$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6a0087-8215-41fd-9d51-e12ca97333fd.roa File: 8b6a0087-8215-41fd-9d51-e12ca97333fd.roa (raw, json) Hash identifier: Pzaj2AK+ou64JLAQq0xBQEK0u6843q7Zk1Q3zLsURgw= Subject key identifier: 52:80:17:A3:8A:99:83:02:E3:C4:56:D7:5B:A5:39:19:A3:38:4E:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 038BB0F63AD91ABB046DCE6A92F7E391C531D9B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6a0087-8215-41fd-9d51-e12ca97333fd.roa Signing time: Tue 03 Jun 2025 00:01:43 +0000 ROA not before: Tue 03 Jun 2025 00:01:43 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8b:b0:f6:3a:d9:1a:bb:04:6d:ce:6a:92:f7:e3:91:c5:31:d9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 3 00:01:43 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=e717e132c82ba191cf61befc74f1a18eaf69e17eae479fc34a23de99cbcf9188, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bf:40:ee:a7:f2:ec:7a:88:a8:ae:b8:eb:a5: 01:24:55:83:2e:c0:2d:3b:73:8e:93:7a:a8:31:8c: 4d:8f:29:67:17:fa:ff:b1:72:86:61:c2:39:9a:dc: b4:9d:50:f1:8a:f2:03:6a:d9:fc:f5:c3:38:20:e0: b4:86:cf:c9:53:a0:6f:bf:07:35:38:7c:96:1b:d1: e2:13:d3:be:54:d8:75:a2:ef:85:64:37:c5:ee:a9: b3:b3:f2:de:82:dc:f3:84:da:a7:84:60:5e:18:d3: d9:bc:1a:9f:36:46:e9:ee:83:1b:1e:7a:80:6b:2b: a3:1c:c8:8a:4b:aa:f4:c0:0f:7c:f0:99:8d:28:65: 44:97:9e:d5:7c:e4:20:a2:71:58:c0:fe:7d:2d:81: ff:3d:e8:99:b4:0a:06:82:f8:a0:cf:74:05:14:05: 84:5d:58:8e:e1:1a:5e:84:dd:b1:5a:fc:08:19:8f: 6f:ef:f1:04:43:30:6e:d5:e0:57:83:19:e9:9c:c5: 3f:00:c9:fe:73:f8:95:e6:54:31:43:9c:c3:ea:23: a0:3c:c8:55:12:4a:f5:a0:f0:b4:d0:a5:da:e1:90: 7a:6f:84:ba:4c:8c:43:2b:1b:6c:e9:c7:d9:46:9b: 21:fd:74:47:ad:47:2c:f0:e4:87:14:78:32:95:a6: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:80:17:A3:8A:99:83:02:E3:C4:56:D7:5B:A5:39:19:A3:38:4E:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6a0087-8215-41fd-9d51-e12ca97333fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.131.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:34:b1:6b:f8:86:d6:21:bc:4d:04:ed:a0:2d:09:e6:86:f2: 65:36:f9:df:9b:30:75:01:a8:f0:a9:c7:d3:b1:b0:38:5c:4c: fb:0e:7a:c9:21:cb:b4:33:87:74:77:04:83:d6:cf:70:7a:37: 54:46:b5:b2:6a:ce:a1:8a:07:61:a3:e8:11:b0:7a:4a:f0:21: e6:da:a1:03:02:d0:c2:b8:3f:ae:e7:32:df:d8:6c:c0:0c:75: 26:0b:0e:3d:8b:17:6a:3f:41:1f:b9:d1:f4:90:3d:12:c8:19: c8:8c:57:7c:bb:cb:11:45:7f:e3:ff:5f:cd:aa:e7:c0:06:b9: 53:bf:2c:80:55:eb:5d:63:a1:4d:55:49:80:59:34:2c:14:bd: 10:66:86:ad:91:b8:0c:96:f2:b1:1b:a5:ff:8f:56:6a:4e:a6: 39:35:36:c0:a7:55:2b:62:06:5a:82:9b:52:9d:5f:63:c2:06: 93:24:f8:18:19:61:b8:b2:da:30:8a:d8:7c:59:32:e1:03:7d: 11:eb:dd:ae:d2:db:65:2f:d5:66:6b:b2:d4:ef:26:a4:7c:8f: 42:34:ae:a4:4b:ee:6a:cc:9e:b8:bb:36:a1:68:70:1f:3c:1e: 6d:43:7c:25:01:da:c4:f2:c0:e4:61:7b:cc:72:d7:62:84:73: f5:95:7d:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA4uw9jrZGrsEbc5qkvfjkcUx2bcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAwMTQzWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzE3ZTEzMmM4MmJhMTkxY2Y2MWJlZmM3NGYxYTE4ZWFm NjllMTdlYWU0NzlmYzM0YTIzZGU5OWNiY2Y5MTg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVv0Dup/LseoiorrjrpQEkVYMuwC07c46TeqgxjE2PKWcX +v+xcoZhwjma3LSdUPGK8gNq2fz1wzgg4LSGz8lToG+/BzU4fJYb0eIT075U2HWi 74VkN8XuqbOz8t6C3POE2qeEYF4Y09m8Gp82RunugxseeoBrK6McyIpLqvTAD3zw mY0oZUSXntV85CCicVjA/n0tgf896Jm0CgaC+KDPdAUUBYRdWI7hGl6E3bFa/AgZ j2/v8QRDMG7V4FeDGemcxT8Ayf5z+JXmVDFDnMPqI6A8yFUSSvWg8LTQpdrhkHpv hLpMjEMrG2zpx9lGmyH9dEetRyzw5IcUeDKVpk61AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUoAXo4qZgwLjxFbXW6U5GaM4TqgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiNmEwMDg3LTgyMTUtNDFmZC05ZDUxLWUxMmNhOTczMzNmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEoMwDQYJKoZIhvcNAQELBQADggEBAFs0sWv4htYhvE0E7aAtCeaG8mU2 +d+bMHUBqPCpx9OxsDhcTPsOeskhy7Qzh3R3BIPWz3B6N1RGtbJqzqGKB2Gj6BGw ekrwIebaoQMC0MK4P67nMt/YbMAMdSYLDj2LF2o/QR+50fSQPRLIGciMV3y7yxFF f+P/X82q58AGuVO/LIBV611joU1VSYBZNCwUvRBmhq2RuAyW8rEbpf+PVmpOpjk1 NsCnVStiBlqCm1KdX2PCBpMk+BgZYbiy2jCK2HxZMuEDfRHr3a7S22Uv1WZrstTv JqR8j0I0rqRL7mrMnri7NqFocB88Hm1DfCUB2sTywORhe8xy12KEc/WVfQk= -----END CERTIFICATE-----Generated at Fri Jun 20 07:14:48 2025 by rpki-client