$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449e5089-459b-438a-97f2-c0a39c030a5f.roa File: 449e5089-459b-438a-97f2-c0a39c030a5f.roa (raw, json) Hash identifier: /b+s3nKEpgof+ydBkvz8ojVW1xDtx/4lRKdGCDN+rc0= Subject key identifier: C9:BF:4B:3F:56:F2:3A:B7:20:D6:7D:00:A6:DF:1A:0D:53:89:5E:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1957C9F01D95982B92A0EEE8DF7ED67555F5AA19 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449e5089-459b-438a-97f2-c0a39c030a5f.roa Signing time: Mon 18 Aug 2025 15:00:32 +0000 ROA not before: Mon 18 Aug 2025 15:00:32 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:57:c9:f0:1d:95:98:2b:92:a0:ee:e8:df:7e:d6:75:55:f5:aa:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:00:32 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=39562d849af71c62e21226e3a83ef057ee453db62799851d68af829db3abb06c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:4a:5e:f5:d7:08:94:cb:d2:4e:07:c6:a0: 95:38:51:a9:eb:6c:cd:1a:c2:1e:6c:b8:ed:bf:7d: 17:50:e9:01:29:30:8d:6c:15:58:55:1e:78:02:21: c2:bb:d0:e0:a2:bd:a3:a3:b9:ac:20:bc:3c:a2:b3: 65:32:3f:34:e7:0f:42:fe:57:c2:cc:48:5a:11:4e: f3:2e:d3:ac:9d:3d:b1:fc:b6:d8:db:7c:40:05:27: 9c:1f:ea:62:9d:15:f6:4d:29:31:ed:b3:dc:29:4b: 60:6f:4a:10:04:e6:24:ec:62:81:0b:d6:3b:b9:d8: 5c:06:c7:9a:cf:f8:06:6b:2c:4d:11:f8:9a:2e:1c: 98:fe:81:14:46:22:18:6f:b9:8e:74:1c:bf:c3:f2: 1e:6c:aa:f2:56:a3:17:05:1b:78:37:06:6e:82:b6: 4b:f6:94:67:fb:3f:9b:7c:ef:fa:eb:58:29:b8:63: 56:91:7f:ce:3f:c1:a0:d9:43:c5:7e:38:f3:bf:ab: 00:eb:ba:bf:6b:aa:d9:78:67:f1:0c:a0:8e:12:39: e5:6b:48:74:1d:80:50:77:9e:c2:29:74:d0:f2:fd: 4f:08:6e:90:39:9f:22:0b:7f:0b:74:78:4f:18:09: 72:48:35:07:9b:75:49:5b:c4:a0:c1:20:99:f0:02: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BF:4B:3F:56:F2:3A:B7:20:D6:7D:00:A6:DF:1A:0D:53:89:5E:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449e5089-459b-438a-97f2-c0a39c030a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.138.0/23 Signature Algorithm: sha256WithRSAEncryption 78:c7:77:dd:72:28:ae:51:e3:b2:70:19:ca:81:89:0a:16:f9: 92:fa:17:e9:b2:0d:29:7a:57:95:6a:22:f1:dd:1f:39:82:31: f7:81:44:0a:ce:43:6c:54:90:32:09:0e:f5:fb:47:65:1e:80: 37:8a:77:5e:c5:7f:34:06:89:09:db:2e:37:04:d2:fd:39:27: de:e1:5f:4d:dc:70:af:c7:18:34:eb:fe:93:1a:8e:8c:d2:3e: 19:23:48:84:47:61:c1:7e:d1:28:d8:b5:28:e0:77:dc:39:10: 06:df:1d:d3:72:97:30:20:b5:4e:0c:d5:3a:f3:42:54:10:40: 7f:ba:8b:bb:12:d6:63:55:01:e4:7c:98:a4:60:34:e8:bc:4c: bb:6c:53:bf:88:53:fb:91:c5:48:ae:69:43:47:83:0b:a0:43: 98:f0:c4:51:2f:f7:af:d2:34:01:1f:25:35:b5:d3:11:31:4e: b5:d2:d9:7a:ba:6c:8c:c0:9e:cb:5b:4c:47:9f:85:94:cb:f2: 58:46:02:2d:be:c9:86:53:3b:e0:e0:f2:94:f1:af:f6:a4:75: ae:f0:ff:82:d2:83:2b:b0:65:50:b0:80:55:f4:17:a4:a9:57: 14:5d:91:74:a2:5f:21:f9:a5:ce:0d:24:8d:89:67:3c:3f:e2: 60:7e:7d:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGVfJ8B2VmCuSoO7o337WdVX1qhkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUwMDMyWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTU2MmQ4NDlhZjcxYzYyZTIxMjI2ZTNhODNlZjA1N2Vl NDUzZGI2Mjc5OTg1MWQ2OGFmODI5ZGIzYWJiMDZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7aEpe9dcIlMvSTgfGoJU4UanrbM0awh5suO2/fRdQ6QEp MI1sFVhVHngCIcK70OCivaOjuawgvDyis2UyPzTnD0L+V8LMSFoRTvMu06ydPbH8 ttjbfEAFJ5wf6mKdFfZNKTHts9wpS2BvShAE5iTsYoEL1ju52FwGx5rP+AZrLE0R +JouHJj+gRRGIhhvuY50HL/D8h5sqvJWoxcFG3g3Bm6Ctkv2lGf7P5t87/rrWCm4 Y1aRf84/waDZQ8V+OPO/qwDrur9rqtl4Z/EMoI4SOeVrSHQdgFB3nsIpdNDy/U8I bpA5nyILfwt0eE8YCXJINQebdUlbxKDBIJnwAvpJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyb9LP1byOrcg1n0Apt8aDVOJXuMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0OWU1MDg5LTQ1OWItNDM4YS05N2YyLWMwYTM5YzAzMGE1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoowDQYJKoZIhvcNAQELBQADggEBAHjHd91yKK5R47JwGcqBiQoW+ZL6 F+myDSl6V5VqIvHdHzmCMfeBRArOQ2xUkDIJDvX7R2UegDeKd17FfzQGiQnbLjcE 0v05J97hX03ccK/HGDTr/pMajozSPhkjSIRHYcF+0SjYtSjgd9w5EAbfHdNylzAg tU4M1TrzQlQQQH+6i7sS1mNVAeR8mKRgNOi8TLtsU7+IU/uRxUiuaUNHgwugQ5jw xFEv96/SNAEfJTW10xExTrXS2Xq6bIzAnstbTEefhZTL8lhGAi2+yYZTO+Dg8pTx r/akda7w/4LSgyuwZVCwgFX0F6SpVxRdkXSiXyH5pc4NJI2JZzw/4mB+fWs= -----END CERTIFICATE-----Generated at Sat Aug 23 09:07:12 2025 by rpki-client