$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa File: 6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa (raw, json) Hash identifier: P8zt0SnA6gTd8WD3VaBD8n5vfhquhO86NMYjXKEFYZM= Subject key identifier: F6:84:8F:4A:4F:DF:C4:98:47:00:22:B4:A1:79:04:B8:E9:30:54:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4164148E8F29DA8517D00172A1BCDB558A255E66 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa Signing time: Sat 09 Aug 2025 00:01:17 +0000 ROA not before: Sat 09 Aug 2025 00:01:17 +0000 ROA not after: Sat 13 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:64:14:8e:8f:29:da:85:17:d0:01:72:a1:bc:db:55:8a:25:5e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 9 00:01:17 2025 GMT Not After : Sep 13 23:59:59 2025 GMT Subject: serialNumber=620316f5b0e081e4825c2aaecdeae7801cef531b8f6c900f7978ffc4120b4708, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:f6:4a:42:a6:69:14:d6:4f:fe:06:e1:0a: f8:55:b4:b7:be:1f:87:ba:b0:e9:ab:02:9b:ad:27: 0f:8a:6c:3f:01:2e:af:0d:5c:82:58:fa:4c:c9:38: 86:ee:55:58:04:81:8a:cd:53:80:ad:0f:c1:68:4c: bc:76:24:57:9d:00:b1:e5:98:f0:a6:51:c2:91:66: c7:81:31:78:ce:95:14:9b:99:e3:25:33:5c:99:72: c2:e7:04:a9:be:61:c3:58:bc:3f:1e:25:bd:f1:ad: fa:fc:9e:91:61:59:37:8d:50:c2:83:6a:ee:5d:9d: a3:79:df:33:13:25:7d:47:32:a3:f8:37:93:81:b9: 3f:c5:a1:ca:f6:99:5a:1b:15:00:45:50:f7:aa:cc: ad:dd:62:12:a3:d4:63:45:99:d8:ae:54:87:44:06: bc:96:45:d2:eb:97:2b:9d:d1:a5:49:c6:e3:c3:6c: 52:01:52:bc:94:aa:82:84:5c:0d:e3:16:6c:99:2c: 27:21:37:41:9d:16:bb:86:20:92:fb:b4:88:c7:1c: 56:ad:cc:c8:b5:1b:8a:11:cd:4c:88:6d:95:8e:b9: 1a:b9:47:64:b0:c2:94:53:f2:3e:4d:3c:be:47:b7: 19:e8:e4:41:96:99:bb:ee:ee:d7:27:ae:4c:4f:06: e3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:84:8F:4A:4F:DF:C4:98:47:00:22:B4:A1:79:04:B8:E9:30:54:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c03bc6f-04a0-4eb8-ac31-85b84c3f29d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.24.0/21 Signature Algorithm: sha256WithRSAEncryption 05:0e:e8:a3:a3:08:08:ee:b3:7e:47:0d:56:84:37:61:39:b3: b1:d0:d4:8f:f3:65:30:9b:7a:3d:3f:34:29:02:29:02:54:54: 90:6c:c4:3e:ec:af:98:2f:3d:5d:6b:9a:b3:7a:01:e4:d1:94: 24:61:5d:a4:19:f0:a5:71:76:5d:84:da:a6:7b:49:c2:c4:c2: 57:d3:86:be:c7:eb:1d:e1:67:e6:2a:2a:50:2e:86:40:31:f5: d2:49:8d:01:03:08:77:85:f2:ad:75:72:89:3e:eb:36:2e:e5: ef:47:ee:1c:40:65:42:9c:31:ed:64:fe:23:7f:57:64:a0:8a: bd:86:36:7e:16:73:72:f6:4f:03:05:be:df:64:f6:c1:bb:5b: 32:84:5c:26:2a:10:59:07:51:e1:9d:21:87:23:f3:48:7a:c3: 07:7a:10:8f:17:cd:6b:94:09:cc:36:d2:4d:77:3d:62:da:ec: d3:56:95:7f:08:0d:1f:39:cf:0e:b8:b1:da:10:1c:d1:94:4f: 62:d8:e1:40:00:eb:de:b3:9a:82:a4:ae:ad:9a:d5:d1:85:3c: 1a:23:84:fe:72:a9:67:ec:27:d2:d7:ee:b1:77:d2:4b:62:7f: 9e:0f:7b:60:5a:c6:c1:35:51:2c:a9:68:5f:1d:ba:5c:ed:c4: ae:2b:30:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQWQUjo8p2oUX0AFyobzbVYolXmYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA5MDAwMTE3WhcNMjUwOTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjAzMTZmNWIwZTA4MWU0ODI1YzJhYWVjZGVhZTc4MDFj ZWY1MzFiOGY2YzkwMGY3OTc4ZmZjNDEyMGI0NzA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY4vZKQqZpFNZP/gbhCvhVtLe+H4e6sOmrAputJw+KbD8B Lq8NXIJY+kzJOIbuVVgEgYrNU4CtD8FoTLx2JFedALHlmPCmUcKRZseBMXjOlRSb meMlM1yZcsLnBKm+YcNYvD8eJb3xrfr8npFhWTeNUMKDau5dnaN53zMTJX1HMqP4 N5OBuT/Focr2mVobFQBFUPeqzK3dYhKj1GNFmdiuVIdEBryWRdLrlyud0aVJxuPD bFIBUryUqoKEXA3jFmyZLCchN0GdFruGIJL7tIjHHFatzMi1G4oRzUyIbZWOuRq5 R2SwwpRT8j5NPL5Htxno5EGWmbvu7tcnrkxPBuOZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9oSPSk/fxJhHACK0oXkEuOkwVIAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjMDNiYzZmLTA0YTAtNGViOC1hYzMxLTg1Yjg0YzNmMjlkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOIEhgwDQYJKoZIhvcNAQELBQADggEBAAUO6KOjCAjus35HDVaEN2E5s7HQ 1I/zZTCbej0/NCkCKQJUVJBsxD7sr5gvPV1rmrN6AeTRlCRhXaQZ8KVxdl2E2qZ7 ScLEwlfThr7H6x3hZ+YqKlAuhkAx9dJJjQEDCHeF8q11cok+6zYu5e9H7hxAZUKc Me1k/iN/V2Sgir2GNn4Wc3L2TwMFvt9k9sG7WzKEXCYqEFkHUeGdIYcj80h6wwd6 EI8XzWuUCcw20k13PWLa7NNWlX8IDR85zw64sdoQHNGUT2LY4UAA696zmoKkrq2a 1dGFPBojhP5yqWfsJ9LX7rF30ktif54Pe2BaxsE1USypaF8dulztxK4rMLM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:28 2025 by rpki-client