$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa File: e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa (raw, json) Hash identifier: Wnkf8qJfb5eHpHItI2nfbqNQyOAhfzF+cV2cZvpUlaA= Subject key identifier: C0:5B:3D:D1:F3:70:21:21:C6:C3:2E:0A:CD:B3:04:F0:41:B7:24:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04E55638922FE052717A1615A7F773B78A830732 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa Signing time: Tue 10 Jun 2025 16:01:15 +0000 ROA not before: Tue 10 Jun 2025 16:01:15 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e5:56:38:92:2f:e0:52:71:7a:16:15:a7:f7:73:b7:8a:83:07:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:01:15 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=4cb2fc5efd1fce9aad3db9e40ed7a85266c8609fbf6c27f9fd02ad67621e9e40, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:9c:fd:99:3b:6c:af:7f:f7:75:99:85:7b: 87:a5:6a:2e:e1:b9:28:8e:e9:23:48:e5:cc:4e:cd: 18:8b:35:37:fa:b6:41:4e:24:e9:eb:4f:0c:46:54: 95:0d:54:d0:6f:4a:11:e6:7c:a8:04:2a:b8:41:14: 1f:9a:c9:dd:cf:1c:7e:c9:43:4b:93:04:fc:7c:75: 4d:e3:4a:9d:ff:f1:d3:77:58:31:3d:34:0f:7c:c6: da:34:ef:11:d7:60:1f:2b:1e:de:33:46:3d:b3:5a: 17:b5:26:1f:8a:ab:78:25:77:1a:cf:df:6a:d8:ba: 2b:f2:77:41:9d:62:a5:10:4e:95:d6:72:41:33:3c: 52:f5:fb:07:14:67:a6:81:14:91:5d:70:83:bf:4f: ca:c6:db:8f:7e:01:4a:56:c0:6d:ba:d9:ae:2d:6b: 73:5e:f9:b4:6e:ec:fc:f2:23:2a:e4:e3:ee:31:bd: bf:4c:ad:5c:de:65:f8:0f:61:1f:11:4a:b1:be:df: 36:da:85:01:0d:be:a0:10:78:59:30:fa:cd:b2:31: bf:5c:f4:f1:b5:a2:19:65:22:58:d1:58:3e:e2:63: 50:b0:91:84:74:4a:a1:fd:98:52:eb:e7:8e:d5:50: 18:3b:d8:ba:f1:c8:93:2d:bc:28:98:12:45:36:5d: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5B:3D:D1:F3:70:21:21:C6:C3:2E:0A:CD:B3:04:F0:41:B7:24:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.0.0/24 Signature Algorithm: sha256WithRSAEncryption d3:2e:2d:ae:a6:1e:59:ef:0b:d8:16:0c:07:3f:6c:bf:e8:cf: cc:67:34:8e:88:1b:d1:2f:68:7a:25:5d:27:bc:67:fd:a8:5c: 02:5e:ff:6b:a1:4e:0d:f8:e5:41:47:1d:1e:7a:72:0a:22:4d: b9:a0:a9:07:89:3d:f6:8f:df:a8:16:7c:30:be:bc:f0:d2:8d: 8a:81:63:24:24:53:f4:69:7c:e9:31:d4:9a:17:8c:0c:bb:23: 9d:54:64:3d:ed:28:31:0d:5b:72:3e:6e:36:7d:72:dc:2f:40: cc:46:59:d3:42:b8:16:ae:9a:22:75:2e:24:8e:47:bb:df:eb: cc:4f:c2:41:dd:cd:af:d3:b7:a2:c5:c1:cb:7c:fc:98:9b:c2: 4f:29:97:34:69:73:8a:8d:4a:d6:0e:45:9f:46:79:1f:67:70: d2:ae:ae:28:9e:60:62:b7:18:89:f7:e6:e6:9d:2e:d7:93:80: b7:11:fd:2f:2b:07:aa:6a:4e:a0:35:41:79:57:de:93:a7:1e: 6a:09:29:17:f0:08:ef:24:db:8b:6e:8b:ec:5e:33:e3:6b:7a: 1b:3c:f2:83:b6:bb:3c:5f:af:d8:4e:1b:fe:f9:29:f9:f5:63: b5:6f:d6:d0:f3:aa:f3:69:33:72:fa:a2:c6:9f:83:d3:89:d2: be:cf:14:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBOVWOJIv4FJxehYVp/dzt4qDBzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYwMTE1WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2IyZmM1ZWZkMWZjZTlhYWQzZGI5ZTQwZWQ3YTg1MjY2 Yzg2MDlmYmY2YzI3ZjlmZDAyYWQ2NzYyMWU5ZTQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5wZz9mTtsr3/3dZmFe4elai7huSiO6SNI5cxOzRiLNTf6 tkFOJOnrTwxGVJUNVNBvShHmfKgEKrhBFB+ayd3PHH7JQ0uTBPx8dU3jSp3/8dN3 WDE9NA98xto07xHXYB8rHt4zRj2zWhe1Jh+Kq3gldxrP32rYuivyd0GdYqUQTpXW ckEzPFL1+wcUZ6aBFJFdcIO/T8rG249+AUpWwG262a4ta3Ne+bRu7PzyIyrk4+4x vb9MrVzeZfgPYR8RSrG+3zbahQENvqAQeFkw+s2yMb9c9PG1ohllIljRWD7iY1Cw kYR0SqH9mFLr547VUBg72LrxyJMtvCiYEkU2Xe3vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwFs90fNwISHGwy4KzbME8EG3JKkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxNjY5MTJiLWRkOWYtNGIzZC1hODI0LTA4ODNmY2Y0ZGM5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEgAwDQYJKoZIhvcNAQELBQADggEBANMuLa6mHlnvC9gWDAc/bL/oz8xn NI6IG9EvaHolXSe8Z/2oXAJe/2uhTg345UFHHR56cgoiTbmgqQeJPfaP36gWfDC+ vPDSjYqBYyQkU/RpfOkx1JoXjAy7I51UZD3tKDENW3I+bjZ9ctwvQMxGWdNCuBau miJ1LiSOR7vf68xPwkHdza/Tt6LFwct8/Jibwk8plzRpc4qNStYORZ9GeR9ncNKu riieYGK3GIn35uadLteTgLcR/S8rB6pqTqA1QXlX3pOnHmoJKRfwCO8k24tui+xe M+Nrehs88oO2uzxfr9hOG/75Kfn1Y7Vv1tDzqvNpM3L6osafg9OJ0r7PFPQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:05:20 2025 by rpki-client