$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baed7e3a-e49f-4c63-889b-d1361ad54e4b.roa File: baed7e3a-e49f-4c63-889b-d1361ad54e4b.roa (raw, json) Hash identifier: EOqdx85D16UpIQifWy/0UQ61uOEEBt76qwevDIeZW50= Subject key identifier: 07:C6:20:24:23:EC:81:EC:43:2C:C1:58:DD:35:1C:58:1C:DD:75:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6022402640464B9DCAE11E2CCBD304E710451244 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baed7e3a-e49f-4c63-889b-d1361ad54e4b.roa Signing time: Fri 15 Aug 2025 15:00:27 +0000 ROA not before: Fri 15 Aug 2025 15:00:27 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:22:40:26:40:46:4b:9d:ca:e1:1e:2c:cb:d3:04:e7:10:45:12:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 15 15:00:27 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=eb0e7bc148de1bd035aa365c7abade55880ff980632686cbdc1d8be3b005cf15, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:1d:07:7d:fa:2d:26:ce:d8:a2:db:68:2b: 93:54:4a:f5:82:e3:f5:73:d1:21:5b:32:e2:7f:db: 2a:cf:14:26:2d:f2:2b:ff:31:ae:a7:66:6c:75:43: ec:45:3a:3d:2c:ea:b6:cd:11:ba:5e:1b:36:d6:38: 8c:b5:a8:5e:27:90:87:46:d0:a5:a9:8d:1e:b0:de: 96:fc:30:c9:9e:86:e4:c7:28:21:cd:3c:8f:0f:97: c7:0c:76:7e:d0:3e:09:25:4c:d1:fe:6a:c7:9e:ab: 22:52:f0:96:61:57:21:45:30:45:60:b9:e6:7b:98: 19:e7:39:e4:6f:d9:92:f6:05:62:66:d3:ca:b0:a7: 34:9b:9d:6a:5d:5a:f9:f9:75:c2:90:35:4c:ea:9d: ee:37:d8:d9:33:09:22:82:2a:50:79:bb:52:4d:72: a2:45:53:40:0e:5e:ff:43:90:cc:87:46:47:99:be: f5:a4:7f:c2:51:73:0f:e6:5c:a2:dc:6b:34:24:f0: 0a:34:ec:66:72:ed:61:f7:4a:1a:40:48:42:77:2e: 91:ab:74:3a:b6:72:ba:a0:93:e5:a3:81:0b:50:5a: b1:47:2d:bc:eb:a4:81:ff:63:37:fd:91:64:ae:d8: 66:40:e2:b2:6f:e9:2a:d6:f6:9b:c9:b2:03:a3:3d: 4a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C6:20:24:23:EC:81:EC:43:2C:C1:58:DD:35:1C:58:1C:DD:75:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baed7e3a-e49f-4c63-889b-d1361ad54e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.24.0/21 Signature Algorithm: sha256WithRSAEncryption 7a:5d:87:58:fe:19:47:6e:f9:f7:3f:e8:9b:aa:4e:43:95:c0: b6:73:e9:08:54:b2:bd:29:3a:27:2c:78:d7:d1:d4:31:64:71: 86:80:91:7d:0d:58:14:a7:ba:31:9c:69:9c:8b:38:63:28:42: ce:77:c9:9f:93:c6:2a:4c:87:d8:6f:e3:4b:e2:cb:73:49:69: fa:ed:6f:95:5f:bd:f5:b1:f2:1a:0e:b0:a2:dd:6e:c5:fc:0d: f8:39:ce:98:26:0f:73:15:d7:41:b0:7c:db:ec:57:1f:24:cf: f3:55:3e:7a:72:6d:4d:4d:cb:ae:e6:d1:5b:39:7a:6a:95:22: 68:f6:2c:d6:37:42:78:82:f3:bd:6b:20:2c:98:6c:75:a4:b1: f7:1c:01:51:2a:36:a1:26:f9:5f:b9:6c:29:9b:8c:e4:05:e0: 08:79:f1:8b:76:fb:9a:02:53:0a:8a:8f:5e:99:a4:b3:b1:00: 97:96:91:a9:f0:40:79:9d:38:2a:d5:e7:a6:3a:bb:4b:84:89: 45:09:2d:92:20:5a:cc:10:88:e6:fa:d3:ca:f1:d5:db:6e:80: ac:48:e1:08:8c:cd:05:9a:a0:80:ae:55:f0:d1:d9:89:fe:7f: c8:bb:3a:0e:e2:22:3c:6c:2c:0b:88:d1:80:16:b8:0f:7a:16: 2a:07:c9:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYCJAJkBGS53K4R4sy9ME5xBFEkQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE1MTUwMDI3WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjBlN2JjMTQ4ZGUxYmQwMzVhYTM2NWM3YWJhZGU1NTg4 MGZmOTgwNjMyNjg2Y2JkYzFkOGJlM2IwMDVjZjE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN+h0HffotJs7YottoK5NUSvWC4/Vz0SFbMuJ/2yrPFCYt 8iv/Ma6nZmx1Q+xFOj0s6rbNEbpeGzbWOIy1qF4nkIdG0KWpjR6w3pb8MMmehuTH KCHNPI8Pl8cMdn7QPgklTNH+aseeqyJS8JZhVyFFMEVgueZ7mBnnOeRv2ZL2BWJm 08qwpzSbnWpdWvn5dcKQNUzqne432NkzCSKCKlB5u1JNcqJFU0AOXv9DkMyHRkeZ vvWkf8JRcw/mXKLcazQk8Ao07GZy7WH3ShpASEJ3LpGrdDq2crqgk+WjgQtQWrFH LbzrpIH/Yzf9kWSu2GZA4rJv6SrW9pvJsgOjPUqtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB8YgJCPsgexDLMFY3TUcWBzddREwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhZWQ3ZTNhLWU0OWYtNGM2My04ODliLWQxMzYxYWQ1NGU0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0XRgwDQYJKoZIhvcNAQELBQADggEBAHpdh1j+GUdu+fc/6JuqTkOVwLZz 6QhUsr0pOicseNfR1DFkcYaAkX0NWBSnujGcaZyLOGMoQs53yZ+TxipMh9hv40vi y3NJafrtb5VfvfWx8hoOsKLdbsX8Dfg5zpgmD3MV10GwfNvsVx8kz/NVPnpybU1N y67m0Vs5emqVImj2LNY3QniC871rICyYbHWksfccAVEqNqEm+V+5bCmbjOQF4Ah5 8Yt2+5oCUwqKj16ZpLOxAJeWkanwQHmdOCrV56Y6u0uEiUUJLZIgWswQiOb608rx 1dtugKxI4QiMzQWaoICuVfDR2Yn+f8i7Og7iIjxsLAuI0YAWuA96FioHyYw= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:31 2025 by rpki-client