$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa File: 20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa (raw, json) Hash identifier: qdML8lIjef42Dr6/ESXp3Ig9znwYGejHmYqAPIYp74E= Subject key identifier: 4C:1E:11:96:ED:66:A0:95:AB:1A:6C:0C:5A:49:08:4A:9E:AD:AE:0E Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 05BF7CBD78512DA2026D693B733227F0A8E1FE7A Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa Signing time: Tue 05 Aug 2025 15:01:03 +0000 ROA not before: Tue 05 Aug 2025 15:01:03 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:bf:7c:bd:78:51:2d:a2:02:6d:69:3b:73:32:27:f0:a8:e1:fe:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Aug 5 15:01:03 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=a475eb6a81f48437112564f2af024bc15e59f6a8eaffecae7ddf4bd4bb8b0d7b, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:89:51:17:90:27:9e:05:2b:95:cd:5d:4b: 4d:63:cc:58:e6:33:79:98:f2:73:fa:30:1b:b8:9f: e4:e5:89:8b:c2:91:79:c7:26:88:85:cf:aa:94:89: 42:a9:4b:3f:75:7d:d0:03:3d:7e:4e:cb:a6:2b:6d: b9:b9:a0:d0:34:4b:bf:14:a5:56:fb:1a:ba:be:88: 12:16:db:1e:b0:e0:8a:29:93:fc:33:22:e4:47:41: 9e:3d:24:5f:de:fd:36:93:8e:f5:66:04:d8:ce:45: c6:45:72:6e:d3:46:6d:ef:c8:30:d0:1b:16:b9:49: e9:21:6d:8b:cf:4b:f7:23:96:41:ee:c3:6c:45:4b: 93:4d:d2:0f:a9:31:ed:76:dc:f7:1b:8f:39:f6:61: 8a:cb:a6:9b:58:dd:14:6e:7e:f0:03:4d:69:c3:6b: de:f2:76:65:c0:04:7f:ad:a4:c9:97:f9:12:b0:fc: d0:1b:ec:0d:89:5f:6d:88:bb:ba:d0:ab:20:d5:1a: 27:b7:7b:69:36:f1:30:ac:22:6f:e2:d1:30:96:d3: 87:6d:1b:8c:c6:0e:52:85:1f:b2:42:60:b6:c5:0a: ae:52:49:e5:ff:b9:2a:da:b0:e2:15:14:8f:1b:31: 23:e7:c8:23:49:f8:21:5f:69:a3:25:2e:58:68:d6: be:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1E:11:96:ED:66:A0:95:AB:1A:6C:0C:5A:49:08:4A:9E:AD:AE:0E X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.2.0/23 Signature Algorithm: sha256WithRSAEncryption 60:d9:a5:96:a4:a6:5f:24:4a:aa:34:b4:af:42:36:5f:30:9c: 35:db:f7:0a:02:62:28:ed:3e:9a:14:37:f7:4f:f6:dc:b7:37: 73:52:34:c1:fa:ca:5f:89:93:08:a7:72:bf:a2:c9:ff:fe:88: 2d:9b:74:7e:b7:c8:99:37:a8:a8:9e:3c:fc:18:b8:4c:4f:0e: 2f:ca:06:9a:0d:f5:09:ae:3d:98:df:03:03:fb:64:fc:29:c9: 82:28:37:eb:3b:eb:7b:1f:48:0c:bb:51:11:88:34:38:c8:1f: 11:be:58:1e:df:4d:14:52:28:95:1f:07:19:00:fb:0b:2e:bc: bb:1a:85:a3:35:d7:a1:d8:e8:c3:84:14:f4:c3:68:f6:23:9c: b2:97:6a:c2:d0:b3:c0:38:56:90:81:0e:f2:4c:fa:cb:9e:a7: 9d:b3:2f:aa:52:bd:f3:dc:e3:dc:5c:72:b1:12:e9:80:f7:c0: d3:67:10:f0:39:59:f6:6a:63:c3:c6:28:ff:a4:73:ef:d5:98: de:87:e3:45:f2:3e:56:3f:5f:f4:69:f8:ba:5a:7a:51:23:cc: 47:6e:dc:e9:84:2f:4a:da:1a:22:77:00:5d:8b:0b:63:93:7c: 0d:2e:c2:e2:06:b2:58:ca:00:9f:69:46:07:94:63:74:a1:3b: 6f:c3:16:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBb98vXhRLaICbWk7czIn8Kjh/nowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwODA1MTUwMTAzWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDc1ZWI2YTgxZjQ4NDM3MTEyNTY0ZjJhZjAyNGJjMTVl NTlmNmE4ZWFmZmVjYWU3ZGRmNGJkNGJiOGIwZDdiMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwnIlRF5AnngUrlc1dS01jzFjmM3mY8nP6MBu4n+TliYvC kXnHJoiFz6qUiUKpSz91fdADPX5Oy6Yrbbm5oNA0S78UpVb7Grq+iBIW2x6w4Iop k/wzIuRHQZ49JF/e/TaTjvVmBNjORcZFcm7TRm3vyDDQGxa5SekhbYvPS/cjlkHu w2xFS5NN0g+pMe123Pcbjzn2YYrLpptY3RRufvADTWnDa97ydmXABH+tpMmX+RKw /NAb7A2JX22Iu7rQqyDVGie3e2k28TCsIm/i0TCW04dtG4zGDlKFH7JCYLbFCq5S SeX/uSrasOIVFI8bMSPnyCNJ+CFfaaMlLlho1r4/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTB4Rlu1moJWrGmwMWkkISp6trg4wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzIwY2RlNGRjLTgxZWQtNGQ5Ni1hOGU1LTE1OWE2Y2RjMDc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwIwDQYJKoZIhvcNAQELBQADggEBAGDZpZakpl8kSqo0tK9CNl8wnDXb 9woCYijtPpoUN/dP9ty3N3NSNMH6yl+Jkwincr+iyf/+iC2bdH63yJk3qKiePPwY uExPDi/KBpoN9QmuPZjfAwP7ZPwpyYIoN+s763sfSAy7URGINDjIHxG+WB7fTRRS KJUfBxkA+wsuvLsahaM116HY6MOEFPTDaPYjnLKXasLQs8A4VpCBDvJM+suep52z L6pSvfPc49xccrES6YD3wNNnEPA5WfZqY8PGKP+kc+/VmN6H40XyPlY/X/Rp+Lpa elEjzEdu3OmEL0raGiJ3AF2LC2OTfA0uwuIGsljKAJ9pRgeUY3ShO2/DFhw= -----END CERTIFICATE-----Generated at Tue Aug 5 16:43:17 2025 by rpki-client