$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/5ed51049-d347-4dd0-bf4f-e1cb4adc80ca.roa File: 5ed51049-d347-4dd0-bf4f-e1cb4adc80ca.roa (raw, json) Hash identifier: QdEAGvshmNWUF6JG+N4WHZohAPf1VGj1F0GlSVjc1YU= Subject key identifier: C2:EA:8D:66:B0:77:F4:F5:2F:86:50:AA:64:C7:1C:10:08:40:A4:A2 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 0A1BAD94ACFE037846A2E7E73B8814608261186A Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/5ed51049-d347-4dd0-bf4f-e1cb4adc80ca.roa Signing time: Fri 26 Sep 2025 00:50:06 +0000 ROA not before: Fri 26 Sep 2025 00:50:06 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1b:ad:94:ac:fe:03:78:46:a2:e7:e7:3b:88:14:60:82:61:18:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Sep 26 00:50:06 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=4cf451d6fa0f82e007ed9b1ed22dd4f2552a92e6c2b062f6a56244260eeb45d9, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:63:75:5f:72:e0:f2:34:db:0c:d6:d6:e8: 3f:ed:4b:f3:12:fa:b3:ba:89:90:7c:c1:87:d5:46: 54:53:f8:42:a2:cc:98:90:14:b9:5c:25:b1:39:80: c3:af:dc:f2:ea:f2:02:92:f4:ad:9a:4c:87:82:d7: f5:e9:35:90:19:b9:c9:e1:52:9c:5c:ea:83:14:c0: 7e:f6:87:45:dd:16:ba:b4:31:51:8b:ff:3a:03:a4: b7:75:63:3c:c6:00:0c:f0:b6:12:60:ef:1f:d2:7f: 22:19:ec:26:b7:a1:9d:a3:b7:1d:b9:06:b7:1c:53: d8:8d:27:8b:13:81:cd:59:b5:46:c1:d9:90:97:9b: 4c:d0:ed:95:c4:f7:60:9d:c1:cb:c0:8e:66:1c:b3: a7:54:86:3c:e7:11:e7:80:d7:8f:2d:22:bb:b2:9f: 44:64:cf:c0:1b:54:50:18:34:a9:00:82:ad:ae:ce: c3:3e:80:52:50:86:f2:28:51:51:d0:53:22:8f:77: c8:2a:76:9a:b8:f2:b4:4a:4d:9a:73:48:8f:3e:77: 35:81:df:85:2b:59:4e:5a:d8:53:d7:fb:3f:b4:17: ce:f4:0c:18:88:66:31:7e:3f:26:f4:42:7a:fc:47: 92:d5:93:8a:1a:7e:46:94:76:90:8d:80:b4:51:05: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EA:8D:66:B0:77:F4:F5:2F:86:50:AA:64:C7:1C:10:08:40:A4:A2 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/5ed51049-d347-4dd0-bf4f-e1cb4adc80ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/17 Signature Algorithm: sha256WithRSAEncryption 59:1a:1c:e6:4e:ca:1c:e0:85:25:4b:13:a3:a6:fa:c4:79:8e: 90:3b:fa:a4:ac:b7:db:89:c8:d4:a0:e4:0d:d6:b4:6a:67:b1: 74:04:6a:d1:03:10:e5:42:cf:c9:6f:70:38:25:eb:81:c4:57: 3c:29:58:ee:14:e2:47:a6:b3:48:fd:0e:9a:20:1a:69:a8:78: 41:3f:39:31:51:f7:7f:ae:62:99:34:fd:c3:d5:b1:9d:89:a5: 75:26:9e:74:04:7b:c0:2b:a5:fb:18:f1:e2:61:9f:8a:ee:23: d1:dc:68:de:8f:7d:86:1f:fb:a5:35:d2:c4:39:de:9f:cb:c4: 35:30:25:51:79:6e:2c:d7:3b:d1:ab:77:82:b8:0c:7e:a1:cf: 56:e6:b9:fd:8c:76:f0:ef:bb:d9:d7:6b:1e:58:39:7b:53:8e: 2a:f7:97:e9:b4:87:8f:87:cb:39:59:ad:21:e7:39:02:f3:1e: 4f:94:3a:e1:5c:ca:99:da:8f:5b:c6:98:4c:c2:e6:9f:1a:6c: 82:6d:20:10:7f:6a:b7:ad:23:77:a7:14:cd:30:16:b6:07:40: 5c:a4:00:e0:5c:20:48:df:7d:9c:f2:0f:48:6c:8c:04:d2:13: c2:43:e5:89:a9:c3:d0:57:1f:47:ae:28:b9:d7:44:d3:4d:35: ef:33:c4:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUChutlKz+A3hGoufnO4gUYIJhGGowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwOTI2MDA1MDA2WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2Y0NTFkNmZhMGY4MmUwMDdlZDliMWVkMjJkZDRmMjU1 MmE5MmU2YzJiMDYyZjZhNTYyNDQyNjBlZWI0NWQ5MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiOGN1X3Lg8jTbDNbW6D/tS/MS+rO6iZB8wYfVRlRT+EKi zJiQFLlcJbE5gMOv3PLq8gKS9K2aTIeC1/XpNZAZucnhUpxc6oMUwH72h0XdFrq0 MVGL/zoDpLd1YzzGAAzwthJg7x/SfyIZ7Ca3oZ2jtx25BrccU9iNJ4sTgc1ZtUbB 2ZCXm0zQ7ZXE92CdwcvAjmYcs6dUhjznEeeA148tIruyn0Rkz8AbVFAYNKkAgq2u zsM+gFJQhvIoUVHQUyKPd8gqdpq48rRKTZpzSI8+dzWB34UrWU5a2FPX+z+0F870 DBiIZjF+Pyb0Qnr8R5LVk4oafkaUdpCNgLRRBdHRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwuqNZrB39PUvhlCqZMccEAhApKIwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzVlZDUxMDQ5LWQzNDctNGRkMC1iZjRmLWUxY2I0YWRjODBjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdgfwAwDQYJKoZIhvcNAQELBQADggEBAFkaHOZOyhzghSVLE6Om+sR5jpA7 +qSst9uJyNSg5A3WtGpnsXQEatEDEOVCz8lvcDgl64HEVzwpWO4U4kems0j9Dpog GmmoeEE/OTFR93+uYpk0/cPVsZ2JpXUmnnQEe8ArpfsY8eJhn4ruI9HcaN6PfYYf +6U10sQ53p/LxDUwJVF5bizXO9Grd4K4DH6hz1bmuf2MdvDvu9nXax5YOXtTjir3 l+m0h4+HyzlZrSHnOQLzHk+UOuFcypnaj1vGmEzC5p8abIJtIBB/aretI3enFM0w FrYHQFykAOBcIEjffZzyD0hsjATSE8JD5Ympw9BXH0euKLnXRNNNNe8zxJQ= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:46 2025 by rpki-client