$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa File: 59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa (raw, json) Hash identifier: VlDAHuxBk9lptmSkUqiGXc9vvldJfLsDTqJiqrhPGCQ= Subject key identifier: AA:42:CF:2F:66:4C:09:64:00:3A:F0:E8:E1:AC:15:57:F9:5C:66:A1 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 0396817DB996C4857074BD8827325762657B70FB Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa Signing time: Tue 05 Aug 2025 15:01:06 +0000 ROA not before: Tue 05 Aug 2025 15:01:06 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:96:81:7d:b9:96:c4:85:70:74:bd:88:27:32:57:62:65:7b:70:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Aug 5 15:01:06 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=0ceb92b8cc268b405c8b9d1f169d9af11d5976a84aacf3e493e188985f475e77, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:ba:e4:59:5f:49:a5:9b:0a:e1:2f:c6:71: e4:4f:d4:52:a9:00:e2:ab:d5:1b:b9:b7:d4:a5:81: dd:65:81:2a:89:df:3d:8d:00:22:ed:37:dc:d7:c5: 6b:de:80:d3:ef:7f:ef:7f:14:ef:3d:59:23:a2:75: 7a:45:61:84:a9:4c:2c:1f:7f:fd:24:7d:50:15:5a: 79:b2:2b:d7:aa:c9:68:13:d1:30:31:3d:51:3e:8d: 52:14:5d:dc:a7:2a:ae:92:b4:35:d7:fd:52:16:11: 93:57:7b:47:d1:06:33:e8:1f:4e:18:4c:6a:45:d9: c4:44:3d:83:f1:2a:df:c1:5f:9d:47:6c:40:fe:02: a0:b9:79:9e:de:6e:ab:a2:c3:8a:8a:77:e0:e1:ae: 72:b2:e8:e3:5e:6f:0d:d2:77:0a:a9:56:68:21:22: 83:6b:1c:e6:27:cb:51:da:56:31:5a:c1:81:6b:76: df:fe:2f:ca:64:f8:7a:5b:6f:d3:3f:ef:30:52:88: be:c7:d9:04:87:fd:8f:ab:8f:ac:34:b9:ab:84:34: 0c:8f:e1:32:f2:b9:ff:af:0a:5f:e8:66:96:40:fd: 8b:3e:d0:a4:f9:7d:ae:61:60:3f:06:19:55:02:2e: 41:39:75:7c:f0:65:b1:27:07:31:56:9c:ad:9e:6b: 31:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:42:CF:2F:66:4C:09:64:00:3A:F0:E8:E1:AC:15:57:F9:5C:66:A1 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.4.0/22 Signature Algorithm: sha256WithRSAEncryption 20:49:ed:bb:44:8e:32:15:6d:68:6d:27:f2:1f:02:3d:e6:8a: c7:0d:33:13:65:d5:6b:8e:38:32:26:14:37:24:cd:5c:ce:5e: ae:19:a7:aa:7f:54:a9:ab:62:62:e8:da:db:0e:d0:20:f3:8b: e5:f6:0a:59:99:74:a2:d9:09:b4:1b:66:b8:58:3b:0e:0d:16: d3:36:ff:95:dc:a8:8f:da:20:27:8a:27:70:c4:92:fc:f8:ee: 82:e9:4d:8d:d5:60:f3:b5:56:48:9a:f6:2a:80:e0:92:56:42: be:ac:34:14:7e:46:04:d2:6c:05:89:59:c0:37:48:e8:dc:0f: 01:d7:1a:e8:10:6e:1d:81:6d:44:8e:91:59:0d:ae:c8:81:c6: 34:0e:b0:e0:de:1a:04:45:fc:a7:5e:3d:c1:74:e7:47:f5:a1: e6:38:73:7f:16:f8:07:e2:be:9d:1a:bf:8d:72:97:a8:86:ad: d3:c0:75:b6:c0:0d:33:b0:a9:fc:e4:74:f3:ca:0b:27:2a:a0: 1d:a3:0f:1b:db:6a:63:52:2c:51:b9:2f:02:a2:ef:b8:fb:1f: 97:49:2b:1d:d3:28:fe:50:b3:73:1a:1c:a9:d0:55:5c:c2:e5: 1c:e4:03:d9:46:3c:bd:d0:eb:36:d0:6f:03:70:45:92:4e:af: 73:e8:5a:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA5aBfbmWxIVwdL2IJzJXYmV7cPswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwODA1MTUwMTA2WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2ViOTJiOGNjMjY4YjQwNWM4YjlkMWYxNjlkOWFmMTFk NTk3NmE4NGFhY2YzZTQ5M2UxODg5ODVmNDc1ZTc3MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTCrrkWV9JpZsK4S/GceRP1FKpAOKr1Ru5t9Slgd1lgSqJ 3z2NACLtN9zXxWvegNPvf+9/FO89WSOidXpFYYSpTCwff/0kfVAVWnmyK9eqyWgT 0TAxPVE+jVIUXdynKq6StDXX/VIWEZNXe0fRBjPoH04YTGpF2cREPYPxKt/BX51H bED+AqC5eZ7ebquiw4qKd+DhrnKy6ONebw3SdwqpVmghIoNrHOYny1HaVjFawYFr dt/+L8pk+Hpbb9M/7zBSiL7H2QSH/Y+rj6w0uauENAyP4TLyuf+vCl/oZpZA/Ys+ 0KT5fa5hYD8GGVUCLkE5dXzwZbEnBzFWnK2eazF3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqkLPL2ZMCWQAOvDo4awVV/lcZqEwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzU5YjNhN2Q2LTI2ZDQtNDgwOS05YmI2LTU0ZDhlYWY4N2NmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgfwQwDQYJKoZIhvcNAQELBQADggEBACBJ7btEjjIVbWhtJ/IfAj3miscN MxNl1WuOODImFDckzVzOXq4Zp6p/VKmrYmLo2tsO0CDzi+X2ClmZdKLZCbQbZrhY Ow4NFtM2/5XcqI/aICeKJ3DEkvz47oLpTY3VYPO1Vkia9iqA4JJWQr6sNBR+RgTS bAWJWcA3SOjcDwHXGugQbh2BbUSOkVkNrsiBxjQOsODeGgRF/KdePcF050f1oeY4 c38W+Afivp0av41yl6iGrdPAdbbADTOwqfzkdPPKCycqoB2jDxvbamNSLFG5LwKi 77j7H5dJKx3TKP5Qs3MaHKnQVVzC5RzkA9lGPL3Q6zbQbwNwRZJOr3PoWv4= -----END CERTIFICATE-----Generated at Wed Aug 6 04:06:00 2025 by rpki-client