$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/679fd005-b0ea-429c-a19e-3bd8a6e87a5c.roa File: 679fd005-b0ea-429c-a19e-3bd8a6e87a5c.roa (raw, json) Hash identifier: 8nafCyBrdM5GI9r8n36j/ckvezXJPLA6ZZbfslcR+ck= Subject key identifier: B9:2B:03:3C:51:BF:CC:71:00:D1:C8:8B:ED:F1:62:02:A5:D5:4B:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 465604525C1562937E1D7A15E4B149B39E121FAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/679fd005-b0ea-429c-a19e-3bd8a6e87a5c.roa Signing time: Mon 18 Aug 2025 15:11:46 +0000 ROA not before: Mon 18 Aug 2025 15:11:46 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:56:04:52:5c:15:62:93:7e:1d:7a:15:e4:b1:49:b3:9e:12:1f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:11:46 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=4bb757173d3cbcbb5cbb4d7eba94c0e73e3d4cdb7be0c4b414bbbe2446b7d9c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:a2:d6:64:5d:24:da:47:1f:78:48:f9:c3: 11:59:19:7a:d2:b0:78:5d:fd:b1:b9:dd:d7:55:5a: 03:9b:25:74:4c:1d:75:be:b2:a8:ee:df:39:27:93: 26:38:9f:ec:11:48:73:7b:82:cf:58:96:7f:18:42: 66:fe:5c:9e:af:33:1f:93:17:58:e4:26:0a:b2:1f: 37:48:36:63:07:23:08:55:77:0a:e4:9f:5a:ef:e9: c5:c8:77:44:e3:9e:e5:17:a5:e9:52:a9:7e:f4:c3: 91:59:a0:fb:09:d7:69:e8:b3:a4:ec:56:f9:7a:af: e5:a1:6b:1c:2a:52:7b:1d:e4:b9:14:a1:06:32:c3: f6:0a:79:96:1c:86:99:18:ef:5c:4c:07:9f:86:fe: c4:f1:1a:3e:d5:d0:c7:92:63:3c:c1:6f:09:6d:1b: 3f:51:56:9e:b5:9d:ce:d7:75:50:d9:a9:e2:9c:0c: 27:6b:c4:94:ff:b2:8c:82:9e:5b:84:3d:c6:e7:04: 8a:9a:4e:30:e5:f6:b1:c4:5b:4a:a3:62:00:ba:ae: c3:7b:c7:4f:12:cb:8c:ec:23:ef:60:8b:b9:8d:35: 2b:3c:b4:32:57:d9:8d:f9:2f:af:c3:5c:d1:af:ea: 22:0e:94:71:d7:e7:77:bf:63:7e:59:77:5c:ec:68: 78:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2B:03:3C:51:BF:CC:71:00:D1:C8:8B:ED:F1:62:02:A5:D5:4B:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/679fd005-b0ea-429c-a19e-3bd8a6e87a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.136.0/23 Signature Algorithm: sha256WithRSAEncryption 78:28:50:37:fc:3d:48:97:ea:60:16:88:e3:85:fc:ed:65:d4: fe:6d:b3:c0:6c:79:d1:87:42:0b:62:d0:2d:df:25:e6:e8:ce: e2:01:01:f5:f3:72:dd:a4:c6:a5:cb:08:2f:5a:df:17:26:2e: ff:59:c9:7e:5e:ea:26:56:a7:b7:e2:67:ac:60:3b:30:f6:02: 71:dc:46:aa:64:d8:26:37:56:33:68:f1:5a:e4:74:ed:9a:c4: 0a:9a:2d:5e:a0:9a:e0:89:b0:7c:fa:b2:c8:3c:90:21:74:59: 9f:18:4f:13:a3:5a:80:27:fb:4f:e4:2d:2a:fe:94:eb:bf:b7: 0e:c9:bf:2d:3d:85:1a:c2:45:a2:98:be:51:ae:cd:2c:bc:95: 8c:5d:c9:3b:77:e6:97:d6:ce:81:8b:5d:08:8f:50:20:7a:58: bd:b0:72:8e:cf:bc:a8:a4:e6:c0:02:54:81:92:83:0a:6c:2f: ee:72:8d:11:ce:65:d1:ef:49:a8:46:fd:d8:1f:67:e1:3a:94: 4c:94:a0:4e:dc:e6:8c:e5:16:32:7a:b6:8a:7f:a4:1a:cd:06: d2:fb:48:48:14:9d:5f:a9:61:3a:44:5b:63:29:f4:71:26:a2: ab:e6:bd:89:a2:d8:8a:fc:99:d3:bc:ef:76:48:81:f9:36:16: a5:1b:92:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURlYEUlwVYpN+HXoV5LFJs54SH6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUxMTQ2WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmI3NTcxNzNkM2NiY2JiNWNiYjRkN2ViYTk0YzBlNzNl M2Q0Y2RiN2JlMGM0YjQxNGJiYmUyNDQ2YjdkOWMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCryaLWZF0k2kcfeEj5wxFZGXrSsHhd/bG53ddVWgObJXRM HXW+sqju3zknkyY4n+wRSHN7gs9Yln8YQmb+XJ6vMx+TF1jkJgqyHzdINmMHIwhV dwrkn1rv6cXId0TjnuUXpelSqX70w5FZoPsJ12nos6TsVvl6r+WhaxwqUnsd5LkU oQYyw/YKeZYchpkY71xMB5+G/sTxGj7V0MeSYzzBbwltGz9RVp61nc7XdVDZqeKc DCdrxJT/soyCnluEPcbnBIqaTjDl9rHEW0qjYgC6rsN7x08Sy4zsI+9gi7mNNSs8 tDJX2Y35L6/DXNGv6iIOlHHX53e/Y35Zd1zsaHidAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuSsDPFG/zHEA0ciL7fFiAqXVS6UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3OWZkMDA1LWIwZWEtNDI5Yy1hMTllLTNiZDhhNmU4N2E1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEogwDQYJKoZIhvcNAQELBQADggEBAHgoUDf8PUiX6mAWiOOF/O1l1P5t s8BsedGHQgti0C3fJebozuIBAfXzct2kxqXLCC9a3xcmLv9ZyX5e6iZWp7fiZ6xg OzD2AnHcRqpk2CY3VjNo8VrkdO2axAqaLV6gmuCJsHz6ssg8kCF0WZ8YTxOjWoAn +0/kLSr+lOu/tw7Jvy09hRrCRaKYvlGuzSy8lYxdyTt35pfWzoGLXQiPUCB6WL2w co7PvKik5sACVIGSgwpsL+5yjRHOZdHvSahG/dgfZ+E6lEyUoE7c5ozlFjJ6top/ pBrNBtL7SEgUnV+pYTpEW2Mp9HEmoqvmvYmi2Ir8mdO873ZIgfk2FqUbkqw= -----END CERTIFICATE-----Generated at Sat Aug 23 08:09:36 2025 by rpki-client