$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa File: f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa (raw, json) Hash identifier: 6u7Ov69uvxQyCwii6EBylpui8lFAocgcx/6DgupEKaE= Subject key identifier: 29:CA:02:BE:4E:AC:8B:18:96:BE:D2:7A:76:26:7F:12:A5:97:D5:3D Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 723494883400C93639614DE424633C883A91C707 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa Signing time: Mon 01 Sep 2025 15:50:22 +0000 ROA not before: Mon 01 Sep 2025 15:50:22 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:34:94:88:34:00:c9:36:39:61:4d:e4:24:63:3c:88:3a:91:c7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Sep 1 15:50:22 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=ff1fb42518b391f5791005ae1100661ca522423304fc6d72f8033e5455aa7964, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:f7:a4:99:b0:8c:9c:40:c6:8e:d8:d5:b2: 54:dc:91:8e:9c:cb:75:e9:e4:61:be:65:e4:c3:be: 14:19:60:23:b4:b0:ef:1b:b4:8f:1b:25:fa:98:93: 8c:1b:18:44:2a:50:a7:48:6a:b6:99:c5:2f:bb:96: ab:c7:17:ef:36:06:da:69:cb:1f:f9:78:4f:5c:fc: ef:3f:e4:2b:0c:65:b3:5a:f2:93:fe:0e:52:58:44: b8:96:11:e1:5c:3b:68:e7:ce:6c:69:3e:78:a2:82: a7:44:db:e1:d3:75:67:4b:52:80:13:26:ab:f6:c6: 58:55:3c:ea:4d:10:f2:2b:e2:24:53:54:d9:b9:7c: ac:1d:92:5f:3e:d2:0c:a6:96:e0:d5:8b:01:4d:ee: d0:05:95:5e:ba:54:fb:47:9c:bf:2d:55:1f:ba:8e: fb:2f:27:ed:7b:71:bf:f4:e2:74:ae:2d:98:8d:f8: 4d:ed:96:3c:4f:48:8d:a0:00:f7:c3:38:d3:41:11: b7:6f:ad:e5:84:85:87:99:2c:f4:a2:16:5d:72:70: 03:39:38:30:37:f3:f1:d2:bc:4f:6e:93:16:db:64: 3e:eb:ce:d7:34:62:dd:0c:55:ae:5b:76:30:ec:56: 9c:c4:f0:0b:71:69:2b:a0:6d:0e:27:a6:39:5b:2c: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CA:02:BE:4E:AC:8B:18:96:BE:D2:7A:76:26:7F:12:A5:97:D5:3D X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:ea:25:83:32:65:e9:7c:35:3c:03:ae:31:61:75:1a:d2:57: 45:3f:8b:bd:b0:05:9c:60:67:46:77:f3:5b:0e:37:c8:b9:b6: 1f:68:3b:0d:00:17:a8:7f:4b:0a:02:b9:51:56:ab:21:8b:5d: c5:e5:e2:9a:9a:19:dd:d0:7a:e0:d2:27:78:1f:86:fe:ff:ee: 00:14:0d:dc:95:fa:5c:4c:81:0a:07:78:ca:5d:48:a6:d1:73: f0:89:9f:21:fa:bf:d4:3a:56:5c:04:b3:33:14:a6:41:ff:ac: 72:7f:2a:6a:22:06:1e:34:3a:68:b6:cf:87:c1:2b:c8:28:36: ae:a9:c0:26:52:f8:f0:6a:d8:39:4d:03:34:66:76:6d:c8:03: 37:ea:2b:fe:4e:c2:d1:13:b9:67:21:b1:41:3b:94:69:f1:89: c9:80:fb:ab:f9:0f:4c:0c:70:2b:87:0e:b3:41:4f:c4:9c:39: e0:9c:73:1b:e8:2a:07:a8:50:87:54:01:5b:cf:26:91:bb:dc: 91:a8:68:2c:ea:f6:c1:2f:45:26:ca:b3:75:25:6b:f5:af:bd: 13:ad:7d:ea:e9:84:65:e1:6a:24:0e:c9:83:c6:2e:af:d8:e4: 63:05:5a:2d:5c:56:ae:fe:51:09:56:f1:f1:e4:92:c9:d3:c3: 93:ea:86:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcjSUiDQAyTY5YU3kJGM8iDqRxwcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwOTAxMTU1MDIyWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjFmYjQyNTE4YjM5MWY1NzkxMDA1YWUxMTAwNjYxY2E1 MjI0MjMzMDRmYzZkNzJmODAzM2U1NDU1YWE3OTY0MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCezvekmbCMnEDGjtjVslTckY6cy3Xp5GG+ZeTDvhQZYCO0 sO8btI8bJfqYk4wbGEQqUKdIaraZxS+7lqvHF+82Btppyx/5eE9c/O8/5CsMZbNa 8pP+DlJYRLiWEeFcO2jnzmxpPniigqdE2+HTdWdLUoATJqv2xlhVPOpNEPIr4iRT VNm5fKwdkl8+0gymluDViwFN7tAFlV66VPtHnL8tVR+6jvsvJ+17cb/04nSuLZiN +E3tljxPSI2gAPfDONNBEbdvreWEhYeZLPSiFl1ycAM5ODA38/HSvE9ukxbbZD7r ztc0Yt0MVa5bdjDsVpzE8AtxaSugbQ4npjlbLCDHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKcoCvk6sixiWvtJ6diZ/EqWX1T0wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2YzZTc4YzlkLWNhZmYtNDIzNy1hYWJhLWI0MGY5MDFlM2M4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwEwDQYJKoZIhvcNAQELBQADggEBADzqJYMyZel8NTwDrjFhdRrSV0U/ i72wBZxgZ0Z381sON8i5th9oOw0AF6h/SwoCuVFWqyGLXcXl4pqaGd3QeuDSJ3gf hv7/7gAUDdyV+lxMgQoHeMpdSKbRc/CJnyH6v9Q6VlwEszMUpkH/rHJ/KmoiBh40 Omi2z4fBK8goNq6pwCZS+PBq2DlNAzRmdm3IAzfqK/5OwtETuWchsUE7lGnxicmA +6v5D0wMcCuHDrNBT8ScOeCccxvoKgeoUIdUAVvPJpG73JGoaCzq9sEvRSbKs3Ul a/WvvROtferphGXhaiQOyYPGLq/Y5GMFWi1cVq7+UQlW8fHkksnTw5Pqhgs= -----END CERTIFICATE-----Generated at Sun Sep 7 16:17:46 2025 by rpki-client