$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa File: e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa (raw, json) Hash identifier: O85VYVTvSdv7C5VDd09+NI1Q8GMwUpfvjouJ/OqPoEg= Subject key identifier: 12:02:C8:0C:CC:B4:30:BD:25:D9:8D:2F:15:1B:B0:D1:41:53:E1:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51299BE96FCBCA142BA7C659CA4533A9DB4A9742 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa Signing time: Tue 26 Aug 2025 15:00:24 +0000 ROA not before: Tue 26 Aug 2025 15:00:24 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:29:9b:e9:6f:cb:ca:14:2b:a7:c6:59:ca:45:33:a9:db:4a:97:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:00:24 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=4af0829ed89aecf1ca59a3b249c5f335ae07543b2c6f10174586fcd29e90924b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:6e:fc:fb:4f:0f:81:a2:82:2d:74:69:67: ff:d4:2d:bf:c8:a9:70:de:a4:ef:08:c4:44:29:18: 3e:67:3a:13:d9:e6:a1:93:53:20:89:d3:6b:8f:3e: 79:8c:5f:f8:15:b2:35:1c:e8:a0:02:7b:7c:ad:6e: 59:52:95:fe:4f:53:8a:ca:5c:0b:a7:ef:c3:d3:4b: 74:56:80:b7:a9:7c:ef:38:e7:17:3f:ba:cb:21:42: 02:b4:3a:40:2b:c4:8c:ab:c4:60:85:ea:33:23:cd: 93:01:1e:ce:57:ac:4c:47:29:b6:8a:cb:75:d8:55: bf:e9:10:af:8a:d7:dc:68:cd:d8:27:6e:e3:85:6e: c7:18:c3:80:98:84:d8:ea:60:aa:fb:b8:18:8d:85: af:3e:e7:9a:55:a6:61:ab:a5:67:ba:54:d9:9c:0c: 1b:f0:08:39:ea:03:17:23:70:02:6e:9c:a6:58:64: 16:28:1a:f2:69:c2:cf:1c:bf:d0:bb:d9:75:94:bb: 0a:fb:a9:9b:4f:17:cf:e2:f2:d0:d8:fd:64:65:00: bc:0a:66:be:98:8e:17:c1:73:3e:a7:1a:b4:0a:8a: 07:7b:55:7c:b0:bc:34:2f:43:2a:a1:e9:83:ed:b5: 4c:6e:7e:98:5b:38:8c:e2:f3:37:e0:26:9a:23:f4: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:02:C8:0C:CC:B4:30:BD:25:D9:8D:2F:15:1B:B0:D1:41:53:E1:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e166912b-dd9f-4b3d-a824-0883fcf4dc9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.0.0/24 Signature Algorithm: sha256WithRSAEncryption 87:c2:8f:70:cc:78:fd:21:b7:bd:1d:df:cf:ec:60:64:86:4b: b7:fa:33:d2:46:14:72:47:79:95:05:35:5f:7c:03:ec:b3:9f: 8a:02:5f:fa:da:78:02:4c:97:ac:3b:1d:1c:d1:bf:30:4f:71: 9b:78:7d:c4:7d:b2:1c:ca:de:43:d0:4b:82:56:53:b2:2f:ab: 37:0f:fe:78:94:54:2a:76:3a:4e:0f:d5:43:06:e4:b0:d1:e6: c1:fd:b7:52:2a:40:22:ed:49:bb:04:8c:89:98:06:d5:08:22: b6:08:42:91:13:28:da:b3:b6:7f:3b:03:da:6b:54:66:a5:df: 7d:3a:06:ce:18:57:30:b0:a6:04:38:88:e5:1f:ce:72:82:36: 32:34:96:9c:a4:57:74:f5:62:48:12:ca:06:ab:5e:a8:21:b9: 5a:68:c2:16:1d:99:83:59:a5:83:f5:aa:a2:40:e4:6e:6d:42: 25:a3:29:c9:44:d0:01:dd:0f:54:4b:c1:4d:b2:d8:9d:3d:a2: dd:e5:66:e8:4f:93:de:ba:60:84:4f:75:54:09:56:19:ec:67: 5f:f7:41:02:98:60:0d:49:e0:7f:ee:08:96:63:9e:c2:32:b4: 59:a6:06:2b:fa:1e:12:ff:60:28:07:0f:0e:d4:5f:2e:b6:59: c4:77:e8:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUSmb6W/LyhQrp8ZZykUzqdtKl0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUwMDI0WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWYwODI5ZWQ4OWFlY2YxY2E1OWEzYjI0OWM1ZjMzNWFl MDc1NDNiMmM2ZjEwMTc0NTg2ZmNkMjllOTA5MjRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuk278+08PgaKCLXRpZ//ULb/IqXDepO8IxEQpGD5nOhPZ 5qGTUyCJ02uPPnmMX/gVsjUc6KACe3ytbllSlf5PU4rKXAun78PTS3RWgLepfO84 5xc/usshQgK0OkArxIyrxGCF6jMjzZMBHs5XrExHKbaKy3XYVb/pEK+K19xozdgn buOFbscYw4CYhNjqYKr7uBiNha8+55pVpmGrpWe6VNmcDBvwCDnqAxcjcAJunKZY ZBYoGvJpws8cv9C72XWUuwr7qZtPF8/i8tDY/WRlALwKZr6YjhfBcz6nGrQKigd7 VXywvDQvQyqh6YPttUxufphbOIzi8zfgJpoj9OONAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEgLIDMy0ML0l2Y0vFRuw0UFT4YMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxNjY5MTJiLWRkOWYtNGIzZC1hODI0LTA4ODNmY2Y0ZGM5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEgAwDQYJKoZIhvcNAQELBQADggEBAIfCj3DMeP0ht70d38/sYGSGS7f6 M9JGFHJHeZUFNV98A+yzn4oCX/raeAJMl6w7HRzRvzBPcZt4fcR9shzK3kPQS4JW U7IvqzcP/niUVCp2Ok4P1UMG5LDR5sH9t1IqQCLtSbsEjImYBtUIIrYIQpETKNqz tn87A9prVGal3306Bs4YVzCwpgQ4iOUfznKCNjI0lpykV3T1YkgSygarXqghuVpo whYdmYNZpYP1qqJA5G5tQiWjKclE0AHdD1RLwU2y2J09ot3lZuhPk966YIRPdVQJ VhnsZ1/3QQKYYA1J4H/uCJZjnsIytFmmBiv6HhL/YCgHDw7UXy62WcR36E8= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:31 2025 by rpki-client