$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c977a0d3-92fd-44ae-90a6-a6ccf49130b8.roa File: c977a0d3-92fd-44ae-90a6-a6ccf49130b8.roa (raw, json) Hash identifier: EcxPSsWTo0LuqoCfAKdcMZL6MFYaafuxbtWJupEX0tU= Subject key identifier: 6F:C6:D6:51:98:85:C8:2C:06:6F:E1:CC:0F:CC:64:D1:1A:D9:DE:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 135D5CAB393D6B8D39B0CBD0DBAAB4A03E2CAB9D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c977a0d3-92fd-44ae-90a6-a6ccf49130b8.roa Signing time: Sat 19 Jul 2025 00:00:31 +0000 ROA not before: Sat 19 Jul 2025 00:00:31 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5d:5c:ab:39:3d:6b:8d:39:b0:cb:d0:db:aa:b4:a0:3e:2c:ab:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:00:31 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=8344dd7568492737cacb26901db3255b22f42956383c391664978b39b6568e8f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:47:cc:ba:bd:43:80:ed:f8:22:62:38:c9: 3d:9b:33:de:89:75:ab:0f:06:25:13:da:06:76:c6: 4f:cf:14:74:6b:86:f2:b4:9c:b5:3f:26:07:44:90: 88:95:8f:b6:95:cc:28:53:87:ad:d2:39:63:36:12: e7:b1:6b:6e:da:f7:97:f1:11:a0:c5:9c:52:fa:cd: 94:a9:4e:24:6c:37:01:79:0b:26:ab:17:7d:a9:7c: 69:22:7a:92:c7:24:89:53:ac:7b:1e:26:c5:97:80: 03:7f:67:b9:20:fb:08:fb:85:48:71:71:15:9f:17: 01:ed:41:60:8f:d2:68:d7:6f:86:f8:f3:9a:bd:59: 48:d8:c0:79:68:a9:e7:0e:c4:99:66:8a:a6:a3:e2: 5e:58:db:53:9c:65:ea:dc:96:8f:4b:de:2e:18:e2: bf:60:75:cf:1b:c2:84:4a:f9:13:01:89:39:e1:7f: 86:9d:16:fe:c1:42:74:97:bb:0c:a9:cb:cb:31:a1: b7:39:f3:b8:12:c1:e0:75:cf:77:3b:5c:94:88:92: 41:0b:5f:65:31:0f:e5:8b:46:0c:ed:cf:93:e7:41: cc:e3:e5:4a:50:ed:56:d5:ee:74:ac:5e:ba:ae:b6: 89:45:75:0f:ae:e1:50:ca:a6:e0:3b:97:17:94:d3: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C6:D6:51:98:85:C8:2C:06:6F:E1:CC:0F:CC:64:D1:1A:D9:DE:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c977a0d3-92fd-44ae-90a6-a6ccf49130b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.20.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:6f:56:a3:e8:86:cf:18:29:88:91:32:08:96:e8:fb:93:a4: 7f:e9:58:2c:2f:a0:a5:32:b1:e3:35:6f:5a:13:39:58:d5:2c: 85:3e:c4:32:6e:b4:ca:11:91:f8:ce:cb:3b:82:71:c5:4d:86: 9c:46:7f:5c:11:bf:a4:40:70:6b:de:0a:de:13:8e:94:13:f6: d7:de:66:32:9e:1b:a4:5d:05:8c:46:3e:e6:24:fc:53:53:36: f2:35:6f:43:02:b5:3e:42:be:56:2e:be:30:3b:e3:53:03:65: 02:52:c4:0e:27:bc:d2:6d:1b:b9:0a:d9:e5:5f:88:b4:76:8e: 04:f6:ea:e1:0f:3b:60:74:58:89:1d:05:3e:6c:b4:31:24:bb: f0:af:cc:42:36:35:3d:05:1f:eb:fc:11:59:bd:fc:a8:4c:95: 2b:a4:b8:65:e8:3f:dd:42:91:95:f9:ed:4d:86:cd:d5:01:43: cb:1d:c5:4f:66:20:f6:a6:f3:85:c6:3f:48:a8:fb:ad:14:71: a9:51:7c:7e:c7:34:4e:2d:f5:eb:bf:b1:70:82:cf:b2:74:d0: 93:d6:41:6e:f8:e9:58:48:c2:84:13:59:f5:9e:26:91:b4:3d: 23:ea:15:f1:2e:75:38:6f:a1:6f:93:40:bf:a6:2c:43:5a:31: 18:ea:8b:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE11cqzk9a405sMvQ26q0oD4sq50wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAwMDMxWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzQ0ZGQ3NTY4NDkyNzM3Y2FjYjI2OTAxZGIzMjU1YjIy ZjQyOTU2MzgzYzM5MTY2NDk3OGIzOWI2NTY4ZThmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE3EfMur1DgO34ImI4yT2bM96JdasPBiUT2gZ2xk/PFHRr hvK0nLU/JgdEkIiVj7aVzChTh63SOWM2Euexa27a95fxEaDFnFL6zZSpTiRsNwF5 CyarF32pfGkiepLHJIlTrHseJsWXgAN/Z7kg+wj7hUhxcRWfFwHtQWCP0mjXb4b4 85q9WUjYwHloqecOxJlmiqaj4l5Y21OcZerclo9L3i4Y4r9gdc8bwoRK+RMBiTnh f4adFv7BQnSXuwypy8sxobc587gSweB1z3c7XJSIkkELX2UxD+WLRgztz5PnQczj 5UpQ7VbV7nSsXrqutolFdQ+u4VDKpuA7lxeU0yZ3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb8bWUZiFyCwGb+HMD8xk0RrZ3pkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5NzdhMGQzLTkyZmQtNDRhZS05MGE2LWE2Y2NmNDkxMzBiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKIEhQwDQYJKoZIhvcNAQELBQADggEBAAtvVqPohs8YKYiRMgiW6PuTpH/p WCwvoKUyseM1b1oTOVjVLIU+xDJutMoRkfjOyzuCccVNhpxGf1wRv6RAcGveCt4T jpQT9tfeZjKeG6RdBYxGPuYk/FNTNvI1b0MCtT5CvlYuvjA741MDZQJSxA4nvNJt G7kK2eVfiLR2jgT26uEPO2B0WIkdBT5stDEku/CvzEI2NT0FH+v8EVm9/KhMlSuk uGXoP91CkZX57U2GzdUBQ8sdxU9mIPam84XGP0io+60UcalRfH7HNE4t9eu/sXCC z7J00JPWQW746VhIwoQTWfWeJpG0PSPqFfEudThvoW+TQL+mLENaMRjqi4g= -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:04 2025 by rpki-client