$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/85ecd0ef-6924-4522-bd48-1e263001901c.roa File: 85ecd0ef-6924-4522-bd48-1e263001901c.roa (raw, json) Hash identifier: 6Lors43Z4P30pgBoasUUfIAdPAcsUet9Go9ZAQ6EQYQ= Subject key identifier: EE:67:A0:A0:8D:06:AD:3B:46:39:97:E4:37:52:31:5D:EA:26:5F:58 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 11A9C0E6EA2C0DFCB79800D04FF3336B1A4F0590 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/85ecd0ef-6924-4522-bd48-1e263001901c.roa Signing time: Fri 07 Aug 2026 00:50:22 +0000 ROA not before: Fri 07 Aug 2026 00:50:22 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a9:c0:e6:ea:2c:0d:fc:b7:98:00:d0:4f:f3:33:6b:1a:4f:05:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Aug 7 00:50:22 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=37fee630e9578ea5568b31e6911c874492febd5dae40d39710becae73680ce93, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:d6:d9:08:fd:55:26:7a:db:46:15:1c:17: eb:19:04:69:14:5b:83:54:15:01:97:10:e0:31:f5: 18:43:1b:21:ae:54:8a:9b:31:75:3a:e4:29:04:3d: 63:b9:d0:1b:3d:2e:be:00:b7:c2:97:57:a1:cc:6b: 18:38:f1:0d:ab:bb:3e:73:cb:1a:64:e3:05:32:0f: 21:53:63:bb:96:b1:d7:2d:74:ee:be:a5:15:aa:cb: 4e:14:f3:c7:92:c7:2e:b6:9c:57:43:a2:d0:01:0d: 26:3a:0d:55:0c:18:74:87:c7:fb:36:d6:25:fe:2d: d1:84:9a:22:34:0d:d4:85:16:0d:7f:49:f7:80:17: 8d:5e:5e:d8:39:14:a5:ad:44:f5:a5:a4:35:26:2d: 48:70:b9:a7:0c:ae:cf:99:4e:4a:b5:9c:5b:6f:c8: 16:9e:e6:d1:2c:35:4b:39:0a:67:43:a5:06:e3:bc: 0b:82:13:5e:a0:e6:44:97:43:9f:8b:da:cc:52:e5: 3a:49:c3:2e:b0:5c:47:30:fc:13:54:bf:33:d8:b7: 54:ce:8c:89:0d:f1:cd:b9:a5:c3:14:6d:8d:8c:a1: ca:17:09:61:82:bb:7b:96:f7:b1:f1:0c:41:e1:7f: 8e:87:00:73:02:44:01:ab:a5:ff:bd:03:fa:e1:17: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:67:A0:A0:8D:06:AD:3B:46:39:97:E4:37:52:31:5D:EA:26:5F:58 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/85ecd0ef-6924-4522-bd48-1e263001901c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.1.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:f5:9d:49:0d:d1:1c:84:8c:e8:2c:cc:ec:4a:fe:25:8e:94: a7:1b:16:90:6a:bd:2c:84:ef:8a:fd:30:ea:0e:4d:8d:eb:e6: 3b:46:c6:e1:ee:5d:8d:af:77:cd:a9:4b:35:1d:d5:62:f1:74: 57:9c:f2:fb:ab:58:03:61:74:f1:04:8c:45:db:64:1f:9f:23: 0d:b6:e8:db:83:93:43:35:4b:eb:82:85:c2:ad:ed:4c:62:ba: 64:9e:37:da:ce:13:3e:49:f7:54:42:79:c4:08:2e:e6:fa:f3: 06:fd:3a:78:4d:78:ab:46:b3:4b:33:d2:93:87:b4:bf:95:b8: 30:83:da:21:77:06:53:b4:c8:8b:af:97:b5:ed:34:59:76:ad: a8:89:13:e9:3a:ea:66:58:25:08:0d:ac:7e:00:01:3a:39:99: 09:85:b3:30:7c:08:37:2d:62:2b:e0:f3:d2:ee:30:e1:92:6f: 34:de:33:29:5e:3b:37:3d:de:63:a6:96:6e:dd:82:51:f7:e2: f3:d2:55:bf:78:23:4b:ff:f7:5c:d7:ae:41:af:ca:eb:1a:a5: ab:79:52:81:65:5a:70:80:83:9e:20:f0:2a:f6:a4:9a:17:df: 11:a3:e5:98:24:97:34:81:46:12:81:72:44:23:e6:f4:90:5a: 72:07:63:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEanA5uosDfy3mADQT/MzaxpPBZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwODA3MDA1MDIyWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2ZlZTYzMGU5NTc4ZWE1NTY4YjMxZTY5MTFjODc0NDky ZmViZDVkYWU0MGQzOTcxMGJlY2FlNzM2ODBjZTkzMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu8NbZCP1VJnrbRhUcF+sZBGkUW4NUFQGXEOAx9RhDGyGu VIqbMXU65CkEPWO50Bs9Lr4At8KXV6HMaxg48Q2ruz5zyxpk4wUyDyFTY7uWsdct dO6+pRWqy04U88eSxy62nFdDotABDSY6DVUMGHSHx/s21iX+LdGEmiI0DdSFFg1/ SfeAF41eXtg5FKWtRPWlpDUmLUhwuacMrs+ZTkq1nFtvyBae5tEsNUs5CmdDpQbj vAuCE16g5kSXQ5+L2sxS5TpJwy6wXEcw/BNUvzPYt1TOjIkN8c25pcMUbY2MocoX CWGCu3uW97HxDEHhf46HAHMCRAGrpf+9A/rhFw1ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7megoI0GrTtGOZfkN1IxXeomX1gwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1Lzg1ZWNkMGVmLTY5MjQtNDUyMi1iZDQ4LTFlMjYzMDAxOTAxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwEwDQYJKoZIhvcNAQELBQADggEBAF/1nUkN0RyEjOgszOxK/iWOlKcb FpBqvSyE74r9MOoOTY3r5jtGxuHuXY2vd82pSzUd1WLxdFec8vurWANhdPEEjEXb ZB+fIw226NuDk0M1S+uChcKt7UxiumSeN9rOEz5J91RCecQILub68wb9OnhNeKtG s0sz0pOHtL+VuDCD2iF3BlO0yIuvl7XtNFl2raiJE+k66mZYJQgNrH4AATo5mQmF szB8CDctYivg89LuMOGSbzTeMyleOzc93mOmlm7dglH34vPSVb94I0v/91zXrkGv yusapat5UoFlWnCAg54g8Cr2pJoX3xGj5ZgklzSBRhKBckQj5vSQWnIHY18= -----END CERTIFICATE-----Generated at Thu Sep 3 12:57:58 2026 by rpki-client