$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab208a5-141a-4207-a424-ef8f78b7dc77.roa File: 7ab208a5-141a-4207-a424-ef8f78b7dc77.roa (raw, json) Hash identifier: y/satynDnxqgntyA/SO5mj6LJNdKRD5TTj4FN8hP1lI= Subject key identifier: 09:64:FF:5C:0B:FD:22:94:55:83:FA:A5:70:08:E8:F6:D1:83:E7:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70C7C4CF058B5B8204C81FE670092CA77305E0CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab208a5-141a-4207-a424-ef8f78b7dc77.roa Signing time: Wed 06 Aug 2025 00:10:53 +0000 ROA not before: Wed 06 Aug 2025 00:10:53 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c7:c4:cf:05:8b:5b:82:04:c8:1f:e6:70:09:2c:a7:73:05:e0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:10:53 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=e17d23047f1686a318fb5b307121a16caabd6d5ca434b17e768f23eec6a43e98, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:c9:49:8c:f9:65:35:3a:35:c0:bb:77:c1: fd:65:2e:94:48:df:01:3f:11:08:e1:2a:e0:a9:19: 02:8f:f3:76:fe:ab:8a:dd:83:96:c6:01:7e:6c:5a: 50:e1:eb:d1:92:93:2b:a9:6c:33:74:df:41:2f:8f: e0:97:8b:0e:fc:c5:58:55:9f:ad:f4:d2:8a:d3:72: 25:0c:b7:0a:b2:74:ff:f4:94:f7:23:1b:ac:cd:10: 60:85:e9:40:b2:10:57:14:8e:1f:8a:04:1c:0e:0d: b6:f2:c9:1e:f2:ec:ca:ba:68:34:92:4b:ae:d1:38: 1f:c3:8c:9b:dd:1c:f4:cb:2a:b7:21:8b:6c:50:94: 53:26:10:15:a5:33:5c:96:7e:a9:26:7d:11:15:ad: 9b:63:3b:45:6e:cb:12:d2:39:6d:fb:d1:2d:a5:4c: f6:a7:0b:fb:ab:32:05:27:d7:0e:6f:bd:f8:5c:8f: 62:94:4b:d6:1c:15:9c:88:1a:ad:5b:76:ff:05:fa: 8d:ec:9f:20:e0:57:3f:d2:a9:11:b7:ce:7b:28:ea: a9:6e:49:82:91:26:55:58:3a:3f:0f:18:f7:cc:ea: 6e:a0:bd:70:4f:12:b6:2e:c6:60:07:94:ab:a4:b3: 84:e9:14:16:2e:2d:06:72:27:29:38:5c:72:a3:2c: 37:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:64:FF:5C:0B:FD:22:94:55:83:FA:A5:70:08:E8:F6:D1:83:E7:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab208a5-141a-4207-a424-ef8f78b7dc77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.160.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:74:41:2a:4b:7f:11:30:7a:d3:09:91:ec:7f:d3:5f:3a:d4: 6f:40:ea:e5:8f:60:78:5d:7d:cb:53:75:49:fc:99:40:48:47: 7c:a8:c1:b4:6b:b5:46:78:19:e5:97:6c:00:6d:37:e1:bc:cb: 0a:a1:bc:24:7e:72:13:d2:af:3b:96:55:6b:f4:da:5d:b7:7d: 78:a5:ca:cc:6a:a0:d7:44:6a:54:e4:fd:b5:a5:6a:c5:9f:52: 3d:79:43:dc:d6:f0:b6:22:04:dc:50:07:db:d1:b5:0a:33:d4: 20:c9:f6:e8:ff:ff:5d:51:d2:61:07:34:f3:bf:e4:a0:71:28: 18:49:00:5c:ae:99:91:1f:93:0a:85:e2:d6:55:34:41:89:54: f2:0c:7d:43:10:50:5f:1f:c1:72:2c:54:13:92:39:bd:ec:96: 9d:db:ef:b8:1c:4b:cc:cd:8b:88:c3:c9:ef:4a:d9:61:e1:5d: a5:88:ff:b1:99:de:d5:50:cd:15:77:26:c4:ac:49:b9:94:16: df:d5:c7:d1:1e:d8:7e:e4:d9:1a:20:db:33:5b:37:4a:7b:73: 0d:7b:b2:d5:2d:d9:d0:5f:00:5b:e2:c9:5d:cf:0f:93:cf:f8: d1:67:37:1d:6f:10:45:2b:55:13:22:b7:1f:e2:6f:06:69:80: 79:49:21:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcMfEzwWLW4IEyB/mcAksp3MF4MwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDAxMDUzWhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTdkMjMwNDdmMTY4NmEzMThmYjViMzA3MTIxYTE2Y2Fh YmQ2ZDVjYTQzNGIxN2U3NjhmMjNlZWM2YTQzZTk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX/8lJjPllNTo1wLt3wf1lLpRI3wE/EQjhKuCpGQKP83b+ q4rdg5bGAX5sWlDh69GSkyupbDN030Evj+CXiw78xVhVn6300orTciUMtwqydP/0 lPcjG6zNEGCF6UCyEFcUjh+KBBwODbbyyR7y7Mq6aDSSS67ROB/DjJvdHPTLKrch i2xQlFMmEBWlM1yWfqkmfREVrZtjO0VuyxLSOW370S2lTPanC/urMgUn1w5vvfhc j2KUS9YcFZyIGq1bdv8F+o3snyDgVz/SqRG3znso6qluSYKRJlVYOj8PGPfM6m6g vXBPErYuxmAHlKuks4TpFBYuLQZyJyk4XHKjLDc1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCWT/XAv9IpRVg/qlcAjo9tGD5/owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhYjIwOGE1LTE0MWEtNDIwNy1hNDI0LWVmOGY3OGI3ZGM3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEqAwDQYJKoZIhvcNAQELBQADggEBAJt0QSpLfxEwetMJkex/01861G9A 6uWPYHhdfctTdUn8mUBIR3yowbRrtUZ4GeWXbABtN+G8ywqhvCR+chPSrzuWVWv0 2l23fXilysxqoNdEalTk/bWlasWfUj15Q9zW8LYiBNxQB9vRtQoz1CDJ9uj//11R 0mEHNPO/5KBxKBhJAFyumZEfkwqF4tZVNEGJVPIMfUMQUF8fwXIsVBOSOb3slp3b 77gcS8zNi4jDye9K2WHhXaWI/7GZ3tVQzRV3JsSsSbmUFt/Vx9Ee2H7k2Rog2zNb N0p7cw17stUt2dBfAFviyV3PD5PP+NFnNx1vEEUrVRMitx/ibwZpgHlJIXA= -----END CERTIFICATE-----Generated at Sat Aug 9 02:48:11 2025 by rpki-client