$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93fa564b-5c1a-49c5-8314-2742e0925cd5.roa File: 93fa564b-5c1a-49c5-8314-2742e0925cd5.roa (raw, json) Hash identifier: gVi7OUMS64QjUsU7TtORgM1QROByFJ4lmgiwhEcVF6k= Subject key identifier: 29:45:7D:1A:A1:38:11:E1:74:7B:CC:37:7F:04:73:3B:01:A4:45:62 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5FDC43831D2A4833FD0F18F31EF553A4579B170D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93fa564b-5c1a-49c5-8314-2742e0925cd5.roa Signing time: Tue 22 Apr 2025 18:11:03 +0000 ROA not before: Tue 22 Apr 2025 18:11:03 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.93.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:dc:43:83:1d:2a:48:33:fd:0f:18:f3:1e:f5:53:a4:57:9b:17:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 18:11:03 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=aa147f8d8a4272794d96e4873d159b7ff7b15c0bcbc4ddcdffe8a8071abfacd2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:85:87:ef:10:c3:1c:be:05:75:f1:ca:8f: 8f:0d:09:03:fe:e8:56:d7:5c:a4:60:72:82:87:21: 9f:9b:c1:ca:aa:0b:e2:71:40:3e:0b:4b:ce:96:c0: 52:3a:a8:f0:e7:56:4b:65:96:c0:32:ce:34:f1:93: da:8c:ea:6f:d5:de:62:d0:83:bb:c6:68:4e:3c:60: c5:b3:68:e5:a6:c2:da:aa:9e:da:1e:85:e0:39:33: ff:22:22:ed:37:bc:eb:f0:ba:2c:5c:78:c3:be:b4: 7c:d1:19:4b:de:cd:8e:98:c8:c8:ed:39:a2:2b:9d: d5:03:d0:d9:1e:c9:43:5f:8f:9c:ec:d1:7a:47:61: 2b:e3:e7:eb:18:21:18:c1:80:4c:94:4d:fd:f2:59: 4d:55:3a:30:58:01:70:a6:bf:19:58:d7:90:40:d0: 29:93:a9:83:80:54:55:40:10:5c:2a:64:f4:c0:aa: 7b:69:d9:b3:b9:3e:77:06:da:60:b5:c7:5a:a5:4a: b8:7e:2b:f8:c5:ad:b2:c3:64:fa:02:57:ec:f5:bd: 6d:83:59:10:95:9e:a9:aa:b4:bc:b2:7a:41:c0:77: 52:db:67:0e:64:2d:a9:36:68:71:a8:3a:0b:1a:b9: 1a:86:31:69:2d:37:0e:13:55:c6:79:e5:f2:1d:1e: 2f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:45:7D:1A:A1:38:11:E1:74:7B:CC:37:7F:04:73:3B:01:A4:45:62 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93fa564b-5c1a-49c5-8314-2742e0925cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.4.0/24 Signature Algorithm: sha256WithRSAEncryption ae:7c:f2:44:6b:b0:e8:5d:8e:34:5f:42:bd:21:75:6c:56:65: d2:ab:c2:5d:df:62:8d:44:9f:97:38:04:e7:5f:5c:84:01:87: e2:9b:7e:af:f2:36:50:79:25:25:ad:11:95:45:e8:f2:ec:8f: 47:ee:31:8f:88:e4:c1:88:e1:f4:2b:ef:e8:0e:b2:52:ce:aa: 02:72:89:d6:6e:78:eb:27:73:3f:cb:ca:62:d8:ec:ef:af:65: 78:89:6f:ed:3f:12:98:a6:ac:89:68:53:6e:55:06:9d:3a:f4: aa:88:87:4f:2a:e2:3b:d4:d4:2e:16:43:23:54:b4:cc:7c:19: ea:d0:64:a2:91:41:5c:79:47:29:52:9b:7e:f9:fd:ab:70:67: 8f:5b:11:1e:b9:86:8e:73:11:ed:a5:66:04:22:c3:c1:5e:93: 9f:38:e6:c7:16:ae:4c:67:6c:2b:0e:60:c1:67:fb:5c:e8:c2: 88:29:db:3b:6c:fe:5c:99:89:a9:23:38:50:37:c4:92:23:60: 28:ed:f1:2a:24:3d:1b:c1:e1:8d:fb:e3:79:04:c3:26:93:cb: bc:37:58:9c:14:dd:15:34:b8:4f:37:03:c0:f1:dc:bd:ab:0d: ae:73:f5:80:7f:0c:47:df:82:e4:30:a5:f5:91:4e:35:ef:3a: 10:9a:30:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX9xDgx0qSDP9DxjzHvVTpFebFw0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTgxMTAzWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTE0N2Y4ZDhhNDI3Mjc5NGQ5NmU0ODczZDE1OWI3ZmY3 YjE1YzBiY2JjNGRkY2RmZmU4YTgwNzFhYmZhY2QyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTEoWH7xDDHL4FdfHKj48NCQP+6FbXXKRgcoKHIZ+bwcqq C+JxQD4LS86WwFI6qPDnVktllsAyzjTxk9qM6m/V3mLQg7vGaE48YMWzaOWmwtqq ntoeheA5M/8iIu03vOvwuixceMO+tHzRGUvezY6YyMjtOaIrndUD0NkeyUNfj5zs 0XpHYSvj5+sYIRjBgEyUTf3yWU1VOjBYAXCmvxlY15BA0CmTqYOAVFVAEFwqZPTA qntp2bO5PncG2mC1x1qlSrh+K/jFrbLDZPoCV+z1vW2DWRCVnqmqtLyyekHAd1Lb Zw5kLak2aHGoOgsauRqGMWktNw4TVcZ55fIdHi/7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKUV9GqE4EeF0e8w3fwRzOwGkRWIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkzZmE1NjRiLTVjMWEtNDljNS04MzE0LTI3NDJlMDkyNWNkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XQQwDQYJKoZIhvcNAQELBQADggEBAK588kRrsOhdjjRfQr0hdWxWZdKr wl3fYo1En5c4BOdfXIQBh+Kbfq/yNlB5JSWtEZVF6PLsj0fuMY+I5MGI4fQr7+gO slLOqgJyidZueOsncz/LymLY7O+vZXiJb+0/EpimrIloU25VBp069KqIh08q4jvU 1C4WQyNUtMx8GerQZKKRQVx5RylSm375/atwZ49bER65ho5zEe2lZgQiw8Fek584 5scWrkxnbCsOYMFn+1zowogp2zts/lyZiakjOFA3xJIjYCjt8SokPRvB4Y3743kE wyaTy7w3WJwU3RU0uE83A8Dx3L2rDa5z9YB/DEffguQwpfWRTjXvOhCaMJA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:52:16 2025 by rpki-client