$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22a190a9-b3c7-40b6-a0ef-b09e767de348.roa File: 22a190a9-b3c7-40b6-a0ef-b09e767de348.roa (raw, json) Hash identifier: FiKS1JC6okejdxXl3hjT/pLOTDGe4XHRDUwdcCV3K3U= Subject key identifier: F6:D0:75:31:6D:E7:5A:32:1B:17:C0:E5:CC:01:EE:1D:8B:9C:B9:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 572C70F186EB8B53A9049E0B6888045D1F66E0DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22a190a9-b3c7-40b6-a0ef-b09e767de348.roa Signing time: Sat 12 Jul 2025 00:10:18 +0000 ROA not before: Sat 12 Jul 2025 00:10:18 +0000 ROA not after: Sat 16 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2c:70:f1:86:eb:8b:53:a9:04:9e:0b:68:88:04:5d:1f:66:e0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 12 00:10:18 2025 GMT Not After : Aug 16 23:59:59 2025 GMT Subject: serialNumber=d44811ae355072fd00551496f52cbfb2cd780c43bca5e4c6efd3b147b03d6109, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:86:f2:73:0e:b3:a1:5a:48:3d:18:b7:b0: 5a:b5:f3:7e:0d:25:16:e5:89:38:0f:78:be:70:18: db:ed:3b:9f:79:4d:12:f6:80:c0:1e:53:e8:8d:77: ee:47:78:bb:2f:02:64:6c:f2:23:0e:b1:fc:00:0f: e2:db:dd:de:50:77:ea:83:ca:6b:24:63:a0:30:70: 7f:e7:bb:99:ed:34:ef:dc:5e:9a:68:fa:25:55:9c: 18:dc:63:b5:85:bd:7b:34:fb:ad:83:db:dc:fa:5b: e8:3d:ac:b9:4b:8e:0e:e7:32:1b:70:2e:72:20:97: 82:f2:f3:17:22:9e:6d:18:cb:8d:36:e7:e7:53:98: 8d:f7:dc:d8:9f:39:ee:cf:0b:33:a9:c3:81:b6:3c: 5d:a1:0d:63:ab:0e:19:4d:4c:c3:42:19:c9:32:cb: 94:14:7e:84:17:2e:57:63:5a:a9:1a:75:ce:a4:d2: 2c:19:e4:0a:b1:59:d7:4a:a4:45:46:3c:b2:27:a1: b1:92:52:86:79:6c:75:1d:6b:0b:4e:26:93:e2:4d: 00:4f:10:91:d1:e5:ff:ec:bc:54:04:45:34:51:ed: a7:e3:9d:fe:21:dc:47:79:c5:98:a6:be:37:75:42: f6:de:7d:94:d7:22:c9:69:c3:95:74:77:7f:c6:fd: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D0:75:31:6D:E7:5A:32:1B:17:C0:E5:CC:01:EE:1D:8B:9C:B9:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22a190a9-b3c7-40b6-a0ef-b09e767de348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.160.0/23 Signature Algorithm: sha256WithRSAEncryption 83:5f:2d:3b:cd:54:c9:78:04:03:a9:86:9c:ea:0c:61:04:ac: 66:92:a1:c4:dd:4d:73:da:64:fe:8f:7c:0f:c9:9e:6d:00:54: 5d:53:50:0b:ab:cb:ed:41:19:0b:b7:8d:8d:4b:4b:c5:35:a5: 65:8f:56:2b:a5:c0:61:19:87:9c:ba:77:45:39:c7:a9:a7:58: 37:dd:46:64:8d:29:86:37:4a:7c:38:6d:d4:cf:11:0d:ba:41: 3f:35:77:eb:98:86:ea:84:27:83:a3:46:a5:2b:47:b2:a1:80: 6b:e9:c7:53:c3:4f:5a:c9:c7:23:9e:80:a5:30:21:c9:de:49: b3:ae:15:84:50:e0:43:39:d3:e7:a9:a4:a4:59:2b:cc:c3:7f: b9:6e:6d:36:84:d0:7a:ba:ab:de:53:8f:f1:6a:00:1d:40:28: 13:62:f0:ad:21:0d:c7:91:31:e7:43:a6:9b:c2:ac:32:cb:52: 8c:67:fe:a3:eb:87:e3:d0:7f:7a:f8:67:88:b3:0e:97:69:bf: fe:3b:5f:71:bb:db:03:2a:ed:45:bb:56:03:bc:49:74:e3:fb: 6f:3f:92:6a:a0:bf:05:bd:db:e3:80:d7:7c:84:e5:c7:0c:3c: 3b:73:c9:9f:83:5d:8b:a9:78:43:c5:98:f2:c1:fe:ff:11:e7: 10:76:23:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVyxw8Ybri1OpBJ4LaIgEXR9m4N4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzEyMDAxMDE4WhcNMjUwODE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDQ4MTFhZTM1NTA3MmZkMDA1NTE0OTZmNTJjYmZiMmNk NzgwYzQzYmNhNWU0YzZlZmQzYjE0N2IwM2Q2MTA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDegobycw6zoVpIPRi3sFq1834NJRbliTgPeL5wGNvtO595 TRL2gMAeU+iNd+5HeLsvAmRs8iMOsfwAD+Lb3d5Qd+qDymskY6AwcH/nu5ntNO/c Xppo+iVVnBjcY7WFvXs0+62D29z6W+g9rLlLjg7nMhtwLnIgl4Ly8xcinm0Yy402 5+dTmI333NifOe7PCzOpw4G2PF2hDWOrDhlNTMNCGckyy5QUfoQXLldjWqkadc6k 0iwZ5AqxWddKpEVGPLInobGSUoZ5bHUdawtOJpPiTQBPEJHR5f/svFQERTRR7afj nf4h3Ed5xZimvjd1QvbefZTXIslpw5V0d3/G/TMJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9tB1MW3nWjIbF8DlzAHuHYucuXYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyYTE5MGE5LWIzYzctNDBiNi1hMGVmLWIwOWU3NjdkZTM0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEqAwDQYJKoZIhvcNAQELBQADggEBAINfLTvNVMl4BAOphpzqDGEErGaS ocTdTXPaZP6PfA/Jnm0AVF1TUAury+1BGQu3jY1LS8U1pWWPViulwGEZh5y6d0U5 x6mnWDfdRmSNKYY3Snw4bdTPEQ26QT81d+uYhuqEJ4OjRqUrR7KhgGvpx1PDT1rJ xyOegKUwIcneSbOuFYRQ4EM50+eppKRZK8zDf7lubTaE0Hq6q95Tj/FqAB1AKBNi 8K0hDceRMedDppvCrDLLUoxn/qPrh+PQf3r4Z4izDpdpv/47X3G72wMq7UW7VgO8 SXTj+28/kmqgvwW92+OA13yE5ccMPDtzyZ+DXYupeEPFmPLB/v8R5xB2I+k= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:09 2025 by rpki-client