$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa File: ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa (raw, json) Hash identifier: i3kM4dxL90Hm7B0aLYljGL1KuLUCtLGKnW6as35bwPk= Subject key identifier: BB:FE:5D:B0:F9:C1:DE:B5:BF:5D:00:14:55:15:BD:F8:D8:E0:C6:F8 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 03D10A8063509148F13BBCBE18FB22C326440220 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa Signing time: Tue 20 May 2025 15:30:58 +0000 ROA not before: Tue 20 May 2025 15:30:58 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d1:0a:80:63:50:91:48:f1:3b:bc:be:18:fb:22:c3:26:44:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: May 20 15:30:58 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=80c47753c623dae4667834b3830fcbb24b9aef64592e98bed7575da38aa97cfb, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b4:2e:a0:bf:28:77:55:70:9e:7f:aa:23:77: cb:ea:46:97:7e:6e:c2:38:62:b8:5e:bc:dd:a4:11: d3:3e:65:92:e7:e5:54:a9:2b:96:81:e4:57:79:e8: 1b:ff:fe:b6:cd:14:4e:47:ac:2b:48:b3:ef:f7:dc: c5:8d:aa:f5:c2:10:92:e3:e3:f5:46:e5:63:b6:be: a7:dc:14:e5:48:71:23:11:a0:51:56:61:14:3e:e6: dc:52:14:6b:11:a2:ff:60:8e:c4:c7:cf:69:f2:2f: e4:1f:ce:c6:d4:82:83:98:54:7b:ab:15:50:a6:fe: 56:c2:8d:22:c7:db:94:68:36:83:8b:85:3c:95:a4: f9:1f:c9:35:89:e7:c9:a2:f4:60:f4:4f:4f:84:d9: 1d:dd:87:60:b5:f5:40:27:60:d4:db:b7:46:62:e6: 4b:5f:1c:d3:88:55:65:2a:ba:af:de:fe:78:cb:a7: a6:2e:52:38:6a:aa:06:d4:76:13:8d:51:9e:67:ec: 40:54:79:d5:f0:7c:69:15:21:f4:dd:fa:84:8d:e1: 9a:55:e5:ed:85:16:6d:b0:a8:cb:74:38:71:17:61: f6:43:c5:c7:87:6f:a0:c2:dc:e6:54:6b:99:da:f3: ed:a2:87:49:b6:ee:14:1f:80:86:aa:c1:a3:68:15: 30:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FE:5D:B0:F9:C1:DE:B5:BF:5D:00:14:55:15:BD:F8:D8:E0:C6:F8 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.0.0/24 Signature Algorithm: sha256WithRSAEncryption 75:97:0a:a8:69:f3:d3:43:db:95:9e:83:ad:59:44:f0:ee:71: c2:a0:9e:f3:71:9d:f6:6f:72:58:57:29:d8:e5:d8:d4:6f:de: 20:13:0e:2b:e7:ea:7f:4e:03:83:85:7f:1a:a3:b0:ef:1f:b1: fc:af:f5:ae:6d:20:41:3f:2b:90:41:f7:78:d1:36:84:48:a7: 75:b8:42:ad:f5:fe:29:dc:82:7e:b6:2e:1a:f0:8a:4f:fe:ff: 25:63:33:19:79:ec:14:23:93:1c:37:48:89:cd:9a:57:fe:c0: 25:78:9a:06:2a:b6:0b:00:65:38:64:f6:38:6c:84:94:50:e2: b6:4e:9f:79:84:28:cb:ea:1f:b8:84:81:77:8a:bc:a6:83:16: db:8d:d8:59:2c:d1:c2:b5:0c:fd:ca:64:34:8f:a8:c9:ff:99: 71:56:2f:a2:71:50:90:5a:90:d3:da:ff:f2:1f:23:dc:3d:60: 91:b3:20:e6:f6:8e:65:29:54:ac:dd:48:2e:6a:97:1a:ac:71: c3:ff:0d:0c:8a:c0:2b:83:e4:4d:51:06:ae:9e:ba:38:70:df: 79:ad:2c:38:bb:78:35:5e:ed:cc:7e:b5:80:38:63:96:87:6e: 9e:91:b0:e6:3f:c1:b8:f4:d0:3e:ac:71:12:0e:cf:35:91:8c: e0:1c:a5:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA9EKgGNQkUjxO7y+GPsiwyZEAiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNTIwMTUzMDU4WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGM0Nzc1M2M2MjNkYWU0NjY3ODM0YjM4MzBmY2JiMjRi OWFlZjY0NTkyZTk4YmVkNzU3NWRhMzhhYTk3Y2ZiMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQtC6gvyh3VXCef6ojd8vqRpd+bsI4YrhevN2kEdM+ZZLn 5VSpK5aB5Fd56Bv//rbNFE5HrCtIs+/33MWNqvXCEJLj4/VG5WO2vqfcFOVIcSMR oFFWYRQ+5txSFGsRov9gjsTHz2nyL+QfzsbUgoOYVHurFVCm/lbCjSLH25RoNoOL hTyVpPkfyTWJ58mi9GD0T0+E2R3dh2C19UAnYNTbt0Zi5ktfHNOIVWUquq/e/njL p6YuUjhqqgbUdhONUZ5n7EBUedXwfGkVIfTd+oSN4ZpV5e2FFm2wqMt0OHEXYfZD xceHb6DC3OZUa5na8+2ih0m27hQfgIaqwaNoFTA/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu/5dsPnB3rW/XQAUVRW9+NjgxvgwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2VjMGUzYjcwLTY2YmUtNGNiNS1iYzE0LTk1M2Y0ZDJmNWZjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwAwDQYJKoZIhvcNAQELBQADggEBAHWXCqhp89ND25Weg61ZRPDuccKg nvNxnfZvclhXKdjl2NRv3iATDivn6n9OA4OFfxqjsO8fsfyv9a5tIEE/K5BB93jR NoRIp3W4Qq31/incgn62Lhrwik/+/yVjMxl57BQjkxw3SInNmlf+wCV4mgYqtgsA ZThk9jhshJRQ4rZOn3mEKMvqH7iEgXeKvKaDFtuN2Fks0cK1DP3KZDSPqMn/mXFW L6JxUJBakNPa//IfI9w9YJGzIOb2jmUpVKzdSC5qlxqsccP/DQyKwCuD5E1RBq6e ujhw33mtLDi7eDVe7cx+tYA4Y5aHbp6RsOY/wbj00D6scRIOzzWRjOAcpUY= -----END CERTIFICATE-----Generated at Mon Jun 16 06:15:21 2025 by rpki-client