$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa File: 9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa (raw, json) Hash identifier: G+t1OmJLFcAr0c6F82ddgp3e93ns1vlFy9BiKTNyqqo= Subject key identifier: 15:D2:63:C5:14:2C:8E:C3:A5:E6:EE:FA:56:35:8C:28:6F:0B:CE:E7 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 60C645C1400AEEDDE001778D49A9E8CC0FAB568B Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa Signing time: Mon 16 Jun 2025 15:50:36 +0000 ROA not before: Mon 16 Jun 2025 15:50:36 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c6:45:c1:40:0a:ee:dd:e0:01:77:8d:49:a9:e8:cc:0f:ab:56:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jun 16 15:50:36 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=80ec1f2dd7c56c6654839012fb452c413464fd3ecaa1a636635cd4f6a6f9fec1, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:46:e2:9c:c5:e3:f5:e8:17:dc:9d:26:6e: 3f:9f:18:f3:87:0d:40:f4:21:be:ec:86:3c:e4:89: 50:c4:3b:f3:d3:cc:19:f8:18:fc:0a:2d:07:d4:a7: 16:a6:dd:99:f4:d0:42:ad:ed:f1:42:c5:46:9f:21: 29:85:a5:b4:2b:96:18:47:cd:ca:00:21:e5:34:52: 86:cf:fd:20:f0:3d:28:56:35:50:c4:1d:29:ae:03: 89:76:a9:d6:48:8d:60:d1:1b:9a:ea:28:03:c9:66: 3e:a8:4c:2b:36:a7:da:59:ca:c5:68:80:a0:cd:66: e4:5f:84:5a:59:88:52:01:23:29:12:1f:56:8a:13: 67:ef:57:dc:61:bb:87:4a:48:57:03:b5:60:51:ad: fc:5d:be:62:6d:50:3d:f5:8b:eb:29:61:77:cb:b0: 6c:ad:78:cd:de:29:e2:cf:50:ee:8d:9f:10:da:15: 37:16:a0:8c:28:7a:3c:85:c4:8a:ab:23:99:a7:37: 19:6e:3e:43:d8:16:3b:ba:46:dd:30:26:5b:54:ba: 0c:b5:5a:e0:0d:bd:85:24:bf:73:d2:e6:05:0e:df: f2:d1:b8:16:44:3b:81:fd:d1:9d:50:2d:f3:31:9a: f5:b6:9e:0e:de:7c:64:be:19:e4:22:b3:9d:27:d5: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D2:63:C5:14:2C:8E:C3:A5:E6:EE:FA:56:35:8C:28:6F:0B:CE:E7 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.2.0/23 Signature Algorithm: sha256WithRSAEncryption 41:c6:ea:25:7b:b4:21:8f:82:1a:b0:81:a3:98:76:57:bb:37: 14:d4:75:cd:55:97:e2:5f:f5:8c:15:7e:a4:54:61:ef:1e:e5: f1:49:b7:8c:52:80:77:13:67:6b:0c:51:59:57:65:da:79:3f: 31:8a:2f:86:41:17:44:96:9e:17:76:ef:8c:48:16:47:44:9a: 45:35:0a:98:47:2a:72:ad:aa:4c:97:3d:cf:92:1b:bb:11:eb: 21:52:2a:80:0c:71:00:e8:6b:f3:78:41:25:e9:d2:4f:9b:09: 0f:51:98:94:7d:1d:9e:a8:e6:91:c8:a0:ea:9d:8a:70:22:e6: bd:11:b4:ba:84:88:11:98:dd:37:4f:f1:43:d9:5b:b6:42:43: be:10:50:55:9a:2d:5d:38:df:1a:6a:93:73:87:3e:be:c1:da: 2a:b9:93:93:93:40:ed:6f:e3:43:33:3e:e8:70:bb:ca:fb:18: 93:33:ef:70:5a:94:a6:74:a2:c8:7f:be:15:40:02:08:fa:ea: a4:93:a6:e2:13:06:c5:25:9c:5d:d0:05:86:fb:b6:0f:12:53: a0:b5:ae:aa:2e:81:20:f3:bc:7f:5c:ee:9a:cb:56:11:ae:90: c6:a0:2f:c8:c9:be:2c:06:52:ab:78:32:1b:13:15:93:a6:fc: f0:fb:11:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYMZFwUAK7t3gAXeNSanozA+rVoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNjE2MTU1MDM2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGVjMWYyZGQ3YzU2YzY2NTQ4MzkwMTJmYjQ1MmM0MTM0 NjRmZDNlY2FhMWE2MzY2MzVjZDRmNmE2ZjlmZWMxMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0G0binMXj9egX3J0mbj+fGPOHDUD0Ib7shjzkiVDEO/PT zBn4GPwKLQfUpxam3Zn00EKt7fFCxUafISmFpbQrlhhHzcoAIeU0UobP/SDwPShW NVDEHSmuA4l2qdZIjWDRG5rqKAPJZj6oTCs2p9pZysVogKDNZuRfhFpZiFIBIykS H1aKE2fvV9xhu4dKSFcDtWBRrfxdvmJtUD31i+spYXfLsGyteM3eKeLPUO6NnxDa FTcWoIwoejyFxIqrI5mnNxluPkPYFju6Rt0wJltUugy1WuANvYUkv3PS5gUO3/LR uBZEO4H90Z1QLfMxmvW2ng7efGS+GeQis50n1bOrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFdJjxRQsjsOl5u76VjWMKG8LzucwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzllMWU0N2UwLTNiMmYtNDFhYy04MGFkLTliMDhkNDM1M2ZkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwIwDQYJKoZIhvcNAQELBQADggEBAEHG6iV7tCGPghqwgaOYdle7NxTU dc1Vl+Jf9YwVfqRUYe8e5fFJt4xSgHcTZ2sMUVlXZdp5PzGKL4ZBF0SWnhd274xI FkdEmkU1CphHKnKtqkyXPc+SG7sR6yFSKoAMcQDoa/N4QSXp0k+bCQ9RmJR9HZ6o 5pHIoOqdinAi5r0RtLqEiBGY3TdP8UPZW7ZCQ74QUFWaLV043xpqk3OHPr7B2iq5 k5OTQO1v40MzPuhwu8r7GJMz73BalKZ0osh/vhVAAgj66qSTpuITBsUlnF3QBYb7 tg8SU6C1rqougSDzvH9c7prLVhGukMagL8jJviwGUqt4MhsTFZOm/PD7ESU= -----END CERTIFICATE-----Generated at Sun Jun 29 16:36:51 2025 by rpki-client