$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/598b279e-b9e3-4b5a-8afd-e902f69e6374.roa File: 598b279e-b9e3-4b5a-8afd-e902f69e6374.roa (raw, json) Hash identifier: XC4ERBMyW6wiqxUg8/U8cHqZ8Re4JHoN8KSqZjLePbg= Subject key identifier: F3:D8:4F:9F:55:CE:34:95:59:FF:1E:1F:F7:C3:AF:8B:47:DE:D8:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20E10180C473EC9BA60F3106EFC6DB9840A79941 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/598b279e-b9e3-4b5a-8afd-e902f69e6374.roa Signing time: Fri 11 Jul 2025 17:11:09 +0000 ROA not before: Fri 11 Jul 2025 17:11:09 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.93.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e1:01:80:c4:73:ec:9b:a6:0f:31:06:ef:c6:db:98:40:a7:99:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:11:09 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=d5a40165709d4416bc66226c2fa3276718ff6eb1b2bd7712eb50d5fe0e43fc99, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:fa:d6:36:33:66:ce:df:01:4d:30:5e:c7: 67:ed:b3:b5:51:bb:d0:4b:54:68:27:9b:21:e7:f3: 13:8f:22:68:e9:a4:ef:77:04:e2:41:e8:bf:f3:b4: 2b:4e:9a:b0:8a:1f:6a:4e:02:f1:18:fb:f2:e3:b4: 76:da:62:4b:ea:52:1d:f5:99:45:1d:fa:4a:d0:03: d7:cd:17:bd:9c:be:27:ad:2a:2d:b9:6d:81:29:75: 20:a2:ac:3c:ac:88:d1:0f:1f:15:c7:e7:f8:6d:14: ae:aa:90:3f:95:29:7d:bc:97:81:6e:9b:52:93:c1: 7b:74:33:c4:89:7f:be:05:6b:4c:ed:d1:92:95:69: 7a:fc:1c:a9:46:3c:8b:02:65:d8:6c:87:e7:06:44: 0c:2e:16:ea:ae:53:de:47:5b:be:c9:88:88:ae:42: af:21:0f:57:ef:fc:af:26:a3:ff:2e:1f:2b:45:35: 6a:88:1b:8b:e6:98:56:6b:80:e2:3a:36:2c:63:2c: 67:b9:e8:a5:02:a1:82:ef:77:b7:7b:c2:5d:af:37: 08:7f:c2:15:72:b6:07:9e:09:e5:ad:96:11:3f:04: af:2f:ac:c5:2c:9d:11:06:63:b3:d1:82:31:fa:05: d4:c8:2b:03:b6:59:12:05:75:1c:7c:71:0e:ac:05: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D8:4F:9F:55:CE:34:95:59:FF:1E:1F:F7:C3:AF:8B:47:DE:D8:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/598b279e-b9e3-4b5a-8afd-e902f69e6374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.64.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:fe:f8:b2:47:f6:0a:ed:81:8b:53:a4:5f:e8:4c:17:b6:94: c4:f4:9f:b7:95:87:0e:97:c5:63:f2:2f:f9:eb:e3:72:79:0e: 55:77:19:5f:a5:b0:ea:45:b6:4f:79:54:31:0f:2e:c5:16:19: 19:3a:f4:f7:74:74:86:62:84:1d:87:23:63:ba:45:41:c8:92: 60:1e:24:f8:b2:51:47:ab:c8:f2:22:1d:95:e4:30:cd:6b:1c: 23:fb:ec:e2:7c:a0:46:4a:4a:76:9c:f6:2a:82:2a:33:6f:77: e4:45:2f:b5:ae:e9:6e:90:56:13:7d:f3:03:05:97:7b:02:87: 01:59:81:be:91:64:88:76:bc:52:bb:df:62:a3:49:b9:f5:ac: c7:87:f5:ec:5b:3e:62:5d:71:21:64:03:4f:a4:cf:41:6a:72: 6c:27:58:19:99:d5:4f:31:ca:14:5a:82:9f:38:90:2d:7f:39: 9c:85:52:5c:5c:52:bb:14:69:36:d4:de:7b:17:6a:d8:be:59: bd:2d:47:77:8c:0d:87:8c:3b:a2:c0:d4:22:0b:66:50:77:c5: 61:e6:48:42:0f:30:d2:15:9e:94:cd:5f:28:75:43:e6:57:ae: c8:de:8e:5c:76:94:a9:88:19:ca:68:eb:34:14:80:51:2d:28: 51:ff:a2:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIOEBgMRz7JumDzEG78bbmECnmUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTcxMTA5WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWE0MDE2NTcwOWQ0NDE2YmM2NjIyNmMyZmEzMjc2NzE4 ZmY2ZWIxYjJiZDc3MTJlYjUwZDVmZTBlNDNmYzk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrPvrWNjNmzt8BTTBex2fts7VRu9BLVGgnmyHn8xOPImjp pO93BOJB6L/ztCtOmrCKH2pOAvEY+/LjtHbaYkvqUh31mUUd+krQA9fNF72cviet Ki25bYEpdSCirDysiNEPHxXH5/htFK6qkD+VKX28l4Fum1KTwXt0M8SJf74Fa0zt 0ZKVaXr8HKlGPIsCZdhsh+cGRAwuFuquU95HW77JiIiuQq8hD1fv/K8mo/8uHytF NWqIG4vmmFZrgOI6NixjLGe56KUCoYLvd7d7wl2vNwh/whVytgeeCeWtlhE/BK8v rMUsnREGY7PRgjH6BdTIKwO2WRIFdRx8cQ6sBbS5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU89hPn1XONJVZ/x4f98Ovi0fe2KMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5OGIyNzllLWI5ZTMtNGI1YS04YWZkLWU5MDJmNjllNjM3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XUAwDQYJKoZIhvcNAQELBQADggEBAGr++LJH9grtgYtTpF/oTBe2lMT0 n7eVhw6XxWPyL/nr43J5DlV3GV+lsOpFtk95VDEPLsUWGRk69Pd0dIZihB2HI2O6 RUHIkmAeJPiyUUeryPIiHZXkMM1rHCP77OJ8oEZKSnac9iqCKjNvd+RFL7Wu6W6Q VhN98wMFl3sChwFZgb6RZIh2vFK732KjSbn1rMeH9exbPmJdcSFkA0+kz0Fqcmwn WBmZ1U8xyhRagp84kC1/OZyFUlxcUrsUaTbU3nsXati+Wb0tR3eMDYeMO6LA1CIL ZlB3xWHmSEIPMNIVnpTNXyh1Q+ZXrsjejlx2lKmIGcpo6zQUgFEtKFH/ooc= -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:09 2025 by rpki-client