$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce456fe1-5bdf-4890-a301-470300909b9e.roa File: ce456fe1-5bdf-4890-a301-470300909b9e.roa (raw, json) Hash identifier: MLz1NtkeQlV3K3PlVoVHMNunFX2z/uASbKg3tTL37pE= Subject key identifier: 55:8C:7B:BF:5E:0B:26:BD:B5:E6:E9:22:75:C6:E0:03:73:23:5B:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0354A65CC4903936877F4B4EF36B0D4BCCA70E17 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce456fe1-5bdf-4890-a301-470300909b9e.roa Signing time: Tue 05 Aug 2025 17:10:17 +0000 ROA not before: Tue 05 Aug 2025 17:10:17 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:54:a6:5c:c4:90:39:36:87:7f:4b:4e:f3:6b:0d:4b:cc:a7:0e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:10:17 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=58b6ca475e4b99a4e9908ab91cfe235fdcbc8dd2a8692504135588660979d75a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:53:0d:94:ee:5e:cf:65:6f:54:19:70:13:fd: ef:a8:9a:23:13:29:12:41:ca:6e:9a:0c:ca:73:b7: dc:92:5a:ed:8c:b3:e9:6f:29:65:04:5a:db:43:92: fd:20:32:17:d2:42:5a:fc:4d:b5:58:f1:b4:fb:d3: ac:7f:07:15:98:c8:7d:39:ee:8f:24:cc:96:d5:80: 3e:bf:d8:29:a1:8a:f1:eb:d5:a4:d9:c2:2d:bb:29: e7:fd:cf:25:5e:f5:f6:3c:e9:b2:05:b9:4e:6c:aa: 53:9c:db:77:0f:8b:5f:8d:97:f2:67:98:d0:11:b1: c6:9f:63:5f:46:57:be:48:77:00:79:66:90:16:39: b8:2b:6f:00:db:41:e4:cf:06:62:7c:9c:7b:5f:24: 8e:5b:5b:e8:b6:f4:ba:fa:25:19:ba:8c:97:a0:4f: e5:1a:7a:45:79:dd:db:a2:03:f9:7e:14:cf:8a:03: ae:fb:5e:32:a0:60:48:1f:0e:d1:e0:de:4c:b9:20: 7f:cd:68:e1:26:57:34:3c:94:f6:f0:3a:84:f9:a1: d7:1f:b8:9a:88:88:ee:f1:90:83:9c:2f:bd:6a:eb: f0:6c:9e:f0:dd:f5:2d:13:2c:ac:90:17:d7:e8:95: b6:ad:81:01:cc:99:a7:cf:cb:4e:7e:7e:db:1e:d7: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8C:7B:BF:5E:0B:26:BD:B5:E6:E9:22:75:C6:E0:03:73:23:5B:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce456fe1-5bdf-4890-a301-470300909b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.1.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ba:06:90:85:af:b1:d2:ea:6e:1e:c7:b6:24:e6:cd:e5:b7: ca:53:df:b8:16:1b:65:e7:23:0f:b2:03:ca:48:62:e2:8e:17: 1a:6e:34:52:ca:4d:b2:b4:33:25:94:ab:80:df:86:c8:e6:3f: 53:f7:69:42:94:cf:bd:dd:f3:9a:a3:12:d4:37:d0:04:2e:35: 12:6e:7c:2b:86:ed:1a:e0:50:07:0a:15:ef:a2:ec:0b:bd:80: d9:ba:2c:d2:09:81:39:ea:ac:e3:89:2b:92:c6:68:ad:a9:ae: 2a:90:91:39:a2:4c:f7:b4:2c:30:cb:3d:4b:f6:80:ec:59:26: ab:2f:50:e0:9e:57:ea:54:a5:76:38:73:a3:c5:3a:32:c1:9e: 0e:e5:71:c4:6a:f3:f0:68:40:ae:bb:7c:a9:fd:43:8c:c3:77: 23:ce:f8:97:0f:4e:39:e0:34:5c:0a:3d:0f:b7:cc:16:60:c8: e6:1e:61:d6:b8:80:ce:8e:7b:a3:b4:8c:2e:16:d7:52:7a:f6: 34:3e:bf:f0:67:9c:03:5f:72:b1:96:60:74:2f:eb:45:a3:a9: 6e:46:9e:11:4c:84:6b:66:fc:2f:af:33:6c:ad:94:76:25:23: bb:cc:ec:43:9d:6b:95:a1:57:8b:90:43:b6:a0:29:36:08:f7: 89:9c:63:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA1SmXMSQOTaHf0tO82sNS8ynDhcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTcxMDE3WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGI2Y2E0NzVlNGI5OWE0ZTk5MDhhYjkxY2ZlMjM1ZmRj YmM4ZGQyYTg2OTI1MDQxMzU1ODg2NjA5NzlkNzVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaUw2U7l7PZW9UGXAT/e+omiMTKRJBym6aDMpzt9ySWu2M s+lvKWUEWttDkv0gMhfSQlr8TbVY8bT706x/BxWYyH057o8kzJbVgD6/2CmhivHr 1aTZwi27Kef9zyVe9fY86bIFuU5sqlOc23cPi1+Nl/JnmNARscafY19GV75IdwB5 ZpAWObgrbwDbQeTPBmJ8nHtfJI5bW+i29Lr6JRm6jJegT+UaekV53duiA/l+FM+K A677XjKgYEgfDtHg3ky5IH/NaOEmVzQ8lPbwOoT5odcfuJqIiO7xkIOcL71q6/Bs nvDd9S0TLKyQF9folbatgQHMmafPy05+ftse12wlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVYx7v14LJr215ukidcbgA3MjW4YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlNDU2ZmUxLTViZGYtNDg5MC1hMzAxLTQ3MDMwMDkwOWI5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XQEwDQYJKoZIhvcNAQELBQADggEBABG6BpCFr7HS6m4ex7Yk5s3lt8pT 37gWG2XnIw+yA8pIYuKOFxpuNFLKTbK0MyWUq4DfhsjmP1P3aUKUz73d85qjEtQ3 0AQuNRJufCuG7RrgUAcKFe+i7Au9gNm6LNIJgTnqrOOJK5LGaK2priqQkTmiTPe0 LDDLPUv2gOxZJqsvUOCeV+pUpXY4c6PFOjLBng7lccRq8/BoQK67fKn9Q4zDdyPO +JcPTjngNFwKPQ+3zBZgyOYeYda4gM6Oe6O0jC4W11J69jQ+v/BnnANfcrGWYHQv 60WjqW5GnhFMhGtm/C+vM2ytlHYlI7vM7EOda5WhV4uQQ7agKTYI94mcY1k= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:49 2025 by rpki-client