$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa File: 591acf32-d365-4f92-a730-b14202d5b086.roa (raw, json) Hash identifier: mCToCACkmRIWuaJYlQ2iwpM8Q6bUvbU+bXc5BOGRZwE= Subject key identifier: 65:49:E9:82:76:E9:6F:AB:23:CC:7C:07:5D:1F:D6:63:85:26:38:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E4EBA43125E911FEC0E5BCE9F0A3E90908EA186 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa Signing time: Fri 23 May 2025 00:00:31 +0000 ROA not before: Fri 23 May 2025 00:00:31 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 129.224.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4e:ba:43:12:5e:91:1f:ec:0e:5b:ce:9f:0a:3e:90:90:8e:a1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:00:31 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=be2e50c9794e270d8097339fa3202cab3f36ec0dcef13e2b74b3634bce9231c3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:8b:92:53:ed:9a:16:07:3b:7d:e4:3d:cb: 3e:58:dc:fc:64:30:80:be:5e:79:6c:11:24:b3:4f: 03:ad:14:1e:40:50:e8:18:62:53:93:ae:16:6f:ac: c6:ff:a0:12:ba:1d:ba:43:1c:df:23:0d:da:1e:05: 17:2d:55:34:05:6c:4c:a7:86:8a:8d:4c:9a:03:3b: bf:72:6e:70:08:40:51:51:0a:34:92:0d:88:ab:20: 57:64:91:ff:f0:ce:35:1b:05:44:7a:94:16:ec:7d: 07:69:28:96:d7:00:f1:d5:ac:05:24:8a:b4:55:ab: 0c:52:e5:9f:32:e2:5e:55:99:ff:7d:81:04:ee:46: 31:f6:2d:d9:4a:06:86:5d:8e:d2:b2:86:2e:fd:27: 86:ed:25:f7:6e:9a:5e:f8:58:7b:6b:3b:1e:70:91: 37:69:fc:53:33:f9:3c:71:04:23:d8:7b:ab:ee:a4: 0b:7c:91:53:eb:90:0f:db:57:6c:1c:a5:a1:94:15: bd:4a:f9:32:38:65:c3:9f:65:c4:c5:05:70:d2:29: 76:7f:8b:bf:a7:bc:e4:d9:9d:36:07:d5:ed:70:4b: 40:5c:40:2e:cc:a8:4a:4a:7e:8c:12:06:4c:aa:fa: e7:8e:c9:ad:e9:e2:01:24:07:70:a6:b6:f2:6a:e5: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:49:E9:82:76:E9:6F:AB:23:CC:7C:07:5D:1F:D6:63:85:26:38:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/591acf32-d365-4f92-a730-b14202d5b086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.224.128.0/18 Signature Algorithm: sha256WithRSAEncryption 18:32:03:65:d5:1c:b6:ac:ec:94:b6:78:60:26:c7:77:f8:73: 2e:80:1a:a4:61:dd:96:8a:c0:63:60:d6:2a:58:82:21:f2:58: 0a:22:53:ad:23:07:ef:9a:cc:24:a7:83:1b:d0:bd:58:07:03: e0:72:b2:a3:e7:a1:a3:f3:c1:21:51:be:57:ee:97:77:f2:ff: eb:3b:40:84:7e:5e:47:0c:91:3c:35:06:62:9b:85:20:5f:fd: 76:94:25:31:95:6b:75:86:1f:f4:26:a0:4d:be:49:0a:c0:9b: 78:6d:09:1a:c8:ae:21:ca:75:0e:f6:4c:bb:a6:61:15:da:04: e5:4d:23:e9:aa:93:0a:df:d8:62:47:6c:9d:28:41:54:68:94: 07:c4:c2:46:10:42:20:75:2e:d0:5a:c2:19:3f:57:01:af:80: 1c:26:99:1a:39:93:fb:5e:66:7a:d8:c4:24:c1:73:64:30:51: 3c:b6:30:68:77:f9:34:63:6a:62:28:b7:08:c0:37:cc:bb:07: e6:b6:60:e6:64:a2:f6:83:b5:8e:6e:8d:40:08:dd:05:db:a0: 41:a1:bc:cb:90:00:f8:7e:33:8f:42:80:b9:08:e3:a0:4a:c5: 46:ab:b7:4d:63:f6:e6:3b:48:00:f3:fc:d9:71:b1:a3:b4:a1: 24:63:82:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfk66QxJekR/sDlvOnwo+kJCOoYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAwMDMxWhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTJlNTBjOTc5NGUyNzBkODA5NzMzOWZhMzIwMmNhYjNm MzZlYzBkY2VmMTNlMmI3NGIzNjM0YmNlOTIzMWMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeB4uSU+2aFgc7feQ9yz5Y3PxkMIC+XnlsESSzTwOtFB5A UOgYYlOTrhZvrMb/oBK6HbpDHN8jDdoeBRctVTQFbEynhoqNTJoDO79ybnAIQFFR CjSSDYirIFdkkf/wzjUbBUR6lBbsfQdpKJbXAPHVrAUkirRVqwxS5Z8y4l5Vmf99 gQTuRjH2LdlKBoZdjtKyhi79J4btJfduml74WHtrOx5wkTdp/FMz+TxxBCPYe6vu pAt8kVPrkA/bV2wcpaGUFb1K+TI4ZcOfZcTFBXDSKXZ/i7+nvOTZnTYH1e1wS0Bc QC7MqEpKfowSBkyq+ueOya3p4gEkB3CmtvJq5VfLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZUnpgnbpb6sjzHwHXR/WY4UmOGAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5MWFjZjMyLWQzNjUtNGY5Mi1hNzMwLWIxNDIwMmQ1YjA4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaB4IAwDQYJKoZIhvcNAQELBQADggEBABgyA2XVHLas7JS2eGAmx3f4cy6A GqRh3ZaKwGNg1ipYgiHyWAoiU60jB++azCSngxvQvVgHA+BysqPnoaPzwSFRvlfu l3fy/+s7QIR+XkcMkTw1BmKbhSBf/XaUJTGVa3WGH/QmoE2+SQrAm3htCRrIriHK dQ72TLumYRXaBOVNI+mqkwrf2GJHbJ0oQVRolAfEwkYQQiB1LtBawhk/VwGvgBwm mRo5k/teZnrYxCTBc2QwUTy2MGh3+TRjamIotwjAN8y7B+a2YOZkovaDtY5ujUAI 3QXboEGhvMuQAPh+M49CgLkI46BKxUart01j9uY7SADz/NlxsaO0oSRjgiI= -----END CERTIFICATE-----Generated at Sun Jun 1 05:04:08 2025 by rpki-client