$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebaea730-5e58-4690-973d-b99a24f55ff6.roa File: ebaea730-5e58-4690-973d-b99a24f55ff6.roa (raw, json) Hash identifier: Y1FTtF2WQJu4efDhaDG116JGduDsysNFLdjvdtJTFlk= Subject key identifier: 13:58:8A:EB:85:35:1D:58:89:AD:AF:3A:56:D5:70:88:07:F8:72:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3180B2666F25937B49771505D8FF30B80FB41635 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebaea730-5e58-4690-973d-b99a24f55ff6.roa Signing time: Fri 06 Jun 2025 00:00:28 +0000 ROA not before: Fri 06 Jun 2025 00:00:28 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 130.217.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:80:b2:66:6f:25:93:7b:49:77:15:05:d8:ff:30:b8:0f:b4:16:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 6 00:00:28 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=8d670362cdb5599337103365b23181dbc3734618e65c6dbdc4d4ce2d1db5f3ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:10:d5:76:bb:21:6d:fb:29:1f:6e:79:bd: 35:e6:c5:c1:06:e0:24:b4:66:df:8b:ed:a4:72:6b: f0:6d:b3:37:91:61:55:04:ca:3a:38:c9:ac:80:8c: ac:d0:5c:00:5e:87:08:38:24:e6:7a:45:08:e1:88: e1:73:6c:22:3b:2c:77:91:03:b3:e1:67:3a:e8:a0: bc:98:09:fc:cb:b9:2c:2e:84:18:f7:62:a1:8c:57: 4b:a3:00:9d:19:cb:80:51:19:33:04:b7:8d:82:b3: 5b:36:ce:88:5c:da:9b:aa:d6:59:44:58:70:02:b6: fa:e8:2c:56:34:5c:63:7f:b6:ab:72:be:74:90:76: c5:19:95:d1:e6:8a:b9:66:41:90:9a:48:e9:bd:40: 7f:c5:7b:80:12:cd:7b:5c:d4:e7:6e:4f:e6:8d:4f: 02:63:fd:38:15:95:4b:ac:5f:a8:8b:45:dc:20:52: 42:18:d9:ca:e5:1d:64:66:c2:cb:6d:01:1b:2e:19: 77:6e:dd:e8:c8:1e:af:40:96:1d:c5:d2:06:79:bc: 11:d8:d5:7d:94:af:ac:a6:c4:88:e2:af:a3:43:ae: 8e:3b:86:c4:b1:68:4c:6e:2e:f5:d9:0b:86:f8:ef: 40:4d:14:12:0a:31:00:04:0a:e9:3c:4d:c7:88:30: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:58:8A:EB:85:35:1D:58:89:AD:AF:3A:56:D5:70:88:07:F8:72:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebaea730-5e58-4690-973d-b99a24f55ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.217.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5f:a2:ea:6a:37:c2:94:65:17:37:0d:7c:fd:89:55:7f:f7:b0: 6e:0a:77:46:3f:0c:82:48:4c:4a:c8:e0:a9:11:96:39:2c:47: 96:f4:c9:b2:0e:c5:28:8f:74:de:fb:50:b1:bd:60:28:d4:f8: c9:50:31:d9:cf:65:be:a7:81:2e:2d:e8:2a:ca:cd:e3:50:5b: 4a:01:71:33:65:a0:95:35:6c:2b:01:7d:f4:03:0f:9d:56:75: ae:80:c2:a5:a5:8c:23:e6:3c:89:28:b4:2e:d7:34:a0:2e:ac: 07:c9:92:e4:5c:da:8d:43:7b:09:ff:50:b5:ee:b4:09:fb:aa: 7a:4c:ee:3b:e2:14:c5:94:92:ef:4f:e2:17:18:15:46:97:e9: 10:37:c1:66:42:55:dd:67:75:67:5e:10:2c:c5:80:f4:0e:2f: 27:6c:7d:1a:fe:8f:6d:a8:1d:8f:c8:8e:6e:b8:12:23:36:20: 78:56:5e:25:25:eb:5e:02:a1:c0:e5:27:a1:58:a3:73:c0:07: 7e:00:05:58:8c:ff:be:e4:e0:3f:ca:f0:8d:95:f5:b6:5a:54: 30:1c:ee:0d:45:7b:73:a0:9d:8c:fe:2a:1f:53:40:7a:98:bd: 16:09:ec:aa:bc:12:aa:97:c3:3f:a1:3c:8c:ff:30:f0:51:ef: cd:26:ee:d7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMYCyZm8lk3tJdxUF2P8wuA+0FjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA2MDAwMDI4WhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDY3MDM2MmNkYjU1OTkzMzcxMDMzNjViMjMxODFkYmMz NzM0NjE4ZTY1YzZkYmRjNGQ0Y2UyZDFkYjVmM2VkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoDBDVdrshbfspH255vTXmxcEG4CS0Zt+L7aRya/BtszeR YVUEyjo4yayAjKzQXABehwg4JOZ6RQjhiOFzbCI7LHeRA7PhZzrooLyYCfzLuSwu hBj3YqGMV0ujAJ0Zy4BRGTMEt42Cs1s2zohc2puq1llEWHACtvroLFY0XGN/tqty vnSQdsUZldHmirlmQZCaSOm9QH/Fe4ASzXtc1OduT+aNTwJj/TgVlUusX6iLRdwg UkIY2crlHWRmwsttARsuGXdu3ejIHq9Alh3F0gZ5vBHY1X2Ur6ymxIjir6NDro47 hsSxaExuLvXZC4b470BNFBIKMQAECuk8TceIMAmhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUE1iK64U1HViJra86VtVwiAf4cjgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViYWVhNzMwLTVlNTgtNDY5MC05NzNkLWI5OWEyNGY1NWZmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCC2TANBgkqhkiG9w0BAQsFAAOCAQEAX6LqajfClGUXNw18/YlVf/ewbgp3 Rj8MgkhMSsjgqRGWOSxHlvTJsg7FKI903vtQsb1gKNT4yVAx2c9lvqeBLi3oKsrN 41BbSgFxM2WglTVsKwF99AMPnVZ1roDCpaWMI+Y8iSi0Ltc0oC6sB8mS5FzajUN7 Cf9Qte60CfuqekzuO+IUxZSS70/iFxgVRpfpEDfBZkJV3Wd1Z14QLMWA9A4vJ2x9 Gv6Pbagdj8iObrgSIzYgeFZeJSXrXgKhwOUnoVijc8AHfgAFWIz/vuTgP8rwjZX1 tlpUMBzuDUV7c6CdjP4qH1NAepi9FgnsqrwSqpfDP6E8jP8w8FHvzSbu1w== -----END CERTIFICATE-----Generated at Sat Jun 14 18:51:10 2025 by rpki-client