$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80ab57e1-986b-4c57-a362-e2dfa19f8170.roa File: 80ab57e1-986b-4c57-a362-e2dfa19f8170.roa (raw, json) Hash identifier: RHGWitmj8nSCYNuxsorG6ofwwb0oA89igHyFriRljeg= Subject key identifier: 2F:3D:13:56:41:D5:A1:99:A0:36:F4:D0:0E:98:E3:7C:E9:C8:B9:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FCE5D08F0F2E613D42C9F5EECE186A2CB7A13E5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80ab57e1-986b-4c57-a362-e2dfa19f8170.roa Signing time: Mon 16 Jun 2025 15:12:10 +0000 ROA not before: Mon 16 Jun 2025 15:12:10 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 188.230.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ce:5d:08:f0:f2:e6:13:d4:2c:9f:5e:ec:e1:86:a2:cb:7a:13:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 15:12:10 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=1ec86c582081597bfc82044858ff7c8cebb5e1e0b55178650847d8167e3f2d56, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:c3:ee:bb:5b:70:8c:c3:0e:cb:90:1b:ae: da:bd:95:73:d7:db:4b:e0:55:92:b0:75:ec:23:27: 05:97:63:4c:0f:aa:1e:28:20:84:68:13:cd:9a:ab: f4:c4:29:c6:ad:65:9b:e9:23:0b:96:3e:d6:1c:f2: a3:c8:8f:be:ee:aa:46:20:78:c5:2a:ac:3b:13:f2: e7:e8:b6:ec:1a:9e:d9:0f:f3:04:21:94:29:10:05: ea:92:71:55:ff:63:fb:47:2a:5e:3a:23:83:3c:82: 66:c6:9f:1a:bc:ea:aa:f3:75:af:e0:4b:e3:2f:3b: 9e:a6:7a:57:fc:c1:72:21:d8:35:65:fe:a7:2a:bd: 39:4b:46:3f:a2:6a:39:80:bd:a5:db:d2:6c:ac:cd: 09:77:62:f7:1d:09:33:68:e2:92:04:8a:cf:cf:13: 15:4a:dc:c4:9f:16:4f:31:8c:59:12:7c:7e:e5:91: 27:b9:01:65:44:45:94:76:c6:12:79:1d:e0:c5:fc: 76:d8:85:2a:3a:79:74:99:54:61:2f:b4:3a:b5:cc: a4:20:80:cb:b3:f0:51:bf:ae:3e:f5:cb:e3:50:14: c7:c6:34:1a:56:75:d2:69:65:a8:c8:a4:d8:d7:e7: 48:68:4d:4f:bf:36:73:7f:b2:95:45:80:88:05:f8: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3D:13:56:41:D5:A1:99:A0:36:F4:D0:0E:98:E3:7C:E9:C8:B9:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80ab57e1-986b-4c57-a362-e2dfa19f8170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.230.0.0/17 Signature Algorithm: sha256WithRSAEncryption d1:82:49:e1:b6:e7:ba:29:66:3b:2d:7f:9b:ac:bc:9d:5f:1e: df:b2:78:f7:6d:03:5c:5a:8b:b2:1a:96:36:f0:a3:41:be:5d: 07:78:a7:26:03:a0:9f:43:3c:66:e3:e0:e4:cd:1a:6c:0e:af: a7:33:d0:65:ef:a0:af:ca:1a:ee:22:52:50:33:49:53:8b:c1: 33:ff:dc:0d:32:e4:a3:75:23:ca:1f:15:91:f4:dc:40:ac:40: ed:15:d6:47:29:61:d5:a6:11:71:88:88:81:6d:76:fb:db:ae: 1a:5b:bc:e6:e4:0f:d0:b1:03:35:2f:09:63:31:ad:70:ab:a5: 55:22:12:23:6f:96:df:54:ad:73:32:7d:ae:fb:05:1f:62:59: 07:56:4a:f1:d9:3b:44:50:28:8b:4d:51:d6:89:1c:4f:6a:45: a4:90:d3:23:05:15:a0:dc:ee:d5:f5:25:13:6f:04:7b:2e:a0: b8:80:cb:ca:d9:38:bd:c1:eb:9a:b0:17:c4:cb:70:53:d5:3e: fc:d4:ec:0e:a6:f2:19:72:85:98:fb:fd:b7:71:0b:b7:6f:1e: 7f:8e:da:ef:c9:3c:54:90:aa:8b:9f:e9:74:8a:11:d3:d3:be: e1:85:77:e4:75:7b:6c:bf:6d:e2:56:ff:6f:b0:26:a3:58:af: 0a:73:98:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT85dCPDy5hPULJ9e7OGGost6E+UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTUxMjEwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWM4NmM1ODIwODE1OTdiZmM4MjA0NDg1OGZmN2M4Y2Vi YjVlMWUwYjU1MTc4NjUwODQ3ZDgxNjdlM2YyZDU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3AsPuu1twjMMOy5Abrtq9lXPX20vgVZKwdewjJwWXY0wP qh4oIIRoE82aq/TEKcatZZvpIwuWPtYc8qPIj77uqkYgeMUqrDsT8ufotuwantkP 8wQhlCkQBeqScVX/Y/tHKl46I4M8gmbGnxq86qrzda/gS+MvO56melf8wXIh2DVl /qcqvTlLRj+iajmAvaXb0myszQl3YvcdCTNo4pIEis/PExVK3MSfFk8xjFkSfH7l kSe5AWVERZR2xhJ5HeDF/HbYhSo6eXSZVGEvtDq1zKQggMuz8FG/rj71y+NQFMfG NBpWddJpZajIpNjX50hoTU+/NnN/spVFgIgF+D2zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULz0TVkHVoZmgNvTQDpjjfOnIuacwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwYWI1N2UxLTk4NmItNGM1Ny1hMzYyLWUyZGZhMTlmODE3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe85gAwDQYJKoZIhvcNAQELBQADggEBANGCSeG257opZjstf5usvJ1fHt+y ePdtA1xai7Ialjbwo0G+XQd4pyYDoJ9DPGbj4OTNGmwOr6cz0GXvoK/KGu4iUlAz SVOLwTP/3A0y5KN1I8ofFZH03ECsQO0V1kcpYdWmEXGIiIFtdvvbrhpbvObkD9Cx AzUvCWMxrXCrpVUiEiNvlt9UrXMyfa77BR9iWQdWSvHZO0RQKItNUdaJHE9qRaSQ 0yMFFaDc7tX1JRNvBHsuoLiAy8rZOL3B65qwF8TLcFPVPvzU7A6m8hlyhZj7/bdx C7dvHn+O2u/JPFSQqouf6XSKEdPTvuGFd+R1e2y/beJW/2+wJqNYrwpzmIA= -----END CERTIFICATE-----Generated at Sun Jun 29 04:47:37 2025 by rpki-client