$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa File: ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa (raw, json) Hash identifier: DJhyZ7GSdFCvPyYBtI8aFDmZ1QoHa4m1UW8J/ffZQHc= Subject key identifier: 03:14:24:20:E3:7C:6B:FF:5F:A8:2C:C8:F1:AD:90:EC:99:34:F6:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 513B28765472BFDCDCE7A9EFBECCF649A8DFF84C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa Signing time: Fri 01 Aug 2025 15:00:25 +0000 ROA not before: Fri 01 Aug 2025 15:00:25 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3b:28:76:54:72:bf:dc:dc:e7:a9:ef:be:cc:f6:49:a8:df:f8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 15:00:25 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=3a91e5b4a90b0a02b6b54074d30f216f5b01d626f939eeba548f3fb2fdc10131, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:49:40:4c:21:57:1c:d6:6e:bc:d9:7e:1d: 22:60:aa:96:a4:72:28:a8:37:de:2c:32:25:4c:22: bb:09:0c:fa:6f:aa:57:e5:33:ae:1c:fa:e4:80:ca: a8:1a:f3:01:70:a3:84:f5:db:06:b6:59:37:59:9a: a7:5a:28:c2:0f:d4:5c:5c:41:5f:8b:d8:06:7f:20: db:39:f4:7f:d6:f4:ec:80:24:85:e4:1b:01:52:24: 9d:b5:b2:07:fd:13:55:6d:f8:37:de:8e:c9:c6:6e: 6b:52:ca:ed:3b:5e:82:01:32:0c:14:0b:28:bb:f8: 2a:87:d6:c1:ec:6b:7e:92:f8:e1:02:2a:8c:92:9a: 8f:45:80:79:f2:23:5b:5e:16:17:c2:18:6b:98:9b: 6b:f2:39:58:37:43:91:4e:d2:68:1a:69:be:a0:31: 13:21:78:45:ba:e4:48:50:4b:3f:c9:aa:ac:b5:0a: d0:d1:25:e6:e7:69:0b:17:b1:48:b2:8b:c3:18:5d: b1:c5:5f:b6:a6:3d:24:e2:cc:27:ab:15:79:db:55: 0f:4a:1b:7d:cf:4a:f5:bf:24:f3:fc:6d:44:48:1a: cd:30:35:10:24:a2:ce:12:35:7d:06:20:c4:c8:2d: 04:76:ec:a4:fa:aa:d8:cf:b6:9b:a9:df:af:dc:93: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:14:24:20:E3:7C:6B:FF:5F:A8:2C:C8:F1:AD:90:EC:99:34:F6:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.1.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:97:13:c6:2b:91:21:a8:cb:8c:e7:9c:4b:2c:d9:e1:ac:00: 7b:00:8d:59:54:60:94:ae:4a:78:b3:f0:db:56:f8:b4:fd:e4: ca:12:fd:1f:b3:f6:fe:e5:fd:ad:64:73:d6:73:2e:6a:31:ad: d1:96:89:c8:5c:e4:e5:06:60:69:e5:10:61:7e:78:09:d8:54: 50:29:c9:38:92:a3:cf:93:af:e1:bf:32:8b:69:51:24:3f:06: 06:2b:2a:ba:5b:9d:60:d2:60:9a:7a:cf:dd:c5:a0:bc:f2:3a: 38:04:83:55:c2:31:fe:25:7d:bd:5f:b7:6f:ff:54:96:7b:4c: 10:5f:36:55:f7:07:29:7b:b4:76:af:ab:6b:6f:1a:f2:a5:32: 12:92:93:77:08:86:55:fc:15:67:35:10:18:0f:f5:8e:f7:d4: d6:0d:6a:78:88:08:5e:7b:7b:58:0c:94:a5:68:5d:45:67:96: ad:bf:17:f3:8d:8e:8a:d0:f8:5c:d2:01:44:9a:62:77:46:be: 87:99:0e:ae:5f:f2:a2:70:68:da:e2:fd:dc:44:57:5e:db:30: 33:49:95:f2:55:4b:ca:11:82:c9:10:a6:f1:d9:ba:06:fe:c7: 87:d7:42:c1:6d:4e:ea:10:93:c1:e3:1b:ec:8c:87:bd:d2:c6: a2:05:30:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUTsodlRyv9zc56nvvsz2Sajf+EwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTUwMDI1WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTkxZTViNGE5MGIwYTAyYjZiNTQwNzRkMzBmMjE2ZjVi MDFkNjI2ZjkzOWVlYmE1NDhmM2ZiMmZkYzEwMTMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQjUlATCFXHNZuvNl+HSJgqpakciioN94sMiVMIrsJDPpv qlflM64c+uSAyqga8wFwo4T12wa2WTdZmqdaKMIP1FxcQV+L2AZ/INs59H/W9OyA JIXkGwFSJJ21sgf9E1Vt+DfejsnGbmtSyu07XoIBMgwUCyi7+CqH1sHsa36S+OEC KoySmo9FgHnyI1teFhfCGGuYm2vyOVg3Q5FO0mgaab6gMRMheEW65EhQSz/Jqqy1 CtDRJebnaQsXsUiyi8MYXbHFX7amPSTizCerFXnbVQ9KG33PSvW/JPP8bURIGs0w NRAkos4SNX0GIMTILQR27KT6qtjPtpup36/ck3WFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAxQkION8a/9fqCzI8a2Q7Jk09oYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkN2I3MDY1LWNmM2UtNDUyMC05MTY2LTJjNjMyMmYzZDNkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEgEwDQYJKoZIhvcNAQELBQADggEBAI+XE8YrkSGoy4znnEss2eGsAHsA jVlUYJSuSniz8NtW+LT95MoS/R+z9v7l/a1kc9ZzLmoxrdGWichc5OUGYGnlEGF+ eAnYVFApyTiSo8+Tr+G/MotpUSQ/BgYrKrpbnWDSYJp6z93FoLzyOjgEg1XCMf4l fb1ft2//VJZ7TBBfNlX3Byl7tHavq2tvGvKlMhKSk3cIhlX8FWc1EBgP9Y731NYN aniICF57e1gMlKVoXUVnlq2/F/ONjorQ+FzSAUSaYndGvoeZDq5f8qJwaNri/dxE V17bMDNJlfJVS8oRgskQpvHZugb+x4fXQsFtTuoQk8HjG+yMh73SxqIFMH4= -----END CERTIFICATE-----Generated at Fri Aug 8 10:20:52 2025 by rpki-client