$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f59b1803-806a-4ef8-8f43-065ae1dea2d5.roa File: f59b1803-806a-4ef8-8f43-065ae1dea2d5.roa (raw, json) Hash identifier: 0X8rdgW4s1tXmzh4YSYJUIgNKuRQn4SmwLPffXHqURo= Subject key identifier: 17:27:F6:10:92:CE:24:0C:CB:AD:F8:76:27:DC:16:A6:B2:83:74:ED Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B5F3F5C10E01F6B6CE2EBA1B37280166F6F4B6E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f59b1803-806a-4ef8-8f43-065ae1dea2d5.roa Signing time: Tue 10 Jun 2025 16:11:49 +0000 ROA not before: Tue 10 Jun 2025 16:11:49 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 195.38.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5f:3f:5c:10:e0:1f:6b:6c:e2:eb:a1:b3:72:80:16:6f:6f:4b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:11:49 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=57cefdbc0ba3f46da380de49dbc8162c23534a7e0b093713be166d52ae2b2bd5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:fc:93:4c:25:84:c9:d0:38:2a:5f:9d:9c: 16:4a:03:cd:c0:39:e3:31:42:ab:21:7e:c9:06:46: cd:ad:f4:1c:a9:a3:70:94:b8:2e:67:c6:b0:0d:14: 2f:86:04:09:61:a6:fd:57:95:52:4a:a2:67:87:ec: ff:55:78:8e:cd:c4:5c:ea:f0:48:c0:25:0c:f8:d3: e1:c7:2f:b9:55:48:e3:f9:4a:a2:b8:88:2c:67:3f: 21:3b:b0:2e:74:f2:b4:43:2c:a1:bc:49:1e:41:58: 54:b2:8a:ac:b8:93:b8:d2:f9:85:75:41:98:ac:61: 67:1d:c1:e3:6e:ee:3d:ff:89:66:f3:8a:62:c4:64: 23:d4:eb:b1:c9:7a:2b:4f:15:d7:70:1f:b4:15:8e: ed:50:04:4d:31:47:3f:78:74:47:f4:31:e8:9c:9f: f7:0d:ae:b2:db:4f:bb:4c:c9:eb:bb:9e:fd:93:81: 23:90:c9:40:6e:ab:dc:88:e6:64:04:ba:b0:da:d4: 80:e6:a6:d0:26:a4:8d:50:12:4c:b9:c3:fd:c7:80: 0d:43:0a:0a:44:fb:8d:25:06:3d:7b:d3:b1:e2:25: ee:6a:11:ab:f0:ac:ca:f0:6b:06:9d:ef:3c:83:00: a1:e5:13:88:44:b4:38:be:19:cb:e5:c8:2d:19:32: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:27:F6:10:92:CE:24:0C:CB:AD:F8:76:27:DC:16:A6:B2:83:74:ED X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f59b1803-806a-4ef8-8f43-065ae1dea2d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.38.28.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:92:a5:8c:31:0e:e5:e7:3f:34:d1:96:09:a9:f4:a6:c7:e7: 97:53:26:45:02:79:c1:a8:94:78:b8:10:b0:a1:86:a2:6f:0d: b7:ce:ff:c0:11:c5:1b:92:54:ef:b8:82:bd:ab:5f:8a:e8:c0: 96:bb:63:82:ac:d2:1d:95:0c:df:14:1d:b3:03:e6:00:cb:88: 49:d7:aa:50:9d:d1:f8:6e:36:b8:32:94:b3:5b:42:58:1d:21: f6:da:b1:16:01:72:65:d6:27:a3:fd:1d:dd:7f:84:d5:b4:b2: 86:50:26:b5:12:50:88:cd:8e:13:af:cd:2c:22:0e:89:69:98: cc:7d:d9:65:76:5f:82:be:a7:9d:77:9a:87:b0:4c:ec:4a:df: 1e:46:b9:34:72:7d:e8:63:aa:2f:0b:c9:7f:f4:85:85:12:f5: 63:11:90:06:c5:83:4d:92:6a:0d:e5:37:00:7e:0b:43:0e:83: 5e:8b:5d:43:58:db:69:f8:0c:03:6c:9b:fe:0c:3b:a0:0b:83: c0:31:3c:13:90:2d:2d:55:5e:7a:fa:c9:44:5b:41:5a:63:9f: 5e:b6:30:39:21:54:2f:bf:e8:f1:98:47:4f:5c:94:7f:f2:da: 6f:66:b5:d6:cf:4b:94:7c:5c:f1:f4:f6:7c:21:b2:b7:72:1d: cb:09:e4:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC18/XBDgH2ts4uuhs3KAFm9vS24wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYxMTQ5WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2NlZmRiYzBiYTNmNDZkYTM4MGRlNDlkYmM4MTYyYzIz NTM0YTdlMGIwOTM3MTNiZTE2NmQ1MmFlMmIyYmQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8WPyTTCWEydA4Kl+dnBZKA83AOeMxQqshfskGRs2t9Byp o3CUuC5nxrANFC+GBAlhpv1XlVJKomeH7P9VeI7NxFzq8EjAJQz40+HHL7lVSOP5 SqK4iCxnPyE7sC508rRDLKG8SR5BWFSyiqy4k7jS+YV1QZisYWcdweNu7j3/iWbz imLEZCPU67HJeitPFddwH7QVju1QBE0xRz94dEf0Meicn/cNrrLbT7tMyeu7nv2T gSOQyUBuq9yI5mQEurDa1IDmptAmpI1QEky5w/3HgA1DCgpE+40lBj1707HiJe5q EavwrMrwawad7zyDAKHlE4hEtDi+GcvlyC0ZMtX1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFyf2EJLOJAzLrfh2J9wWprKDdO0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1OWIxODAzLTgwNmEtNGVmOC04ZjQzLTA2NWFlMWRlYTJkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHDJhwwDQYJKoZIhvcNAQELBQADggEBAJySpYwxDuXnPzTRlgmp9KbH55dT JkUCecGolHi4ELChhqJvDbfO/8ARxRuSVO+4gr2rX4rowJa7Y4Ks0h2VDN8UHbMD 5gDLiEnXqlCd0fhuNrgylLNbQlgdIfbasRYBcmXWJ6P9Hd1/hNW0soZQJrUSUIjN jhOvzSwiDolpmMx92WV2X4K+p513moewTOxK3x5GuTRyfehjqi8LyX/0hYUS9WMR kAbFg02Sag3lNwB+C0MOg16LXUNY22n4DANsm/4MO6ALg8AxPBOQLS1VXnr6yURb QVpjn162MDkhVC+/6PGYR09clH/y2m9mtdbPS5R8XPH09nwhsrdyHcsJ5P4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:26:12 2025 by rpki-client