$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f554ef87-1fa6-456b-8a6a-2188d51b6408.roa File: f554ef87-1fa6-456b-8a6a-2188d51b6408.roa (raw, json) Hash identifier: vxMQyDzZHMM3QQdU2Op3B1fwXIMQKdJjRBCq/4XypMg= Subject key identifier: EA:CB:B8:9F:4A:C6:02:7B:3C:AA:50:DD:8B:F0:04:A9:6E:C4:BE:CF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F118684A68326C72F8B5FAD79A28B901D399169 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f554ef87-1fa6-456b-8a6a-2188d51b6408.roa Signing time: Mon 18 Aug 2025 15:11:31 +0000 ROA not before: Mon 18 Aug 2025 15:11:31 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:11:86:84:a6:83:26:c7:2f:8b:5f:ad:79:a2:8b:90:1d:39:91:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:11:31 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=eaf0039c88aa7931138c8456f6dc99e5bda73ac01c3154a6853c61b473084994, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:6c:05:0f:8e:a4:37:7c:9b:98:b2:06:5d: 2b:64:57:90:8c:b6:11:3f:bd:c9:8f:13:49:0a:14: c8:8b:e4:c3:1d:5f:e8:78:87:ec:5b:cd:d3:cf:ae: 45:24:74:75:34:b8:73:15:a0:af:41:68:1d:67:6d: 29:2f:30:b3:e7:49:83:c8:8e:43:ad:63:a7:08:5e: 3a:08:b7:e0:52:c7:54:ac:30:fb:b2:be:98:a0:ef: 82:cc:f4:cb:c3:1c:35:ed:62:88:39:59:7d:64:93: 3e:16:1b:e3:fa:ab:3a:2c:dc:2b:26:d0:27:ab:6e: cc:59:d1:18:ad:7f:cb:4e:9d:82:4d:88:6a:2b:ce: a1:29:e5:f6:2c:88:4b:cf:27:f2:2b:24:07:32:3b: 2d:55:55:46:e3:ca:5e:8a:6c:ed:e0:95:15:38:84: b3:2e:f4:35:df:5d:b3:21:f1:94:23:49:09:f2:81: f1:79:59:81:6e:42:ba:69:f7:b1:18:c8:49:43:22: a7:46:d6:fc:e9:5d:d4:29:74:13:e1:fd:69:09:21: 9f:59:64:8c:d5:74:8e:4d:37:0d:ec:1d:95:6c:06: 44:da:90:20:8a:6d:99:49:e0:e1:b4:4a:43:c9:fe: d2:8f:91:70:b6:61:67:95:a8:65:b0:aa:60:3f:5a: 0a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CB:B8:9F:4A:C6:02:7B:3C:AA:50:DD:8B:F0:04:A9:6E:C4:BE:CF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f554ef87-1fa6-456b-8a6a-2188d51b6408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.140.0/23 Signature Algorithm: sha256WithRSAEncryption ca:7e:02:11:1e:20:ff:9a:fa:a5:75:b0:6e:9f:e7:d5:ea:fd: 1b:cd:0e:41:52:b1:8a:45:71:63:a7:b1:44:bc:0f:76:b7:21: d0:b1:9d:dd:44:c2:d8:0c:1f:e0:ff:80:3f:65:e1:8e:ba:9d: 8a:d7:3d:e7:d1:0a:8e:13:b6:85:1c:cc:7f:2f:bc:ef:d6:75: d8:a2:15:c3:dc:62:e9:df:ff:6c:4d:ed:1c:37:f2:95:02:88: 7a:b0:b1:64:5c:7f:9f:21:0f:21:0b:0b:cf:1e:54:e2:3b:1c: 99:20:2f:82:06:cb:3c:e4:4d:e9:9a:fc:f7:7e:d9:65:0c:b7: ee:98:88:eb:5c:e5:b2:61:c3:33:09:a2:ac:af:4d:f2:7b:94: fc:7a:07:01:d9:0f:38:8d:76:7d:44:02:99:b1:e5:06:d2:09: 8c:70:88:5f:8a:5e:90:fc:5d:08:3c:e5:54:ca:6c:46:2f:9f: bc:af:83:96:9d:2b:33:7b:38:d2:57:66:c9:11:f1:95:f0:1d: 8f:90:f2:e2:56:e3:33:ea:e5:72:fd:02:15:d7:91:73:32:65: 95:f4:80:e3:59:9a:d6:9a:1a:d3:d0:af:bc:f5:dd:9a:3a:01: bc:52:9b:42:d4:90:99:7c:85:4d:1e:eb:70:d7:e4:55:d0:59: 60:ce:94:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHxGGhKaDJscvi1+teaKLkB05kWkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUxMTMxWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWYwMDM5Yzg4YWE3OTMxMTM4Yzg0NTZmNmRjOTllNWJk YTczYWMwMWMzMTU0YTY4NTNjNjFiNDczMDg0OTk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3S2wFD46kN3ybmLIGXStkV5CMthE/vcmPE0kKFMiL5MMd X+h4h+xbzdPPrkUkdHU0uHMVoK9BaB1nbSkvMLPnSYPIjkOtY6cIXjoIt+BSx1Ss MPuyvpig74LM9MvDHDXtYog5WX1kkz4WG+P6qzos3Csm0CerbsxZ0Ritf8tOnYJN iGorzqEp5fYsiEvPJ/IrJAcyOy1VVUbjyl6KbO3glRU4hLMu9DXfXbMh8ZQjSQny gfF5WYFuQrpp97EYyElDIqdG1vzpXdQpdBPh/WkJIZ9ZZIzVdI5NNw3sHZVsBkTa kCCKbZlJ4OG0SkPJ/tKPkXC2YWeVqGWwqmA/WgrPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6su4n0rGAns8qlDdi/AEqW7Evs8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1NTRlZjg3LTFmYTYtNDU2Yi04YTZhLTIxODhkNTFiNjQwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEowwDQYJKoZIhvcNAQELBQADggEBAMp+AhEeIP+a+qV1sG6f59Xq/RvN DkFSsYpFcWOnsUS8D3a3IdCxnd1EwtgMH+D/gD9l4Y66nYrXPefRCo4TtoUczH8v vO/WddiiFcPcYunf/2xN7Rw38pUCiHqwsWRcf58hDyELC88eVOI7HJkgL4IGyzzk Tema/Pd+2WUMt+6YiOtc5bJhwzMJoqyvTfJ7lPx6BwHZDziNdn1EApmx5QbSCYxw iF+KXpD8XQg85VTKbEYvn7yvg5adKzN7ONJXZskR8ZXwHY+Q8uJW4zPq5XL9AhXX kXMyZZX0gONZmtaaGtPQr7z13Zo6AbxSm0LUkJl8hU0e63DX5FXQWWDOlGI= -----END CERTIFICATE-----Generated at Sat Aug 23 06:49:25 2025 by rpki-client