$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baed7e3a-e49f-4c63-889b-d1361ad54e4b.roa File: baed7e3a-e49f-4c63-889b-d1361ad54e4b.roa (raw, json) Hash identifier: J8HDJm71XlOXZwkpQOcljzvmkGI+qGo4fkn1+G0QKcQ= Subject key identifier: CC:D6:E5:34:BB:8D:57:C8:CA:9E:30:57:81:71:E8:D4:2E:15:3B:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3EC907B0456657DD7590C2A3C47E4EE5B7FEDCD4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baed7e3a-e49f-4c63-889b-d1361ad54e4b.roa Signing time: Sat 31 May 2025 00:21:02 +0000 ROA not before: Sat 31 May 2025 00:21:02 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c9:07:b0:45:66:57:dd:75:90:c2:a3:c4:7e:4e:e5:b7:fe:dc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 31 00:21:02 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=6b9bee5ec2b181f7f64f389935100ab443e3dda588ab6c7a72ed9a3a984eef14, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:12:0f:39:62:97:f8:88:0e:12:7d:34:75:cd: 77:1e:6c:83:4f:2e:71:cb:c8:2c:8c:da:58:87:8e: f7:9f:1d:65:cf:71:46:56:e0:2a:e9:9c:07:3f:16: 56:05:d3:d9:c6:cf:66:5a:ab:b1:ad:79:ce:e4:4d: bc:40:7d:2f:f1:6b:0e:be:2c:89:89:26:ea:e9:be: ba:45:15:7c:c1:28:0e:e6:13:19:98:b6:3b:ae:b3: 92:76:be:14:71:7b:ab:a6:f9:c8:cb:15:32:d3:1e: 0d:89:86:98:6a:33:7a:15:76:fa:d6:6b:b6:6c:58: 51:79:21:31:dd:28:46:68:0e:4c:ea:fc:61:ec:83: 80:1f:8b:2b:ef:03:a0:79:ad:06:7e:9e:33:f0:60: 29:68:fa:26:bd:f4:12:cd:57:a2:d9:2a:e9:7d:3e: 1c:9e:86:52:64:a3:55:76:83:21:6b:2b:83:51:fd: 5a:e5:62:b5:4e:de:2c:61:78:30:a0:65:c2:15:90: ab:61:31:ba:54:9f:0a:7d:55:d3:7f:97:2e:49:47: f1:34:ae:3b:b6:ae:27:05:65:0a:1a:e8:88:34:35: 55:bb:f9:a5:3f:54:60:f1:f9:86:51:85:f2:42:58: d1:5d:4f:ae:dc:9d:97:5a:16:89:95:c7:02:24:fc: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D6:E5:34:BB:8D:57:C8:CA:9E:30:57:81:71:E8:D4:2E:15:3B:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baed7e3a-e49f-4c63-889b-d1361ad54e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.24.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:54:19:34:d3:a5:40:62:94:b0:24:4c:b9:93:52:22:d7:5c: 31:dc:59:5a:76:a8:3c:4f:28:51:7a:51:8c:94:ca:c1:20:05: d6:4e:95:88:57:75:be:66:dd:82:55:cb:b5:a0:25:79:ef:3c: 2a:3b:db:fc:56:f6:0f:8f:f1:56:91:ae:e9:1a:1b:15:b3:8f: 8b:26:b5:97:1e:a9:3b:13:3d:98:67:35:e4:3a:5e:05:dd:34: a9:8d:74:91:55:25:a2:9f:74:b2:30:40:aa:bd:53:cd:7a:85: be:56:f5:0f:11:9c:63:6a:1b:b9:8f:c6:fb:92:75:52:47:86: 9e:f5:c9:c7:08:0a:2f:72:0b:48:ca:3a:06:0a:29:1f:14:ef: c1:6c:8b:7a:94:af:8f:ee:f3:d7:53:53:ca:67:96:7d:30:b7: 36:f1:06:9c:59:c1:4c:90:4e:07:7b:b5:b7:12:56:2b:cc:a6: c1:72:a7:ac:2a:10:3a:c7:7d:1d:a9:38:8f:d1:4c:e3:a6:33: 06:ae:07:7a:1d:19:2a:4f:4c:b9:2d:39:48:67:5c:16:d1:e8: c9:8e:6d:06:8d:9a:40:d2:6a:7c:fb:b7:c8:e5:2a:1b:dd:c5: c6:64:ec:94:2a:7c:1e:d8:92:4e:47:52:3b:a2:c6:5a:41:bf: 7d:2d:b9:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPskHsEVmV911kMKjxH5O5bf+3NQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTMxMDAyMTAyWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjliZWU1ZWMyYjE4MWY3ZjY0ZjM4OTkzNTEwMGFiNDQz ZTNkZGE1ODhhYjZjN2E3MmVkOWEzYTk4NGVlZjE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuEg85Ypf4iA4SfTR1zXcebINPLnHLyCyM2liHjvefHWXP cUZW4CrpnAc/FlYF09nGz2Zaq7Gtec7kTbxAfS/xaw6+LImJJurpvrpFFXzBKA7m ExmYtjuus5J2vhRxe6um+cjLFTLTHg2JhphqM3oVdvrWa7ZsWFF5ITHdKEZoDkzq /GHsg4AfiyvvA6B5rQZ+njPwYClo+ia99BLNV6LZKul9PhyehlJko1V2gyFrK4NR /VrlYrVO3ixheDCgZcIVkKthMbpUnwp9VdN/ly5JR/E0rju2ricFZQoa6Ig0NVW7 +aU/VGDx+YZRhfJCWNFdT67cnZdaFomVxwIk/OsdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzNblNLuNV8jKnjBXgXHo1C4VO/QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhZWQ3ZTNhLWU0OWYtNGM2My04ODliLWQxMzYxYWQ1NGU0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0XRgwDQYJKoZIhvcNAQELBQADggEBAC5UGTTTpUBilLAkTLmTUiLXXDHc WVp2qDxPKFF6UYyUysEgBdZOlYhXdb5m3YJVy7WgJXnvPCo72/xW9g+P8VaRruka GxWzj4smtZceqTsTPZhnNeQ6XgXdNKmNdJFVJaKfdLIwQKq9U816hb5W9Q8RnGNq G7mPxvuSdVJHhp71yccICi9yC0jKOgYKKR8U78Fsi3qUr4/u89dTU8pnln0wtzbx BpxZwUyQTgd7tbcSVivMpsFyp6wqEDrHfR2pOI/RTOOmMwauB3odGSpPTLktOUhn XBbR6MmObQaNmkDSanz7t8jlKhvdxcZk7JQqfB7Ykk5HUjuixlpBv30tuek= -----END CERTIFICATE-----Generated at Sat Jun 14 05:59:05 2025 by rpki-client