$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c14701-b1a8-4d3d-af67-4746f890a015.roa File: 34c14701-b1a8-4d3d-af67-4746f890a015.roa (raw, json) Hash identifier: baXWzPBnx6iptPUTMrN8OUpEpYIfgqGcipqmLjHcf6w= Subject key identifier: 9E:69:43:17:9B:EC:7E:32:EE:37:11:14:55:47:02:97:15:14:27:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77A817D222B84E37ECF8F8167B529E1F942F8C38 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c14701-b1a8-4d3d-af67-4746f890a015.roa Signing time: Mon 18 Aug 2025 15:11:34 +0000 ROA not before: Mon 18 Aug 2025 15:11:34 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a8:17:d2:22:b8:4e:37:ec:f8:f8:16:7b:52:9e:1f:94:2f:8c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:11:34 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=a5be92d59c903ca5b3d160333b7bb1267375e96fb38e3b1c9a253190c6233c93, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:f8:86:8f:09:3b:5e:4c:85:e3:fa:42:a8: b7:07:da:80:64:d3:49:08:03:9e:fc:ca:6b:45:99: c8:62:49:2c:09:42:1e:b5:4d:d0:71:78:c8:5f:2e: e3:60:4c:56:7c:dd:cf:4e:1f:16:e1:73:b0:6b:b2: 00:d2:68:6c:f6:0b:63:49:2b:86:ca:88:fb:3a:e9: a6:94:da:6a:a3:1a:68:7f:ce:b7:7e:a2:ff:5f:d2: 6e:0b:87:5b:18:de:5c:82:55:44:92:41:43:d0:29: 18:56:98:a2:b7:c6:20:47:ec:c3:44:a3:41:f2:ea: 56:a5:56:79:c9:b7:78:40:b7:8e:9a:19:32:f1:41: 5d:9b:a5:7c:56:59:82:65:65:7c:af:67:67:4a:9d: 77:a9:11:20:f4:38:6f:b3:90:14:50:e2:1f:d3:7f: 28:74:0a:35:96:51:6a:40:b7:f5:73:0f:ec:67:39: b1:6e:7e:fd:fb:0b:4b:42:d3:63:34:1d:71:e3:b6: ae:2d:68:59:ee:aa:3d:26:0f:e1:bd:6a:ea:42:68: 04:67:3e:dd:f8:d5:44:1a:ef:f2:b2:5d:68:b8:6f: 7b:2c:28:29:49:d3:9d:a5:e4:39:3b:a7:d9:62:14: 3f:0d:6d:69:e2:36:10:22:f7:54:38:79:f0:78:63: 6d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:69:43:17:9B:EC:7E:32:EE:37:11:14:55:47:02:97:15:14:27:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c14701-b1a8-4d3d-af67-4746f890a015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.134.0/23 Signature Algorithm: sha256WithRSAEncryption bf:a1:66:70:66:05:8f:ec:d8:52:f6:6a:e9:04:0f:0d:0c:d4: 99:cd:dc:c0:39:0c:2d:92:bf:8f:cc:b1:c2:33:76:c4:df:97: 18:65:dc:8f:e5:b3:2c:50:68:92:87:f5:89:f4:1e:46:70:2e: ed:98:31:da:27:83:ea:4f:48:1d:17:31:6c:a0:1b:89:d4:ff: de:d3:6c:20:7d:9c:56:5c:54:10:14:f8:28:2b:5c:a8:1f:91: 98:df:d7:87:53:54:42:33:09:c5:5d:3e:4a:9b:3e:76:30:0e: 35:e4:86:9c:2b:57:b4:15:62:7b:4d:0c:9f:c0:38:d9:c1:18: f4:c7:35:6b:e9:e9:87:2d:da:2c:41:02:ae:4d:d0:f2:fa:4d: ca:9f:16:3a:ef:a6:1b:f9:81:e1:a8:93:df:96:6c:69:8a:ec: 7f:6f:c1:47:47:c7:ca:71:a6:ce:a7:7e:e5:90:67:f4:0b:3f: 58:bb:16:a3:f3:fc:fb:78:c4:96:e7:0c:c1:4d:82:65:28:35: ca:a8:ce:aa:62:0c:5d:c2:29:e9:a0:8c:0b:56:54:16:ad:ce: b8:c6:d8:73:52:8d:40:77:66:d8:74:4e:e9:a3:74:76:69:01: 8c:0a:17:52:7e:13:ec:a1:a0:1a:91:87:13:22:8e:c7:1d:93: 9c:84:3c:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd6gX0iK4Tjfs+PgWe1KeH5QvjDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUxMTM0WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWJlOTJkNTljOTAzY2E1YjNkMTYwMzMzYjdiYjEyNjcz NzVlOTZmYjM4ZTNiMWM5YTI1MzE5MGM2MjMzYzkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGiPiGjwk7XkyF4/pCqLcH2oBk00kIA578ymtFmchiSSwJ Qh61TdBxeMhfLuNgTFZ83c9OHxbhc7BrsgDSaGz2C2NJK4bKiPs66aaU2mqjGmh/ zrd+ov9f0m4Lh1sY3lyCVUSSQUPQKRhWmKK3xiBH7MNEo0Hy6lalVnnJt3hAt46a GTLxQV2bpXxWWYJlZXyvZ2dKnXepESD0OG+zkBRQ4h/Tfyh0CjWWUWpAt/VzD+xn ObFufv37C0tC02M0HXHjtq4taFnuqj0mD+G9aupCaARnPt341UQa7/KyXWi4b3ss KClJ052l5Dk7p9liFD8NbWniNhAi91Q4efB4Y203AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnmlDF5vsfjLuNxEUVUcClxUUJ+AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0YzE0NzAxLWIxYTgtNGQzZC1hZjY3LTQ3NDZmODkwYTAxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoYwDQYJKoZIhvcNAQELBQADggEBAL+hZnBmBY/s2FL2aukEDw0M1JnN 3MA5DC2Sv4/MscIzdsTflxhl3I/lsyxQaJKH9Yn0HkZwLu2YMdong+pPSB0XMWyg G4nU/97TbCB9nFZcVBAU+CgrXKgfkZjf14dTVEIzCcVdPkqbPnYwDjXkhpwrV7QV YntNDJ/AONnBGPTHNWvp6Yct2ixBAq5N0PL6TcqfFjrvphv5geGok9+WbGmK7H9v wUdHx8pxps6nfuWQZ/QLP1i7FqPz/Pt4xJbnDMFNgmUoNcqozqpiDF3CKemgjAtW VBatzrjG2HNSjUB3Zth0TumjdHZpAYwKF1J+E+yhoBqRhxMijscdk5yEPAM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:33 2025 by rpki-client