$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa File: f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa (raw, json) Hash identifier: vX00B9Y1ogGD39/m+541fj2Tf74glw0CPViu7bncXJ0= Subject key identifier: F7:6C:24:D7:73:A8:2C:59:AA:7C:9F:50:C6:1D:48:CC:3D:97:FD:F0 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 533C3CD15428B2E90C74F33071D42D4DC22FAC6E Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa Signing time: Fri 25 Apr 2025 15:10:19 +0000 ROA not before: Fri 25 Apr 2025 15:10:19 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3c:3c:d1:54:28:b2:e9:0c:74:f3:30:71:d4:2d:4d:c2:2f:ac:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Apr 25 15:10:19 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f17258862121176fe18e69bd5f85cb0d482ea979e9c25f2efe6af589b42d6838, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:bb:3d:4f:0c:59:55:49:d5:38:5e:fa:a3: 65:5b:04:31:7a:95:ce:fe:f5:53:47:d5:43:97:c0: 1b:5f:00:54:53:49:78:b6:59:19:7a:ba:75:df:e7: 75:54:00:4f:27:64:2f:13:ad:ba:c5:96:8c:8b:d1: b0:c0:64:12:cc:ed:42:be:b9:44:fd:7c:23:aa:2b: ad:e6:55:9b:74:cd:22:ee:db:1a:8d:00:3b:40:0a: 24:b6:bd:e8:c9:93:f6:f6:43:5f:c9:28:d3:d6:d5: 29:61:36:d8:37:2f:5a:2f:c5:13:4c:a1:be:26:01: ef:01:ec:43:a7:b8:51:6c:ee:7e:9e:a7:0d:d1:3d: c0:c5:67:20:db:4a:73:19:46:12:ce:f3:bf:71:ff: 63:e8:91:2f:ed:31:ce:16:b4:0c:3f:99:f7:90:a9: 5a:be:6f:b7:8c:83:dd:5d:e6:17:5f:7e:19:1f:26: 47:8e:a0:b8:7e:6a:87:74:a6:3f:4f:be:02:4d:fb: 2c:91:c6:71:12:2c:6b:c4:ee:6c:73:64:1c:3c:55: 90:d4:75:3b:8f:8b:e8:b5:b0:4b:62:93:ba:a1:6d: bb:ae:de:38:c9:1a:5c:7f:f0:90:e0:51:6d:41:85: 99:04:14:7e:24:f5:9c:58:75:b6:b3:a2:e0:c3:2c: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6C:24:D7:73:A8:2C:59:AA:7C:9F:50:C6:1D:48:CC:3D:97:FD:F0 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.1.0/24 Signature Algorithm: sha256WithRSAEncryption 20:06:e5:74:f5:e5:a0:7f:28:17:4f:17:bd:9e:67:75:7a:b8: ec:82:f8:58:27:2b:25:f3:25:72:ea:b6:2b:87:a1:20:ba:b1: 9f:53:ad:aa:f3:e6:02:1c:33:31:0c:e0:2c:d6:28:f0:4b:f6: 78:87:3d:55:08:93:cc:0b:bf:d5:0e:28:28:d0:9a:f8:f9:89: f6:13:2e:53:ff:23:29:ec:c2:cd:4b:9c:ef:68:9c:03:b3:33: 7f:23:c6:c3:18:52:ac:51:b5:cc:82:4b:f0:53:3b:8e:2b:0d: f9:15:61:0b:71:30:e1:d6:14:85:6b:9f:95:bf:cc:65:de:18: 58:34:8b:a3:74:8c:de:0d:64:4a:92:41:54:12:b9:cc:9c:d6: 6c:7c:f7:c5:2b:75:84:bc:03:3a:6d:6d:fd:b6:50:09:d7:d8: b1:da:b5:cc:4a:4b:11:85:c3:56:4f:ef:44:50:33:cf:11:61: da:c6:3b:e4:d8:6a:d3:50:00:a8:a5:14:5f:8d:0a:15:00:72: a8:b0:53:a2:c3:5c:de:49:bd:5f:f1:c1:cf:8a:c4:59:ce:d2: a1:ff:02:e9:90:fa:60:a5:af:12:50:ce:0f:05:17:46:83:5f: 84:63:32:37:f3:ae:75:10:44:d9:c7:cb:8f:6d:b2:e7:c9:5c: b6:9d:c9:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUzw80VQosukMdPMwcdQtTcIvrG4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNDI1MTUxMDE5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTcyNTg4NjIxMjExNzZmZTE4ZTY5YmQ1Zjg1Y2IwZDQ4 MmVhOTc5ZTljMjVmMmVmZTZhZjU4OWI0MmQ2ODM4MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+urs9TwxZVUnVOF76o2VbBDF6lc7+9VNH1UOXwBtfAFRT SXi2WRl6unXf53VUAE8nZC8TrbrFloyL0bDAZBLM7UK+uUT9fCOqK63mVZt0zSLu 2xqNADtACiS2vejJk/b2Q1/JKNPW1SlhNtg3L1ovxRNMob4mAe8B7EOnuFFs7n6e pw3RPcDFZyDbSnMZRhLO879x/2PokS/tMc4WtAw/mfeQqVq+b7eMg91d5hdffhkf JkeOoLh+aod0pj9PvgJN+yyRxnESLGvE7mxzZBw8VZDUdTuPi+i1sEtik7qhbbuu 3jjJGlx/8JDgUW1BhZkEFH4k9ZxYdbazouDDLHkrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU92wk13OoLFmqfJ9Qxh1IzD2X/fAwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2YzZTc4YzlkLWNhZmYtNDIzNy1hYWJhLWI0MGY5MDFlM2M4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwEwDQYJKoZIhvcNAQELBQADggEBACAG5XT15aB/KBdPF72eZ3V6uOyC +FgnKyXzJXLqtiuHoSC6sZ9Trarz5gIcMzEM4CzWKPBL9niHPVUIk8wLv9UOKCjQ mvj5ifYTLlP/Iynsws1LnO9onAOzM38jxsMYUqxRtcyCS/BTO44rDfkVYQtxMOHW FIVrn5W/zGXeGFg0i6N0jN4NZEqSQVQSucyc1mx898UrdYS8Azptbf22UAnX2LHa tcxKSxGFw1ZP70RQM88RYdrGO+TYatNQAKilFF+NChUAcqiwU6LDXN5JvV/xwc+K xFnO0qH/AumQ+mClrxJQzg8FF0aDX4RjMjfzrnUQRNnHy49tsufJXLadyRU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:21 2025 by rpki-client