$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/85ecd0ef-6924-4522-bd48-1e263001901c.roa File: 85ecd0ef-6924-4522-bd48-1e263001901c.roa (raw, json) Hash identifier: giKSLpwxYrbSYpiaFAPiX6ArNyr1fM6GH8lcQs3F22w= Subject key identifier: 4F:A4:E4:B6:79:15:1F:DC:94:97:A1:9F:C4:6E:29:20:7C:AA:D0:FD Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 0570954C80740B725418D3BCDD91B59148A10F67 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/85ecd0ef-6924-4522-bd48-1e263001901c.roa Signing time: Fri 26 Sep 2025 00:41:15 +0000 ROA not before: Fri 26 Sep 2025 00:41:15 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:70:95:4c:80:74:0b:72:54:18:d3:bc:dd:91:b5:91:48:a1:0f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Sep 26 00:41:15 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=77d673544643615fa1c524bcf387731c49a6571344c1998ccd2251a3d927197b, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:c1:a4:a4:6b:23:79:b9:4d:fa:d1:cc:67: 3f:5f:e9:73:32:5d:fc:a6:bb:fd:cc:a3:21:eb:af: 41:01:e6:5f:bb:74:71:97:b2:d5:b0:23:8d:cc:eb: 62:e5:7c:a7:07:bd:47:79:6d:1b:de:49:cd:9d:ea: 8e:27:2e:2b:d4:4e:57:19:9b:be:1e:94:aa:4d:ff: 03:03:31:74:c0:85:e3:e9:4a:75:fd:5b:5a:9e:e8: 7f:51:35:48:1e:60:20:3d:86:3b:d6:0e:2f:d5:fe: f9:9f:72:dc:6b:aa:7c:a6:e1:c3:e9:5a:d3:3e:42: 92:28:1c:4e:aa:48:95:a9:03:49:31:aa:f9:e6:98: 8e:4e:e8:ee:78:4d:a3:ad:18:ab:f0:78:79:6d:45: ec:74:78:66:4b:cd:f2:29:cf:18:e7:03:ae:c9:6e: b7:ae:e5:07:ce:4c:d3:e5:25:bf:2f:f7:c7:83:c9: 0c:47:8a:43:c8:35:31:74:ea:cb:8f:56:1b:ed:1a: 1a:81:1c:38:59:10:49:c6:98:1a:99:8a:7c:f7:8d: c4:c6:b0:bf:e7:f6:33:e3:f0:19:55:27:c4:57:6b: f8:36:9f:1e:35:c0:d8:ef:f1:cb:e6:0a:72:59:59: ae:79:38:c6:05:8f:e9:93:ff:94:91:04:30:59:28: f5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:E4:B6:79:15:1F:DC:94:97:A1:9F:C4:6E:29:20:7C:AA:D0:FD X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/85ecd0ef-6924-4522-bd48-1e263001901c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.1.0/24 Signature Algorithm: sha256WithRSAEncryption 55:46:27:32:02:7b:56:8c:55:3f:3a:a4:29:81:5e:b6:e1:33: 7b:d8:6a:1b:f0:31:53:5a:49:92:8e:84:24:3f:89:a6:02:5a: 9b:a9:d0:19:ea:e0:0f:f8:53:ce:60:b2:3a:e4:21:8f:e3:e9: 89:55:a5:98:c0:a1:fd:b4:c3:dc:cf:ad:b5:5e:69:b1:6b:77: 8a:1b:ce:c9:86:c2:87:35:09:46:6d:0b:b1:4b:91:59:8d:70: dc:bb:75:56:df:76:11:5a:d8:14:d3:6d:ad:c2:8d:90:e2:b0: 3d:94:be:a8:eb:13:36:2c:f4:be:df:79:04:be:6b:6c:f6:2e: de:dd:d7:7c:20:11:00:a9:7d:1d:f3:0c:ec:24:cd:53:dd:35: e5:c4:33:0e:5a:7f:8d:2d:03:af:59:fc:cd:51:9e:66:94:02: 57:8e:a1:36:b1:43:f6:e9:49:77:ee:96:6f:f9:ba:8a:5a:e3: 34:fa:c1:37:0d:d1:81:ae:a8:5f:cc:a0:f6:5e:48:7b:01:be: fb:a1:6a:b9:37:4b:07:98:92:03:66:0b:17:50:d3:1b:ce:ef: 05:1b:57:04:ce:66:18:40:34:c0:70:55:28:a0:6d:c5:e4:26: ea:fd:f4:1f:37:26:6f:19:92:ad:b0:a1:e7:23:56:29:98:19: c9:84:88:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBXCVTIB0C3JUGNO83ZG1kUihD2cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwOTI2MDA0MTE1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2Q2NzM1NDQ2NDM2MTVmYTFjNTI0YmNmMzg3NzMxYzQ5 YTY1NzEzNDRjMTk5OGNjZDIyNTFhM2Q5MjcxOTdiMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0zcGkpGsjeblN+tHMZz9f6XMyXfymu/3MoyHrr0EB5l+7 dHGXstWwI43M62LlfKcHvUd5bRveSc2d6o4nLivUTlcZm74elKpN/wMDMXTAhePp SnX9W1qe6H9RNUgeYCA9hjvWDi/V/vmfctxrqnym4cPpWtM+QpIoHE6qSJWpA0kx qvnmmI5O6O54TaOtGKvweHltRex0eGZLzfIpzxjnA67Jbreu5QfOTNPlJb8v98eD yQxHikPINTF06suPVhvtGhqBHDhZEEnGmBqZinz3jcTGsL/n9jPj8BlVJ8RXa/g2 nx41wNjv8cvmCnJZWa55OMYFj+mT/5SRBDBZKPWJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT6TktnkVH9yUl6GfxG4pIHyq0P0wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1Lzg1ZWNkMGVmLTY5MjQtNDUyMi1iZDQ4LTFlMjYzMDAxOTAxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwEwDQYJKoZIhvcNAQELBQADggEBAFVGJzICe1aMVT86pCmBXrbhM3vY ahvwMVNaSZKOhCQ/iaYCWpup0Bnq4A/4U85gsjrkIY/j6YlVpZjAof20w9zPrbVe abFrd4obzsmGwoc1CUZtC7FLkVmNcNy7dVbfdhFa2BTTba3CjZDisD2UvqjrEzYs 9L7feQS+a2z2Lt7d13wgEQCpfR3zDOwkzVPdNeXEMw5af40tA69Z/M1RnmaUAleO oTaxQ/bpSXfulm/5uopa4zT6wTcN0YGuqF/MoPZeSHsBvvuhark3SweYkgNmCxdQ 0xvO7wUbVwTOZhhANMBwVSigbcXkJur99B83Jm8Zkq2woecjVimYGcmEiIM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:12 2025 by rpki-client