$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa File: 20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa (raw, json) Hash identifier: +/qUH2PbE9BlOQucc9I9ZShCtTVoDVXsm3wktR5p3K8= Subject key identifier: E4:15:10:A8:07:1E:07:D5:F5:71:D1:8A:AA:5A:07:99:55:A5:6E:72 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 519A72762BDA3949BC9EE7EAEF47E2F61859ECCB Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa Signing time: Fri 26 Sep 2025 00:41:18 +0000 ROA not before: Fri 26 Sep 2025 00:41:18 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9a:72:76:2b:da:39:49:bc:9e:e7:ea:ef:47:e2:f6:18:59:ec:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Sep 26 00:41:18 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=9f56149f00c7b75bd018e5375090b3c88faf665abdc9d6d3a348016c2cf55dc8, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:bd:dd:e0:7a:ed:64:7f:15:10:25:69:95: 64:82:2b:17:b7:cb:72:11:ca:5e:25:6c:45:45:af: ac:1b:49:55:e6:a9:54:29:96:3a:7f:08:52:40:ae: 3e:22:04:3d:20:ed:be:25:a3:fa:0f:d2:3d:7f:80: 63:20:a0:8c:07:62:3f:0c:05:ce:1a:f8:ab:26:e9: 66:2e:4f:7a:99:d6:65:57:fc:12:e9:b8:df:3c:12: 2c:9f:fc:b8:62:6b:a6:7f:04:37:23:cb:8d:e5:d6: 75:b6:49:d1:66:cc:3c:cf:25:b9:8c:04:bf:c2:27: eb:d6:16:44:a1:65:d1:4c:fe:f8:40:d9:25:4e:7a: 21:92:1f:6a:64:1b:50:71:0d:f1:1f:64:76:84:7d: be:3c:4c:59:62:4a:7c:1a:66:74:06:e5:91:97:e1: f2:f5:e2:d4:29:7f:5c:c1:3f:75:4b:12:6f:81:11: c0:8e:99:b3:c3:8f:31:11:6b:da:84:49:e8:05:af: e1:b5:2a:2c:ab:0d:54:ca:52:dd:cf:18:39:60:51: 79:53:dd:6b:74:b7:43:50:60:57:5f:1e:65:82:ba: 6a:77:f5:c0:86:fb:50:66:64:8b:27:20:46:36:4c: 68:58:90:79:e9:1f:b3:3a:37:d6:5d:98:5a:45:d2: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:15:10:A8:07:1E:07:D5:F5:71:D1:8A:AA:5A:07:99:55:A5:6E:72 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.2.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:2b:64:fe:8c:aa:86:54:c1:10:9a:4e:d4:4f:42:e4:4b:44: 59:78:70:e1:b4:7a:b4:8c:f9:cb:a5:27:ff:cd:49:d7:37:b1: 9b:e4:f0:3d:f8:b6:70:de:bf:64:9a:20:8b:83:89:3f:8c:54: 4e:4e:da:ea:c8:38:aa:98:75:88:86:0e:66:6b:d5:77:ee:bb: 3f:b2:51:af:b5:b6:2c:1a:48:57:82:54:c3:73:39:6d:82:d6: a0:ce:12:73:c5:3f:e6:b1:cc:5c:5e:2c:de:fa:72:e7:46:ff: 40:27:c9:de:59:96:6c:d3:52:0f:b9:ab:5c:f1:0d:cb:46:32: 26:57:87:07:71:c2:f9:6c:a8:70:8b:6b:14:96:97:11:1a:12: a5:03:90:48:c3:11:44:56:3b:08:ac:91:4f:af:71:cc:df:e0: 01:2e:dd:77:4e:24:55:89:33:c2:09:e4:b9:2c:46:93:7a:e1: 8a:a5:aa:6c:86:95:8f:14:6a:f4:85:55:77:ce:8a:74:4a:8c: 67:dc:00:8d:32:aa:82:a2:cf:bf:b0:cc:41:91:7a:fb:43:c7: e6:11:3e:86:3a:19:e0:cf:0e:53:bb:fb:6c:68:59:ef:66:f5: 65:82:32:0d:1d:58:65:5e:db:71:bc:b7:63:6f:ae:49:d9:9c: bd:0e:09:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUZpydivaOUm8nufq70fi9hhZ7MswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwOTI2MDA0MTE4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjU2MTQ5ZjAwYzdiNzViZDAxOGU1Mzc1MDkwYjNjODhm YWY2NjVhYmRjOWQ2ZDNhMzQ4MDE2YzJjZjU1ZGM4MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvXb3d4HrtZH8VECVplWSCKxe3y3IRyl4lbEVFr6wbSVXm qVQpljp/CFJArj4iBD0g7b4lo/oP0j1/gGMgoIwHYj8MBc4a+Ksm6WYuT3qZ1mVX /BLpuN88Eiyf/Lhia6Z/BDcjy43l1nW2SdFmzDzPJbmMBL/CJ+vWFkShZdFM/vhA 2SVOeiGSH2pkG1BxDfEfZHaEfb48TFliSnwaZnQG5ZGX4fL14tQpf1zBP3VLEm+B EcCOmbPDjzERa9qESegFr+G1KiyrDVTKUt3PGDlgUXlT3Wt0t0NQYFdfHmWCump3 9cCG+1BmZIsnIEY2TGhYkHnpH7M6N9ZdmFpF0oWtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5BUQqAceB9X1cdGKqloHmVWlbnIwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzIwY2RlNGRjLTgxZWQtNGQ5Ni1hOGU1LTE1OWE2Y2RjMDc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwIwDQYJKoZIhvcNAQELBQADggEBAGorZP6MqoZUwRCaTtRPQuRLRFl4 cOG0erSM+culJ//NSdc3sZvk8D34tnDev2SaIIuDiT+MVE5O2urIOKqYdYiGDmZr 1Xfuuz+yUa+1tiwaSFeCVMNzOW2C1qDOEnPFP+axzFxeLN76cudG/0Anyd5ZlmzT Ug+5q1zxDctGMiZXhwdxwvlsqHCLaxSWlxEaEqUDkEjDEURWOwiskU+vcczf4AEu 3XdOJFWJM8IJ5LksRpN64YqlqmyGlY8UavSFVXfOinRKjGfcAI0yqoKiz7+wzEGR evtDx+YRPoY6GeDPDlO7+2xoWe9m9WWCMg0dWGVe23G8t2NvrknZnL0OCd8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:37 2025 by rpki-client