$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb3d2ec8-e99f-4a41-be5a-a6596b726434.roa File: cb3d2ec8-e99f-4a41-be5a-a6596b726434.roa (raw, json) Hash identifier: bL4Aaiu31joUaaZolzT/68wWgh9FkZ5yrURYManH9Tg= Subject key identifier: 73:AB:9E:02:9D:32:C8:BF:C0:94:F3:7A:09:EF:E3:DD:A8:49:04:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27D5F8A3FC94FB9CF87EB71A3113356FBF0D75EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb3d2ec8-e99f-4a41-be5a-a6596b726434.roa Signing time: Mon 18 Aug 2025 15:11:38 +0000 ROA not before: Mon 18 Aug 2025 15:11:38 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d5:f8:a3:fc:94:fb:9c:f8:7e:b7:1a:31:13:35:6f:bf:0d:75:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:11:38 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=652b6c18fbaa19209baea04f60a9252811168fc9e9a292ae1796f9b0326ba9b9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:b8:28:33:6c:2b:bf:22:7a:91:37:6b:25: f8:e2:d0:46:4b:4f:22:50:c2:f3:d1:67:29:66:14: df:2c:e9:5d:84:5f:7a:af:e6:2c:67:f3:03:09:fd: b9:bd:ec:de:26:4e:b7:4f:3d:26:4b:fc:71:b5:5e: 7c:7a:09:7f:f7:19:3c:f6:80:19:b7:c7:a0:48:40: 22:de:c8:7a:22:1f:b0:aa:18:13:44:9e:18:09:f9: 3c:91:42:48:a0:62:f9:cb:2e:96:61:b7:8d:6a:d9: 54:67:a8:d9:0a:5c:cc:86:1d:a5:68:79:c1:0f:09: ae:f9:17:5c:18:31:21:56:30:f7:3b:1e:98:eb:9e: d1:eb:6c:70:4b:10:25:ce:74:21:9a:e0:f7:fd:bb: 56:23:7b:20:3e:4f:f7:6c:76:db:49:c2:f0:1a:c6: a0:53:54:c1:ea:d5:cf:3d:06:e9:55:a4:d6:f2:40: 97:a7:ca:e0:cc:00:32:0d:ea:19:8b:9b:71:f8:55: 67:03:08:85:e2:dc:2e:03:c3:71:52:da:fb:cc:da: ab:c1:a0:ac:fb:9e:50:eb:d1:ce:0b:4f:d1:39:d4: 09:33:e4:f1:a1:a7:28:75:3e:08:43:45:69:48:9c: 5d:66:77:ae:94:c4:33:71:61:7a:25:b0:81:c5:66: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AB:9E:02:9D:32:C8:BF:C0:94:F3:7A:09:EF:E3:DD:A8:49:04:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb3d2ec8-e99f-4a41-be5a-a6596b726434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.130.0/24 Signature Algorithm: sha256WithRSAEncryption 56:9a:a2:d0:69:f9:f1:60:de:d0:b6:8a:b3:75:b0:09:40:72: ec:6e:8e:35:20:52:37:8b:13:e1:7c:2e:29:fe:5d:c0:67:4e: 41:ff:48:1f:e5:e7:d1:73:6b:f5:6c:17:fb:77:1a:6c:e8:ff: 32:e4:77:64:cf:f6:6f:9f:19:32:c6:a2:94:33:93:8a:56:e8: 49:06:84:76:6e:41:18:8b:88:b2:a1:30:52:61:e8:97:52:9d: 48:e4:6c:7b:b0:b7:df:42:c1:16:2b:1d:a0:82:6b:94:72:02: 3f:72:8c:fa:cf:5f:02:fe:41:5a:34:ea:42:9e:4c:8b:1e:ad: fb:44:51:3f:53:f1:07:ab:ed:5a:1c:fc:0f:25:80:d1:d9:61: cb:50:f8:74:7b:7b:e3:9c:1e:24:05:ee:8b:3f:80:f5:b0:7d: 9e:2d:69:8e:a8:14:38:c1:25:bd:00:e4:0c:0c:ec:85:fe:6d: 97:50:b8:e2:d6:cb:00:4c:b4:26:d8:c8:67:71:34:5f:77:cf: 24:1b:99:17:53:23:ae:9a:6e:a5:30:f6:80:46:9c:53:9b:75: ef:64:b1:3d:56:f6:98:62:9d:0d:fe:00:e2:0d:5e:87:c3:46: 14:2d:f1:56:d3:70:78:b4:92:8a:eb:32:a3:1e:63:20:d6:b2: d8:cf:68:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ9X4o/yU+5z4frcaMRM1b78NdeswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUxMTM4WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTJiNmMxOGZiYWExOTIwOWJhZWEwNGY2MGE5MjUyODEx MTY4ZmM5ZTlhMjkyYWUxNzk2ZjliMDMyNmJhOWI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXKLgoM2wrvyJ6kTdrJfji0EZLTyJQwvPRZylmFN8s6V2E X3qv5ixn8wMJ/bm97N4mTrdPPSZL/HG1Xnx6CX/3GTz2gBm3x6BIQCLeyHoiH7Cq GBNEnhgJ+TyRQkigYvnLLpZht41q2VRnqNkKXMyGHaVoecEPCa75F1wYMSFWMPc7 HpjrntHrbHBLECXOdCGa4Pf9u1YjeyA+T/dsdttJwvAaxqBTVMHq1c89BulVpNby QJenyuDMADIN6hmLm3H4VWcDCIXi3C4Dw3FS2vvM2qvBoKz7nlDr0c4LT9E51Akz 5PGhpyh1PghDRWlInF1md66UxDNxYXolsIHFZg+dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc6ueAp0yyL/AlPN6Ce/j3ahJBK0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiM2QyZWM4LWU5OWYtNGE0MS1iZTVhLWE2NTk2YjcyNjQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEoIwDQYJKoZIhvcNAQELBQADggEBAFaaotBp+fFg3tC2irN1sAlAcuxu jjUgUjeLE+F8Lin+XcBnTkH/SB/l59Fza/VsF/t3Gmzo/zLkd2TP9m+fGTLGopQz k4pW6EkGhHZuQRiLiLKhMFJh6JdSnUjkbHuwt99CwRYrHaCCa5RyAj9yjPrPXwL+ QVo06kKeTIserftEUT9T8Qer7Voc/A8lgNHZYctQ+HR7e+OcHiQF7os/gPWwfZ4t aY6oFDjBJb0A5AwM7IX+bZdQuOLWywBMtCbYyGdxNF93zyQbmRdTI66abqUw9oBG nFObde9ksT1W9phinQ3+AOINXofDRhQt8VbTcHi0korrMqMeYyDWstjPaIU= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:24 2025 by rpki-client