$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22a190a9-b3c7-40b6-a0ef-b09e767de348.roa File: 22a190a9-b3c7-40b6-a0ef-b09e767de348.roa (raw, json) Hash identifier: +tetj6TZvDBKnbtPiMq0CWot7LqlwTbhVesaFMwPxbA= Subject key identifier: 2B:77:ED:D7:2D:2B:3D:FD:61:6F:B2:23:B1:84:C1:61:82:32:B0:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F2CC0558D7FAE49E5DF812C069C910D6F4E4423 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22a190a9-b3c7-40b6-a0ef-b09e767de348.roa Signing time: Wed 06 Aug 2025 00:10:55 +0000 ROA not before: Wed 06 Aug 2025 00:10:55 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2c:c0:55:8d:7f:ae:49:e5:df:81:2c:06:9c:91:0d:6f:4e:44:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 6 00:10:55 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=c8ff7606165c0f6babef33abdc63aa30336b1b58c1d2f68c87feb71dd6115c42, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e8:65:ce:d5:d7:35:c4:86:cc:46:18:f4:55: 83:db:87:af:da:31:45:e6:dc:9f:c9:7a:e4:76:9a: 0c:16:fd:87:7c:66:b1:1b:a4:1e:56:52:db:b2:45: 05:d2:d7:3a:58:48:ef:45:92:eb:87:30:54:95:5f: 52:c5:a4:f3:6c:7d:7f:1d:4f:30:12:45:ff:34:5f: 1f:0a:5e:59:ea:64:da:ca:11:cf:9a:6e:4a:98:99: 12:2d:1c:ba:d4:85:97:63:0f:a4:f3:ee:fa:b9:17: 4c:f7:d8:04:d3:4c:03:c7:fc:f1:7a:3e:7f:f8:1d: 02:ea:e7:53:57:25:36:2a:91:3e:d6:dc:19:a8:42: 7c:e7:da:06:5f:b2:31:2e:3b:9e:b6:15:9d:39:5b: 97:89:dd:af:0d:41:01:16:ed:fe:61:f1:04:11:8e: f9:70:af:a6:95:92:41:87:da:86:fe:8a:2e:9b:07: c9:15:02:e6:a5:85:9b:14:f9:1a:84:6b:64:59:db: 50:09:50:5d:da:ae:87:07:67:60:14:03:a3:f1:05: 63:de:41:71:db:6d:57:9a:72:97:db:55:4c:7c:51: af:93:4c:75:4f:b6:53:d0:15:20:ca:9e:56:c9:5d: ed:5e:33:6e:9b:19:e7:e8:63:ea:a7:2f:67:f3:27: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:77:ED:D7:2D:2B:3D:FD:61:6F:B2:23:B1:84:C1:61:82:32:B0:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22a190a9-b3c7-40b6-a0ef-b09e767de348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.160.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:1e:ec:86:66:ec:05:bf:1d:7c:de:4c:86:86:7b:51:21:40: 98:51:1b:15:e3:a1:6b:2f:cf:a3:03:82:e6:3a:a0:13:6c:cd: 7b:58:a3:57:d9:69:80:f1:5b:77:51:d5:54:de:73:9b:c1:8e: db:c2:64:40:5b:da:ae:d5:1a:e9:36:c3:f5:2d:f0:6c:af:bf: 02:f6:41:44:ad:51:5b:fe:7f:bc:cc:f5:bf:e8:e9:80:32:d0: 35:b2:b3:5b:50:1f:6c:22:a3:c0:f0:6b:ee:07:02:c0:bc:63: 30:a5:40:26:c4:68:8e:6d:0b:79:82:21:f8:d5:09:0a:9f:83: 5f:d4:cf:12:8e:d8:05:16:e1:ea:9c:26:10:eb:cc:4c:33:2e: 34:16:31:4b:27:68:26:bc:d0:15:a9:b4:3f:47:d8:d9:79:8a: 50:d5:8d:a0:c1:fc:a6:14:ed:1d:87:7c:ce:2b:60:26:0e:a4: f4:c8:f5:a2:59:e8:5f:13:cb:5e:0d:56:63:db:6e:a6:2d:be: 14:d1:bc:0b:c6:fe:0d:6f:b8:96:5a:53:df:24:07:14:1c:2f: 44:11:3f:0d:5e:72:3c:b7:24:2a:5d:69:fa:a4:46:b8:88:91: 92:b8:73:e6:5c:37:6e:9f:81:26:76:86:8b:94:92:93:cd:7a: c7:0d:d9:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbyzAVY1/rknl34EsBpyRDW9ORCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA2MDAxMDU1WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGZmNzYwNjE2NWMwZjZiYWJlZjMzYWJkYzYzYWEzMDMz NmIxYjU4YzFkMmY2OGM4N2ZlYjcxZGQ2MTE1YzQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK6GXO1dc1xIbMRhj0VYPbh6/aMUXm3J/JeuR2mgwW/Yd8 ZrEbpB5WUtuyRQXS1zpYSO9FkuuHMFSVX1LFpPNsfX8dTzASRf80Xx8KXlnqZNrK Ec+abkqYmRItHLrUhZdjD6Tz7vq5F0z32ATTTAPH/PF6Pn/4HQLq51NXJTYqkT7W 3BmoQnzn2gZfsjEuO562FZ05W5eJ3a8NQQEW7f5h8QQRjvlwr6aVkkGH2ob+ii6b B8kVAualhZsU+RqEa2RZ21AJUF3arocHZ2AUA6PxBWPeQXHbbVeacpfbVUx8Ua+T THVPtlPQFSDKnlbJXe1eM26bGefoY+qnL2fzJ03hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK3ft1y0rPf1hb7IjsYTBYYIysK8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyYTE5MGE5LWIzYzctNDBiNi1hMGVmLWIwOWU3NjdkZTM0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEqAwDQYJKoZIhvcNAQELBQADggEBACse7IZm7AW/HXzeTIaGe1EhQJhR GxXjoWsvz6MDguY6oBNszXtYo1fZaYDxW3dR1VTec5vBjtvCZEBb2q7VGuk2w/Ut 8GyvvwL2QUStUVv+f7zM9b/o6YAy0DWys1tQH2wio8Dwa+4HAsC8YzClQCbEaI5t C3mCIfjVCQqfg1/UzxKO2AUW4eqcJhDrzEwzLjQWMUsnaCa80BWptD9H2Nl5ilDV jaDB/KYU7R2HfM4rYCYOpPTI9aJZ6F8Ty14NVmPbbqYtvhTRvAvG/g1vuJZaU98k BxQcL0QRPw1ecjy3JCpdafqkRriIkZK4c+ZcN26fgSZ2houUkpPNescN2QU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:42 2025 by rpki-client