$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa File: a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa (raw, json) Hash identifier: VaZcRwVlpklyXwwe+U9NkmDajC1LaqkauLI7J7JDeyg= Subject key identifier: 38:3F:F3:58:E2:E0:07:3B:BC:24:E3:96:BB:22:89:76:67:2D:0E:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4DB905C13CD53435D4374A43FA80EDE1A7E3AD6F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa Signing time: Wed 25 Jun 2025 00:21:02 +0000 ROA not before: Wed 25 Jun 2025 00:21:02 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b9:05:c1:3c:d5:34:35:d4:37:4a:43:fa:80:ed:e1:a7:e3:ad:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 25 00:21:02 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=445604b071a92813759d00399ca1f836d88d08f5f545c5463747b4e051041e9f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:4c:47:2c:9d:0d:0b:c5:c2:6c:76:4c:8f: 25:15:df:2b:c1:71:0a:ed:8b:96:7f:8c:f7:7f:cc: 6e:db:42:7c:11:96:e6:45:b3:a7:7d:f6:c7:a3:de: d0:f1:f5:a0:cc:85:89:8a:f2:89:9d:1d:71:ca:1c: 32:78:07:75:40:30:40:f5:3d:55:5f:b3:29:0f:82: 56:d3:cf:b4:d0:a5:3d:bf:ca:75:96:07:e3:47:e2: 81:62:29:3f:0b:90:6d:a8:44:b9:f5:4d:26:58:1f: 24:fd:cd:97:ed:17:61:0d:bf:5f:66:0a:c8:c1:58: 4c:31:3e:51:0a:db:84:98:73:e2:80:a2:71:7c:68: 42:c5:10:a7:34:c4:7c:f6:61:16:6c:ed:a7:d3:5f: 43:8d:3d:62:8e:14:51:5f:89:51:22:66:e2:e7:96: 79:8f:93:98:ea:55:37:f5:89:55:3b:56:e3:7f:d0: 7d:91:5d:ee:68:cd:4f:bd:ff:24:1d:50:a9:9c:97: 3a:4e:71:54:c8:24:6a:df:40:08:71:d4:44:75:55: b7:c5:70:21:4f:6e:95:9c:1a:43:3f:fb:18:42:06: 10:59:69:2e:5d:47:df:12:5c:a0:6f:61:83:2f:79: 4a:b4:dc:33:7e:df:d7:c4:d7:a0:9c:21:39:4a:5e: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3F:F3:58:E2:E0:07:3B:BC:24:E3:96:BB:22:89:76:67:2D:0E:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a678ba6e-7d9b-4e94-9561-3851140b9f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.51.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:1d:a1:0a:83:ba:bb:ff:05:03:77:93:e4:16:ee:ae:e2:a2: 5c:eb:87:15:e4:6d:69:61:fc:85:23:26:4e:7d:4f:8c:18:3d: d1:60:f0:da:2e:75:18:0b:26:73:f1:48:cb:34:54:df:76:ca: e1:8c:7a:a4:76:9e:75:2e:82:53:a7:c6:59:1e:c5:ab:ce:cf: 8a:3c:bf:10:33:b9:81:14:08:07:02:f7:4a:a3:7e:04:26:82: e0:6d:23:94:5d:c1:fa:ac:6f:b2:81:a3:4b:cc:94:d0:a0:72: 45:11:fa:6b:e7:12:e4:0b:c1:8e:91:e6:9f:e9:87:22:d8:df: c4:96:95:c5:95:13:4a:af:23:5e:67:9b:68:ac:14:1d:58:e5: 17:bf:23:42:84:f5:28:ac:2a:d1:11:11:1f:12:9f:64:47:62: 76:91:8a:d1:fa:00:5e:c0:1d:7b:bb:cd:dc:fd:dc:a9:17:0f: 19:08:ea:fb:58:6d:d0:b2:80:fc:fb:81:4f:50:73:e0:95:56: 28:8d:7f:91:6b:16:74:3c:dd:6a:19:96:b5:a7:e5:a1:60:d8: f2:ae:d8:bd:1b:9f:ff:14:26:27:50:4c:24:58:35:12:91:4b: 21:b7:35:56:92:98:16:75:64:d7:f5:65:84:ac:4f:0a:ce:a5: 46:78:9c:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTbkFwTzVNDXUN0pD+oDt4afjrW8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI1MDAyMTAyWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDU2MDRiMDcxYTkyODEzNzU5ZDAwMzk5Y2ExZjgzNmQ4 OGQwOGY1ZjU0NWM1NDYzNzQ3YjRlMDUxMDQxZTlmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuRUxHLJ0NC8XCbHZMjyUV3yvBcQrti5Z/jPd/zG7bQnwR luZFs6d99sej3tDx9aDMhYmK8omdHXHKHDJ4B3VAMED1PVVfsykPglbTz7TQpT2/ ynWWB+NH4oFiKT8LkG2oRLn1TSZYHyT9zZftF2ENv19mCsjBWEwxPlEK24SYc+KA onF8aELFEKc0xHz2YRZs7afTX0ONPWKOFFFfiVEiZuLnlnmPk5jqVTf1iVU7VuN/ 0H2RXe5ozU+9/yQdUKmclzpOcVTIJGrfQAhx1ER1VbfFcCFPbpWcGkM/+xhCBhBZ aS5dR98SXKBvYYMveUq03DN+39fE16CcITlKXtOXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOD/zWOLgBzu8JOOWuyKJdmctDokwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E2NzhiYTZlLTdkOWItNGU5NC05NTYxLTM4NTExNDBiOWY4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XTMwDQYJKoZIhvcNAQELBQADggEBACwdoQqDurv/BQN3k+QW7q7iolzr hxXkbWlh/IUjJk59T4wYPdFg8NoudRgLJnPxSMs0VN92yuGMeqR2nnUuglOnxlke xavOz4o8vxAzuYEUCAcC90qjfgQmguBtI5Rdwfqsb7KBo0vMlNCgckUR+mvnEuQL wY6R5p/phyLY38SWlcWVE0qvI15nm2isFB1Y5Re/I0KE9SisKtERER8Sn2RHYnaR itH6AF7AHXu7zdz93KkXDxkI6vtYbdCygPz7gU9Qc+CVViiNf5FrFnQ83WoZlrWn 5aFg2PKu2L0bn/8UJidQTCRYNRKRSyG3NVaSmBZ1ZNf1ZYSsTwrOpUZ4nDg= -----END CERTIFICATE-----Generated at Sun Jun 29 07:19:37 2025 by rpki-client