$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07b2c445-7abb-4bb1-88fb-97ffadc52e2e.roa File: 07b2c445-7abb-4bb1-88fb-97ffadc52e2e.roa (raw, json) Hash identifier: r6o9CVCEifrUXyHXXEdH5jhwIkFiChz3LisX+BiPVPc= Subject key identifier: 68:5C:F3:42:D4:4B:C1:6E:99:C6:00:6F:B0:E1:50:E9:F1:53:7A:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7090F08A4B0DD2885AFB3329B82A4BA27ABB9CEB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07b2c445-7abb-4bb1-88fb-97ffadc52e2e.roa Signing time: Tue 26 Aug 2025 15:10:58 +0000 ROA not before: Tue 26 Aug 2025 15:10:58 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:90:f0:8a:4b:0d:d2:88:5a:fb:33:29:b8:2a:4b:a2:7a:bb:9c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:10:58 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=ddc68c7e846d74553f49169d01da5dc44db30f1ae0e556d01dacefdd10c6c8d3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:eb:e3:eb:64:95:72:67:47:e5:cd:1f:9b: 2d:6c:f8:32:19:37:7c:61:27:e5:c7:cf:dd:3a:2d: 67:7a:32:2a:72:a3:e7:a2:56:45:d0:34:5b:8b:37: 92:2d:a9:05:f7:c8:9c:78:61:3f:62:95:37:7b:a4: 91:4d:b4:73:2b:f2:c2:3a:90:69:35:13:50:18:8e: b5:0b:7c:df:18:b6:6e:6d:14:97:75:76:2c:ce:df: 44:75:80:53:f2:03:ef:4c:ab:c0:b2:40:b3:7b:be: 95:be:e7:0f:14:58:67:2e:cf:fa:07:dc:a7:cb:53: 74:b1:0c:5e:ac:9b:05:86:7b:35:13:56:29:6f:27: 8d:fc:41:91:39:b8:30:2d:42:4b:01:96:c9:82:e3: ea:93:a3:3b:e7:24:a7:29:50:00:d3:61:53:bb:7c: 20:07:f3:42:37:be:e5:a6:f3:44:a1:2f:8d:a5:f2: f5:3c:85:7f:5c:18:a4:7a:40:38:4e:60:5e:30:f8: 33:36:69:5a:3b:54:1a:eb:d9:1e:15:82:68:6b:56: e4:ac:78:25:8d:c5:16:3b:08:03:27:7c:56:76:ef: 28:60:5a:2e:7f:d2:6e:0d:12:de:bd:60:e8:05:91: ea:0b:96:0b:8c:26:c1:69:13:03:21:cc:67:da:15: 74:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5C:F3:42:D4:4B:C1:6E:99:C6:00:6F:B0:E1:50:E9:F1:53:7A:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07b2c445-7abb-4bb1-88fb-97ffadc52e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.32.0/24 Signature Algorithm: sha256WithRSAEncryption 61:ac:7a:57:76:cc:45:62:e7:0e:a4:7a:fc:e6:cb:79:d7:bc: dc:71:7b:48:86:e9:a7:a7:7b:41:9f:98:2c:a8:96:64:d4:ee: 7b:f1:90:14:bf:4f:30:ee:10:09:c3:bc:d1:5f:9a:8d:3d:0b: da:89:13:db:2a:cf:d4:b1:49:2d:cc:bc:6d:1f:a1:3b:96:c5: b9:c5:ef:b4:16:06:f5:c9:45:a0:0b:67:e8:07:3b:f8:33:6d: 13:7d:39:62:12:c9:24:23:6a:0e:df:b4:13:f6:1b:bf:17:c4: 12:5d:4b:bb:11:5d:1d:17:4f:b2:09:82:7a:a0:9f:aa:8f:ad: 50:be:be:18:e0:0a:7e:eb:a8:21:99:d1:21:58:f6:c3:69:49: 0e:12:4f:b0:ba:ef:f3:d2:10:d3:ed:fd:d0:a4:61:d5:79:3a: e3:a9:56:d5:43:1a:5a:ee:a8:94:5b:fa:b7:12:55:9d:a2:0a: 3d:9e:82:60:4a:37:f4:f7:f8:53:c8:e1:b7:41:7f:79:2a:1e: 02:eb:36:bc:77:ad:fc:73:30:e0:6c:77:42:e4:0c:0c:96:53: d4:41:30:36:47:d2:93:f3:41:18:98:b2:9e:df:86:c2:bd:4a: fa:14:de:d8:8e:ed:3d:c9:44:17:44:b5:f3:92:90:48:28:28: 64:91:71:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcJDwiksN0oha+zMpuCpLonq7nOswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUxMDU4WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGM2OGM3ZTg0NmQ3NDU1M2Y0OTE2OWQwMWRhNWRjNDRk YjMwZjFhZTBlNTU2ZDAxZGFjZWZkZDEwYzZjOGQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCprOvj62SVcmdH5c0fmy1s+DIZN3xhJ+XHz906LWd6Mipy o+eiVkXQNFuLN5ItqQX3yJx4YT9ilTd7pJFNtHMr8sI6kGk1E1AYjrULfN8Ytm5t FJd1dizO30R1gFPyA+9Mq8CyQLN7vpW+5w8UWGcuz/oH3KfLU3SxDF6smwWGezUT VilvJ438QZE5uDAtQksBlsmC4+qTozvnJKcpUADTYVO7fCAH80I3vuWm80ShL42l 8vU8hX9cGKR6QDhOYF4w+DM2aVo7VBrr2R4VgmhrVuSseCWNxRY7CAMnfFZ27yhg Wi5/0m4NEt69YOgFkeoLlguMJsFpEwMhzGfaFXRZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaFzzQtRLwW6ZxgBvsOFQ6fFTeq0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3YjJjNDQ1LTdhYmItNGJiMS04OGZiLTk3ZmZhZGM1MmUyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEiAwDQYJKoZIhvcNAQELBQADggEBAGGseld2zEVi5w6kevzmy3nXvNxx e0iG6aene0GfmCyolmTU7nvxkBS/TzDuEAnDvNFfmo09C9qJE9sqz9SxSS3MvG0f oTuWxbnF77QWBvXJRaALZ+gHO/gzbRN9OWISySQjag7ftBP2G78XxBJdS7sRXR0X T7IJgnqgn6qPrVC+vhjgCn7rqCGZ0SFY9sNpSQ4ST7C67/PSENPt/dCkYdV5OuOp VtVDGlruqJRb+rcSVZ2iCj2egmBKN/T3+FPI4bdBf3kqHgLrNrx3rfxzMOBsd0Lk DAyWU9RBMDZH0pPzQRiYsp7fhsK9SvoU3tiO7T3JRBdEtfOSkEgoKGSRcb8= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:57 2025 by rpki-client