$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba2a4a20-1ad8-49ab-96c4-ec41278a0393.roa File: ba2a4a20-1ad8-49ab-96c4-ec41278a0393.roa (raw, json) Hash identifier: V2u2vc/y+vERxaqO72cXMgBpLjh7sDlpH/F6La2aNOM= Subject key identifier: C0:94:0A:81:C9:02:C4:17:5F:CE:E0:F9:96:66:F9:9E:C4:E4:84:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0914E8411129C64A76C98E5D1C2612C8A9F1B797 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba2a4a20-1ad8-49ab-96c4-ec41278a0393.roa Signing time: Tue 27 May 2025 00:01:56 +0000 ROA not before: Tue 27 May 2025 00:01:56 +0000 ROA not after: Tue 01 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 130.186.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:14:e8:41:11:29:c6:4a:76:c9:8e:5d:1c:26:12:c8:a9:f1:b7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 27 00:01:56 2025 GMT Not After : Jul 1 23:59:59 2025 GMT Subject: serialNumber=ca934fe8a625401fab917da0a6837f46414e920c2572c2d5c99bef6a28e3fa36, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:00:b7:d7:af:01:e9:f6:5c:ea:e2:f0:0c: d0:76:80:4b:de:8a:f6:73:32:52:31:fa:a1:3d:6e: 0a:4a:8a:e3:cd:b9:73:c8:d2:47:1b:10:31:c7:27: 19:c5:3e:4c:01:7d:b2:0c:20:4d:e8:87:72:f4:51: d9:7d:59:bf:4d:eb:09:ac:75:03:d8:19:6a:97:cc: 23:7c:8c:43:14:03:c7:74:3a:ad:a4:25:9e:88:df: d3:6c:96:cd:fa:e1:f9:27:a7:a4:00:01:8b:bf:59: 4a:c7:e9:11:69:a9:80:2e:d3:44:11:8d:4f:b1:20: be:dd:54:ff:f5:5c:a5:9e:93:f4:54:0b:92:cb:d3: e9:57:8b:ee:f0:16:16:5f:63:b5:79:21:27:cf:84: 80:79:32:2b:34:7f:71:42:97:9d:0f:b8:ed:d0:d7: 0c:bf:c4:d2:ac:8a:89:b6:1c:a3:af:d0:b7:12:f6: a7:83:5c:91:6c:2a:2c:ce:2f:a3:c5:8f:67:86:db: da:01:d0:eb:3f:f2:ac:06:5a:da:a5:6b:08:e5:a2: 47:52:37:46:92:c4:2f:12:53:ef:ba:0d:25:f4:fd: a9:65:78:3e:dc:67:29:09:90:e1:03:a5:48:d9:70: 8f:bf:2a:8b:16:a9:86:a0:5f:3d:00:87:7f:71:5c: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:0A:81:C9:02:C4:17:5F:CE:E0:F9:96:66:F9:9E:C4:E4:84:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba2a4a20-1ad8-49ab-96c4-ec41278a0393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.186.32.0/19 Signature Algorithm: sha256WithRSAEncryption 3f:cf:d7:cb:8b:61:17:86:8a:25:f6:4c:72:4c:ad:2d:6c:88: fb:46:6d:78:4d:c9:7d:17:c8:10:af:95:75:5d:8d:47:91:7b: 38:81:2c:97:e1:4f:c1:e6:09:64:78:52:48:ee:c1:0c:44:ef: d6:30:5e:ec:5a:fa:2b:5e:7d:29:4e:ed:f8:38:69:77:23:85: f7:20:56:51:a2:78:fe:c6:0b:f4:d0:4b:89:d7:b9:0b:d4:66: 59:ec:86:1f:3a:bf:0f:56:05:03:ee:fc:48:b9:c2:82:fc:37: 82:77:f5:f0:55:69:95:59:e0:02:9a:71:e7:dc:e5:61:0a:d2: dc:4c:e9:e6:70:35:9b:17:6f:21:0d:28:d0:a8:3e:1a:bb:da: f8:4c:14:79:af:95:94:0d:f4:77:11:1f:03:f0:29:2b:a8:44: 50:e2:fb:e5:ab:9f:58:33:be:53:b9:48:6d:b1:ba:08:4b:50: da:2c:25:bd:1f:13:34:0a:3f:9b:a6:70:d4:72:d9:9a:5b:65: d3:f8:8f:82:03:2d:a0:8f:a1:5c:23:c6:bb:50:88:28:6f:b3: f2:cf:59:af:aa:6d:b0:d9:22:8b:ba:4a:21:1c:92:0a:60:b0: 07:d3:92:2c:69:bf:23:46:18:0e:11:ee:8c:77:46:8f:ec:33: 4a:c5:01:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCRToQREpxkp2yY5dHCYSyKnxt5cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI3MDAwMTU2WhcNMjUwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTkzNGZlOGE2MjU0MDFmYWI5MTdkYTBhNjgzN2Y0NjQx NGU5MjBjMjU3MmMyZDVjOTliZWY2YTI4ZTNmYTM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKVgC3168B6fZc6uLwDNB2gEveivZzMlIx+qE9bgpKiuPN uXPI0kcbEDHHJxnFPkwBfbIMIE3oh3L0Udl9Wb9N6wmsdQPYGWqXzCN8jEMUA8d0 Oq2kJZ6I39Nsls364fknp6QAAYu/WUrH6RFpqYAu00QRjU+xIL7dVP/1XKWek/RU C5LL0+lXi+7wFhZfY7V5ISfPhIB5Mis0f3FCl50PuO3Q1wy/xNKsiom2HKOv0LcS 9qeDXJFsKizOL6PFj2eG29oB0Os/8qwGWtqlawjlokdSN0aSxC8SU++6DSX0/all eD7cZykJkOEDpUjZcI+/KosWqYagXz0Ah39xXFllAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwJQKgckCxBdfzuD5lmb5nsTkhE4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMmE0YTIwLTFhZDgtNDlhYi05NmM0LWVjNDEyNzhhMDM5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWCuiAwDQYJKoZIhvcNAQELBQADggEBAD/P18uLYReGiiX2THJMrS1siPtG bXhNyX0XyBCvlXVdjUeReziBLJfhT8HmCWR4UkjuwQxE79YwXuxa+itefSlO7fg4 aXcjhfcgVlGieP7GC/TQS4nXuQvUZlnshh86vw9WBQPu/Ei5woL8N4J39fBVaZVZ 4AKacefc5WEK0txM6eZwNZsXbyENKNCoPhq72vhMFHmvlZQN9HcRHwPwKSuoRFDi ++Wrn1gzvlO5SG2xughLUNosJb0fEzQKP5umcNRy2ZpbZdP4j4IDLaCPoVwjxrtQ iChvs/LPWa+qbbDZIou6SiEckgpgsAfTkixpvyNGGA4R7ox3Ro/sM0rFAWI= -----END CERTIFICATE-----Generated at Sun Jun 1 05:06:15 2025 by rpki-client