$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa File: c7e48273-d97f-45e2-9820-48c08d0db4f5.roa (raw, json) Hash identifier: 1Uy0Ja19JWqLYLJwcs4/d5txIWkQAbNM86b3hx9EFmA= Subject key identifier: 64:2C:9E:97:B1:93:83:42:26:09:B5:8F:82:26:E9:4F:D0:12:D8:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48AD5811EA318FCA439153ADE41A544C60E3BE10 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa Signing time: Wed 23 Jul 2025 00:00:20 +0000 ROA not before: Wed 23 Jul 2025 00:00:20 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ad:58:11:ea:31:8f:ca:43:91:53:ad:e4:1a:54:4c:60:e3:be:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:00:20 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=594e87f2d23fdc9403937487d9be69579bb011eb1d9f3d3d6bd7f7d5c2da17b8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:50:59:0d:94:d1:ab:dd:2d:6e:23:bc:b5:29: 69:f4:65:5a:ec:bd:1f:cf:7d:a4:f4:ad:12:80:1a: da:55:7d:85:45:4e:23:19:28:ed:da:7a:a5:58:e1: ce:15:8b:1a:7e:61:7b:39:a2:c2:3e:35:2e:50:73: ac:07:a6:d3:09:b5:51:7c:2a:32:5f:cb:44:0b:bd: 74:ac:2d:92:a9:7d:9c:1d:d6:e6:14:58:53:35:a2: f7:1e:44:ea:ed:de:f9:37:3f:4d:0a:1c:9c:cf:f3: dd:71:a6:39:4b:f7:ff:27:c8:3d:fc:d4:71:c6:41: 79:76:ed:6d:04:6a:bf:43:72:23:25:2e:33:f6:7e: a5:f9:98:f5:55:33:14:ed:27:15:9a:d4:43:cd:14: c2:90:53:16:97:99:3f:fd:90:e4:bd:2a:86:91:24: 38:da:cb:7f:af:7d:ea:1d:1b:f8:df:16:4f:02:fb: 47:e7:4d:a5:71:ab:a2:e5:57:c3:73:03:97:a4:93: 22:fa:8d:74:0f:d7:5d:64:6e:d4:f6:c4:ea:80:5e: bd:78:e0:6f:48:8c:8b:f4:6d:4c:83:80:05:f1:e9: 8a:91:96:92:62:14:33:e5:0f:f1:a7:d8:3e:4e:35: 22:01:a7:aa:d7:9c:8f:69:ac:15:8b:b5:c1:48:29: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2C:9E:97:B1:93:83:42:26:09:B5:8F:82:26:E9:4F:D0:12:D8:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7e48273-d97f-45e2-9820-48c08d0db4f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.254.0/24 Signature Algorithm: sha256WithRSAEncryption ce:05:6b:a5:f6:3c:87:15:f9:1a:da:37:a2:ae:b8:75:4c:2e: 4c:b1:87:4c:7c:95:32:a5:4d:9d:ea:eb:07:e4:92:91:1c:9e: 6e:4a:f1:5b:a7:4a:39:84:d2:d8:01:3f:79:6a:03:ee:b6:39: ea:9f:85:64:1b:54:3d:a6:65:68:1d:35:06:cd:f8:51:20:e2: 99:83:28:5a:43:f7:4f:e5:53:81:dd:83:35:d5:2e:bc:7f:70: 92:2a:9c:80:89:94:99:de:b5:b6:ba:ca:c6:a8:32:3d:60:c2: 49:23:c5:21:c5:38:aa:f5:cd:92:6e:51:3a:01:1c:82:3c:13: bc:26:0f:5c:eb:53:f5:f1:5c:b1:1e:b9:da:91:f2:20:05:99: a9:a0:5b:2c:dd:9a:f0:e5:1c:b7:4d:95:69:1c:13:3e:94:a4: f2:e4:52:13:bd:4d:70:74:ec:49:0d:66:7f:07:ff:57:56:9d: c9:4b:db:c5:94:0b:5d:71:3f:73:fb:30:d2:74:5e:d3:3c:b0: 1d:0f:a4:c0:33:f3:e2:4e:83:eb:53:ed:ed:75:05:76:c6:3d: dc:0c:b0:b4:1c:e4:24:5b:a4:e5:27:7b:b2:2c:93:a5:d6:84: 7a:05:8d:fa:c9:31:c3:a6:a0:5e:cc:d3:67:8a:23:2e:71:f4: 28:9d:b3:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSK1YEeoxj8pDkVOt5BpUTGDjvhAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAwMDIwWhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTRlODdmMmQyM2ZkYzk0MDM5Mzc0ODdkOWJlNjk1Nzli YjAxMWViMWQ5ZjNkM2Q2YmQ3ZjdkNWMyZGExN2I4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCCUFkNlNGr3S1uI7y1KWn0ZVrsvR/PfaT0rRKAGtpVfYVF TiMZKO3aeqVY4c4Vixp+YXs5osI+NS5Qc6wHptMJtVF8KjJfy0QLvXSsLZKpfZwd 1uYUWFM1ovceROrt3vk3P00KHJzP891xpjlL9/8nyD381HHGQXl27W0Ear9DciMl LjP2fqX5mPVVMxTtJxWa1EPNFMKQUxaXmT/9kOS9KoaRJDjay3+vfeodG/jfFk8C +0fnTaVxq6LlV8NzA5ekkyL6jXQP111kbtT2xOqAXr144G9IjIv0bUyDgAXx6YqR lpJiFDPlD/Gn2D5ONSIBp6rXnI9prBWLtcFIKTyJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZCyel7GTg0ImCbWPgibpT9AS2EAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3ZTQ4MjczLWQ5N2YtNDVlMi05ODIwLTQ4YzA4ZDBkYjRmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEv4wDQYJKoZIhvcNAQELBQADggEBAM4Fa6X2PIcV+RraN6KuuHVMLkyx h0x8lTKlTZ3q6wfkkpEcnm5K8VunSjmE0tgBP3lqA+62OeqfhWQbVD2mZWgdNQbN +FEg4pmDKFpD90/lU4HdgzXVLrx/cJIqnICJlJnetba6ysaoMj1gwkkjxSHFOKr1 zZJuUToBHII8E7wmD1zrU/XxXLEeudqR8iAFmamgWyzdmvDlHLdNlWkcEz6UpPLk UhO9TXB07EkNZn8H/1dWnclL28WUC11xP3P7MNJ0XtM8sB0PpMAz8+JOg+tT7e11 BXbGPdwMsLQc5CRbpOUne7Isk6XWhHoFjfrJMcOmoF7M02eKIy5x9Cidsxk= -----END CERTIFICATE-----Generated at Tue Aug 5 17:18:11 2025 by rpki-client