6s15u 2MIPCZlUQKEA5vyCxbGzgT7wsryLh4NWLtY+VHP/dSvJJLyMMdbd3hhiMstbT438 LHDpcsP5k4sNEkJhhFUhRhUXid8LHpu6x9h0NWOfChDH57b7JyNkx84OA5o= -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:11 2025 by rpki-client