$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6a0087-8215-41fd-9d51-e12ca97333fd.roa File: 8b6a0087-8215-41fd-9d51-e12ca97333fd.roa (raw, json) Hash identifier: RICAdnHt8sU39yAb8oo8jzwEH4qVltW7T6iW5vOrRDg= Subject key identifier: 91:8B:74:B3:D2:9A:9F:EB:19:C6:2C:D4:97:4C:FA:F5:A8:A3:B5:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B6FA4CDDDD6566EC82795E145E63DE4BFA90259 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6a0087-8215-41fd-9d51-e12ca97333fd.roa Signing time: Mon 18 Aug 2025 15:00:32 +0000 ROA not before: Mon 18 Aug 2025 15:00:32 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6f:a4:cd:dd:d6:56:6e:c8:27:95:e1:45:e6:3d:e4:bf:a9:02:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:00:32 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=b81fffd2c632cf9f5653beeda8cc6ce3fa01a668d254c2f7d36a3c0a9102870f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:9e:88:bf:f8:d5:57:e3:b7:0b:66:f8:ed: 82:34:16:79:8c:07:03:98:85:9d:2c:f3:0f:a0:bc: 73:31:8e:2b:f2:74:66:b6:4b:fb:59:3b:e8:fb:f0: fb:c5:b1:68:56:8c:b4:a1:d8:ea:ed:f3:ca:51:42: b1:c5:f0:0f:a2:a5:85:c1:df:e2:36:32:e7:71:34: 29:59:96:2d:b1:e0:ee:60:0c:03:af:86:93:3e:af: 0a:9a:5b:82:a2:54:0b:20:6a:eb:4e:cf:9c:ae:ec: 21:e7:02:66:92:08:e7:8f:0b:d9:a5:b3:13:7c:c9: 71:fa:66:49:f8:db:f3:6a:4f:21:dd:21:48:17:32: b5:f4:c7:ca:69:63:c1:ad:fc:2c:56:96:d6:1c:76: af:4a:b9:19:5f:6d:90:93:06:aa:d8:51:e5:34:90: e1:79:aa:b4:a6:cd:c5:c0:d5:30:f6:6f:f5:f2:a4: 0d:e4:05:8b:42:27:bc:a5:07:4f:2b:00:32:cf:98: 12:45:ed:aa:4a:e0:27:15:6b:b5:fb:15:2b:0c:cc: bb:f2:d1:53:dd:50:48:7d:c2:07:a7:44:58:b4:de: 22:25:aa:26:8d:2d:47:34:12:66:85:8c:f4:c1:7e: 20:7f:13:b1:e9:22:52:13:fd:46:3e:5a:6f:5f:65: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8B:74:B3:D2:9A:9F:EB:19:C6:2C:D4:97:4C:FA:F5:A8:A3:B5:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6a0087-8215-41fd-9d51-e12ca97333fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.131.0/24 Signature Algorithm: sha256WithRSAEncryption 80:3d:9c:5c:78:06:34:8b:0b:00:e9:71:91:a6:d6:61:f2:89: 7a:9a:b6:67:25:6a:46:c0:c6:54:db:6a:e2:fb:8e:a0:a1:05: e9:99:74:21:ac:bb:00:a2:c2:ef:b1:86:87:b4:e7:a6:65:40: 1f:0f:8d:f8:ef:97:e5:24:e5:be:39:48:c0:ad:f3:32:5e:7b: 1d:d1:d6:b3:5c:0e:50:16:23:bc:9d:75:ef:ea:d8:ca:03:70: 2a:47:30:5e:56:37:1a:ff:e7:5b:15:38:b4:06:c3:17:e2:03: 36:81:6e:84:16:5d:59:b5:34:ca:4f:6c:a4:cd:26:63:81:ba: cd:7d:ef:59:f7:9f:7a:d6:0a:1c:1a:65:e5:2e:de:6b:86:42: 57:4e:32:4a:9d:e3:03:c7:72:e7:b6:53:33:45:7e:73:4e:b7: 8c:19:89:8d:2f:8a:d5:c8:cf:9a:27:0b:75:72:c5:ad:88:13: d5:d0:2d:b1:60:4e:8f:12:1d:b5:a9:cf:b6:a9:76:f9:de:49: 22:31:b8:bd:67:03:21:da:80:2b:e9:1d:95:e9:1b:08:d4:81: e0:e7:52:6f:95:72:f7:b7:f7:60:71:57:56:f1:70:a2:99:b9: 7a:54:68:04:5f:99:04:a2:65:44:b4:e1:55:59:22:30:06:b9: 3f:e2:fb:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS2+kzd3WVm7IJ5XhReY95L+pAlkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUwMDMyWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiODFmZmZkMmM2MzJjZjlmNTY1M2JlZWRhOGNjNmNlM2Zh MDFhNjY4ZDI1NGMyZjdkMzZhM2MwYTkxMDI4NzBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVi56Iv/jVV+O3C2b47YI0FnmMBwOYhZ0s8w+gvHMxjivy dGa2S/tZO+j78PvFsWhWjLSh2Ort88pRQrHF8A+ipYXB3+I2MudxNClZli2x4O5g DAOvhpM+rwqaW4KiVAsgautOz5yu7CHnAmaSCOePC9mlsxN8yXH6Zkn42/NqTyHd IUgXMrX0x8ppY8Gt/CxWltYcdq9KuRlfbZCTBqrYUeU0kOF5qrSmzcXA1TD2b/Xy pA3kBYtCJ7ylB08rADLPmBJF7apK4CcVa7X7FSsMzLvy0VPdUEh9wgenRFi03iIl qiaNLUc0EmaFjPTBfiB/E7HpIlIT/UY+Wm9fZQXpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkYt0s9Kan+sZxizUl0z69aijtbYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiNmEwMDg3LTgyMTUtNDFmZC05ZDUxLWUxMmNhOTczMzNmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEoMwDQYJKoZIhvcNAQELBQADggEBAIA9nFx4BjSLCwDpcZGm1mHyiXqa tmclakbAxlTbauL7jqChBemZdCGsuwCiwu+xhoe056ZlQB8Pjfjvl+Uk5b45SMCt 8zJeex3R1rNcDlAWI7ydde/q2MoDcCpHMF5WNxr/51sVOLQGwxfiAzaBboQWXVm1 NMpPbKTNJmOBus1971n3n3rWChwaZeUu3muGQldOMkqd4wPHcue2UzNFfnNOt4wZ iY0vitXIz5onC3Vyxa2IE9XQLbFgTo8SHbWpz7apdvneSSIxuL1nAyHagCvpHZXp GwjUgeDnUm+Vcve392BxV1bxcKKZuXpUaARfmQSiZUS04VVZIjAGuT/i+8k= -----END CERTIFICATE-----Generated at Sat Aug 23 09:11:33 2025 by rpki-client