$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f00fcfb8-3cfe-4200-9129-ca17ad1b0533.roa File: f00fcfb8-3cfe-4200-9129-ca17ad1b0533.roa (raw, json) Hash identifier: ZLk9iI8Ay/ZUTqV3RXhbFW1Ri58Bu2jbm6/b8kiAfEw= Subject key identifier: E7:21:0E:6B:04:50:C2:80:2E:DD:DF:9D:DE:FE:50:5D:E2:DB:22:F9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2551225219B69E7E66AAD3B6651445A95BCE2FE9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f00fcfb8-3cfe-4200-9129-ca17ad1b0533.roa Signing time: Fri 13 Jun 2025 18:11:32 +0000 ROA not before: Fri 13 Jun 2025 18:11:32 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.93.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:51:22:52:19:b6:9e:7e:66:aa:d3:b6:65:14:45:a9:5b:ce:2f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 13 18:11:32 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=43d3a83bd8a007330ad4d4a002afcf4524f3e964cae055240c7b792cc746334a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:3d:7f:c1:f6:7b:60:11:2d:d6:92:6d:f4: ee:ad:ef:3b:37:c1:68:9b:65:d2:c7:c5:57:cd:3c: 36:85:a5:b9:63:83:ab:4a:57:a8:f5:1b:02:5d:13: ea:34:be:a9:5b:79:4d:49:c3:fc:e4:56:d9:6d:92: 44:48:5f:b2:33:0d:bb:6b:7b:88:31:3a:6d:1d:c8: 23:84:c9:c6:53:e7:99:ec:e4:dc:8e:98:8e:eb:22: 8d:74:48:6e:1e:bf:84:3b:b4:bb:23:44:56:6b:0f: 8d:b1:48:54:2a:1d:63:fd:53:c2:8b:8f:c8:5a:be: 30:ba:b4:36:ee:7b:af:d2:66:91:dd:e6:97:7a:be: 24:57:1c:f4:ed:19:a1:84:40:c2:82:cb:9e:df:17: 80:08:0b:c9:d2:3d:b6:eb:4b:57:09:01:6a:88:98: e0:e3:cf:d8:6d:fa:d6:34:d0:6e:bf:53:98:2b:33: 4f:6c:55:8c:16:9f:cf:80:f7:41:92:6d:b3:62:ee: 9a:dd:09:ff:8a:10:61:ae:fb:55:a7:31:e9:38:6a: 45:29:6c:6d:2e:12:a6:13:2f:b5:d7:e1:6c:3d:76: 7b:1f:03:b7:5f:73:bb:e3:ec:e0:50:12:a0:74:c6: 6b:81:47:91:c9:27:e0:41:02:87:51:4b:29:28:b0: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:21:0E:6B:04:50:C2:80:2E:DD:DF:9D:DE:FE:50:5D:E2:DB:22:F9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f00fcfb8-3cfe-4200-9129-ca17ad1b0533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.60.0/24 Signature Algorithm: sha256WithRSAEncryption 32:c9:04:4d:d0:ed:3c:d1:5c:25:b0:24:2e:f9:f9:e0:19:a6: 71:4e:d6:95:d5:22:6e:77:cd:88:d8:1a:cb:f7:6f:71:f2:64: b6:d1:4c:35:6b:77:51:5f:de:9a:06:d9:58:6e:9e:c8:3d:74: bc:cf:20:96:59:05:84:f5:04:d3:d9:9e:4e:e3:70:7c:4e:11: b6:f8:e5:8c:d1:84:7e:6f:09:81:63:89:c2:93:19:9c:15:de: bc:eb:c2:25:cd:56:90:34:e7:21:ee:ae:09:a7:87:56:89:5e: 38:c4:72:cd:8c:18:d3:50:16:49:22:8f:eb:cf:d1:1a:28:64: c7:00:0f:84:22:80:c7:01:4d:51:43:38:48:84:53:5e:88:85: b4:d3:6e:70:5d:94:2f:ef:4e:01:42:8a:df:81:3f:9c:9e:e0: 9b:87:67:f5:e2:7c:10:15:6f:8b:60:b0:49:4c:b2:79:0c:67: c4:ac:84:9c:a4:1b:05:31:a8:55:d5:52:d0:d7:cb:34:07:87: 99:d4:f4:58:fe:05:6d:75:dd:aa:23:68:53:7f:5d:e5:0c:93: be:f6:7f:67:98:26:d0:33:97:8c:59:0f:86:56:23:e2:32:32: 26:1f:54:67:62:73:3c:af:f1:5a:81:18:2a:1f:dd:4a:61:c7: 23:48:8b:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJVEiUhm2nn5mqtO2ZRRFqVvOL+kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjEzMTgxMTMyWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2QzYTgzYmQ4YTAwNzMzMGFkNGQ0YTAwMmFmY2Y0NTI0 ZjNlOTY0Y2FlMDU1MjQwYzdiNzkyY2M3NDYzMzRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY7z1/wfZ7YBEt1pJt9O6t7zs3wWibZdLHxVfNPDaFpblj g6tKV6j1GwJdE+o0vqlbeU1Jw/zkVtltkkRIX7IzDbtre4gxOm0dyCOEycZT55ns 5NyOmI7rIo10SG4ev4Q7tLsjRFZrD42xSFQqHWP9U8KLj8havjC6tDbue6/SZpHd 5pd6viRXHPTtGaGEQMKCy57fF4AIC8nSPbbrS1cJAWqImODjz9ht+tY00G6/U5gr M09sVYwWn8+A90GSbbNi7prdCf+KEGGu+1WnMek4akUpbG0uEqYTL7XX4Ww9dnsf A7dfc7vj7OBQEqB0xmuBR5HJJ+BBAodRSykosEi3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5yEOawRQwoAu3d+d3v5QXeLbIvkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YwMGZjZmI4LTNjZmUtNDIwMC05MTI5LWNhMTdhZDFiMDUzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XTwwDQYJKoZIhvcNAQELBQADggEBADLJBE3Q7TzRXCWwJC75+eAZpnFO 1pXVIm53zYjYGsv3b3HyZLbRTDVrd1Ff3poG2Vhunsg9dLzPIJZZBYT1BNPZnk7j cHxOEbb45YzRhH5vCYFjicKTGZwV3rzrwiXNVpA05yHurgmnh1aJXjjEcs2MGNNQ Fkkij+vP0RooZMcAD4QigMcBTVFDOEiEU16IhbTTbnBdlC/vTgFCit+BP5ye4JuH Z/XifBAVb4tgsElMsnkMZ8SshJykGwUxqFXVUtDXyzQHh5nU9Fj+BW113aojaFN/ XeUMk772f2eYJtAzl4xZD4ZWI+IyMiYfVGdiczyv8VqBGCof3UphxyNIi9c= -----END CERTIFICATE-----Generated at Sat Jun 14 23:53:53 2025 by rpki-client