$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aceae2b8-bb86-419b-a042-74b95a9ac220.roa File: aceae2b8-bb86-419b-a042-74b95a9ac220.roa (raw, json) Hash identifier: 0Gzt6MAPylT2QxqU/pQkLKye7QhkQNG6y49uEA/lev0= Subject key identifier: 0D:1D:D2:F9:1A:19:85:B7:DA:F9:B2:37:FD:58:F0:80:93:E4:BE:BB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7530AE6E4C066F20194213729B62FEE66B8E9F22 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aceae2b8-bb86-419b-a042-74b95a9ac220.roa Signing time: Sat 26 Apr 2025 00:01:05 +0000 ROA not before: Sat 26 Apr 2025 00:01:05 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 130.186.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:30:ae:6e:4c:06:6f:20:19:42:13:72:9b:62:fe:e6:6b:8e:9f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 26 00:01:05 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=b30dd0b7574bae9d15151bf1842ad707471d4d32f034a28f9ec1f58bba80c6bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:21:b4:22:02:79:89:12:92:a0:8b:43:98: 85:59:8d:ef:48:12:53:86:55:cb:aa:99:63:bb:26: 71:d9:a0:e9:20:fd:a4:66:ea:57:90:28:10:ab:5e: 34:92:d1:6f:55:2f:01:3a:82:b8:fa:d7:c9:b3:19: 4a:26:ed:17:79:6f:f5:54:38:de:2e:2b:57:60:26: b3:5b:ec:a1:52:d2:47:c2:6b:63:7e:85:48:dd:df: 92:a2:6e:21:45:cd:05:2c:97:a9:9d:6a:61:98:ef: 0a:b2:13:2e:82:0a:f5:e9:90:b2:06:0e:ba:6d:b6: 8d:1b:56:70:94:a3:f3:1e:95:a1:5f:f8:2b:88:d9: 18:59:48:5a:a4:78:f7:93:b9:3e:8d:f9:3d:f1:0f: cb:ff:57:a3:a5:bc:e6:59:3f:02:57:fb:a6:47:e4: 45:95:e4:a9:0a:28:70:2c:9b:71:d4:7f:25:0f:be: 20:84:9c:3e:b3:ba:1e:d1:a1:26:37:ad:16:55:a8: 57:28:32:01:fe:e6:bf:a9:1c:e2:c2:60:d3:24:fc: 2d:c2:c8:ec:9a:64:43:e7:94:0b:50:f5:2b:0e:13: c9:59:8e:10:81:1d:37:61:12:76:73:ed:a3:58:84: b8:34:06:47:12:8d:38:34:ae:f5:09:60:19:a7:54: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1D:D2:F9:1A:19:85:B7:DA:F9:B2:37:FD:58:F0:80:93:E4:BE:BB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aceae2b8-bb86-419b-a042-74b95a9ac220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.186.128.0/17 Signature Algorithm: sha256WithRSAEncryption 97:46:23:06:b8:8c:6d:3d:d0:18:83:2b:22:4b:78:9a:19:80: a8:3d:52:e9:14:96:63:bc:78:c7:d4:7e:a8:16:81:6d:53:5d: de:d3:bb:13:b8:d8:29:77:29:b8:4f:f6:dd:42:cb:61:04:2a: a0:d0:86:19:b6:f9:f2:a3:15:b4:df:81:a7:40:83:2e:d0:9c: 10:fe:47:80:40:da:bf:98:c6:52:52:f0:d4:45:d5:12:9b:e4: 75:31:52:1f:9f:d0:59:79:99:fb:aa:62:c7:11:af:af:76:d7: 00:79:f7:74:8e:b1:44:19:12:a7:bf:4c:60:b9:fb:7b:a9:b6: d9:d7:fc:af:87:84:74:d5:5a:07:0e:de:09:97:35:0b:ef:9a: 50:28:04:6c:94:9c:39:21:82:be:3e:d5:d8:a9:f7:9e:ba:d3: 00:3d:1d:11:bf:48:00:c0:ec:bb:a3:63:55:17:53:b7:69:36: b1:ae:76:b6:ef:26:01:25:b2:3c:8f:27:4f:44:f3:3d:95:3b: d1:c1:5e:70:f9:1b:c9:c0:b0:77:4d:45:e6:78:d3:03:de:5b: 50:5f:c9:6c:45:de:d9:ae:38:2d:ad:f2:3e:9d:1e:5f:27:68: 3a:5d:9f:28:89:0c:77:c8:45:cc:cf:72:98:8b:08:58:c3:a6: ee:ae:ae:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdTCubkwGbyAZQhNym2L+5muOnyIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI2MDAwMTA1WhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzBkZDBiNzU3NGJhZTlkMTUxNTFiZjE4NDJhZDcwNzQ3 MWQ0ZDMyZjAzNGEyOGY5ZWMxZjU4YmJhODBjNmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg9SG0IgJ5iRKSoItDmIVZje9IElOGVcuqmWO7JnHZoOkg /aRm6leQKBCrXjSS0W9VLwE6grj618mzGUom7Rd5b/VUON4uK1dgJrNb7KFS0kfC a2N+hUjd35KibiFFzQUsl6mdamGY7wqyEy6CCvXpkLIGDrptto0bVnCUo/MelaFf +CuI2RhZSFqkePeTuT6N+T3xD8v/V6OlvOZZPwJX+6ZH5EWV5KkKKHAsm3HUfyUP viCEnD6zuh7RoSY3rRZVqFcoMgH+5r+pHOLCYNMk/C3CyOyaZEPnlAtQ9SsOE8lZ jhCBHTdhEnZz7aNYhLg0BkcSjTg0rvUJYBmnVIUjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDR3S+RoZhbfa+bI3/VjwgJPkvrswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjZWFlMmI4LWJiODYtNDE5Yi1hMDQyLTc0Yjk1YTlhYzIyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeCuoAwDQYJKoZIhvcNAQELBQADggEBAJdGIwa4jG090BiDKyJLeJoZgKg9 UukUlmO8eMfUfqgWgW1TXd7TuxO42Cl3KbhP9t1Cy2EEKqDQhhm2+fKjFbTfgadA gy7QnBD+R4BA2r+YxlJS8NRF1RKb5HUxUh+f0Fl5mfuqYscRr6921wB593SOsUQZ Eqe/TGC5+3upttnX/K+HhHTVWgcO3gmXNQvvmlAoBGyUnDkhgr4+1dip95660wA9 HRG/SADA7LujY1UXU7dpNrGudrbvJgElsjyPJ09E8z2VO9HBXnD5G8nAsHdNReZ4 0wPeW1BfyWxF3tmuOC2t8j6dHl8naDpdnyiJDHfIRczPcpiLCFjDpu6urok= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:15 2025 by rpki-client