$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f51d73-a5f2-4d6c-8b6e-796e3716717d.roa File: 48f51d73-a5f2-4d6c-8b6e-796e3716717d.roa (raw, json) Hash identifier: AdHNY4yFY/52iL/z6OZllg7DV8feZmAwJF3/4CcOFks= Subject key identifier: 84:1C:47:00:74:5F:A5:41:EE:ED:01:D2:FE:42:9B:F8:B8:80:57:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F2B60805CAD67E18F4AC9E6B52CB80CF36F19E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f51d73-a5f2-4d6c-8b6e-796e3716717d.roa Signing time: Sat 02 Aug 2025 00:30:23 +0000 ROA not before: Sat 02 Aug 2025 00:30:23 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 108.136.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2b:60:80:5c:ad:67:e1:8f:4a:c9:e6:b5:2c:b8:0c:f3:6f:19:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:30:23 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=eba5f548dd5770df8423fe4ef6b9397e4375813876431eb74b830c83c0c893ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:13:89:52:4f:cd:72:e0:b1:cf:b0:b4:ca: 0a:c7:57:d5:d3:2f:24:89:39:97:e0:d6:8b:ad:9c: 30:2e:33:8f:6c:01:77:db:19:7f:02:0e:1a:6a:3d: 5a:d6:e5:72:9c:aa:21:b0:2a:87:ce:05:e2:b2:5c: eb:05:3b:11:57:94:5e:63:5d:d8:74:a8:1a:31:3e: fc:f9:8a:e5:1b:7b:ff:03:19:7a:79:c8:ec:26:41: ad:94:17:ad:58:92:0f:60:0f:c7:34:05:c9:57:32: 23:da:dd:4e:f0:d2:c8:95:77:10:6c:cf:92:1b:a4: a5:f8:4b:34:c4:cc:14:89:ee:20:dc:e0:eb:94:3c: d0:62:4b:45:0f:17:91:72:fd:6a:13:13:e7:40:35: 69:3f:78:89:76:eb:09:ae:46:c2:52:e9:a9:ad:f2: 70:11:ef:37:a3:15:5e:2b:31:3d:dd:cb:41:14:de: 48:71:16:c6:87:24:cc:fd:a1:38:94:25:a2:9c:b0: 23:c9:8c:9a:be:ee:fd:88:1f:93:fd:07:be:79:0a: 63:54:1b:d6:c9:c9:c8:8d:49:c3:e0:46:b2:3a:d2: 65:06:97:95:80:bf:58:00:cd:cf:1f:ad:9c:36:50: c0:17:cc:46:64:f5:e9:12:c3:31:45:29:e2:68:78: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:47:00:74:5F:A5:41:EE:ED:01:D2:FE:42:9B:F8:B8:80:57:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48f51d73-a5f2-4d6c-8b6e-796e3716717d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.136.0.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ed:f7:cd:94:5a:3b:30:65:6c:c8:de:67:65:f7:3c:14:06: 04:43:59:56:2a:60:37:e0:f3:05:ab:2f:76:19:e0:f5:96:5a: 08:cc:e9:52:37:36:06:2c:74:92:14:93:ac:6a:68:b4:9b:47: d7:f7:54:bf:34:bf:ba:c4:85:f6:36:ff:57:55:9b:b1:92:da: 29:48:2f:50:e1:42:d0:aa:b2:d0:e4:c1:11:a1:6b:c8:e7:b5: 8d:08:88:1e:a7:6d:1d:f7:af:0c:67:3e:ea:52:12:3f:ac:2c: b2:4b:83:1d:fe:91:f2:3c:ab:ad:80:6d:0c:30:1c:00:85:9d: 62:1f:a4:80:8c:d9:dd:05:56:4e:d9:ab:4e:29:1d:82:3a:3a: a6:6d:9e:81:ba:53:38:58:1a:a7:a4:48:38:a4:98:50:e5:1a: 47:fb:b7:fb:17:4f:ac:0a:ba:b8:fb:88:36:77:f7:e9:f5:54: 4c:8e:14:ea:17:e5:6c:16:ad:a5:4c:43:5c:a0:f4:68:fa:44: 2a:a2:9c:fc:40:a0:4f:fa:69:55:33:a7:a8:54:0b:15:36:e0: 27:80:51:bb:94:20:9b:6f:25:6c:89:36:be:97:43:b0:70:b3: 25:fc:9f:66:e8:72:6d:ed:38:80:83:b4:c6:3e:3d:57:57:44: 8f:f6:1d:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfytggFytZ+GPSsnmtSy4DPNvGekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDAzMDIzWhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYmE1ZjU0OGRkNTc3MGRmODQyM2ZlNGVmNmI5Mzk3ZTQz NzU4MTM4NzY0MzFlYjc0YjgzMGM4M2MwYzg5M2FiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDinhOJUk/NcuCxz7C0ygrHV9XTLySJOZfg1outnDAuM49s AXfbGX8CDhpqPVrW5XKcqiGwKofOBeKyXOsFOxFXlF5jXdh0qBoxPvz5iuUbe/8D GXp5yOwmQa2UF61Ykg9gD8c0BclXMiPa3U7w0siVdxBsz5IbpKX4SzTEzBSJ7iDc 4OuUPNBiS0UPF5Fy/WoTE+dANWk/eIl26wmuRsJS6amt8nAR7zejFV4rMT3dy0EU 3khxFsaHJMz9oTiUJaKcsCPJjJq+7v2IH5P9B755CmNUG9bJyciNScPgRrI60mUG l5WAv1gAzc8frZw2UMAXzEZk9ekSwzFFKeJoeBtJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhBxHAHRfpUHu7QHS/kKb+LiAVyowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4ZjUxZDczLWE1ZjItNGQ2Yy04YjZlLTc5NmUzNzE2NzE3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABsiAAwDQYJKoZIhvcNAQELBQADggEBADnt982UWjswZWzI3mdl9zwUBgRD WVYqYDfg8wWrL3YZ4PWWWgjM6VI3NgYsdJIUk6xqaLSbR9f3VL80v7rEhfY2/1dV m7GS2ilIL1DhQtCqstDkwRGha8jntY0IiB6nbR33rwxnPupSEj+sLLJLgx3+kfI8 q62AbQwwHACFnWIfpICM2d0FVk7Zq04pHYI6OqZtnoG6UzhYGqekSDikmFDlGkf7 t/sXT6wKurj7iDZ39+n1VEyOFOoX5WwWraVMQ1yg9Gj6RCqinPxAoE/6aVUzp6hU CxU24CeAUbuUIJtvJWyJNr6XQ7BwsyX8n2bocm3tOICDtMY+PVdXRI/2HXs= -----END CERTIFICATE-----Generated at Wed Aug 6 07:55:37 2025 by rpki-client