$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/281d9211-a3d1-43f7-8a9f-291ff683dc7a.roa File: 281d9211-a3d1-43f7-8a9f-291ff683dc7a.roa (raw, json) Hash identifier: nA3GH+nInfcuM7VV7maKxxODfpGK/oEicSDSZSb+jLM= Subject key identifier: 07:0D:48:28:D9:28:77:9E:D3:F4:BC:D8:B7:0A:08:2D:75:50:1A:DE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A30382C9207E1824EC3148BD45915CA1AC2AF20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/281d9211-a3d1-43f7-8a9f-291ff683dc7a.roa Signing time: Fri 15 Aug 2025 15:00:26 +0000 ROA not before: Fri 15 Aug 2025 15:00:26 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.93.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:30:38:2c:92:07:e1:82:4e:c3:14:8b:d4:59:15:ca:1a:c2:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 15 15:00:26 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=a8261ab2b2cdfcebea746c84e5135dd59ffdf691ad014a26a8c44c4fef292391, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:d8:9d:31:31:79:98:8e:57:6c:ac:1a:5a: fa:b3:21:14:10:d4:14:f4:63:f2:8f:6c:52:2b:55: 21:8a:3b:8d:dd:07:28:d2:db:56:e7:64:d3:14:07: d9:d0:a2:d2:23:a1:41:dd:6c:0f:29:82:e1:4e:2c: ed:ea:d0:a6:1c:c2:43:9e:af:0d:9a:a5:0c:22:5c: 90:19:d6:e2:a0:2e:e1:30:cb:d0:f4:b9:83:42:14: f4:ca:9f:b0:ea:97:99:0a:91:82:cd:1b:61:c3:68: 4e:74:55:d6:3f:21:02:47:ba:f8:4f:7e:f2:5d:9f: dd:bb:74:5f:38:66:37:61:30:96:3b:ef:35:01:8d: b6:3d:9d:c7:0e:3d:3a:b6:bc:d6:f4:fc:8a:4d:c9: 09:e5:a7:8f:1f:2d:8c:5c:42:3f:39:11:6a:62:da: b9:f2:b6:48:b7:eb:d1:93:42:bc:ca:94:01:77:87: f3:ea:40:91:77:00:d3:55:04:b7:dd:c3:6a:43:b3: 61:ac:1c:e0:12:90:4c:d3:7a:26:8b:58:6f:ee:a9: a6:fb:60:ea:ad:0c:c7:be:9c:7f:b5:6a:48:16:9e: c2:08:4c:ae:81:77:68:af:fa:c5:93:66:05:2e:c9: f4:74:a2:95:15:02:af:24:d3:f3:94:cb:f4:10:6a: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0D:48:28:D9:28:77:9E:D3:F4:BC:D8:B7:0A:08:2D:75:50:1A:DE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/281d9211-a3d1-43f7-8a9f-291ff683dc7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.24.0/21 Signature Algorithm: sha256WithRSAEncryption b2:9f:bf:7d:c0:fb:ef:0a:27:15:a9:18:c1:b4:9c:58:c2:d1: d7:ec:9b:67:45:7b:8b:a4:0d:56:49:34:ae:ea:b7:78:15:f5: f0:11:52:8a:e5:88:8d:7d:28:43:16:38:1b:60:7f:cd:01:0d: 09:35:ea:48:bb:d3:ce:2b:73:79:bc:49:b5:88:81:4d:75:7a: 1e:1b:6a:ad:05:b2:be:5d:c4:87:dd:26:03:c4:45:0d:b9:be: c9:e9:44:9d:0a:6b:82:76:49:3b:53:24:b0:a6:3f:53:64:43: 8b:18:2c:61:60:e7:a4:11:b0:2d:57:36:8a:b9:8a:ed:7d:1a: 58:03:70:e1:67:73:68:0b:96:bc:cd:99:d8:5b:3e:73:e7:2f: c7:34:3c:03:e7:ff:21:88:29:b5:c3:23:e8:20:f5:d4:e6:31: 8a:be:3f:29:d8:f0:46:81:50:79:83:7a:72:0a:f1:8f:db:f0: 26:a3:05:94:04:0f:49:c0:8b:dc:92:a6:25:ac:66:56:76:7b: ea:a9:11:87:b5:ef:04:8b:61:26:87:4c:87:4d:6c:17:3c:9a: e9:4b:cc:df:f4:0c:38:47:82:44:03:13:b6:40:24:0e:2b:f6: 54:25:97:65:5f:03:b4:90:af:f8:ab:97:a8:41:76:ef:e1:b7: ef:32:74:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOjA4LJIH4YJOwxSL1FkVyhrCryAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE1MTUwMDI2WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhODI2MWFiMmIyY2RmY2ViZWE3NDZjODRlNTEzNWRkNTlm ZmRmNjkxYWQwMTRhMjZhOGM0NGM0ZmVmMjkyMzkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfq9idMTF5mI5XbKwaWvqzIRQQ1BT0Y/KPbFIrVSGKO43d ByjS21bnZNMUB9nQotIjoUHdbA8pguFOLO3q0KYcwkOerw2apQwiXJAZ1uKgLuEw y9D0uYNCFPTKn7Dql5kKkYLNG2HDaE50VdY/IQJHuvhPfvJdn927dF84ZjdhMJY7 7zUBjbY9nccOPTq2vNb0/IpNyQnlp48fLYxcQj85EWpi2rnytki369GTQrzKlAF3 h/PqQJF3ANNVBLfdw2pDs2GsHOASkEzTeiaLWG/uqab7YOqtDMe+nH+1akgWnsII TK6Bd2iv+sWTZgUuyfR0opUVAq8k0/OUy/QQaoJ3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBw1IKNkod57T9LzYtwoILXVQGt4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4MWQ5MjExLWEzZDEtNDNmNy04YTlmLTI5MWZmNjgzZGM3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0XRgwDQYJKoZIhvcNAQELBQADggEBALKfv33A++8KJxWpGMG0nFjC0dfs m2dFe4ukDVZJNK7qt3gV9fARUorliI19KEMWOBtgf80BDQk16ki7084rc3m8SbWI gU11eh4baq0Fsr5dxIfdJgPERQ25vsnpRJ0Ka4J2STtTJLCmP1NkQ4sYLGFg56QR sC1XNoq5iu19GlgDcOFnc2gLlrzNmdhbPnPnL8c0PAPn/yGIKbXDI+gg9dTmMYq+ PynY8EaBUHmDenIK8Y/b8CajBZQED0nAi9ySpiWsZlZ2e+qpEYe17wSLYSaHTIdN bBc8mulLzN/0DDhHgkQDE7ZAJA4r9lQll2VfA7SQr/irl6hBdu/ht+8ydB4= -----END CERTIFICATE-----Generated at Sat Aug 23 11:59:57 2025 by rpki-client