$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa File: 9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa (raw, json) Hash identifier: s3QFMsZ0t/m68GHor78UmB02DAWg27okKUrP2caXkFQ= Subject key identifier: BD:42:23:74:0A:9B:50:30:F4:16:7B:36:4B:8F:55:68:1C:1C:F2:F3 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 0EF405317F1D5703AA1CC20D08B044234923028B Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa Signing time: Tue 08 Jul 2025 17:40:15 +0000 ROA not before: Tue 08 Jul 2025 17:40:15 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f4:05:31:7f:1d:57:03:aa:1c:c2:0d:08:b0:44:23:49:23:02:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Jul 8 17:40:15 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=f404a2068a31e07894dab2c60caa6bcd6ce255f0390e64d7398e2f05b87ea951, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:df:f4:b6:d2:42:4b:79:e5:82:51:11:8e:b9: d5:a2:be:8e:41:cf:c3:84:a1:2d:e3:b1:62:ee:a1: 01:7b:0c:84:39:e5:90:f6:fb:b5:6c:7c:33:26:b8: 94:1b:e2:70:49:35:08:b9:a7:6f:8e:22:ed:11:3e: a9:25:0b:27:c9:72:a5:58:68:34:49:12:94:aa:5b: fc:a0:d7:54:0d:cf:34:e1:97:cd:95:13:e7:4a:f3: d3:10:21:74:27:90:61:b9:0c:b1:cb:50:13:5c:ff: be:f7:df:b0:a5:9d:f5:8f:01:97:8c:1f:35:1b:2e: 53:7e:77:06:ae:57:5f:5e:fb:36:e8:a5:84:a2:dd: da:42:4e:30:90:79:f0:11:1b:a8:1f:df:10:3c:45: e1:cc:b2:0b:95:14:81:19:6d:d9:17:da:c6:b3:29: 17:08:10:2e:a6:61:c0:9a:26:9d:f4:b1:69:a0:58: d5:ff:3e:46:18:00:01:b4:b4:de:1e:2d:91:eb:42: 40:1d:b6:c5:28:55:87:a3:c6:dc:8e:5d:59:80:3d: 01:7a:cc:24:7a:e6:69:05:4f:da:be:82:be:46:d3: 41:6a:7b:57:18:11:cb:92:a8:a4:98:18:21:ba:b8: 44:70:a4:fc:1d:c5:1d:11:4a:be:26:11:6b:30:18: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:42:23:74:0A:9B:50:30:F4:16:7B:36:4B:8F:55:68:1C:1C:F2:F3 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.128.0/17 Signature Algorithm: sha256WithRSAEncryption 59:73:f9:60:76:fb:5f:27:da:77:87:f7:66:1c:01:5d:19:fc: 19:42:b3:4d:ff:1b:e7:7e:e7:10:63:53:61:ca:de:4a:63:89: 5e:2d:c0:88:b0:19:f5:80:15:19:f2:ac:7a:4e:cd:09:14:f3: c6:d4:cb:c0:d7:86:a0:fb:06:65:99:9b:91:a6:88:1a:65:29: 22:e7:86:1e:0f:3f:3a:ea:f2:62:99:4f:95:d9:99:d9:c9:c6: 31:2a:fd:66:3f:4e:b0:b6:71:12:ce:63:06:ea:7e:4b:f7:17: c1:84:99:74:bb:23:86:75:73:ae:3d:97:85:27:0a:cf:86:e4: eb:0d:90:fc:67:50:38:a5:ae:fe:62:a6:90:74:55:eb:11:1b: 8a:e8:a2:90:f3:cd:eb:e0:97:75:77:e6:82:d2:6c:09:34:50: c1:3e:2d:75:fd:d4:ba:72:98:56:8f:63:9f:3f:7d:0a:b9:87: fb:a2:c6:4a:73:5a:c5:4c:15:dd:a6:4e:92:47:c8:27:c5:97: ee:97:f5:50:34:b8:f2:c6:9c:dd:0a:15:9f:92:6b:59:0b:cb: c5:02:f4:7e:bd:7c:6c:10:f8:12:d4:c9:8f:1d:8a:a6:0f:06: 3c:94:71:d8:1d:6a:d0:8e:33:52:62:be:b4:d2:72:5c:9b:df: 8f:d4:25:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDvQFMX8dVwOqHMINCLBEI0kjAoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwNzA4MTc0MDE1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDA0YTIwNjhhMzFlMDc4OTRkYWIyYzYwY2FhNmJjZDZj ZTI1NWYwMzkwZTY0ZDczOThlMmYwNWI4N2VhOTUxMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCD3/S20kJLeeWCURGOudWivo5Bz8OEoS3jsWLuoQF7DIQ5 5ZD2+7VsfDMmuJQb4nBJNQi5p2+OIu0RPqklCyfJcqVYaDRJEpSqW/yg11QNzzTh l82VE+dK89MQIXQnkGG5DLHLUBNc/77337ClnfWPAZeMHzUbLlN+dwauV19e+zbo pYSi3dpCTjCQefARG6gf3xA8ReHMsguVFIEZbdkX2sazKRcIEC6mYcCaJp30sWmg WNX/PkYYAAG0tN4eLZHrQkAdtsUoVYejxtyOXVmAPQF6zCR65mkFT9q+gr5G00Fq e1cYEcuSqKSYGCG6uERwpPwdxR0RSr4mEWswGEGzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvUIjdAqbUDD0Fns2S49VaBwc8vMwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzlkY2EzODkwLWJlZTAtNGNkMC04ZmQ4LTBkZWU3MGIwYmEzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe4qYAwDQYJKoZIhvcNAQELBQADggEBAFlz+WB2+18n2neH92YcAV0Z/BlC s03/G+d+5xBjU2HK3kpjiV4twIiwGfWAFRnyrHpOzQkU88bUy8DXhqD7BmWZm5Gm iBplKSLnhh4PPzrq8mKZT5XZmdnJxjEq/WY/TrC2cRLOYwbqfkv3F8GEmXS7I4Z1 c649l4UnCs+G5OsNkPxnUDilrv5ippB0VesRG4roopDzzevgl3V35oLSbAk0UME+ LXX91LpymFaPY58/fQq5h/uixkpzWsVMFd2mTpJHyCfFl+6X9VA0uPLGnN0KFZ+S a1kLy8UC9H69fGwQ+BLUyY8diqYPBjyUcdgdatCOM1JivrTSclyb34/UJXQ= -----END CERTIFICATE-----Generated at Mon Jul 21 23:17:06 2025 by rpki-client