$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8facaf36-7501-4b4b-a105-729e59d96856.roa File: 8facaf36-7501-4b4b-a105-729e59d96856.roa (raw, json) Hash identifier: RADidbXBbldur5+o6mBo+UgCfK7Z/B7a0pd4kUJqbF8= Subject key identifier: EE:A5:86:25:73:C8:A4:98:24:78:86:04:14:29:76:FD:50:3E:51:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74D2EBCAFA1281FB4F44112ACD61D592564C1B12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8facaf36-7501-4b4b-a105-729e59d96856.roa Signing time: Thu 08 May 2025 18:53:16 +0000 ROA not before: Thu 08 May 2025 18:53:16 +0000 ROA not after: Thu 12 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.146.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d2:eb:ca:fa:12:81:fb:4f:44:11:2a:cd:61:d5:92:56:4c:1b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 18:53:16 2025 GMT Not After : Jun 12 23:59:59 2025 GMT Subject: serialNumber=b1a0aafeef74406dfa6a4d43085c00e5cc44e267766adf65b4acef73d34a341c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:14:34:43:07:30:be:e9:68:b5:d1:89:8a: 8a:1f:db:1c:06:11:6f:ad:0b:b3:b7:51:db:a6:58: 83:63:89:b5:d8:42:1f:4e:2e:cc:a8:e8:65:23:19: 24:34:88:88:dc:f7:16:8e:ae:92:fc:3e:6b:70:6c: da:87:33:f5:91:60:36:c4:37:35:f0:9e:61:18:ca: b9:3b:e1:ee:b1:09:ee:e4:68:5b:1f:61:73:f0:a6: b5:05:9a:73:ef:25:f0:6a:41:18:31:27:e9:ad:bc: d7:86:88:2b:6f:4d:58:f4:04:b6:de:f4:77:b4:9f: df:74:95:da:26:7d:39:9e:34:09:1b:d3:a8:76:a1: 10:5e:19:8a:c4:67:6e:c9:33:25:5d:bb:2b:da:d4: 0e:a3:57:aa:30:b6:2f:a4:50:26:de:47:58:3c:f4: ba:24:b4:c9:f5:8c:33:68:27:10:b1:ab:09:1c:f0: 58:b8:98:98:e3:6c:eb:a2:43:5b:7e:d9:1a:b0:0a: ad:2f:b3:04:4d:14:c0:79:f4:84:80:65:72:10:d9: 17:0d:a3:02:e1:97:ee:e6:59:c8:9c:96:35:03:74: ce:7e:dc:bd:23:c1:d3:02:2e:38:5e:ac:58:1a:ae: c3:de:88:2d:42:42:44:d2:33:e9:0e:3a:89:88:a0: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A5:86:25:73:C8:A4:98:24:78:86:04:14:29:76:FD:50:3E:51:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8facaf36-7501-4b4b-a105-729e59d96856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.146.0.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:63:63:63:3e:ca:fc:aa:03:98:ef:b8:af:be:a6:c6:8b:ed: 67:c5:b7:ac:90:83:15:3e:a6:92:5a:64:e5:69:43:e6:f2:ed: 51:25:05:17:cb:2e:d7:07:86:d5:9b:97:53:cd:24:e5:f1:16: 6a:31:12:5f:54:4e:a0:a4:3f:7b:c8:1c:5c:58:c2:58:0b:02: cf:f3:36:27:cb:2f:c2:ee:bc:9f:18:56:bc:81:02:9c:39:13: 59:00:a0:67:56:57:f4:56:c1:be:37:d3:68:70:93:51:9f:aa: fe:10:fb:77:59:9c:c4:c9:07:67:7f:85:52:68:99:9f:57:a3: ed:05:30:3e:b5:d5:69:38:38:95:ff:aa:48:13:d6:80:43:8a: 75:37:a8:22:80:b4:85:9e:16:8d:3a:1f:1e:9c:43:52:6e:b3: 0d:44:1a:68:58:71:71:f3:86:de:fa:14:46:2c:bb:18:07:37: 44:4b:2c:59:3c:a2:39:23:d0:bb:81:c6:43:cf:78:93:81:44: 4d:ac:cd:b2:31:26:41:b4:cb:ef:a0:bd:fd:42:08:7c:dd:2d: ad:48:e9:cb:a6:d3:c8:4a:d9:c5:7a:81:ef:b3:14:5f:16:2d: 94:34:ed:81:76:46:bf:c0:1f:9c:85:bb:54:93:d9:90:5e:bd: af:a1:27:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdNLryvoSgftPRBEqzWHVklZMGxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA4MTg1MzE2WhcNMjUwNjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWEwYWFmZWVmNzQ0MDZkZmE2YTRkNDMwODVjMDBlNWNj NDRlMjY3NzY2YWRmNjViNGFjZWY3M2QzNGEzNDFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYMBQ0QwcwvulotdGJioof2xwGEW+tC7O3UdumWINjibXY Qh9OLsyo6GUjGSQ0iIjc9xaOrpL8PmtwbNqHM/WRYDbENzXwnmEYyrk74e6xCe7k aFsfYXPwprUFmnPvJfBqQRgxJ+mtvNeGiCtvTVj0BLbe9He0n990ldomfTmeNAkb 06h2oRBeGYrEZ27JMyVduyva1A6jV6owti+kUCbeR1g89LoktMn1jDNoJxCxqwkc 8Fi4mJjjbOuiQ1t+2RqwCq0vswRNFMB59ISAZXIQ2RcNowLhl+7mWcicljUDdM5+ 3L0jwdMCLjherFgarsPeiC1CQkTSM+kOOomIoPv5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7qWGJXPIpJgkeIYEFCl2/VA+Uf8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmYWNhZjM2LTc1MDEtNGI0Yi1hMTA1LTcyOWU1OWQ5Njg1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNkgAwDQYJKoZIhvcNAQELBQADggEBAC1jY2M+yvyqA5jvuK++psaL7WfF t6yQgxU+ppJaZOVpQ+by7VElBRfLLtcHhtWbl1PNJOXxFmoxEl9UTqCkP3vIHFxY wlgLAs/zNifLL8LuvJ8YVryBApw5E1kAoGdWV/RWwb4302hwk1Gfqv4Q+3dZnMTJ B2d/hVJomZ9Xo+0FMD611Wk4OJX/qkgT1oBDinU3qCKAtIWeFo06Hx6cQ1Jusw1E GmhYcXHzht76FEYsuxgHN0RLLFk8ojkj0LuBxkPPeJOBRE2szbIxJkG0y++gvf1C CHzdLa1I6cum08hK2cV6ge+zFF8WLZQ07YF2Rr/AH5yFu1ST2ZBeva+hJ2I= -----END CERTIFICATE-----Generated at Tue May 13 08:29:33 2025 by rpki-client