$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449e5089-459b-438a-97f2-c0a39c030a5f.roa File: 449e5089-459b-438a-97f2-c0a39c030a5f.roa (raw, json) Hash identifier: zTAyzMpwg4Z9JArrsnAnPbX8dIMN0mj0hh4MpaNbhh4= Subject key identifier: A3:EB:19:98:00:40:66:04:38:BF:41:36:0D:D5:BE:8E:08:78:1D:A1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FC3EDBB100ABCE5B6F9623BA22ED9BAB029EB94 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449e5089-459b-438a-97f2-c0a39c030a5f.roa Signing time: Tue 03 Jun 2025 00:01:43 +0000 ROA not before: Tue 03 Jun 2025 00:01:43 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c3:ed:bb:10:0a:bc:e5:b6:f9:62:3b:a2:2e:d9:ba:b0:29:eb:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 3 00:01:43 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=e73e12fc8b05d2c1adf74d01b34de8f42eae5ac20f742c60c755b17a15b89906, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b0:c3:47:32:e1:a3:8d:c0:84:a6:4c:68:41: 6c:3b:52:d4:3d:28:43:79:d1:14:f2:72:a7:1b:12: d2:1f:83:eb:49:60:1c:35:5d:27:32:40:3e:ab:d8: e1:f8:11:4a:25:32:f0:79:47:38:8b:73:8e:7d:8d: a4:3b:4a:62:ee:26:85:c7:e5:64:3e:a5:e8:30:94: d4:6e:f4:94:df:ef:31:f9:c9:3c:60:3f:a2:aa:bd: 45:c8:cf:88:b1:c7:32:42:ca:f1:86:19:59:3e:75: 65:d1:70:83:14:b2:9f:9e:6a:b0:1e:e5:d9:2d:98: 76:0c:4e:68:d5:6d:c1:2d:ff:a0:f8:ce:3f:41:a1: 3e:76:fa:fd:d9:ec:c0:5d:fb:f2:dc:90:77:a9:39: 9f:a6:1d:13:0b:df:ee:d9:f1:bc:ed:98:11:f0:b4: 0f:62:5c:c8:2d:9e:3e:a2:9b:e8:99:31:f3:0a:1e: ff:7e:68:90:94:21:40:84:d9:25:26:e4:97:03:b6: 86:c1:8c:25:f5:45:07:56:b2:63:62:b7:6e:c0:dd: 29:4d:ed:28:18:1d:7e:dc:24:54:fc:01:31:0b:1c: 28:69:8a:b5:70:b1:eb:ca:6f:37:5d:02:49:c2:4a: 5d:e8:3f:41:61:9a:85:0b:87:b1:22:be:b2:e1:83: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EB:19:98:00:40:66:04:38:BF:41:36:0D:D5:BE:8E:08:78:1D:A1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449e5089-459b-438a-97f2-c0a39c030a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.138.0/23 Signature Algorithm: sha256WithRSAEncryption 35:4a:a4:bf:4e:2e:ea:3a:fa:7c:71:c3:67:ec:c5:be:3b:66: e8:71:dc:eb:19:44:18:37:67:13:56:95:78:3e:ba:5a:9f:00: d9:21:0d:1c:c9:ac:db:01:07:b3:e6:9b:b8:05:61:18:85:e7: c4:e8:55:42:43:a7:36:66:98:9c:4d:ee:c5:7a:f9:bf:e0:bd: 05:41:12:01:f3:f4:db:a4:ac:09:8b:b4:a5:9b:4b:e5:d9:dc: b5:58:9b:f9:b3:d6:5c:62:35:d7:2b:7b:b3:3b:ed:38:4d:7f: 0e:89:28:84:22:b5:20:a7:ff:1a:d4:48:4e:1c:3e:da:6b:40: 61:9a:81:b1:ac:44:93:23:d5:4f:d9:cc:86:64:b0:73:97:95: 79:00:74:d7:83:87:55:e3:6a:cc:75:8c:05:fd:48:e5:14:04: b6:3b:c6:7c:4c:69:14:20:e0:e4:ef:75:14:63:4f:cd:8a:bf: b3:f7:a4:a9:ab:f1:50:ef:f5:6f:e9:d5:2d:40:27:c5:c1:81: 37:f6:89:a3:fe:c6:47:f2:72:73:39:5c:5a:e3:f4:68:e8:fe: 0c:91:90:09:82:75:78:f0:98:2e:f4:6a:a7:97:8e:cb:3c:30: 9b:20:5d:47:14:66:d0:98:cf:74:ea:df:9b:e5:b5:7e:7f:b8: 69:b7:36:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL8PtuxAKvOW2+WI7oi7ZurAp65QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAwMTQzWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzNlMTJmYzhiMDVkMmMxYWRmNzRkMDFiMzRkZThmNDJl YWU1YWMyMGY3NDJjNjBjNzU1YjE3YTE1Yjg5OTA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxsMNHMuGjjcCEpkxoQWw7UtQ9KEN50RTycqcbEtIfg+tJ YBw1XScyQD6r2OH4EUolMvB5RziLc459jaQ7SmLuJoXH5WQ+pegwlNRu9JTf7zH5 yTxgP6KqvUXIz4ixxzJCyvGGGVk+dWXRcIMUsp+earAe5dktmHYMTmjVbcEt/6D4 zj9BoT52+v3Z7MBd+/LckHepOZ+mHRML3+7Z8bztmBHwtA9iXMgtnj6im+iZMfMK Hv9+aJCUIUCE2SUm5JcDtobBjCX1RQdWsmNit27A3SlN7SgYHX7cJFT8ATELHChp irVwsevKbzddAknCSl3oP0FhmoULh7EivrLhgzE3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo+sZmABAZgQ4v0E2DdW+jgh4HaEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0OWU1MDg5LTQ1OWItNDM4YS05N2YyLWMwYTM5YzAzMGE1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoowDQYJKoZIhvcNAQELBQADggEBADVKpL9OLuo6+nxxw2fsxb47Zuhx 3OsZRBg3ZxNWlXg+ulqfANkhDRzJrNsBB7Pmm7gFYRiF58ToVUJDpzZmmJxN7sV6 +b/gvQVBEgHz9NukrAmLtKWbS+XZ3LVYm/mz1lxiNdcre7M77ThNfw6JKIQitSCn /xrUSE4cPtprQGGagbGsRJMj1U/ZzIZksHOXlXkAdNeDh1Xjasx1jAX9SOUUBLY7 xnxMaRQg4OTvdRRjT82Kv7P3pKmr8VDv9W/p1S1AJ8XBgTf2iaP+xkfycnM5XFrj 9Gjo/gyRkAmCdXjwmC70aqeXjss8MJsgXUcUZtCYz3Tq35vltX5/uGm3Nss= -----END CERTIFICATE-----Generated at Sat Jun 14 07:07:40 2025 by rpki-client