$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c4410d-8877-4112-baca-e054d7596057.roa File: e9c4410d-8877-4112-baca-e054d7596057.roa (raw, json) Hash identifier: gyLufTZ8+3+EfUN2enJw2nQ+9mDOfyk5Kzq99HIV9jA= Subject key identifier: 40:1D:5D:45:9C:D6:42:69:9D:64:0A:79:96:0F:B3:BC:DE:56:C0:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47DD826D89739289DEE4D37D76E1EB98FBBA56B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c4410d-8877-4112-baca-e054d7596057.roa Signing time: Sat 28 Jun 2025 00:10:22 +0000 ROA not before: Sat 28 Jun 2025 00:10:22 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:dd:82:6d:89:73:92:89:de:e4:d3:7d:76:e1:eb:98:fb:ba:56:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 28 00:10:22 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=3c93b9937b6d1599af78e27d69c0fe33b558ad9a4180bb12508defbeb4b154a5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:96:23:54:60:e6:64:a3:e8:59:a3:94:05:31: 86:8f:eb:31:5c:a7:bc:39:e5:ef:34:ec:cf:de:92: 14:42:b2:be:0a:58:ed:9d:64:66:d4:f6:b9:16:95: 5e:44:4e:8b:46:ab:f0:33:5c:32:44:e3:2e:2b:59: f5:db:c0:1a:62:02:1f:49:82:9e:3d:14:9b:2d:a1: 5b:2e:26:61:53:8c:79:01:c9:ce:b9:a8:ce:cc:a4: 62:1c:33:39:ba:09:27:98:6d:a2:a2:d3:4f:f4:f8: 10:c3:a2:86:cb:f8:72:f5:fb:8f:38:2e:ee:89:0b: df:57:4c:ed:f8:dd:20:9c:c1:f3:cd:bb:ed:48:ad: 3f:b4:ee:6a:12:6b:ae:2f:93:cf:e0:57:48:22:98: d3:20:9a:be:33:c0:cc:44:51:c6:84:4b:0d:72:2c: 35:bf:86:86:95:98:36:78:35:0c:9e:53:c1:9c:15: 5f:5f:9c:6c:fb:91:70:e6:d1:f5:26:3e:b8:c2:68: e9:54:ce:4e:e9:7c:86:f0:5c:d6:a9:50:96:d4:a1: 54:a4:e4:71:cc:85:ce:30:36:a5:9d:82:d3:d5:ae: dc:ac:b4:17:61:70:92:ee:c6:6a:1e:e3:bf:59:23: 58:73:c9:eb:37:83:8c:34:cf:70:07:a5:6e:86:e0: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1D:5D:45:9C:D6:42:69:9D:64:0A:79:96:0F:B3:BC:DE:56:C0:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9c4410d-8877-4112-baca-e054d7596057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.151.0/24 Signature Algorithm: sha256WithRSAEncryption 95:1e:c9:cd:97:e7:28:02:1c:b0:e5:af:fa:8d:fa:0c:7c:ba: cd:28:89:e2:46:cb:31:47:60:65:bd:85:db:4a:06:e2:2b:dd: e1:ba:87:bd:60:07:22:52:ea:a1:a1:0a:74:ec:dd:36:f9:60: 88:9e:4a:d2:09:c9:30:ed:39:87:38:42:a8:c6:a6:52:ec:35: fe:d4:d3:90:5c:d0:80:a7:8e:b1:45:ec:d1:22:ec:9f:6a:ec: 7a:e7:05:ac:83:1c:e0:f9:85:ff:fc:0a:ed:58:d1:1e:26:55: 32:13:8a:57:4e:cc:54:cc:7e:62:f1:69:aa:9f:9e:87:65:2a: 7c:90:dd:01:e2:14:50:75:66:ff:a8:82:31:99:6a:36:fd:2d: ba:d6:b7:f7:5e:88:ed:d3:33:e7:66:e9:69:e8:e3:f1:4f:a7: b5:46:b9:44:ce:c1:01:c2:3a:c1:31:6a:bf:32:90:2e:62:34: b9:14:96:4b:17:2b:66:20:65:44:b7:af:7c:23:48:69:f5:ed: 00:6e:83:f4:04:cb:00:5c:73:b7:f6:1b:fe:9f:ba:33:3f:7b: 79:fe:82:a6:68:71:c1:0a:0a:4d:da:94:9b:dc:2b:77:3e:7c: 63:7d:50:f5:9e:00:7f:a1:9c:1e:9f:d6:56:29:8a:00:d0:1a: 1f:bc:be:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR92CbYlzkone5NN9duHrmPu6VrYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDAxMDIyWhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzkzYjk5MzdiNmQxNTk5YWY3OGUyN2Q2OWMwZmUzM2I1 NThhZDlhNDE4MGJiMTI1MDhkZWZiZWI0YjE1NGE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOliNUYOZko+hZo5QFMYaP6zFcp7w55e807M/ekhRCsr4K WO2dZGbU9rkWlV5ETotGq/AzXDJE4y4rWfXbwBpiAh9Jgp49FJstoVsuJmFTjHkB yc65qM7MpGIcMzm6CSeYbaKi00/0+BDDoobL+HL1+484Lu6JC99XTO343SCcwfPN u+1IrT+07moSa64vk8/gV0gimNMgmr4zwMxEUcaESw1yLDW/hoaVmDZ4NQyeU8Gc FV9fnGz7kXDm0fUmPrjCaOlUzk7pfIbwXNapUJbUoVSk5HHMhc4wNqWdgtPVrtys tBdhcJLuxmoe479ZI1hzyes3g4w0z3AHpW6G4FjjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQB1dRZzWQmmdZAp5lg+zvN5WwJgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5YzQ0MTBkLTg4NzctNDExMi1iYWNhLWUwNTRkNzU5NjA1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEpcwDQYJKoZIhvcNAQELBQADggEBAJUeyc2X5ygCHLDlr/qN+gx8us0o ieJGyzFHYGW9hdtKBuIr3eG6h71gByJS6qGhCnTs3Tb5YIieStIJyTDtOYc4QqjG plLsNf7U05Bc0ICnjrFF7NEi7J9q7HrnBayDHOD5hf/8Cu1Y0R4mVTITildOzFTM fmLxaaqfnodlKnyQ3QHiFFB1Zv+ogjGZajb9LbrWt/deiO3TM+dm6Wno4/FPp7VG uUTOwQHCOsExar8ykC5iNLkUlksXK2YgZUS3r3wjSGn17QBug/QEywBcc7f2G/6f ujM/e3n+gqZoccEKCk3alJvcK3c+fGN9UPWeAH+hnB6f1lYpigDQGh+8vk4= -----END CERTIFICATE-----Generated at Thu Jul 3 10:22:08 2025 by rpki-client