$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa File: 9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa (raw, json) Hash identifier: ht0yjJKZeE3IgIgYm3eLz4zBXqCNSRyWXBgV4G3Zm0s= Subject key identifier: 32:D9:E4:BD:06:C3:60:77:43:E9:56:99:BA:85:9E:73:61:BB:5F:38 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 3AD005D95D592422694F3103D8BC1B300358CF04 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa Signing time: Fri 26 Sep 2025 00:41:18 +0000 ROA not before: Fri 26 Sep 2025 00:41:18 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d0:05:d9:5d:59:24:22:69:4f:31:03:d8:bc:1b:30:03:58:cf:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Sep 26 00:41:18 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=8ad390f6f8193770f21e860f9467da8014f54155dec1bc2887f878cdba1b30db, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:45:a9:7a:00:7f:c3:18:f6:14:af:d7:32:8e: f8:d3:58:4f:1c:f2:94:7d:c7:b0:1a:45:c0:67:a8: f9:75:b7:1f:1c:88:db:97:0d:5f:5b:11:5d:ff:7c: 05:b5:0a:9f:81:43:64:87:25:06:a7:61:d3:05:12: aa:82:d4:40:78:da:1d:a2:86:65:5a:50:4f:60:5d: 27:39:b4:93:2c:d4:8d:48:53:b4:94:ed:08:45:fc: 49:83:da:00:95:e7:66:3a:e4:44:29:ec:74:eb:71: 7c:cf:8b:4f:9b:03:20:1d:82:82:e0:37:10:ed:4b: a7:79:54:45:e0:82:40:41:e3:b8:ef:f0:c9:75:1d: b4:ee:b2:e9:f3:b1:1f:a2:a1:d3:3f:d6:3b:4b:96: 55:3f:d2:ab:49:69:fb:26:c8:7c:79:1f:4d:13:2b: d2:f2:28:27:97:c2:05:62:58:c3:a4:e7:0b:ce:f7: b5:b2:da:d3:c4:2c:c0:b0:a4:11:7e:5d:5e:80:54: 53:b0:fe:ed:a7:00:10:79:85:3e:1f:44:ba:aa:6b: f1:e1:96:97:41:73:f3:b6:f6:d8:78:cc:10:e0:46: fe:87:de:11:f0:f4:71:08:37:fe:e6:03:93:da:30: 64:8e:46:42:ef:b9:81:62:94:b6:c1:67:20:c4:44: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D9:E4:BD:06:C3:60:77:43:E9:56:99:BA:85:9E:73:61:BB:5F:38 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.2.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:0d:22:6c:e0:3f:4f:38:b9:8e:6e:44:98:22:ec:d9:f5:47: c6:29:58:db:61:d7:56:a6:66:ce:2a:35:0d:66:40:df:b2:da: 28:ea:f2:58:fa:72:07:60:74:0b:7b:6e:fc:d8:80:f2:34:a8: 36:1e:8f:77:62:f2:92:e0:8c:6a:b4:f8:50:f2:86:1d:10:0a: fb:3d:35:05:fc:9d:1e:ae:2b:2e:bf:55:58:c2:e6:35:0b:e9: da:5f:31:05:30:12:6b:33:b2:e0:77:ec:32:8a:ef:53:33:6a: 35:b9:24:6a:a1:5f:ba:24:f7:b0:32:4d:73:b7:f9:7a:23:b0: 61:f0:97:3b:fd:93:5b:5d:34:47:2f:94:f0:5e:63:66:6e:6c: 38:be:28:c4:1f:cb:b0:5b:57:e3:af:f9:71:24:14:10:19:ae: 3b:9a:68:53:78:f3:8a:47:43:85:2a:a9:ee:53:42:c8:f3:ed: 85:8b:6d:f0:6c:e5:88:ec:67:5d:27:af:cc:d5:b3:6e:18:90: a0:69:8c:f0:ad:26:38:c5:9e:91:44:41:0f:36:fc:70:68:6e: 9d:36:a5:f4:17:11:8a:c9:5a:79:7b:44:2c:c5:5d:d5:82:0d: 72:b8:87:52:32:3d:81:05:c7:22:9b:12:94:72:55:54:5a:c4: ad:07:2d:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOtAF2V1ZJCJpTzED2LwbMANYzwQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwOTI2MDA0MTE4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWQzOTBmNmY4MTkzNzcwZjIxZTg2MGY5NDY3ZGE4MDE0 ZjU0MTU1ZGVjMWJjMjg4N2Y4NzhjZGJhMWIzMGRiMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYRal6AH/DGPYUr9cyjvjTWE8c8pR9x7AaRcBnqPl1tx8c iNuXDV9bEV3/fAW1Cp+BQ2SHJQanYdMFEqqC1EB42h2ihmVaUE9gXSc5tJMs1I1I U7SU7QhF/EmD2gCV52Y65EQp7HTrcXzPi0+bAyAdgoLgNxDtS6d5VEXggkBB47jv 8Ml1HbTusunzsR+iodM/1jtLllU/0qtJafsmyHx5H00TK9LyKCeXwgViWMOk5wvO 97Wy2tPELMCwpBF+XV6AVFOw/u2nABB5hT4fRLqqa/HhlpdBc/O29th4zBDgRv6H 3hHw9HEIN/7mA5PaMGSORkLvuYFilLbBZyDERKaZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMtnkvQbDYHdD6VaZuoWec2G7XzgwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzllMWU0N2UwLTNiMmYtNDFhYy04MGFkLTliMDhkNDM1M2ZkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwIwDQYJKoZIhvcNAQELBQADggEBAHsNImzgP084uY5uRJgi7Nn1R8Yp WNth11amZs4qNQ1mQN+y2ijq8lj6cgdgdAt7bvzYgPI0qDYej3di8pLgjGq0+FDy hh0QCvs9NQX8nR6uKy6/VVjC5jUL6dpfMQUwEmszsuB37DKK71MzajW5JGqhX7ok 97AyTXO3+XojsGHwlzv9k1tdNEcvlPBeY2ZubDi+KMQfy7BbV+Ov+XEkFBAZrjua aFN484pHQ4Uqqe5TQsjz7YWLbfBs5YjsZ10nr8zVs24YkKBpjPCtJjjFnpFEQQ82 /HBobp02pfQXEYrJWnl7RCzFXdWCDXK4h1IyPYEFxyKbEpRyVVRaxK0HLQE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:35 2025 by rpki-client