$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa File: 27e99577-d3d4-4681-953c-071c09e6aecd.roa (raw, json) Hash identifier: VHwamL/yeV2GqCMF7g4jE/acS9lSIrbOJgKBwQPvV6k= Subject key identifier: 98:87:95:AD:44:25:7E:1D:10:8F:ED:0E:E3:54:84:25:26:F8:CC:22 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 583F60F47D2287975DA7D5E002EE769BEAF3BBEB Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa Signing time: Tue 08 Jul 2025 17:40:17 +0000 ROA not before: Tue 08 Jul 2025 17:40:17 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3f:60:f4:7d:22:87:97:5d:a7:d5:e0:02:ee:76:9b:ea:f3:bb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Jul 8 17:40:17 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=3480f75ed3b3289ae77ba440aa8e97ec5f8278efba3e23ba17c98fc6478a63c8, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:81:c8:b2:56:1f:b6:3a:05:f3:30:8f:ca: bf:1a:72:81:d2:cd:7f:cb:1a:49:63:d4:5c:f4:bf: 09:a6:82:ff:13:f6:6d:37:29:90:ff:a0:aa:65:7a: 9f:29:76:a3:40:ec:b9:d7:e2:a2:f7:55:b0:ac:9d: 32:f1:a0:d3:76:bf:b6:4b:48:a6:4e:9f:d6:31:3b: 41:a5:aa:49:51:11:6e:87:59:3c:88:8a:5a:1b:c9: bd:63:08:9e:e9:ae:51:16:1a:f8:81:de:5a:85:bd: 01:28:02:0b:b8:6b:0d:96:be:7b:6d:c1:28:a9:43: b4:c1:15:e8:b2:f8:7d:47:2c:ff:b8:ab:20:cb:6c: 42:97:bc:3b:3e:1f:71:ba:29:50:f1:ee:4b:1b:c7: b2:c4:4b:19:28:cb:60:ed:f4:eb:32:9f:69:11:92: 78:32:e3:44:62:83:21:98:80:48:54:f1:ce:01:b3: 91:d1:3b:c2:e0:8f:77:37:fd:e8:2d:d2:2e:a7:7f: 8e:78:e0:48:bf:29:bb:bc:53:4e:f4:20:7b:e9:db: c3:61:8a:d0:bb:6f:4b:af:47:6b:b6:bf:6b:66:a0: cd:10:d3:99:11:42:05:fc:5d:42:00:a5:47:21:6e: af:ee:a8:23:4d:0b:0e:3b:29:73:04:07:61:9f:ca: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:87:95:AD:44:25:7E:1D:10:8F:ED:0E:E3:54:84:25:26:F8:CC:22 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.128.0/19 Signature Algorithm: sha256WithRSAEncryption 0c:fd:a9:89:cd:90:3e:a1:ac:d4:4c:a1:c1:5f:cf:89:be:5b: 61:8d:ea:9b:24:66:d7:cb:5d:ca:99:42:f7:47:7a:de:db:b7: 29:76:6e:04:70:5b:31:2a:2a:6d:2b:80:41:82:86:39:d8:e6: b6:f0:3e:33:ff:73:70:8d:06:18:0b:6d:43:3f:19:64:e2:4f: f9:b8:47:d4:14:18:8d:30:8b:50:a9:a5:8e:2e:4e:25:a0:da: 69:44:e0:9f:07:87:f4:2e:0b:4f:65:c8:a6:15:7f:03:da:21: 89:f4:5b:1f:d6:88:42:bd:4f:fb:51:5e:30:71:60:af:c2:ef: f3:0f:99:8c:08:c4:67:8c:58:d5:a2:0a:80:b2:5b:f9:4b:4f: bd:88:ca:87:a5:cc:8a:97:53:e5:02:52:32:e4:82:fa:be:e8: 02:26:b3:2c:a8:d9:17:38:68:b7:3f:7b:01:1d:4d:ff:1c:1b: 98:b0:1c:43:df:85:74:45:dc:56:2d:31:d5:18:68:e3:4a:45: 26:a5:b7:67:d4:cd:33:b1:41:8c:c0:62:8a:ac:08:4a:8f:a5: 2d:8a:94:37:59:59:0b:c2:26:51:69:17:bb:40:53:60:8e:bb: 6a:9d:97:0e:58:7e:e4:84:47:0f:3b:a3:4a:e2:5a:a5:ed:ae: 14:44:30:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWD9g9H0ih5ddp9XgAu52m+rzu+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwNzA4MTc0MDE3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDgwZjc1ZWQzYjMyODlhZTc3YmE0NDBhYThlOTdlYzVm ODI3OGVmYmEzZTIzYmExN2M5OGZjNjQ3OGE2M2M4MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcuoHIslYftjoF8zCPyr8acoHSzX/LGklj1Fz0vwmmgv8T 9m03KZD/oKplep8pdqNA7LnX4qL3VbCsnTLxoNN2v7ZLSKZOn9YxO0GlqklREW6H WTyIilobyb1jCJ7prlEWGviB3lqFvQEoAgu4aw2WvnttwSipQ7TBFeiy+H1HLP+4 qyDLbEKXvDs+H3G6KVDx7ksbx7LESxkoy2Dt9Osyn2kRkngy40RigyGYgEhU8c4B s5HRO8Lgj3c3/egt0i6nf4544Ei/Kbu8U070IHvp28NhitC7b0uvR2u2v2tmoM0Q 05kRQgX8XUIApUchbq/uqCNNCw47KXMEB2GfyrVLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmIeVrUQlfh0Qj+0O41SEJSb4zCIwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzI3ZTk5NTc3LWQzZDQtNDY4MS05NTNjLTA3MWMwOWU2YWVjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAW4qYAwDQYJKoZIhvcNAQELBQADggEBAAz9qYnNkD6hrNRMocFfz4m+W2GN 6pskZtfLXcqZQvdHet7btyl2bgRwWzEqKm0rgEGChjnY5rbwPjP/c3CNBhgLbUM/ GWTiT/m4R9QUGI0wi1CppY4uTiWg2mlE4J8Hh/QuC09lyKYVfwPaIYn0Wx/WiEK9 T/tRXjBxYK/C7/MPmYwIxGeMWNWiCoCyW/lLT72IyoelzIqXU+UCUjLkgvq+6AIm syyo2Rc4aLc/ewEdTf8cG5iwHEPfhXRF3FYtMdUYaONKRSalt2fUzTOxQYzAYoqs CEqPpS2KlDdZWQvCJlFpF7tAU2COu2qdlw5YfuSERw87o0riWqXtrhREMNY= -----END CERTIFICATE-----Generated at Mon Jul 21 23:16:29 2025 by rpki-client