$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa File: f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa (raw, json) Hash identifier: Nb/M5EMNDAw7nrbDv2N5WQmBTldmfOv46XrOaxQqfPk= Subject key identifier: 64:FE:E4:EB:2D:F8:A3:C8:40:11:FC:3C:96:EF:53:74:40:5E:E1:FB Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 15B306323BFC7D9FC333704D1CA664A9717CB46E Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa Signing time: Tue 05 Aug 2025 15:01:00 +0000 ROA not before: Tue 05 Aug 2025 15:01:00 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b3:06:32:3b:fc:7d:9f:c3:33:70:4d:1c:a6:64:a9:71:7c:b4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Aug 5 15:01:00 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=fdbbbfbb728899462f484e257cbad48ae4711796b19721602f252e58a3664c48, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:d1:f1:a8:45:3d:fc:0b:79:1a:c0:b5:40: a5:b1:37:dd:a5:51:8e:62:f1:bc:cd:f7:e9:22:18: 7f:b2:83:61:c0:cb:bf:75:46:d1:3b:0a:99:80:cc: a6:91:66:01:94:96:8c:fd:25:15:4d:de:3d:ba:ae: 2e:6c:b3:31:66:e8:80:ab:1b:84:a4:4c:9e:95:31: 7b:98:9d:9c:0e:45:7e:75:e5:c7:ef:a5:ae:4f:a9: 22:61:50:81:0a:fb:93:a0:ec:3e:4d:15:5e:a7:03: 72:17:d9:58:85:00:69:ea:44:ee:99:eb:48:f6:81: f4:e1:21:d8:71:b5:4c:b5:3e:b4:63:7c:c2:30:60: b7:5d:de:ef:bb:3c:c3:75:a9:fd:ec:3d:5d:6d:9f: 90:26:a7:c8:d3:e2:28:b6:92:06:e8:06:f0:0d:37: db:ac:4e:4c:77:f6:93:ea:d3:2c:04:18:df:12:a5: 6c:8e:56:98:6c:a9:be:12:41:45:c3:ac:d3:bc:b0: 3c:42:14:c8:81:cd:9b:6a:a7:9c:a9:e2:ca:0d:2a: ff:9c:5b:8c:3b:25:43:46:e3:bc:48:92:a3:77:55: 90:4a:f2:46:99:f8:4d:18:6e:81:44:29:fa:88:26: a4:ca:2a:5a:79:15:8e:ff:81:89:7a:06:07:16:dd: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:E4:EB:2D:F8:A3:C8:40:11:FC:3C:96:EF:53:74:40:5E:E1:FB X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.1.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:8b:53:a1:c3:ee:88:98:22:ba:0c:47:01:f1:c8:7e:00:f6: fc:a6:76:54:6d:a8:9a:3d:a0:f2:4b:db:1d:a1:67:c3:c4:ac: fa:e9:7f:75:4b:d6:49:0a:95:8b:a5:a4:f4:ca:89:40:18:d2: fb:f6:f8:e9:9e:ea:d7:b1:1a:8e:c3:10:03:10:de:3f:95:eb: 74:4b:ab:63:2e:ca:4e:1d:87:88:f4:24:28:6a:a6:22:a7:35: ba:f7:23:b4:30:46:69:cc:d8:45:5d:e2:77:97:ee:8a:f3:36: 0d:0d:c1:c8:2b:f2:21:b9:3b:47:e8:1d:03:51:36:6d:9c:c9: 73:15:ca:d4:53:ce:2f:a1:e2:7c:55:f9:8a:19:a8:e8:94:f4: 47:fa:f0:86:a8:9b:f0:93:41:56:49:93:c5:ea:00:93:f6:4a: 39:d5:5d:32:b8:cf:da:3a:e8:b9:c2:32:b3:58:80:16:39:a7: ac:29:1a:66:fd:cd:70:51:3d:16:7b:1b:4d:0c:f6:a7:8a:ee: 91:89:5f:a2:84:be:48:a2:c3:0c:70:e9:19:a5:a9:cf:52:29: 2d:38:0d:18:c1:79:c7:5b:4c:16:1c:43:69:18:2c:75:4a:0b: 89:9b:5d:1d:29:c8:c7:00:cc:9b:b8:95:8a:13:05:c7:58:55: 0d:b6:7d:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFbMGMjv8fZ/DM3BNHKZkqXF8tG4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwODA1MTUwMTAwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGJiYmZiYjcyODg5OTQ2MmY0ODRlMjU3Y2JhZDQ4YWU0 NzExNzk2YjE5NzIxNjAyZjI1MmU1OGEzNjY0YzQ4MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2ctHxqEU9/At5GsC1QKWxN92lUY5i8bzN9+kiGH+yg2HA y791RtE7CpmAzKaRZgGUloz9JRVN3j26ri5sszFm6ICrG4SkTJ6VMXuYnZwORX51 5cfvpa5PqSJhUIEK+5Og7D5NFV6nA3IX2ViFAGnqRO6Z60j2gfThIdhxtUy1PrRj fMIwYLdd3u+7PMN1qf3sPV1tn5Amp8jT4ii2kgboBvANN9usTkx39pPq0ywEGN8S pWyOVphsqb4SQUXDrNO8sDxCFMiBzZtqp5yp4soNKv+cW4w7JUNG47xIkqN3VZBK 8kaZ+E0YboFEKfqIJqTKKlp5FY7/gYl6BgcW3XN1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZP7k6y34o8hAEfw8lu9TdEBe4fswHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2YzZTc4YzlkLWNhZmYtNDIzNy1hYWJhLWI0MGY5MDFlM2M4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABgfwEwDQYJKoZIhvcNAQELBQADggEBAFuLU6HD7oiYIroMRwHxyH4A9vym dlRtqJo9oPJL2x2hZ8PErPrpf3VL1kkKlYulpPTKiUAY0vv2+Ome6texGo7DEAMQ 3j+V63RLq2Muyk4dh4j0JChqpiKnNbr3I7QwRmnM2EVd4neX7orzNg0Nwcgr8iG5 O0foHQNRNm2cyXMVytRTzi+h4nxV+YoZqOiU9Ef68Iaom/CTQVZJk8XqAJP2SjnV XTK4z9o66LnCMrNYgBY5p6wpGmb9zXBRPRZ7G00M9qeK7pGJX6KEvkiiwwxw6Rml qc9SKS04DRjBecdbTBYcQ2kYLHVKC4mbXR0pyMcAzJu4lYoTBcdYVQ22fTg= -----END CERTIFICATE-----Generated at Tue Aug 5 16:46:05 2025 by rpki-client