$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa File: 01f936e1-60a2-4d7f-a949-786fa3430156.roa (raw, json) Hash identifier: QTt7wJRAoeKwzsoKw4ElOLpDjM7ulktzxJrlqGBIhaA= Subject key identifier: 6E:AB:A4:8F:7C:39:EF:09:57:59:93:E9:46:72:C5:4D:BB:71:5F:51 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 164584A7C6543F54E31644325FE7E74974D04831 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa Signing time: Fri 26 Sep 2025 00:41:17 +0000 ROA not before: Fri 26 Sep 2025 00:41:17 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:45:84:a7:c6:54:3f:54:e3:16:44:32:5f:e7:e7:49:74:d0:48:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Sep 26 00:41:17 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=442250da530d5a5a34f73fe9c369b928a3c12fe75dd63ac11c1825a241b79bd4, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:ad:9f:a3:f5:43:9f:7d:85:f3:b9:5c:f8: 12:5a:8e:84:b2:60:7a:71:2e:5e:8e:ed:57:9f:6d: 3d:57:0b:4c:ac:7b:47:37:f9:cb:1b:a2:bf:3f:ca: d9:03:7e:20:15:93:f2:b0:6b:a4:11:1d:3b:dd:32: 73:dc:c9:6d:ea:e8:b7:fa:cb:ee:11:f0:a9:63:74: c0:e6:ca:61:9c:f7:87:4e:07:68:b3:bf:8c:3b:21: 55:c4:b9:79:cb:fe:72:9d:5c:52:0b:e5:fb:b9:85: 29:85:94:08:4b:a1:69:37:f6:2b:7e:ca:2d:b3:a6: ea:47:a2:66:55:c4:e9:bc:ed:5f:10:da:c2:de:30: fc:b4:ad:15:51:69:dd:3e:7e:63:fe:45:04:ba:4c: 90:96:ec:ea:52:5b:28:77:b9:05:95:50:44:29:a1: 2a:3f:e9:00:9d:1c:0f:9f:fd:3d:c5:9d:bf:ab:7d: c0:d8:87:1c:25:cd:4c:4a:bb:0a:df:9f:e4:50:18: de:37:6b:88:89:88:4c:34:2e:6d:c5:a6:c1:ca:02: 7b:9d:04:21:f7:b9:fd:d6:7b:85:0f:97:f8:94:46: 66:cc:b2:92:38:00:5e:ce:ba:71:1a:9b:96:b3:e5: 3f:d8:16:da:46:e5:4a:23:8e:d6:3f:05:5f:06:c3: 5a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AB:A4:8F:7C:39:EF:09:57:59:93:E9:46:72:C5:4D:BB:71:5F:51 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.10.0/23 Signature Algorithm: sha256WithRSAEncryption 50:ea:20:75:cf:5d:bb:ad:00:43:b1:3f:0b:e2:93:a9:78:24: 49:af:fb:34:c9:da:2d:ad:36:54:6d:a3:8a:12:09:f5:ea:54: e5:91:6b:02:79:57:a5:03:47:41:2e:9b:d2:4b:ee:ef:90:01: 3d:ad:47:ea:3a:65:0f:af:f4:ce:82:3b:12:66:d1:2d:85:28: 3b:5a:0f:58:63:d9:81:6f:b8:6e:f5:7c:8f:18:09:10:5d:97: bc:f5:6c:fb:35:c1:74:ff:00:fc:99:99:9c:42:79:16:c4:1a: 59:22:b4:71:5b:5f:8d:d8:82:6b:8d:31:ac:ba:dd:fd:78:8c: 96:48:ad:13:98:f6:d9:b9:5f:e2:21:e8:00:ed:ba:8e:b0:41: ae:ef:d0:ab:68:05:be:5f:90:09:1e:aa:28:1e:60:1e:95:25: 34:2d:68:3e:cd:9a:e4:a8:b2:5e:21:f9:36:67:e4:60:de:36: 03:ec:89:45:80:ae:8b:9d:9f:8c:12:7b:73:6f:da:a8:8d:79: e8:d7:ce:9e:ba:ed:c9:85:ea:09:d0:47:b3:70:f6:e2:6d:34: 38:a3:44:21:dc:22:81:a1:46:20:b7:73:79:6b:d9:ce:bc:d6: fa:a7:69:f9:4b:a2:1a:17:c0:7a:7b:fa:ad:41:4c:27:2b:1e: f4:e5:cc:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFkWEp8ZUP1TjFkQyX+fnSXTQSDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwOTI2MDA0MTE3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDIyNTBkYTUzMGQ1YTVhMzRmNzNmZTljMzY5YjkyOGEz YzEyZmU3NWRkNjNhYzExYzE4MjVhMjQxYjc5YmQ0MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl/62fo/VDn32F87lc+BJajoSyYHpxLl6O7VefbT1XC0ys e0c3+csbor8/ytkDfiAVk/Kwa6QRHTvdMnPcyW3q6Lf6y+4R8KljdMDmymGc94dO B2izv4w7IVXEuXnL/nKdXFIL5fu5hSmFlAhLoWk39it+yi2zpupHomZVxOm87V8Q 2sLeMPy0rRVRad0+fmP+RQS6TJCW7OpSWyh3uQWVUEQpoSo/6QCdHA+f/T3Fnb+r fcDYhxwlzUxKuwrfn+RQGN43a4iJiEw0Lm3FpsHKAnudBCH3uf3We4UPl/iURmbM spI4AF7OunEam5az5T/YFtpG5UojjtY/BV8Gw1p1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbqukj3w57wlXWZPpRnLFTbtxX1EwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzAxZjkzNmUxLTYwYTItNGQ3Zi1hOTQ5LTc4NmZhMzQzMDE1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwowDQYJKoZIhvcNAQELBQADggEBAFDqIHXPXbutAEOxPwvik6l4JEmv +zTJ2i2tNlRto4oSCfXqVOWRawJ5V6UDR0Eum9JL7u+QAT2tR+o6ZQ+v9M6COxJm 0S2FKDtaD1hj2YFvuG71fI8YCRBdl7z1bPs1wXT/APyZmZxCeRbEGlkitHFbX43Y gmuNMay63f14jJZIrROY9tm5X+Ih6ADtuo6wQa7v0KtoBb5fkAkeqigeYB6VJTQt aD7NmuSosl4h+TZn5GDeNgPsiUWAroudn4wSe3Nv2qiNeejXzp667cmF6gnQR7Nw 9uJtNDijRCHcIoGhRiC3c3lr2c681vqnaflLohoXwHp7+q1BTCcrHvTlzIE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:00 2025 by rpki-client