$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f608eab0-8121-4d92-b066-221899ce5193.roa File: f608eab0-8121-4d92-b066-221899ce5193.roa (raw, json) Hash identifier: ADs3sIBsQkB5kbmNcKpZ0NYE+4Q1SHwqzHvj021mKRM= Subject key identifier: C6:C5:C4:B0:C9:0E:D7:76:40:E8:A6:1E:7B:6D:06:4A:AE:F5:C4:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C08E5E8AEBA70A7A5DC57755BB3EEC9DADC9FEF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f608eab0-8121-4d92-b066-221899ce5193.roa Signing time: Sat 02 Aug 2025 00:30:29 +0000 ROA not before: Sat 02 Aug 2025 00:30:29 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 108.136.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:08:e5:e8:ae:ba:70:a7:a5:dc:57:75:5b:b3:ee:c9:da:dc:9f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 2 00:30:29 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=92cc0ac43871955e6d2342099505ffd2b3e1b9694d5b10bb95fbd7738945604e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:ff:9d:c5:f8:07:5e:ec:eb:c9:cf:2c:63: a0:f0:1c:ed:1f:31:60:9c:bb:fe:72:8b:2e:55:00: cb:9f:3e:fe:b8:e1:27:7c:f5:a3:d5:6f:df:12:e3: 8b:43:37:5f:3a:28:61:4c:81:cc:6c:0d:ed:ba:9a: 60:94:dc:33:b5:51:8f:82:7b:d4:49:e7:e2:f0:03: 89:0d:b6:80:40:81:be:cc:aa:39:2c:4a:69:00:0e: ed:08:0e:2f:96:dd:51:ac:7f:89:f3:dc:33:31:ad: 81:79:b0:89:2e:22:f4:f8:f1:71:96:a0:f5:ca:8c: ce:24:47:ff:d5:40:39:19:74:71:fd:36:e6:c7:db: d2:c5:c6:77:87:f4:51:3f:33:9f:e0:af:45:5d:dc: eb:01:b0:b7:43:cf:2d:1d:64:74:d6:2f:12:68:a1: 02:d9:bb:29:e0:fd:4a:0d:0e:fa:99:cd:b3:a4:8e: 36:3c:c9:a0:52:fb:e2:d9:14:84:96:ef:88:c8:b9: 65:67:8e:ec:bf:fd:31:b1:15:7c:81:45:76:32:4b: a5:21:49:00:23:44:55:ac:1c:aa:58:c1:83:f6:f7: c7:b0:cb:ea:f5:d5:dc:6a:79:3d:13:20:96:c5:6f: 53:e6:23:7e:75:7e:18:37:da:d1:05:60:37:62:59: 66:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C5:C4:B0:C9:0E:D7:76:40:E8:A6:1E:7B:6D:06:4A:AE:F5:C4:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f608eab0-8121-4d92-b066-221899ce5193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.136.64.0/18 Signature Algorithm: sha256WithRSAEncryption 2f:1d:58:6b:1c:fe:91:7b:15:5b:90:01:d2:95:82:a1:cf:be: 1e:cf:77:78:6b:09:a5:ad:a5:0d:8d:63:c9:d3:11:f5:0a:0c: 3a:63:c1:9b:f7:c8:a6:17:fe:b0:d5:bb:4c:d8:92:49:12:a2: 1b:ee:73:2b:ee:73:fa:77:5a:03:42:2e:ab:3f:cd:df:c1:cb: 99:54:b4:9d:70:51:82:80:0f:be:5a:f7:ce:01:c9:c2:19:d8: 6b:ab:8c:00:90:98:0c:51:bd:e5:6b:62:00:b9:c4:41:79:6a: a8:f1:a3:8f:27:e1:75:d6:b4:22:6e:b6:63:a1:38:05:c5:24: d2:e2:17:a2:c7:ff:c7:3a:25:f9:17:3c:62:ac:85:25:51:23: 9e:c0:0a:d0:14:b4:8a:12:a0:82:70:75:c4:72:5f:b4:75:49: 29:d4:d6:19:2c:6b:ac:38:38:80:4a:89:0c:20:c5:62:e5:21: 07:f8:46:95:5a:48:91:8b:a7:43:5e:6b:6d:01:7f:ea:76:16: 8f:e3:68:45:12:69:f9:f2:db:03:48:b4:e2:9d:08:d6:60:dc: 9c:4a:44:0e:5b:ee:a1:f7:82:9d:cb:05:6f:6b:ab:9d:cf:e6: 55:a8:1a:7d:4b:c6:50:f5:52:bb:94:d1:54:ec:37:ef:a3:d1: 26:5a:d9:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXAjl6K66cKel3Fd1W7Puydrcn+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAyMDAzMDI5WhcNMjUwOTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MmNjMGFjNDM4NzE5NTVlNmQyMzQyMDk5NTA1ZmZkMmIz ZTFiOTY5NGQ1YjEwYmI5NWZiZDc3Mzg5NDU2MDRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRt/+dxfgHXuzryc8sY6DwHO0fMWCcu/5yiy5VAMufPv64 4Sd89aPVb98S44tDN186KGFMgcxsDe26mmCU3DO1UY+Ce9RJ5+LwA4kNtoBAgb7M qjksSmkADu0IDi+W3VGsf4nz3DMxrYF5sIkuIvT48XGWoPXKjM4kR//VQDkZdHH9 NubH29LFxneH9FE/M5/gr0Vd3OsBsLdDzy0dZHTWLxJooQLZuyng/UoNDvqZzbOk jjY8yaBS++LZFISW74jIuWVnjuy//TGxFXyBRXYyS6UhSQAjRFWsHKpYwYP298ew y+r11dxqeT0TIJbFb1PmI351fhg32tEFYDdiWWYLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxsXEsMkO13ZA6KYee20GSq71xCYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2MDhlYWIwLTgxMjEtNGQ5Mi1iMDY2LTIyMTg5OWNlNTE5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZsiEAwDQYJKoZIhvcNAQELBQADggEBAC8dWGsc/pF7FVuQAdKVgqHPvh7P d3hrCaWtpQ2NY8nTEfUKDDpjwZv3yKYX/rDVu0zYkkkSohvucyvuc/p3WgNCLqs/ zd/By5lUtJ1wUYKAD75a984BycIZ2GurjACQmAxRveVrYgC5xEF5aqjxo48n4XXW tCJutmOhOAXFJNLiF6LH/8c6JfkXPGKshSVRI57ACtAUtIoSoIJwdcRyX7R1SSnU 1hksa6w4OIBKiQwgxWLlIQf4RpVaSJGLp0Nea20Bf+p2Fo/jaEUSafny2wNItOKd CNZg3JxKRA5b7qH3gp3LBW9rq53P5lWoGn1LxlD1UruU0VTsN++j0SZa2QY= -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:52 2025 by rpki-client