$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4af2502-00df-44c4-8265-e6299d3df361.roa File: c4af2502-00df-44c4-8265-e6299d3df361.roa (raw, json) Hash identifier: eckBoNljatx/hjYwjwS9vvChRHYL/0M1F1O1A2VmO6k= Subject key identifier: 33:26:43:73:D9:B3:47:48:22:AA:13:38:35:18:CF:1C:29:4D:8C:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11528BD3E446DA7A1C0AD1512BCC9C0A33B2B563 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4af2502-00df-44c4-8265-e6299d3df361.roa Signing time: Wed 23 Jul 2025 00:00:30 +0000 ROA not before: Wed 23 Jul 2025 00:00:30 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:52:8b:d3:e4:46:da:7a:1c:0a:d1:51:2b:cc:9c:0a:33:b2:b5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:00:30 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=59a3812732a2cbd2ee788b12c982159e7e54307d6ea4cb437f957b476505a306, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:04:e6:4c:e9:2c:20:07:d0:9c:ad:c4:d2: f8:2b:97:6d:9c:4a:f6:86:e7:e9:f2:1c:81:c5:72: 09:5d:61:97:b6:dc:7d:7b:af:35:af:d0:7b:cb:ac: 26:3b:7b:59:21:1b:4b:f9:47:1d:dd:3f:13:00:5f: 30:6e:fb:8a:e0:b8:51:03:67:b3:98:e6:b6:cc:6e: c4:9f:3e:92:4d:46:0a:95:fd:75:b7:5c:15:1e:d3: ad:d6:0f:56:73:65:70:25:4c:14:0c:90:3b:c8:ac: b6:d4:28:a7:41:2f:2c:53:1f:cd:a2:d6:73:10:e5: ae:8c:3c:40:ce:9c:54:b9:ec:ea:f9:06:e6:d2:e0: 1a:a1:64:7e:7c:ce:fc:1a:b9:ca:28:26:19:60:2e: fe:6e:96:51:c6:07:19:dd:15:82:2f:c9:5d:41:38: 83:9e:5e:d8:6f:ef:d4:97:be:f3:3b:34:d2:80:c8: 40:d5:0b:d1:96:11:08:a0:14:58:c8:5f:36:d8:eb: e2:95:cd:88:45:ad:4f:23:29:9c:a1:46:75:6e:7f: 3b:24:93:3c:ec:47:a2:38:43:f3:f0:fc:28:98:f2: 9c:1e:4a:8c:0d:f9:61:5e:4e:f6:27:e2:e6:b3:fd: 85:66:f1:5a:3c:17:ca:af:4b:36:94:cf:fe:81:95: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:26:43:73:D9:B3:47:48:22:AA:13:38:35:18:CF:1C:29:4D:8C:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4af2502-00df-44c4-8265-e6299d3df361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.133.0/24 Signature Algorithm: sha256WithRSAEncryption 68:02:35:75:4c:d3:0d:15:03:26:60:8e:a8:4a:ac:b5:09:a9: 05:de:81:e9:63:7f:4a:4e:fd:38:38:f5:8b:13:f9:b2:41:36: 74:1d:d6:3d:19:28:c5:79:4e:6e:dc:d0:18:17:6a:66:e8:87: 76:3c:54:76:fc:69:94:13:1f:40:3e:97:af:89:03:40:fb:12: b3:7c:f5:ad:10:9e:f8:60:6c:64:99:4b:06:42:31:71:11:5a: 52:49:24:bf:57:1e:1b:e9:9a:41:3f:21:1e:f8:d2:69:89:0f: 7c:e3:c8:2c:39:a7:ea:74:e4:f4:60:ee:37:e6:4a:16:4b:36: 20:52:69:55:21:69:b8:42:6f:29:f1:cd:45:28:c1:71:dc:94: 97:31:97:dc:6b:3f:6b:45:21:f7:aa:d5:a5:a2:29:23:ed:c7: 53:13:62:85:4f:a3:99:d6:66:ca:08:5b:b3:07:dc:25:06:ad: 32:c5:03:8b:77:5c:7c:ec:8f:30:ee:71:9e:06:34:1f:1c:63: 1a:51:4a:88:44:1b:9d:0b:bd:2d:38:cc:e8:6e:c8:2d:c9:4f: be:22:d3:6d:4e:63:a4:a7:64:14:c3:d7:3e:5e:09:47:7b:4e: cd:60:d9:6e:22:b4:98:99:76:81:2b:91:19:20:18:04:c9:e1: 09:c5:1e:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEVKL0+RG2nocCtFRK8ycCjOytWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAwMDMwWhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWEzODEyNzMyYTJjYmQyZWU3ODhiMTJjOTgyMTU5ZTdl NTQzMDdkNmVhNGNiNDM3Zjk1N2I0NzY1MDVhMzA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtYATmTOksIAfQnK3E0vgrl22cSvaG5+nyHIHFcgldYZe2 3H17rzWv0HvLrCY7e1khG0v5Rx3dPxMAXzBu+4rguFEDZ7OY5rbMbsSfPpJNRgqV /XW3XBUe063WD1ZzZXAlTBQMkDvIrLbUKKdBLyxTH82i1nMQ5a6MPEDOnFS57Or5 BubS4BqhZH58zvwaucooJhlgLv5ullHGBxndFYIvyV1BOIOeXthv79SXvvM7NNKA yEDVC9GWEQigFFjIXzbY6+KVzYhFrU8jKZyhRnVufzskkzzsR6I4Q/Pw/CiY8pwe SowN+WFeTvYn4uaz/YVm8Vo8F8qvSzaUz/6BlWCRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMyZDc9mzR0giqhM4NRjPHClNjPAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0YWYyNTAyLTAwZGYtNDRjNC04MjY1LWU2Mjk5ZDNkZjM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEoUwDQYJKoZIhvcNAQELBQADggEBAGgCNXVM0w0VAyZgjqhKrLUJqQXe geljf0pO/Tg49YsT+bJBNnQd1j0ZKMV5Tm7c0BgXamboh3Y8VHb8aZQTH0A+l6+J A0D7ErN89a0QnvhgbGSZSwZCMXERWlJJJL9XHhvpmkE/IR740mmJD3zjyCw5p+p0 5PRg7jfmShZLNiBSaVUhabhCbynxzUUowXHclJcxl9xrP2tFIfeq1aWiKSPtx1MT YoVPo5nWZsoIW7MH3CUGrTLFA4t3XHzsjzDucZ4GNB8cYxpRSohEG50LvS04zOhu yC3JT74i021OY6SnZBTD1z5eCUd7Ts1g2W4itJiZdoErkRkgGATJ4QnFHl0= -----END CERTIFICATE-----Generated at Wed Aug 6 09:32:10 2025 by rpki-client