$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa File: ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa (raw, json) Hash identifier: pu+ydqmFCiGsTFVjSrkqDUDxuLlijYNmGgtXrIOKazY= Subject key identifier: 1F:0F:D3:EB:A1:BC:DA:39:1B:65:D3:50:ED:24:51:82:39:C4:A8:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4549CDEBE7D9EA4246044AF5A6B3B15966347F47 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa Signing time: Tue 26 Aug 2025 15:00:30 +0000 ROA not before: Tue 26 Aug 2025 15:00:30 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:49:cd:eb:e7:d9:ea:42:46:04:4a:f5:a6:b3:b1:59:66:34:7f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:00:30 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=a3efb7467e62a91cda983c5dacbc98029f3f7f13e4a2c7e149869bf9191a360e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:01:6c:9d:29:0b:94:5a:71:64:95:2c:fa: 16:ef:4c:78:8b:1c:04:61:b6:03:98:f4:4f:a6:c8: a8:aa:1f:66:17:c9:5a:67:76:e8:48:b4:34:13:dd: 3b:86:72:17:e5:07:a2:fd:65:8e:ce:50:94:18:e0: d2:cb:9d:c0:da:08:f8:0a:61:64:ab:92:3a:01:fc: 11:47:b5:fe:5d:76:4c:90:ba:a0:b6:57:a0:c8:3a: b4:00:9a:f0:ad:50:90:43:e6:d1:79:e4:ab:cd:0e: e5:47:0c:ac:81:e8:18:56:13:e8:7b:d5:cc:c7:d7: 94:1c:98:9d:60:55:a0:58:e4:53:6b:e1:0c:30:48: 2b:67:e3:94:08:77:cc:42:fc:a3:8f:8e:88:b0:62: 31:d5:5c:ab:96:bb:58:37:37:11:ba:56:ee:b5:e0: 4d:2d:03:05:f2:26:37:11:a6:98:f5:58:4a:7c:fb: eb:37:00:d5:51:cf:da:a0:0d:32:14:b9:a6:c1:89: 14:55:30:0d:8b:9b:4e:f7:02:20:fa:dc:85:6c:2f: 91:bd:2d:11:7e:e0:c2:cd:e4:dd:ae:cf:31:fd:62: 12:7e:ba:ac:0a:ee:69:08:5e:92:78:1c:07:b3:e7: f7:c8:98:3e:f4:cf:2c:d4:d4:10:5c:34:4b:a4:e9: 90:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0F:D3:EB:A1:BC:DA:39:1B:65:D3:50:ED:24:51:82:39:C4:A8:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed7b7065-cf3e-4520-9166-2c6322f3d3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.1.0/24 Signature Algorithm: sha256WithRSAEncryption 43:ea:43:27:74:b6:d7:54:3b:0e:f6:4d:a2:56:db:a0:6a:ba: f8:d6:4c:f0:bf:6a:9e:3c:a4:fa:ca:c0:dc:5e:eb:4c:a0:77: d8:b4:4d:a7:5a:40:31:17:f2:8f:81:90:d5:75:e3:d6:ad:5d: 2e:bb:92:18:d3:d1:8f:11:96:9b:89:df:91:57:49:10:76:78: c3:50:c3:14:97:99:ce:68:12:c1:d0:4f:7e:aa:55:cf:b9:e1: e6:89:51:a3:3a:e9:eb:02:2c:bf:7d:81:0a:a4:84:6e:66:e3: 74:4b:82:28:45:c4:8e:7b:e5:07:ea:45:d8:75:ba:8a:dd:3e: b5:f5:18:7a:42:45:a6:46:cc:d6:0c:ae:8f:3b:a8:08:ce:5c: 36:76:c2:1d:81:14:89:f7:f2:31:c5:d9:8b:fd:af:56:d5:12: cb:60:d1:db:bc:b3:b4:50:70:4d:65:84:00:e5:75:9d:15:fb: 7a:3e:ad:2e:ab:77:ce:88:0b:7e:c3:d9:cb:78:c8:80:17:ce: 7e:6f:b0:10:c8:90:3f:ef:7f:16:6a:dd:b0:bc:67:92:d6:00: 62:97:59:c0:99:de:3a:e3:b2:e8:35:7e:ed:6b:95:06:39:cc: 31:5b:f5:63:fd:7a:d8:db:46:11:9e:96:ad:29:7d:67:0a:f9: d6:f5:8f:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURUnN6+fZ6kJGBEr1prOxWWY0f0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUwMDMwWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2VmYjc0NjdlNjJhOTFjZGE5ODNjNWRhY2JjOTgwMjlm M2Y3ZjEzZTRhMmM3ZTE0OTg2OWJmOTE5MWEzNjBlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOXwFsnSkLlFpxZJUs+hbvTHiLHARhtgOY9E+myKiqH2YX yVpnduhItDQT3TuGchflB6L9ZY7OUJQY4NLLncDaCPgKYWSrkjoB/BFHtf5ddkyQ uqC2V6DIOrQAmvCtUJBD5tF55KvNDuVHDKyB6BhWE+h71czH15QcmJ1gVaBY5FNr 4QwwSCtn45QId8xC/KOPjoiwYjHVXKuWu1g3NxG6Vu614E0tAwXyJjcRppj1WEp8 ++s3ANVRz9qgDTIUuabBiRRVMA2Lm073AiD63IVsL5G9LRF+4MLN5N2uzzH9YhJ+ uqwK7mkIXpJ4HAez5/fImD70zyzU1BBcNEuk6ZBlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHw/T66G82jkbZdNQ7SRRgjnEqOwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkN2I3MDY1LWNmM2UtNDUyMC05MTY2LTJjNjMyMmYzZDNkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEgEwDQYJKoZIhvcNAQELBQADggEBAEPqQyd0ttdUOw72TaJW26BquvjW TPC/ap48pPrKwNxe60ygd9i0TadaQDEX8o+BkNV149atXS67khjT0Y8RlpuJ35FX SRB2eMNQwxSXmc5oEsHQT36qVc+54eaJUaM66esCLL99gQqkhG5m43RLgihFxI57 5QfqRdh1uordPrX1GHpCRaZGzNYMro87qAjOXDZ2wh2BFIn38jHF2Yv9r1bVEstg 0du8s7RQcE1lhADldZ0V+3o+rS6rd86IC37D2ct4yIAXzn5vsBDIkD/vfxZq3bC8 Z5LWAGKXWcCZ3jrjsug1fu1rlQY5zDFb9WP9etjbRhGelq0pfWcK+db1jy4= -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:02 2025 by rpki-client