$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa File: eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa (raw, json) Hash identifier: V0Uuhuk/H6oaTHkiNxT0x/uN4Tjx0IeQ2bY+yw/VOxQ= Subject key identifier: 51:C8:44:B7:1D:BD:AF:36:03:CA:CF:A7:42:61:78:0D:FB:C9:19:71 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 3ED19BDE2D0ED29BCACB87697327BEF2EC34D20C Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa Signing time: Mon 16 Jun 2025 15:50:23 +0000 ROA not before: Mon 16 Jun 2025 15:50:23 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d1:9b:de:2d:0e:d2:9b:ca:cb:87:69:73:27:be:f2:ec:34:d2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Jun 16 15:50:23 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=42450d464c0297688427ea68f28d78db53b4888250410e4b608030c1c6d170df, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:2b:53:92:93:18:33:1d:6e:28:9b:8e:d4: 85:ee:a4:7b:44:15:6a:cd:7d:8e:d1:39:48:7e:2f: 9b:1f:ae:f2:35:d0:c1:65:f0:cf:26:5a:43:f2:b1: 3e:0d:27:95:38:e0:73:46:4f:0b:25:da:27:fc:31: 81:57:b4:17:ba:e8:7a:d7:f7:b2:3c:c5:33:7e:80: 40:0b:8a:ab:fe:94:2f:f1:ae:e0:11:1b:30:2d:7e: 7b:e5:49:49:34:44:9e:f3:84:bf:f7:4b:d2:ce:9b: 41:c0:a5:8e:cb:8e:ed:9e:cd:09:8a:98:e0:6c:15: 15:b6:09:96:23:c4:e3:94:2b:97:92:04:9b:15:c1: 42:93:84:16:ee:f6:bb:1f:ba:8f:43:47:0c:d5:d2: 22:32:a4:65:a6:5a:46:e6:01:de:4b:bd:a4:95:c7: 13:14:3b:19:e1:48:a1:a8:c7:c6:8e:94:cb:aa:11: be:1a:23:f8:b0:c6:fe:76:50:26:61:c0:cf:0d:b5: 8e:f2:5e:6d:14:9d:f3:a5:1c:77:0e:de:8a:af:36: 33:b7:0f:c1:fd:cd:22:60:96:b9:55:20:8b:0d:64: 15:e5:ff:10:62:1b:3f:37:f8:4a:2d:4c:c2:c0:fd: c7:0f:f4:8b:18:52:a7:98:cc:9d:36:c5:36:d6:10: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C8:44:B7:1D:BD:AF:36:03:CA:CF:A7:42:61:78:0D:FB:C9:19:71 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:d1:b6:80:d0:a2:a4:56:a8:81:f5:83:fc:17:a6:c7:5f:ca: 3b:9e:e3:9b:26:ec:bc:d3:47:fd:f1:8f:84:04:08:51:e0:98: a5:b9:93:94:eb:9a:38:1c:92:4f:2a:b5:05:69:19:77:3f:7f: 9b:50:3d:5e:6a:fa:64:6e:2a:c5:4b:4b:1f:80:07:bd:23:97: af:e9:e1:76:a6:ce:91:80:49:a1:e9:0f:0e:4b:02:10:7c:d8: 01:00:64:b5:c5:b1:0c:ff:27:64:6f:55:17:95:54:b4:d6:73: 01:bf:b6:f2:7b:8c:fa:4b:7c:49:b7:cd:10:13:31:8e:4e:9b: d0:b4:fe:b8:bc:74:a6:6e:91:8c:64:43:d8:d4:59:80:b3:4b: f6:6c:59:d9:3a:40:50:84:4d:f0:b2:96:db:80:72:25:53:e3: bf:fd:91:37:25:67:c7:84:c9:23:7e:c3:41:70:0e:b4:fb:25: 63:25:2e:fb:56:9e:c1:02:80:7b:7d:14:51:81:b0:33:14:0c: c5:ee:cf:60:bf:da:10:c9:9a:7a:48:6f:51:10:42:d5:10:dd: d3:30:2b:92:aa:38:26:01:11:7f:6a:22:d8:e5:35:3c:e7:8e: 29:a3:ff:23:55:7f:72:fd:b8:30:87:2f:fc:fb:2c:36:b1:ed: a8:26:83:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPtGb3i0O0pvKy4dpcye+8uw00gwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNjE2MTU1MDIzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjQ1MGQ0NjRjMDI5NzY4ODQyN2VhNjhmMjhkNzhkYjUz YjQ4ODgyNTA0MTBlNGI2MDgwMzBjMWM2ZDE3MGRmMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZyCtTkpMYMx1uKJuO1IXupHtEFWrNfY7ROUh+L5sfrvI1 0MFl8M8mWkPysT4NJ5U44HNGTwsl2if8MYFXtBe66HrX97I8xTN+gEALiqv+lC/x ruARGzAtfnvlSUk0RJ7zhL/3S9LOm0HApY7Lju2ezQmKmOBsFRW2CZYjxOOUK5eS BJsVwUKThBbu9rsfuo9DRwzV0iIypGWmWkbmAd5LvaSVxxMUOxnhSKGox8aOlMuq Eb4aI/iwxv52UCZhwM8NtY7yXm0UnfOlHHcO3oqvNjO3D8H9zSJglrlVIIsNZBXl /xBiGz83+EotTMLA/ccP9IsYUqeYzJ02xTbWEO5TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUchEtx29rzYDys+nQmF4DfvJGXEwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2VhYzUxOGVkLTBlMTEtNGZlNS05YTllLTUzYTA1ZGU2MGY3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANgfwAwDQYJKoZIhvcNAQELBQADggEBAFzRtoDQoqRWqIH1g/wXpsdfyjue 45sm7LzTR/3xj4QECFHgmKW5k5Trmjgckk8qtQVpGXc/f5tQPV5q+mRuKsVLSx+A B70jl6/p4XamzpGASaHpDw5LAhB82AEAZLXFsQz/J2RvVReVVLTWcwG/tvJ7jPpL fEm3zRATMY5Om9C0/ri8dKZukYxkQ9jUWYCzS/ZsWdk6QFCETfCyltuAciVT47/9 kTclZ8eEySN+w0FwDrT7JWMlLvtWnsECgHt9FFGBsDMUDMXuz2C/2hDJmnpIb1EQ QtUQ3dMwK5KqOCYBEX9qItjlNTznjimj/yNVf3L9uDCHL/z7LDax7agmg/I= -----END CERTIFICATE-----Generated at Sun Jun 29 16:11:43 2025 by rpki-client