$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab208a5-141a-4207-a424-ef8f78b7dc77.roa File: 7ab208a5-141a-4207-a424-ef8f78b7dc77.roa (raw, json) Hash identifier: J5ZLavqnix97yi7HizHyP4X01mYgBMcgq7uUG8pNtaM= Subject key identifier: AF:E4:1C:21:19:BF:E7:E2:F5:97:B0:C3:9E:89:5A:AE:EE:15:64:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 414559223DF4178013EB2C34B86B4A272A90A76F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab208a5-141a-4207-a424-ef8f78b7dc77.roa Signing time: Tue 17 Jun 2025 01:21:59 +0000 ROA not before: Tue 17 Jun 2025 01:21:59 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:59:22:3d:f4:17:80:13:eb:2c:34:b8:6b:4a:27:2a:90:a7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 01:21:59 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=a1d65bf35c5685a237c9955c1de63b1f660a5013821f1825e3f674f9ee49a473, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:6d:7e:39:5f:8c:62:75:24:28:51:94:17: 16:cd:b1:ce:e3:99:22:3c:79:e9:5f:63:a2:36:41: 1f:a4:a1:a2:cb:47:f8:1b:65:4c:3b:bd:e2:9e:09: 11:c7:b1:1a:07:3e:d4:59:70:88:22:69:a4:03:25: 2b:f6:1e:85:6b:e7:d6:3f:8b:85:75:dd:b0:e6:b9: 19:85:de:1a:51:9f:71:6f:c6:e9:db:b5:30:2f:2f: 0d:0d:6c:7a:7d:6f:f3:62:c5:9e:30:c7:42:e0:8c: 49:22:4d:79:0d:7c:8e:39:26:ad:f5:e4:de:ad:08: 93:11:c6:5e:ae:b1:6b:44:8e:72:20:f9:b5:e8:ba: d2:42:6a:56:49:a4:16:87:75:38:2e:4a:98:d7:30: 35:62:2a:de:ac:fe:b0:81:83:65:c0:16:27:f5:1e: ed:30:97:52:b3:14:ef:f5:ad:8c:79:2e:12:1f:d0: 4c:4d:cb:eb:7a:39:02:c0:c3:b0:38:46:e2:98:42: 98:aa:b0:7c:38:da:62:33:68:c0:31:5b:4b:8b:14: 3b:ac:19:ea:49:9e:95:21:a8:50:ed:3c:e6:30:a9: 03:59:36:12:e7:04:33:88:7b:0d:ee:a5:a9:23:c1: ac:1b:ee:70:d8:ed:65:40:cc:ad:bc:6c:b5:27:9f: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E4:1C:21:19:BF:E7:E2:F5:97:B0:C3:9E:89:5A:AE:EE:15:64:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab208a5-141a-4207-a424-ef8f78b7dc77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.160.0/23 Signature Algorithm: sha256WithRSAEncryption b8:8c:19:59:53:2b:7e:e3:54:46:ac:72:f3:3c:0d:96:e1:21: 96:9b:b7:04:48:12:74:76:8a:8d:0d:d8:d7:17:47:c5:6b:86: ff:70:83:59:d2:dc:4a:fb:39:0c:15:2e:a5:52:fa:ad:3c:9b: ec:57:01:fa:3f:4b:01:90:bc:e6:5d:9a:4f:69:b3:4f:d0:69: bf:8f:09:91:7b:ed:2f:f7:54:05:70:31:2a:b5:c8:5b:3f:d6: e2:75:19:77:93:ee:8e:9f:c8:64:1f:9b:9a:47:10:ac:34:99: b5:0c:ae:78:3e:1d:1b:17:3c:f6:50:b9:9c:95:e9:75:e2:24: 1d:a8:bf:a0:31:e0:74:59:60:f7:f1:81:61:d5:e3:9d:ff:04: 44:96:03:62:53:4c:f4:dd:54:92:32:ea:13:23:26:eb:c2:e6: ff:67:98:7d:38:77:2c:7c:f8:7b:57:10:15:44:79:92:87:2c: bd:ff:82:18:74:8a:75:be:f9:e8:40:e7:48:83:c7:b5:c5:53: 35:d0:ac:ba:b4:43:89:20:20:32:46:09:38:e4:f3:23:77:55: ce:53:61:f7:36:8d:c6:ed:5c:e8:f4:58:e0:f1:5f:19:dc:08: 10:7c:04:6f:ec:3c:af:7d:ad:45:17:b6:bc:05:a0:6e:41:4b: 3e:1e:97:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQUVZIj30F4AT6yw0uGtKJyqQp28wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDEyMTU5WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWQ2NWJmMzVjNTY4NWEyMzdjOTk1NWMxZGU2M2IxZjY2 MGE1MDEzODIxZjE4MjVlM2Y2NzRmOWVlNDlhNDczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg921+OV+MYnUkKFGUFxbNsc7jmSI8eelfY6I2QR+koaLL R/gbZUw7veKeCRHHsRoHPtRZcIgiaaQDJSv2HoVr59Y/i4V13bDmuRmF3hpRn3Fv xunbtTAvLw0NbHp9b/NixZ4wx0LgjEkiTXkNfI45Jq315N6tCJMRxl6usWtEjnIg +bXoutJCalZJpBaHdTguSpjXMDViKt6s/rCBg2XAFif1Hu0wl1KzFO/1rYx5LhIf 0ExNy+t6OQLAw7A4RuKYQpiqsHw42mIzaMAxW0uLFDusGepJnpUhqFDtPOYwqQNZ NhLnBDOIew3upakjwawb7nDY7WVAzK28bLUnnwKFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr+QcIRm/5+L1l7DDnolaru4VZNIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhYjIwOGE1LTE0MWEtNDIwNy1hNDI0LWVmOGY3OGI3ZGM3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEqAwDQYJKoZIhvcNAQELBQADggEBALiMGVlTK37jVEascvM8DZbhIZab twRIEnR2io0N2NcXR8Vrhv9wg1nS3Er7OQwVLqVS+q08m+xXAfo/SwGQvOZdmk9p s0/Qab+PCZF77S/3VAVwMSq1yFs/1uJ1GXeT7o6fyGQfm5pHEKw0mbUMrng+HRsX PPZQuZyV6XXiJB2ov6Ax4HRZYPfxgWHV453/BESWA2JTTPTdVJIy6hMjJuvC5v9n mH04dyx8+HtXEBVEeZKHLL3/ghh0inW++ehA50iDx7XFUzXQrLq0Q4kgIDJGCTjk 8yN3Vc5TYfc2jcbtXOj0WODxXxncCBB8BG/sPK99rUUXtrwFoG5BSz4el3Y= -----END CERTIFICATE-----Generated at Wed Jul 2 12:45:50 2025 by rpki-client