$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da90977-8e35-4017-a057-21f12034dc42.roa File: 2da90977-8e35-4017-a057-21f12034dc42.roa (raw, json) Hash identifier: Y31WhwzibOPO/8rk9s704kCrgyTYK6p2ysYIataVPgU= Subject key identifier: 22:32:03:EF:86:81:AF:27:F3:F5:1F:7F:52:3F:E6:F1:00:89:87:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 340A376D45E1F9505608FA434868712A4BA8788E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da90977-8e35-4017-a057-21f12034dc42.roa Signing time: Fri 11 Jul 2025 17:11:17 +0000 ROA not before: Fri 11 Jul 2025 17:11:17 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0a:37:6d:45:e1:f9:50:56:08:fa:43:48:68:71:2a:4b:a8:78:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:11:17 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=00b3847a77658ad4e743d9d270ab6e578e70b94b30609587c885407f02372e8d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:68:0e:f0:31:ee:8b:8d:4a:bc:c1:36:98: 68:d9:4c:21:3d:91:54:f8:26:6f:0b:c2:51:81:e4: cb:bf:71:3d:64:94:b1:98:50:40:c6:1f:d3:e9:fc: 4f:2d:61:44:f8:be:37:ed:66:0f:a5:d6:cf:28:dd: 4f:10:b5:2d:83:c3:3a:a4:64:1d:6c:5e:d4:fa:2f: c7:47:3e:bf:b2:6c:45:92:ec:6b:f3:03:0c:96:04: b7:32:ca:a1:35:b0:d1:b8:56:90:7d:e3:d8:53:5f: 65:a3:bb:a6:25:6f:ac:1b:0e:f6:9f:7d:61:42:67: 66:e2:cb:0d:6b:29:22:b9:be:ee:d7:c5:14:aa:f8: bb:eb:7c:28:4a:e9:bc:02:09:94:d5:e2:3e:02:56: 9f:d0:57:4c:b0:43:f9:be:7d:5d:83:c7:e4:a7:cd: 99:35:98:ec:50:cf:0e:20:c6:a0:2b:61:09:17:48: c8:83:b1:cb:4e:4a:0a:ff:0a:25:e8:ea:da:ab:bc: a9:dd:77:53:47:9d:01:45:f7:05:a1:a9:da:9e:c6: 8e:29:7c:74:31:bb:55:34:40:21:75:a2:c8:60:1d: 08:9c:4b:de:28:21:e9:8f:ab:22:52:48:be:2d:87: 93:ea:20:cc:2e:6e:5c:26:9b:b1:e8:4f:0d:a8:3d: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:32:03:EF:86:81:AF:27:F3:F5:1F:7F:52:3F:E6:F1:00:89:87:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2da90977-8e35-4017-a057-21f12034dc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.3.0/24 Signature Algorithm: sha256WithRSAEncryption 16:9f:be:0e:fb:7b:14:4e:dd:56:43:4e:cf:ff:a7:86:cf:ed: 2a:8b:19:87:69:36:dd:5a:14:8d:5e:47:af:b7:31:e0:f0:c7: bd:7e:7b:f8:e2:ce:1b:3a:7e:a8:87:c3:74:1e:1b:15:fa:64: ee:b7:5a:6d:63:e2:c0:43:92:68:41:3a:c6:07:5d:4c:fd:dc: 1c:ee:2f:26:1f:ba:4f:b9:42:2c:62:ba:ff:f8:ce:df:1f:6c: 52:67:fa:b7:11:e6:92:ea:db:c5:85:f8:7a:35:e9:b1:1d:21: 35:3e:e7:c0:91:cf:4b:38:13:1e:fc:bd:47:3b:e7:5b:6d:11: fc:65:10:07:31:d1:7b:c2:9a:1e:cc:3c:9b:e4:b1:6f:49:6f: 8b:59:b2:27:1e:30:d7:3e:93:41:28:18:83:3f:2f:53:a4:4d: e8:6e:f6:66:b9:a7:59:65:a9:44:83:98:3a:dd:6f:32:70:47: 6f:bd:7a:79:ce:4d:05:e1:c0:ac:12:dd:d0:91:49:6d:ce:85: 11:80:0b:3b:00:e9:2a:64:46:27:9b:37:f8:96:dd:34:34:0e: d2:a8:47:c2:da:ad:93:be:89:17:27:8e:1a:c3:84:4b:ff:3e: ef:0e:34:7d:4b:fa:9c:0c:dc:fb:43:78:00:d0:a7:43:41:1e: b2:58:9b:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNAo3bUXh+VBWCPpDSGhxKkuoeI4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTcxMTE3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGIzODQ3YTc3NjU4YWQ0ZTc0M2Q5ZDI3MGFiNmU1Nzhl NzBiOTRiMzA2MDk1ODdjODg1NDA3ZjAyMzcyZThkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC472gO8DHui41KvME2mGjZTCE9kVT4Jm8LwlGB5Mu/cT1k lLGYUEDGH9Pp/E8tYUT4vjftZg+l1s8o3U8QtS2DwzqkZB1sXtT6L8dHPr+ybEWS 7GvzAwyWBLcyyqE1sNG4VpB949hTX2Wju6Ylb6wbDvaffWFCZ2biyw1rKSK5vu7X xRSq+LvrfChK6bwCCZTV4j4CVp/QV0ywQ/m+fV2Dx+SnzZk1mOxQzw4gxqArYQkX SMiDsctOSgr/CiXo6tqrvKndd1NHnQFF9wWhqdqexo4pfHQxu1U0QCF1oshgHQic S94oIemPqyJSSL4th5PqIMwublwmm7HoTw2oPbyZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIjID74aBryfz9R9/Uj/m8QCJh38wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkYTkwOTc3LThlMzUtNDAxNy1hMDU3LTIxZjEyMDM0ZGM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XQMwDQYJKoZIhvcNAQELBQADggEBABafvg77exRO3VZDTs//p4bP7SqL GYdpNt1aFI1eR6+3MeDwx71+e/jizhs6fqiHw3QeGxX6ZO63Wm1j4sBDkmhBOsYH XUz93BzuLyYfuk+5Qixiuv/4zt8fbFJn+rcR5pLq28WF+Ho16bEdITU+58CRz0s4 Ex78vUc751ttEfxlEAcx0XvCmh7MPJvksW9Jb4tZsiceMNc+k0EoGIM/L1OkTehu 9ma5p1llqUSDmDrdbzJwR2+9ennOTQXhwKwS3dCRSW3OhRGACzsA6SpkRiebN/iW 3TQ0DtKoR8LarZO+iRcnjhrDhEv/Pu8ONH1L+pwM3PtDeADQp0NBHrJYm+I= -----END CERTIFICATE-----Generated at Tue Aug 5 16:40:46 2025 by rpki-client