$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb3d2ec8-e99f-4a41-be5a-a6596b726434.roa File: cb3d2ec8-e99f-4a41-be5a-a6596b726434.roa (raw, json) Hash identifier: D0dAJoVdBTbKxPiaNPifQlu7/XXJgBOxIG7edi5D2Jg= Subject key identifier: 8C:E8:03:85:52:86:73:BF:77:E6:2F:C1:8B:52:4C:DD:5C:5A:2F:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 108C70E58D07D90228373C1894C4531BA7B5031B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb3d2ec8-e99f-4a41-be5a-a6596b726434.roa Signing time: Tue 03 Jun 2025 00:00:25 +0000 ROA not before: Tue 03 Jun 2025 00:00:25 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8c:70:e5:8d:07:d9:02:28:37:3c:18:94:c4:53:1b:a7:b5:03:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 3 00:00:25 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=62e3a695eb61003b6992aea452a0beae84669a91e6b0f95d2ebb0a770e56dd8d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:42:03:50:6a:df:db:a0:e0:09:34:b8:c2: 34:85:b8:ae:90:64:a6:68:15:a0:8d:b7:16:3c:1c: c6:d8:97:cc:ac:bc:f9:ce:d3:8c:5f:5c:d3:19:2a: 78:68:92:7f:a2:ee:b2:ae:a4:9b:d8:8d:e7:3c:37: a5:05:90:ce:02:de:1d:e7:94:06:3f:26:61:d1:b3: 5c:7b:50:1c:4c:86:5f:5b:b1:6b:e1:d6:a5:8b:85: f2:56:43:e9:db:93:ba:d4:f3:2d:a1:cd:2a:cf:32: f2:52:e1:87:00:5f:bb:73:bc:fe:55:5e:20:d3:88: 99:a6:14:84:98:cd:1b:6d:58:39:34:e5:32:8d:20: 1b:2e:b9:aa:1f:da:88:33:28:9c:40:5f:37:5d:f2: ac:b3:f4:b8:c6:d6:74:73:19:b7:2c:43:14:4e:49: ed:d7:5c:c8:40:78:8a:76:e1:86:3c:98:99:31:80: b8:0d:6d:eb:fb:08:20:51:fa:8a:33:f2:30:ed:be: 6e:25:c5:49:d7:7c:01:40:44:a0:94:0b:5c:16:8a: a6:7d:c8:a4:1c:6d:b5:35:06:9f:65:1f:a9:e5:3e: eb:b2:b1:6e:9a:0a:40:1d:3f:12:45:68:71:a2:ee: 4d:12:32:7c:35:a3:cd:20:5e:8f:1c:2a:ab:41:75: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E8:03:85:52:86:73:BF:77:E6:2F:C1:8B:52:4C:DD:5C:5A:2F:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb3d2ec8-e99f-4a41-be5a-a6596b726434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.130.0/24 Signature Algorithm: sha256WithRSAEncryption 54:85:40:32:30:c4:e2:a1:ad:68:5b:9a:d4:9a:6c:06:97:ce: 27:d7:f0:8d:bc:8e:43:4d:1a:21:f9:3b:b9:c9:3c:d4:44:f2: c5:dd:b7:e2:ff:d3:64:e5:31:95:b3:72:d8:b7:8a:25:40:58: 0e:ec:31:0a:19:7f:fa:35:a7:f4:e9:44:a9:e0:f3:39:81:3c: 24:8d:b1:db:be:40:03:2f:96:6c:32:f1:a9:8f:51:49:c5:b1: bd:01:92:09:17:db:2b:15:f1:ea:24:19:58:f3:f1:dc:b0:fb: 6f:39:46:16:4f:47:88:eb:e9:c4:0a:0a:1b:94:27:f5:a8:ef: 32:68:88:d9:64:13:e1:ad:d9:1d:86:86:62:c8:f7:a8:51:82: c2:21:36:8f:2a:cd:4a:f6:90:ab:b1:a3:94:e8:bc:bc:02:a8: ed:12:b6:ab:fe:56:67:f1:8a:6c:2d:80:2e:ac:e8:61:e5:ab: 02:bc:6f:df:e2:2d:11:02:d8:4b:3d:0d:de:ba:c3:ec:38:df: e0:43:5b:fd:e2:fc:90:f9:6a:89:b4:f5:5a:94:d3:fe:03:80: a4:70:1f:b3:7c:aa:20:d9:94:8a:37:48:ad:2b:31:0a:c2:dc: e2:22:a8:54:6c:52:d7:1a:3a:1d:86:4d:62:9f:b1:f5:ac:aa: 98:3c:49:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEIxw5Y0H2QIoNzwYlMRTG6e1AxswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMDAwMDI1WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmUzYTY5NWViNjEwMDNiNjk5MmFlYTQ1MmEwYmVhZTg0 NjY5YTkxZTZiMGY5NWQyZWJiMGE3NzBlNTZkZDhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6sUIDUGrf26DgCTS4wjSFuK6QZKZoFaCNtxY8HMbYl8ys vPnO04xfXNMZKnhokn+i7rKupJvYjec8N6UFkM4C3h3nlAY/JmHRs1x7UBxMhl9b sWvh1qWLhfJWQ+nbk7rU8y2hzSrPMvJS4YcAX7tzvP5VXiDTiJmmFISYzRttWDk0 5TKNIBsuuaof2ogzKJxAXzdd8qyz9LjG1nRzGbcsQxROSe3XXMhAeIp24YY8mJkx gLgNbev7CCBR+ooz8jDtvm4lxUnXfAFARKCUC1wWiqZ9yKQcbbU1Bp9lH6nlPuuy sW6aCkAdPxJFaHGi7k0SMnw1o80gXo8cKqtBdVKTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjOgDhVKGc7935i/Bi1JM3VxaL/IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiM2QyZWM4LWU5OWYtNGE0MS1iZTVhLWE2NTk2YjcyNjQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEoIwDQYJKoZIhvcNAQELBQADggEBAFSFQDIwxOKhrWhbmtSabAaXzifX 8I28jkNNGiH5O7nJPNRE8sXdt+L/02TlMZWzcti3iiVAWA7sMQoZf/o1p/TpRKng 8zmBPCSNsdu+QAMvlmwy8amPUUnFsb0BkgkX2ysV8eokGVjz8dyw+285RhZPR4jr 6cQKChuUJ/Wo7zJoiNlkE+Gt2R2GhmLI96hRgsIhNo8qzUr2kKuxo5TovLwCqO0S tqv+VmfximwtgC6s6GHlqwK8b9/iLREC2Es9Dd66w+w43+BDW/3i/JD5aom09VqU 0/4DgKRwH7N8qiDZlIo3SK0rMQrC3OIiqFRsUtcaOh2GTWKfsfWsqpg8SU4= -----END CERTIFICATE-----Generated at Sun Jun 15 09:13:30 2025 by rpki-client