$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eba43604-9a87-4a97-9c71-09a2c1a87b9a.roa File: eba43604-9a87-4a97-9c71-09a2c1a87b9a.roa (raw, json) Hash identifier: 5E8hH2kpba+QscRQJYGNYpXrzXK9riLJcRbC3VLryXY= Subject key identifier: 29:47:50:94:A7:F4:62:95:47:BC:12:A4:79:60:EB:E8:B3:B3:CF:F9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 21259F125156551FCFE627055CE4D28E5CF8EBDB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eba43604-9a87-4a97-9c71-09a2c1a87b9a.roa Signing time: Mon 16 Jun 2025 18:01:09 +0000 ROA not before: Mon 16 Jun 2025 18:01:09 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:25:9f:12:51:56:55:1f:cf:e6:27:05:5c:e4:d2:8e:5c:f8:eb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:01:09 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=692872be448bf33e3e00bf73ef8bfcd011c538e7e7a9c12ccbc610147f9ad7fa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:56:12:f4:a0:5f:a1:5c:f7:2e:cc:ad:6d: 77:1a:10:e1:af:54:cb:67:3d:5a:06:9a:ce:e9:45: 3d:9f:2e:6c:d3:86:4c:13:d9:8f:ba:69:11:1e:f7: 98:77:01:bc:df:d3:5e:5c:a0:0b:ca:a5:d4:6b:22: e3:9a:24:55:1f:c2:a6:59:a9:ef:4c:05:d9:c9:b8: 87:2c:27:c8:c7:0b:c4:d3:c1:b6:25:f0:ca:56:ab: 11:4e:db:b0:7c:a4:d9:3f:67:02:c9:53:c1:4f:09: d4:fe:9f:51:d0:83:88:78:fc:90:a0:18:36:7b:a5: 93:8e:a5:b8:86:b7:8c:f0:28:27:a7:b3:72:b1:ae: 67:5a:24:71:c2:87:38:9c:d9:a4:4f:56:0b:86:56: 25:bc:47:b0:42:a1:88:25:9b:a3:70:42:13:9e:07: 31:27:01:25:5b:be:cb:b7:5f:cd:22:c1:c8:b1:d0: 3b:9b:c3:83:ef:7b:b9:46:d2:4b:e9:ce:09:34:78: 55:93:4a:c1:be:98:bd:90:7c:1d:a3:4a:d3:bf:de: f3:8f:e2:83:04:b7:60:30:8b:fe:d8:8c:1f:f8:af: 1a:ee:35:67:f1:cb:d6:54:4e:a0:d0:e2:8e:18:12: 1e:6d:4e:47:14:4d:37:69:3e:ff:c8:98:c2:da:25: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:47:50:94:A7:F4:62:95:47:BC:12:A4:79:60:EB:E8:B3:B3:CF:F9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eba43604-9a87-4a97-9c71-09a2c1a87b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.64.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:fa:91:a6:d3:76:9a:6d:0b:bc:d4:56:bf:48:c9:26:54:16: b0:c2:9f:71:1c:ff:c5:bd:02:bc:0f:55:f4:2d:ca:72:8c:2c: 0c:75:bc:96:87:b9:77:9d:14:a4:b3:a7:62:b5:68:01:3a:16: 3b:bc:da:d8:a5:e8:3c:61:f7:7b:43:21:20:4a:e7:96:72:39: c9:cd:51:18:00:96:ba:b7:57:0a:5a:75:be:85:f6:cd:d1:63: dc:93:9d:7d:87:7d:e9:e8:5e:9b:d0:3d:9b:7e:2b:86:96:1a: bc:d4:cc:10:af:1b:96:23:cc:c1:11:33:8b:03:b9:1e:95:0f: d2:88:36:b6:ca:5c:36:e7:84:7f:c8:e4:82:de:51:7c:6d:3b: b1:2a:7d:c2:e7:60:4d:d1:ba:e7:3a:97:26:bf:9b:e7:b0:46: 35:57:b9:fa:39:ce:96:36:1a:50:20:6e:5d:06:d6:24:79:1a: 97:6a:67:f9:2a:3c:17:8a:4e:32:9b:44:d7:69:c8:e8:64:66: f3:1d:d3:0d:b6:8f:35:10:e4:61:c0:3f:60:a1:9c:2d:b4:f0: 6b:4b:4d:95:a9:9e:33:03:0f:b9:31:57:85:be:b5:20:ee:51: cd:9f:1f:06:78:02:bc:89:a9:0c:6e:fb:63:f0:31:52:09:4f: 12:71:ca:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUISWfElFWVR/P5icFXOTSjlz469swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTgwMTA5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTI4NzJiZTQ0OGJmMzNlM2UwMGJmNzNlZjhiZmNkMDEx YzUzOGU3ZTdhOWMxMmNjYmM2MTAxNDdmOWFkN2ZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoK1YS9KBfoVz3LsytbXcaEOGvVMtnPVoGms7pRT2fLmzT hkwT2Y+6aREe95h3Abzf015coAvKpdRrIuOaJFUfwqZZqe9MBdnJuIcsJ8jHC8TT wbYl8MpWqxFO27B8pNk/ZwLJU8FPCdT+n1HQg4h4/JCgGDZ7pZOOpbiGt4zwKCen s3KxrmdaJHHChzic2aRPVguGViW8R7BCoYglm6NwQhOeBzEnASVbvsu3X80iwcix 0Dubw4Pve7lG0kvpzgk0eFWTSsG+mL2QfB2jStO/3vOP4oMEt2Awi/7YjB/4rxru NWfxy9ZUTqDQ4o4YEh5tTkcUTTdpPv/ImMLaJbplAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKUdQlKf0YpVHvBKkeWDr6LOzz/kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViYTQzNjA0LTlhODctNGE5Ny05YzcxLTA5YTJjMWE4N2I5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XUAwDQYJKoZIhvcNAQELBQADggEBACv6kabTdpptC7zUVr9IySZUFrDC n3Ec/8W9ArwPVfQtynKMLAx1vJaHuXedFKSzp2K1aAE6Fju82til6Dxh93tDISBK 55ZyOcnNURgAlrq3Vwpadb6F9s3RY9yTnX2HfenoXpvQPZt+K4aWGrzUzBCvG5Yj zMERM4sDuR6VD9KINrbKXDbnhH/I5ILeUXxtO7EqfcLnYE3Ruuc6lya/m+ewRjVX ufo5zpY2GlAgbl0G1iR5GpdqZ/kqPBeKTjKbRNdpyOhkZvMd0w22jzUQ5GHAP2Ch nC208GtLTZWpnjMDD7kxV4W+tSDuUc2fHwZ4AryJqQxu+2PwMVIJTxJxykQ= -----END CERTIFICATE-----Generated at Sun Jun 29 07:21:30 2025 by rpki-client