$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a954652-ffae-4df0-b410-814bccdedfa0.roa File: 1a954652-ffae-4df0-b410-814bccdedfa0.roa (raw, json) Hash identifier: 1Sf6ck9UW+A5zjlZAStbc4ENpq1oM6nbcWSKIBnDPFo= Subject key identifier: 1A:10:35:0C:64:30:C8:0D:0B:21:C4:76:25:39:06:46:89:B5:51:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CA6D447958300CCDA838D76D993514434BFAF6F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a954652-ffae-4df0-b410-814bccdedfa0.roa Signing time: Wed 23 Jul 2025 00:10:26 +0000 ROA not before: Wed 23 Jul 2025 00:10:26 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a6:d4:47:95:83:00:cc:da:83:8d:76:d9:93:51:44:34:bf:af:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:10:26 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=5c08960f1dbeb98f7f302ada418369221ba830fca9980c7d88d405798eae5b9a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:73:30:f0:db:19:5b:7c:ad:9d:9b:bd:5b: 55:dc:80:35:2e:2b:ac:08:6e:fc:1e:03:a7:e7:91: 8b:28:6e:09:30:2d:64:56:fa:13:07:73:70:8c:46: c6:15:d4:bb:1e:22:a5:4a:cf:c3:7c:79:e7:f3:48: 16:e5:07:1b:a0:b9:a4:f6:7b:7e:ff:36:c3:b6:11: b3:9a:96:77:a9:0e:43:23:41:e4:98:11:a8:ed:da: f9:ad:83:ab:47:b4:50:77:d6:d0:07:dc:4f:7b:88: 6b:25:eb:81:f5:c7:41:c1:93:9b:37:74:e4:1c:e7: 12:34:4f:d5:6b:9b:30:59:ca:b1:55:fb:03:1c:f6: af:1b:79:fb:ef:11:be:2d:20:fb:75:48:2a:a9:b7: 29:50:e3:d3:f5:f2:1a:09:47:a7:7c:42:7e:e6:e7: dd:09:9a:11:67:f8:f1:18:4d:f9:92:ae:07:15:97: c5:fd:a1:3d:62:01:aa:3f:2e:1a:2e:71:59:e1:8f: f1:64:3e:47:22:3b:85:6c:f9:8f:4b:6e:8d:cc:e8: 7f:21:82:71:da:8a:58:05:aa:91:af:b0:9f:35:a2: a1:30:0e:97:fd:ee:9e:fe:d8:3c:51:58:6e:4d:df: cf:b1:a9:c9:d1:63:c0:b7:7e:5d:a3:96:f1:50:f5: b4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:35:0C:64:30:C8:0D:0B:21:C4:76:25:39:06:46:89:B5:51:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a954652-ffae-4df0-b410-814bccdedfa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.33.0/24 Signature Algorithm: sha256WithRSAEncryption 59:c8:01:dd:99:e0:ac:86:b2:15:2b:26:f1:7f:d7:70:11:8d: ef:e6:d0:db:fb:07:64:16:ae:a7:b6:71:a0:bd:ed:6e:9b:c2: f9:26:f9:0d:b4:33:e4:92:33:a0:df:1d:0a:f4:29:f7:9c:cc: 40:8a:b5:82:d3:c8:8f:50:fe:73:88:51:47:16:5c:bb:e1:f6: 7a:4b:c5:a9:c5:90:8f:3c:fe:3c:a5:22:ee:a6:fb:ea:18:a3: fd:4f:09:31:51:d9:ca:59:f4:d3:02:9b:54:8b:0e:e2:77:4b: dd:61:94:93:89:67:b7:25:9c:6c:66:a6:65:f5:d7:3d:5c:5a: 53:c5:9c:81:14:82:c0:1d:01:bc:03:fc:e3:6d:5e:45:24:42: 9f:7d:65:37:96:37:3d:34:06:56:e9:c3:0a:96:10:7e:e3:68: f6:b0:64:f1:59:51:23:35:d3:63:65:85:b4:c6:cb:e8:99:e9: f4:7c:b3:5a:94:3e:6d:6c:f0:55:64:a0:69:03:a8:e0:b4:a5: 3b:6d:0e:75:ea:e9:25:31:d6:f2:5b:91:57:85:8a:b2:fd:f9: 2c:b3:9d:bb:41:28:90:54:63:03:3b:89:03:8e:61:61:aa:32: a4:a4:c9:89:a5:47:e4:5c:d9:3e:bd:15:d5:f1:fe:5d:c3:b4: e3:9f:f5:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfKbUR5WDAMzag4122ZNRRDS/r28wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAxMDI2WhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzA4OTYwZjFkYmViOThmN2YzMDJhZGE0MTgzNjkyMjFi YTgzMGZjYTk5ODBjN2Q4OGQ0MDU3OThlYWU1YjlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0ynMw8NsZW3ytnZu9W1XcgDUuK6wIbvweA6fnkYsobgkw LWRW+hMHc3CMRsYV1LseIqVKz8N8eefzSBblBxuguaT2e37/NsO2EbOalnepDkMj QeSYEajt2vmtg6tHtFB31tAH3E97iGsl64H1x0HBk5s3dOQc5xI0T9VrmzBZyrFV +wMc9q8befvvEb4tIPt1SCqptylQ49P18hoJR6d8Qn7m590JmhFn+PEYTfmSrgcV l8X9oT1iAao/LhoucVnhj/FkPkciO4Vs+Y9Lbo3M6H8hgnHailgFqpGvsJ81oqEw Dpf97p7+2DxRWG5N38+xqcnRY8C3fl2jlvFQ9bQjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGhA1DGQwyA0LIcR2JTkGRom1UY8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhOTU0NjUyLWZmYWUtNGRmMC1iNDEwLTgxNGJjY2RlZGZhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEiEwDQYJKoZIhvcNAQELBQADggEBAFnIAd2Z4KyGshUrJvF/13ARje/m 0Nv7B2QWrqe2caC97W6bwvkm+Q20M+SSM6DfHQr0KfeczECKtYLTyI9Q/nOIUUcW XLvh9npLxanFkI88/jylIu6m++oYo/1PCTFR2cpZ9NMCm1SLDuJ3S91hlJOJZ7cl nGxmpmX11z1cWlPFnIEUgsAdAbwD/ONtXkUkQp99ZTeWNz00BlbpwwqWEH7jaPaw ZPFZUSM102NlhbTGy+iZ6fR8s1qUPm1s8FVkoGkDqOC0pTttDnXq6SUx1vJbkVeF irL9+SyznbtBKJBUYwM7iQOOYWGqMqSkyYmlR+Rc2T69FdXx/l3DtOOf9YQ= -----END CERTIFICATE-----Generated at Mon Aug 4 16:11:52 2025 by rpki-client