$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa File: 01f936e1-60a2-4d7f-a949-786fa3430156.roa (raw, json) Hash identifier: JzkND4wieY/oBHMPFh6RzH01R8Pzbdow+o0Aw4LTJsM= Subject key identifier: AF:3D:FD:D1:A4:68:2C:80:B3:56:07:BE:CD:4C:9B:82:1A:E4:91:F4 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 64785890A4756809D396B783FF3CCCAF1AF311F8 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa Signing time: Fri 25 Apr 2025 15:10:22 +0000 ROA not before: Fri 25 Apr 2025 15:10:22 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:78:58:90:a4:75:68:09:d3:96:b7:83:ff:3c:cc:af:1a:f3:11:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Apr 25 15:10:22 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=c1dbf8456858fe9fa1e3b12dd5a15148ca8ac2751c9557aa74525f63373fb010, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:6b:a5:7d:33:22:e4:9e:cb:f1:0a:7b:a0: af:4e:bd:fe:46:c7:90:4b:1c:be:77:00:9f:85:a9: bc:eb:52:fb:6a:2f:31:6e:c2:96:4c:c0:4c:15:4d: 21:15:1e:d7:c0:32:95:68:15:ac:32:53:35:47:97: 9e:ab:d8:dc:44:e6:94:9b:7a:2f:df:b8:78:0a:e7: 66:9d:7b:02:fa:77:a7:9a:70:14:cb:66:92:7d:bd: de:4c:47:7c:4b:95:1f:27:f4:89:ce:80:af:d3:88: 53:1e:9d:44:79:bf:7e:30:31:a2:60:39:d8:be:b6: 91:f4:ce:8f:a0:17:e3:0a:8b:64:73:9e:2a:31:70: 8f:5f:b1:fc:01:9f:d0:1d:8a:41:a1:af:fe:5b:f3: 32:c7:6d:19:9f:3a:ae:19:27:6c:a6:a9:7c:19:ff: 49:86:13:b6:c1:bc:1a:b6:06:1f:0c:62:27:0b:79: 58:ae:ed:27:c8:84:fd:d0:1c:40:1e:da:3a:6a:ac: 35:c9:05:92:8f:41:2a:fe:d6:46:c9:11:b4:4e:3f: 3c:ab:a4:78:e7:c7:5a:ba:61:ed:b7:3c:8e:a2:4a: 80:2f:83:19:35:b1:d1:8a:68:9b:2f:18:de:8b:d0: 96:ae:37:59:f9:0c:fe:d2:63:73:2f:a2:b0:0c:1e: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3D:FD:D1:A4:68:2C:80:B3:56:07:BE:CD:4C:9B:82:1A:E4:91:F4 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.10.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:a2:a6:16:7d:3a:35:bf:bc:7c:56:4c:5e:b6:82:45:be:20: d3:b9:ca:e6:e9:2d:46:4c:0f:35:8e:50:80:c9:cc:bc:87:3f: 10:97:0d:0d:50:62:88:41:2a:03:e7:a6:cb:c6:c8:f9:6e:40: e9:03:cd:b1:41:09:79:53:8d:41:7c:4d:1a:19:dc:bc:60:74: 90:10:95:b8:9f:c8:13:ec:3f:2f:e0:e4:2b:4d:fa:26:52:93: f3:c6:69:fc:0c:3c:d8:04:70:04:ae:8a:42:6d:38:55:04:0d: 81:19:00:b3:54:f3:11:b5:2e:6d:81:5f:40:94:1a:e7:84:b8: 1f:64:09:bc:af:b4:57:4e:23:62:5d:18:69:b3:75:07:96:09: 2b:2a:a8:62:e8:ea:8c:9d:e9:fa:d4:4e:19:01:e1:c1:6d:cd: 0f:ef:50:1c:25:46:f7:dd:99:05:36:3e:ee:58:62:64:79:59: 98:55:a6:d1:4f:9e:a9:29:bc:f2:cd:69:b4:2f:8a:eb:c4:d1: 65:76:0a:59:18:31:8d:a4:2b:1a:75:f9:a5:af:72:db:36:ab: 4f:15:15:05:25:e6:e0:a3:c7:22:9b:97:1f:99:b6:a1:07:e3: 22:fe:f7:91:17:c0:c3:6a:db:d7:d6:2d:39:44:0d:c7:c8:e4: 3f:d7:1c:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZHhYkKR1aAnTlreD/zzMrxrzEfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNDI1MTUxMDIyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWRiZjg0NTY4NThmZTlmYTFlM2IxMmRkNWExNTE0OGNh OGFjMjc1MWM5NTU3YWE3NDUyNWY2MzM3M2ZiMDEwMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCJ2ulfTMi5J7L8Qp7oK9Ovf5Gx5BLHL53AJ+FqbzrUvtq LzFuwpZMwEwVTSEVHtfAMpVoFawyUzVHl56r2NxE5pSbei/fuHgK52adewL6d6ea cBTLZpJ9vd5MR3xLlR8n9InOgK/TiFMenUR5v34wMaJgOdi+tpH0zo+gF+MKi2Rz nioxcI9fsfwBn9AdikGhr/5b8zLHbRmfOq4ZJ2ymqXwZ/0mGE7bBvBq2Bh8MYicL eViu7SfIhP3QHEAe2jpqrDXJBZKPQSr+1kbJEbROPzyrpHjnx1q6Ye23PI6iSoAv gxk1sdGKaJsvGN6L0JauN1n5DP7SY3MvorAMHoqTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrz390aRoLICzVge+zUybghrkkfQwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzAxZjkzNmUxLTYwYTItNGQ3Zi1hOTQ5LTc4NmZhMzQzMDE1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwowDQYJKoZIhvcNAQELBQADggEBAGqiphZ9OjW/vHxWTF62gkW+INO5 yubpLUZMDzWOUIDJzLyHPxCXDQ1QYohBKgPnpsvGyPluQOkDzbFBCXlTjUF8TRoZ 3LxgdJAQlbifyBPsPy/g5CtN+iZSk/PGafwMPNgEcASuikJtOFUEDYEZALNU8xG1 Lm2BX0CUGueEuB9kCbyvtFdOI2JdGGmzdQeWCSsqqGLo6oyd6frUThkB4cFtzQ/v UBwlRvfdmQU2Pu5YYmR5WZhVptFPnqkpvPLNabQviuvE0WV2ClkYMY2kKxp1+aWv cts2q08VFQUl5uCjxyKblx+ZtqEH4yL+95EXwMNq29fWLTlEDcfI5D/XHIw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:15:24 2025 by rpki-client