$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18a602e8-2bc6-42f9-be5d-6d763a3ca04e.roa File: 18a602e8-2bc6-42f9-be5d-6d763a3ca04e.roa (raw, json) Hash identifier: TBkhUSPKvjv+RmPE5+RxRIprRow0z8f2NUcbUsFCS5Y= Subject key identifier: FC:2D:7A:54:D9:E0:82:64:CE:8F:7D:7B:54:ED:41:68:57:C0:64:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 110FCF16CD79AD38BF7E1EDF2A94E3BCAA78B95F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18a602e8-2bc6-42f9-be5d-6d763a3ca04e.roa Signing time: Fri 09 May 2025 00:00:07 +0000 ROA not before: Fri 09 May 2025 00:00:07 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 136.18.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0f:cf:16:cd:79:ad:38:bf:7e:1e:df:2a:94:e3:bc:aa:78:b9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:00:07 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=79e780698713511863656d01ab09561d35596049a3eab5afe9a18a2e5a97b563, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ba:76:fd:13:3c:43:8c:68:e2:7a:bb:01:1f: 90:b6:b3:00:85:1d:00:cd:bb:bf:e7:12:60:5a:6d: a7:8b:fc:6f:88:dc:a0:d0:8f:6d:a8:a9:d0:20:fa: 55:d0:b7:fe:c8:d2:a0:3e:a0:ae:5a:8b:1c:d2:dc: 2e:00:e9:e4:ff:61:f3:cb:d8:e2:d7:5f:8c:2f:58: 88:ac:90:ba:c4:7f:cf:ce:95:1d:c4:ef:a1:5d:7c: aa:51:34:50:04:f8:22:df:0d:60:4d:60:39:3e:4a: 13:02:83:8e:49:12:bc:d7:2a:a8:b8:e0:22:c8:60: c1:1c:bc:f9:cb:f8:7c:fc:bf:0f:46:59:17:c8:48: 2e:63:d7:90:f8:56:a1:d3:56:04:8b:0b:a9:29:0d: 58:6c:28:6f:23:fd:75:29:9f:df:ec:64:d0:a2:a0: f9:42:e2:85:c6:6a:ff:52:ae:d2:6b:89:cb:7c:c3: fa:82:95:66:21:ba:b5:24:47:18:15:d4:06:f5:0a: 22:29:ce:bc:d2:ec:e1:a8:b5:ac:4f:b5:5d:aa:b7: f2:6c:51:cb:03:d6:87:84:28:62:51:20:ab:18:0a: 64:1f:54:68:6c:35:bf:28:bd:3c:4f:8b:aa:cc:97: 9e:45:34:df:c5:e1:5c:7d:b8:19:83:ef:ed:df:98: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2D:7A:54:D9:E0:82:64:CE:8F:7D:7B:54:ED:41:68:57:C0:64:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18a602e8-2bc6-42f9-be5d-6d763a3ca04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.254.0/24 Signature Algorithm: sha256WithRSAEncryption 80:97:1d:e8:1f:0d:de:9d:a9:45:c2:14:58:06:69:ad:e6:44: 9b:3e:32:09:01:78:31:b3:85:21:39:23:9f:5e:b5:60:7b:ed: 95:3f:98:aa:7c:46:33:ae:28:66:da:85:4e:73:b6:f0:94:c9: bb:90:30:54:b4:fc:41:55:73:0e:4d:88:a0:de:d4:92:02:0a: 21:4b:2a:f8:1a:5f:42:02:1a:61:57:c2:f4:6c:dd:ea:46:7c: b0:cb:01:f5:80:68:ca:30:78:c0:f7:94:fc:c0:14:e9:08:34: f5:1d:f0:a5:b2:69:ad:4c:9e:b5:66:c4:c3:9c:86:2b:5d:33: ec:c3:36:3c:3a:9e:36:2c:0e:b8:1a:21:aa:a8:18:f3:c1:4b: 5a:85:bb:08:1f:b0:e7:c4:bd:0c:fd:3a:c7:8b:aa:0e:e3:8f: 78:87:8e:3c:df:a4:26:88:be:2c:87:a2:38:d9:b9:12:89:ba: 89:60:00:a5:18:21:a6:dc:47:5d:2a:9f:6e:36:1f:33:4d:02: 93:37:a6:f7:5f:02:84:7f:32:25:75:6a:d3:2d:a2:8a:7e:69: d2:74:18:50:37:54:5b:9a:5f:9c:7a:91:82:e1:2b:3c:38:86: 34:18:52:81:01:f5:ea:ac:94:f0:7d:d8:1a:78:aa:7e:2f:64: 40:d3:07:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEQ/PFs15rTi/fh7fKpTjvKp4uV8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA5MDAwMDA3WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWU3ODA2OTg3MTM1MTE4NjM2NTZkMDFhYjA5NTYxZDM1 NTk2MDQ5YTNlYWI1YWZlOWExOGEyZTVhOTdiNTYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIunb9EzxDjGjiersBH5C2swCFHQDNu7/nEmBabaeL/G+I 3KDQj22oqdAg+lXQt/7I0qA+oK5aixzS3C4A6eT/YfPL2OLXX4wvWIiskLrEf8/O lR3E76FdfKpRNFAE+CLfDWBNYDk+ShMCg45JErzXKqi44CLIYMEcvPnL+Hz8vw9G WRfISC5j15D4VqHTVgSLC6kpDVhsKG8j/XUpn9/sZNCioPlC4oXGav9SrtJrict8 w/qClWYhurUkRxgV1Ab1CiIpzrzS7OGotaxPtV2qt/JsUcsD1oeEKGJRIKsYCmQf VGhsNb8ovTxPi6rMl55FNN/F4Vx9uBmD7+3fmH3tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/C16VNnggmTOj317VO1BaFfAZPkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4YTYwMmU4LTJiYzYtNDJmOS1iZTVkLTZkNzYzYTNjYTA0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEv4wDQYJKoZIhvcNAQELBQADggEBAICXHegfDd6dqUXCFFgGaa3mRJs+ MgkBeDGzhSE5I59etWB77ZU/mKp8RjOuKGbahU5ztvCUybuQMFS0/EFVcw5NiKDe 1JICCiFLKvgaX0ICGmFXwvRs3epGfLDLAfWAaMoweMD3lPzAFOkINPUd8KWyaa1M nrVmxMOchitdM+zDNjw6njYsDrgaIaqoGPPBS1qFuwgfsOfEvQz9OseLqg7jj3iH jjzfpCaIviyHojjZuRKJuolgAKUYIabcR10qn242HzNNApM3pvdfAoR/MiV1atMt oop+adJ0GFA3VFuaX5x6kYLhKzw4hjQYUoEB9eqslPB92Bp4qn4vZEDTB6o= -----END CERTIFICATE-----Generated at Sun Jun 1 04:22:40 2025 by rpki-client