$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa File: a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa (raw, json) Hash identifier: hadnFgAZk4bqWHTI3ZfFNhQvGVfYa+qHrkTnRUNjfck= Subject key identifier: AB:17:41:DE:7F:50:50:E7:CC:B2:F0:A9:51:C8:56:A8:B3:31:58:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02C4A857345E8C1464F94C93FAA5C7D9429262A5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa Signing time: Tue 08 Jul 2025 00:30:54 +0000 ROA not before: Tue 08 Jul 2025 00:30:54 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 108.136.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c4:a8:57:34:5e:8c:14:64:f9:4c:93:fa:a5:c7:d9:42:92:62:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 00:30:54 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=e6a7df548238a6f549ab0d690e8cdb43adaa2d9a8b21f7898feb05139f4d1eb2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fe:57:72:14:10:c7:05:29:77:1c:7a:8d:0b: a7:4d:46:bc:11:62:bf:dc:c8:8e:09:c6:f3:f0:01: 86:64:ed:cf:00:d7:a1:cb:96:69:8a:21:a0:18:b5: 5e:29:76:a2:90:d7:8c:fb:17:d4:fd:2a:f6:b0:a5: bd:18:46:0d:c7:c0:a4:56:b1:b8:c6:30:43:a0:8c: ca:e7:37:2c:50:f7:3b:d6:64:3a:d8:e3:a6:f8:99: 17:24:2d:ed:59:db:6e:95:c0:7e:1a:b9:a7:d0:e0: 79:74:ec:d8:48:c4:b1:db:2e:85:99:38:0d:90:07: 04:50:29:66:fa:df:86:1c:18:e0:1f:b7:02:d5:03: d5:7a:c8:1b:88:c7:dc:fb:f4:33:53:1b:3f:04:6f: b8:3f:c2:be:01:5d:75:ff:28:ff:0d:c7:76:a5:83: 8a:ef:42:e7:25:5b:80:f9:63:0e:d3:aa:46:9a:83: 0a:78:ab:d1:ae:ce:8a:18:94:95:8e:f1:fc:a2:e3: 07:93:39:ed:34:d1:5d:59:0a:43:6d:d8:15:56:2f: 67:31:17:3b:d9:fa:59:ea:96:be:46:7e:21:f6:2e: c9:d6:b2:ab:28:fc:a2:f7:08:78:b7:6b:f8:49:14: d9:9d:db:06:3b:b6:93:f8:fc:5e:5d:58:4b:4b:f7: 45:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:17:41:DE:7F:50:50:E7:CC:B2:F0:A9:51:C8:56:A8:B3:31:58:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.136.1.0/24 Signature Algorithm: sha256WithRSAEncryption 73:c1:ce:f5:1c:56:f8:a5:10:97:29:cd:6d:93:3c:3e:e7:bd: 7b:50:eb:41:31:ba:f5:a5:bc:05:ff:9a:4c:ea:a0:9f:aa:58: a8:cb:76:b3:0e:d8:71:d8:4a:04:e2:f2:56:c1:f7:66:2a:25: 25:b8:e2:85:d1:4c:9c:2f:99:e8:d0:fd:83:d7:1b:f0:f1:cb: 2b:f1:86:e9:be:4e:b7:a6:ea:4a:b0:fb:8d:5a:ee:df:df:d1: 53:7a:72:a0:9a:1e:f3:0c:f5:e0:fa:ec:9f:3e:54:78:6f:db: da:c2:fe:21:4d:6c:df:c5:40:8e:77:2b:c8:57:dc:25:a7:3f: 72:bb:38:31:32:77:03:1e:40:33:eb:07:2b:9e:95:c3:97:9e: 58:96:ff:f2:81:0e:bc:c3:2a:f4:86:7f:33:ca:3f:c3:90:a5: 21:e6:16:6c:a5:57:a7:b2:b7:9d:9e:2d:35:fe:a3:c8:7f:4d: 8f:4a:fb:9f:b1:6e:5b:2b:90:44:e8:a3:b5:c4:70:21:f9:05: a9:95:93:6f:b7:cb:76:af:46:34:6b:d8:97:c6:7d:73:78:16: 47:22:05:f2:21:f6:eb:0f:f9:f6:2e:34:cb:b0:ed:80:be:29: 15:ce:87:e1:5a:8c:e7:96:2a:b7:b7:4c:77:86:77:d3:1a:2b: 86:e8:08:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAsSoVzRejBRk+UyT+qXH2UKSYqUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MDAzMDU0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmE3ZGY1NDgyMzhhNmY1NDlhYjBkNjkwZThjZGI0M2Fk YWEyZDlhOGIyMWY3ODk4ZmViMDUxMzlmNGQxZWIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO/ldyFBDHBSl3HHqNC6dNRrwRYr/cyI4JxvPwAYZk7c8A 16HLlmmKIaAYtV4pdqKQ14z7F9T9Kvawpb0YRg3HwKRWsbjGMEOgjMrnNyxQ9zvW ZDrY46b4mRckLe1Z226VwH4auafQ4Hl07NhIxLHbLoWZOA2QBwRQKWb634YcGOAf twLVA9V6yBuIx9z79DNTGz8Eb7g/wr4BXXX/KP8Nx3alg4rvQuclW4D5Yw7Tqkaa gwp4q9GuzooYlJWO8fyi4weTOe000V1ZCkNt2BVWL2cxFzvZ+lnqlr5GfiH2LsnW sqso/KL3CHi3a/hJFNmd2wY7tpP4/F5dWEtL90WBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqxdB3n9QUOfMsvCpUchWqLMxWDIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExYTVkZDdiLTFiMmYtNDg3Mi05ZGU1LTM3ZDJiNDY4OWQxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABsiAEwDQYJKoZIhvcNAQELBQADggEBAHPBzvUcVvilEJcpzW2TPD7nvXtQ 60ExuvWlvAX/mkzqoJ+qWKjLdrMO2HHYSgTi8lbB92YqJSW44oXRTJwvmejQ/YPX G/Dxyyvxhum+Trem6kqw+41a7t/f0VN6cqCaHvMM9eD67J8+VHhv29rC/iFNbN/F QI53K8hX3CWnP3K7ODEydwMeQDPrByuelcOXnliW//KBDrzDKvSGfzPKP8OQpSHm FmylV6eyt52eLTX+o8h/TY9K+5+xblsrkEToo7XEcCH5BamVk2+3y3avRjRr2JfG fXN4FkciBfIh9usP+fYuNMuw7YC+KRXOh+FajOeWKre3THeGd9MaK4boCBw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:03 2025 by rpki-client