$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3a601b7-4b35-40f1-8e3d-5f25b5f39974.roa File: f3a601b7-4b35-40f1-8e3d-5f25b5f39974.roa (raw, json) Hash identifier: r4uvQGTQH7xjtuqEEykKyjtO4N3szEhZCwGXNI5tg7E= Subject key identifier: 2B:06:24:3C:94:F8:95:EE:CD:F9:22:56:40:B9:9B:B8:1C:B2:A8:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 05CA74D79C7C4CE5BDEDC81115AFE667AFDFE58D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3a601b7-4b35-40f1-8e3d-5f25b5f39974.roa Signing time: Sat 31 May 2025 00:20:52 +0000 ROA not before: Sat 31 May 2025 00:20:52 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.93.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ca:74:d7:9c:7c:4c:e5:bd:ed:c8:11:15:af:e6:67:af:df:e5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 31 00:20:52 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=ce2364e7c43e2740b73032864a802691199c18ff5635d9b1836a21154653d53a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d0:28:88:b6:7d:0f:ab:1f:2e:0e:8a:e1:28: 77:9b:0a:1a:2c:77:88:61:21:e4:27:9b:18:86:9b: 08:65:22:dd:0e:3f:fb:17:d4:61:20:7f:28:1e:ac: 89:a3:a0:96:3d:ec:e8:1d:34:24:cc:4f:8f:16:80: 2f:0f:d1:6b:9a:51:5b:f6:a7:da:44:fd:c8:12:b5: d8:c9:2c:ce:40:22:06:74:69:cb:80:ee:2d:67:e6: 0e:03:93:5d:af:ed:04:6e:f1:65:78:48:fa:18:63: 68:bf:f0:aa:6b:1c:19:b2:22:b1:7a:90:7d:cd:ca: 9a:2c:85:39:48:88:a9:10:31:89:66:fc:01:cd:ab: 11:b0:6c:28:b8:b2:99:69:9b:15:a0:a0:fc:22:87: d8:eb:c5:1e:6b:34:2b:6b:e1:3c:0c:98:15:49:43: 25:49:0c:1c:5e:cf:62:d6:b9:8a:bd:c7:12:2e:f7: 76:ce:27:23:01:a1:88:60:25:63:03:e1:e6:9e:21: cc:c6:7b:c7:37:97:aa:9e:e8:a2:c2:c7:14:1d:28: 73:58:fc:a4:85:ea:da:f4:da:de:97:19:40:c3:bd: 36:d8:9b:c6:56:2e:0d:82:f8:eb:4d:05:42:ae:54: 76:7f:0c:58:e3:2e:2d:4a:a9:ad:a5:e1:be:6e:49: cc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:06:24:3C:94:F8:95:EE:CD:F9:22:56:40:B9:9B:B8:1C:B2:A8:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3a601b7-4b35-40f1-8e3d-5f25b5f39974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.65.0/24 Signature Algorithm: sha256WithRSAEncryption b4:95:ce:28:33:7d:7f:70:9e:b4:e1:91:93:db:ae:40:0d:85: 67:77:08:81:fc:6c:66:7c:ae:2a:38:ef:42:db:2c:b3:cb:3d: 99:28:c6:d4:1e:f7:b6:65:bb:7f:1f:e9:63:de:16:39:1c:47: c5:48:ff:36:ef:31:f7:da:3c:d4:40:d4:18:70:0d:2e:cc:1b: 08:83:43:56:09:55:5e:c6:0b:0a:a6:1d:9a:47:80:7a:ed:9c: 85:a4:b1:b1:11:a3:41:f4:09:9d:93:5b:81:7a:0b:0b:a5:a2: 6a:7f:5c:62:57:d0:c0:5f:c4:a5:31:7b:22:1e:a6:74:d1:dc: bb:29:f9:a0:03:b5:20:2a:df:c8:a0:a6:78:25:76:07:73:15: 4c:97:e7:c8:5c:7e:21:2c:a1:ae:83:8b:73:ea:cf:81:7d:8c: a8:4b:c1:dc:e6:16:f0:cf:82:07:d2:6e:2b:56:7b:c0:8d:17: 8d:5b:a4:31:1a:28:e2:4b:2d:20:30:ce:05:ad:99:cc:9c:2a: f9:b5:ba:cb:65:5f:83:ed:d2:ac:6d:d2:7d:9e:e9:91:8d:1f: 38:a6:bd:fc:ad:b9:3b:8c:8b:c5:16:dd:9d:d6:fd:c5:1f:e6: 38:51:fa:da:a9:03:a7:13:53:e4:bc:dd:8f:aa:e3:e1:c3:6c: 3e:3c:1a:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBcp015x8TOW97cgRFa/mZ6/f5Y0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTMxMDAyMDUyWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTIzNjRlN2M0M2UyNzQwYjczMDMyODY0YTgwMjY5MTE5 OWMxOGZmNTYzNWQ5YjE4MzZhMjExNTQ2NTNkNTNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV0CiItn0Pqx8uDorhKHebChosd4hhIeQnmxiGmwhlIt0O P/sX1GEgfygerImjoJY97OgdNCTMT48WgC8P0WuaUVv2p9pE/cgStdjJLM5AIgZ0 acuA7i1n5g4Dk12v7QRu8WV4SPoYY2i/8KprHBmyIrF6kH3NyposhTlIiKkQMYlm /AHNqxGwbCi4splpmxWgoPwih9jrxR5rNCtr4TwMmBVJQyVJDBxez2LWuYq9xxIu 93bOJyMBoYhgJWMD4eaeIczGe8c3l6qe6KLCxxQdKHNY/KSF6tr02t6XGUDDvTbY m8ZWLg2C+OtNBUKuVHZ/DFjjLi1Kqa2l4b5uScxhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKwYkPJT4le7N+SJWQLmbuByyqI8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YzYTYwMWI3LTRiMzUtNDBmMS04ZTNkLTVmMjViNWYzOTk3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XUEwDQYJKoZIhvcNAQELBQADggEBALSVzigzfX9wnrThkZPbrkANhWd3 CIH8bGZ8rio470LbLLPLPZkoxtQe97Zlu38f6WPeFjkcR8VI/zbvMffaPNRA1Bhw DS7MGwiDQ1YJVV7GCwqmHZpHgHrtnIWksbERo0H0CZ2TW4F6Cwulomp/XGJX0MBf xKUxeyIepnTR3Lsp+aADtSAq38igpngldgdzFUyX58hcfiEsoa6Di3Pqz4F9jKhL wdzmFvDPggfSbitWe8CNF41bpDEaKOJLLSAwzgWtmcycKvm1ustlX4Pt0qxt0n2e 6ZGNHzimvfytuTuMi8UW3Z3W/cUf5jhR+tqpA6cTU+S83Y+q4+HDbD48GtQ= -----END CERTIFICATE-----Generated at Sat Jun 14 23:49:27 2025 by rpki-client