$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa File: 01f936e1-60a2-4d7f-a949-786fa3430156.roa (raw, json) Hash identifier: ANVOkgqVqjdDXvH/vTm4tnjkvTL2it/u4P5nxRmt+/w= Subject key identifier: 0B:5D:97:BC:FD:CB:35:F5:A3:B1:03:CA:6D:D7:A0:D9:81:FF:C1:8B Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 3BB55A4FA47998D976684F50690479F112E46838 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa Signing time: Mon 16 Jun 2025 15:50:33 +0000 ROA not before: Mon 16 Jun 2025 15:50:33 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b5:5a:4f:a4:79:98:d9:76:68:4f:50:69:04:79:f1:12:e4:68:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jun 16 15:50:33 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=3eeec673fc808218733c01bc34245a48ea7b0bae9954fb91776b9b2482c6f452, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:b9:b8:50:01:1b:a9:0d:dd:2e:00:88:50: 9a:c9:bf:de:b8:fa:24:70:c1:74:ec:9b:bc:9b:87: 2b:be:82:fc:96:da:36:8e:5a:3b:28:96:6d:3c:e2: 83:5d:55:6b:df:c4:ad:57:ee:83:23:0f:81:5d:ed: dd:64:83:71:c3:36:9b:4b:5e:e4:20:e7:6e:02:78: 61:73:f5:ae:2d:dc:bd:cd:64:8e:a9:5f:6a:2f:af: 8c:09:90:22:fc:e5:99:e3:b3:de:6f:1c:1d:9d:1a: 40:3b:ff:28:ae:71:f9:4d:ed:e1:a1:93:8a:cd:7e: 04:e7:38:37:e9:d2:46:5d:09:92:b2:17:bc:96:4a: 7e:9c:c5:6b:e3:99:70:99:bd:26:3d:ab:e5:93:11: 82:56:98:a8:fb:f6:1a:69:0c:12:ca:24:bf:c9:b9: 0c:97:b1:98:44:e9:75:4a:4e:38:65:5b:16:18:19: b4:00:a6:b1:f6:5c:8c:dc:55:ef:4d:19:2e:d3:10: 80:6e:bf:75:56:44:2d:4f:79:77:e2:5c:39:29:77: c0:b8:cf:82:b7:0f:dd:a0:ee:54:e7:76:14:bf:49: d9:9b:06:30:44:63:c6:f0:49:3b:43:30:d4:d0:f9: 30:f6:22:5c:2f:72:cc:bb:de:cc:98:85:b4:d7:76: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5D:97:BC:FD:CB:35:F5:A3:B1:03:CA:6D:D7:A0:D9:81:FF:C1:8B X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.10.0/23 Signature Algorithm: sha256WithRSAEncryption 49:7b:a7:83:14:70:22:cc:e3:19:36:22:89:ca:26:26:aa:f7: 68:57:3b:2f:3c:ba:04:0c:56:86:90:80:e9:75:fc:de:6a:48: f1:2c:97:91:95:a0:a7:8f:0c:2f:14:0b:33:45:07:79:20:3c: 3b:e4:2b:33:87:73:b2:ce:0b:98:96:92:39:e9:d8:43:3a:2d: 92:6c:e0:b5:cb:79:b7:dc:27:6a:ba:78:f6:44:8b:42:a3:fd: 28:a2:80:5e:f4:31:25:30:eb:5c:84:f7:e2:74:5a:b2:ae:f2: 47:ff:a3:9f:78:11:ad:aa:5f:71:1f:c4:3d:65:cf:5f:b3:11: e7:30:b3:12:45:84:d8:80:4f:c1:1e:ea:0f:3e:f7:d6:ed:81: 7c:74:97:5e:7a:8a:f7:57:a1:a6:bf:5c:c6:33:ce:22:a2:29: 92:03:3c:90:91:1b:55:03:8b:49:8f:de:1d:f7:01:b3:b4:e3: f1:56:ab:65:4a:7e:ad:e7:32:e7:bf:fc:3a:45:0d:bb:ce:87: 41:6d:68:e6:9b:60:63:8a:a7:58:3c:e9:98:8e:8e:23:3c:b7: c4:36:81:08:50:37:1b:f4:44:61:d5:3a:2f:44:67:57:09:15: 17:1e:26:65:1f:35:29:3d:02:3d:28:7b:f7:ca:b0:7b:74:6d: 89:2f:84:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO7VaT6R5mNl2aE9QaQR58RLkaDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNjE2MTU1MDMzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWVlYzY3M2ZjODA4MjE4NzMzYzAxYmMzNDI0NWE0OGVh N2IwYmFlOTk1NGZiOTE3NzZiOWIyNDgyYzZmNDUyMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGebm4UAEbqQ3dLgCIUJrJv964+iRwwXTsm7ybhyu+gvyW 2jaOWjsolm084oNdVWvfxK1X7oMjD4Fd7d1kg3HDNptLXuQg524CeGFz9a4t3L3N ZI6pX2ovr4wJkCL85Znjs95vHB2dGkA7/yiucflN7eGhk4rNfgTnODfp0kZdCZKy F7yWSn6cxWvjmXCZvSY9q+WTEYJWmKj79hppDBLKJL/JuQyXsZhE6XVKTjhlWxYY GbQAprH2XIzcVe9NGS7TEIBuv3VWRC1PeXfiXDkpd8C4z4K3D92g7lTndhS/Sdmb BjBEY8bwSTtDMNTQ+TD2Ilwvcsy73syYhbTXdvz3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC12XvP3LNfWjsQPKbdeg2YH/wYswHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzAxZjkzNmUxLTYwYTItNGQ3Zi1hOTQ5LTc4NmZhMzQzMDE1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwowDQYJKoZIhvcNAQELBQADggEBAEl7p4MUcCLM4xk2IonKJiaq92hX Oy88ugQMVoaQgOl1/N5qSPEsl5GVoKePDC8UCzNFB3kgPDvkKzOHc7LOC5iWkjnp 2EM6LZJs4LXLebfcJ2q6ePZEi0Kj/SiigF70MSUw61yE9+J0WrKu8kf/o594Ea2q X3EfxD1lz1+zEecwsxJFhNiAT8Ee6g8+99btgXx0l156ivdXoaa/XMYzziKiKZID PJCRG1UDi0mP3h33AbO04/FWq2VKfq3nMue//DpFDbvOh0FtaOabYGOKp1g86ZiO jiM8t8Q2gQhQNxv0RGHVOi9EZ1cJFRceJmUfNSk9Aj0oe/fKsHt0bYkvhIM= -----END CERTIFICATE-----Generated at Sun Jun 29 16:42:20 2025 by rpki-client