$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af50d7cf-175b-474d-8569-08aefa93a10a.roa File: af50d7cf-175b-474d-8569-08aefa93a10a.roa (raw, json) Hash identifier: z0nTK08SQASuAZfA+3G33u/AKfta3Eq4f6N8j8nWFDY= Subject key identifier: 2D:57:76:C3:53:18:98:C3:05:2F:29:68:EC:A2:0A:30:CD:EB:53:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2272AE0D596C7364B0236597AF6915610CDB8BE2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af50d7cf-175b-474d-8569-08aefa93a10a.roa Signing time: Tue 27 May 2025 00:00:17 +0000 ROA not before: Tue 27 May 2025 00:00:17 +0000 ROA not after: Tue 01 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:72:ae:0d:59:6c:73:64:b0:23:65:97:af:69:15:61:0c:db:8b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 27 00:00:17 2025 GMT Not After : Jul 1 23:59:59 2025 GMT Subject: serialNumber=6ffcaa729ee0343aeaa283704e9339ffac9582304828154b459c2ca74eb0d134, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:c8:d3:c0:84:97:68:c6:91:c1:a5:a1:40: b1:1a:2f:ce:50:1d:1f:fb:a0:9e:f9:ce:0a:bb:7c: 8c:ca:58:c4:58:3c:71:cf:a3:49:71:f0:11:bb:4e: 4c:0c:0d:6b:55:2e:c8:05:c8:b7:a7:15:a1:79:e5: c6:b9:9a:10:12:5c:e8:be:18:2b:57:d8:b2:1b:e5: 81:96:69:b7:ac:da:63:15:65:e9:06:5d:95:d6:c0: 90:4c:f2:cc:f1:ca:93:c4:41:f5:59:d9:15:a8:9d: fd:bb:61:47:e3:f2:16:f1:da:97:7d:6b:26:23:c1: e4:6d:3c:53:2e:38:f9:80:74:d8:cd:a0:9c:a9:b5: 49:e8:8a:52:46:14:01:6e:56:25:d0:0e:f5:a5:4d: 65:a5:8d:13:e0:43:30:5d:69:56:25:66:07:fd:c9: b6:e2:49:52:fe:8d:75:1c:78:90:fc:43:fe:f3:d6: d6:ef:71:85:4f:04:16:40:39:68:a0:e1:55:37:ff: 11:00:62:00:b6:10:37:1f:45:2b:a5:93:c1:ff:c4: 77:78:29:bd:1c:ec:95:b7:eb:ea:cf:c1:8f:29:77: 77:0f:38:f5:40:9b:15:81:fc:53:65:eb:f0:56:4d: 4d:5d:2b:aa:78:c5:f9:6d:23:36:fb:3c:0d:73:76: 35:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:76:C3:53:18:98:C3:05:2F:29:68:EC:A2:0A:30:CD:EB:53:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af50d7cf-175b-474d-8569-08aefa93a10a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.56.0/21 Signature Algorithm: sha256WithRSAEncryption b9:8d:ec:ba:f4:57:c8:10:ee:57:b7:2c:b4:83:01:06:56:13: b4:98:d8:21:1c:79:ec:b8:04:ac:5a:9e:3b:33:b4:b3:40:dc: 5b:69:87:8f:6c:09:0c:ba:29:12:4c:2a:14:92:fb:83:f1:65: 38:c9:23:11:b1:97:bc:b5:9a:fd:a8:2e:78:18:02:b6:83:16: ee:49:dd:85:8d:43:89:0a:5d:87:b4:71:e7:23:e3:14:a9:74: 65:35:fc:c7:9e:0e:dd:18:76:df:59:61:fe:3d:44:bd:66:79: 1d:5f:0d:39:44:a1:15:de:df:77:97:0a:10:9e:ee:70:1f:c0: 72:b9:11:e3:05:76:80:6d:e0:db:da:3c:4f:18:37:18:ba:2c: 7e:e8:9e:c4:ac:7f:d2:70:84:a1:ea:b9:b1:ef:88:c9:b2:3f: e3:ae:2e:29:7b:41:67:2e:73:e6:08:a8:38:f8:cb:8c:66:49: ae:b0:d0:4b:14:0e:6b:01:5e:36:e3:23:67:ba:10:c3:4f:ff: c6:19:57:ca:d4:9a:95:5c:37:d4:be:8f:74:ba:5d:2e:cd:9d: ee:8d:24:5d:0a:da:87:a9:76:74:26:63:ad:78:cd:93:d9:88: bc:15:81:9a:2c:05:01:59:97:7b:9c:19:a1:09:47:b3:eb:e2: 44:97:bb:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUInKuDVlsc2SwI2WXr2kVYQzbi+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI3MDAwMDE3WhcNMjUwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmZjYWE3MjllZTAzNDNhZWFhMjgzNzA0ZTkzMzlmZmFj OTU4MjMwNDgyODE1NGI0NTljMmNhNzRlYjBkMTM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDl88jTwISXaMaRwaWhQLEaL85QHR/7oJ75zgq7fIzKWMRY PHHPo0lx8BG7TkwMDWtVLsgFyLenFaF55ca5mhASXOi+GCtX2LIb5YGWabes2mMV ZekGXZXWwJBM8szxypPEQfVZ2RWonf27YUfj8hbx2pd9ayYjweRtPFMuOPmAdNjN oJyptUnoilJGFAFuViXQDvWlTWWljRPgQzBdaVYlZgf9ybbiSVL+jXUceJD8Q/7z 1tbvcYVPBBZAOWig4VU3/xEAYgC2EDcfRSulk8H/xHd4Kb0c7JW36+rPwY8pd3cP OPVAmxWB/FNl6/BWTU1dK6p4xfltIzb7PA1zdjVJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULVd2w1MYmMMFLylo7KIKMM3rU1IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmNTBkN2NmLTE3NWItNDc0ZC04NTY5LTA4YWVmYTkzYTEwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOIEjgwDQYJKoZIhvcNAQELBQADggEBALmN7Lr0V8gQ7le3LLSDAQZWE7SY 2CEceey4BKxanjsztLNA3Ftph49sCQy6KRJMKhSS+4PxZTjJIxGxl7y1mv2oLngY AraDFu5J3YWNQ4kKXYe0cecj4xSpdGU1/MeeDt0Ydt9ZYf49RL1meR1fDTlEoRXe 33eXChCe7nAfwHK5EeMFdoBt4NvaPE8YNxi6LH7onsSsf9JwhKHqubHviMmyP+Ou Lil7QWcuc+YIqDj4y4xmSa6w0EsUDmsBXjbjI2e6EMNP/8YZV8rUmpVcN9S+j3S6 XS7Nne6NJF0K2oepdnQmY614zZPZiLwVgZosBQFZl3ucGaEJR7Pr4kSXu3I= -----END CERTIFICATE-----Generated at Sat Jun 14 06:44:16 2025 by rpki-client