$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/c13ef5fa-467a-4ccd-b4f6-ae4cf71ee957.roa File: c13ef5fa-467a-4ccd-b4f6-ae4cf71ee957.roa (raw, json) Hash identifier: tNxL4BUK5pQ8a3QZDz+Y0aLWxUW6i+FjTeQpjqAOIao= Subject key identifier: C7:48:2D:58:6D:8B:60:76:53:6E:E4:B2:0F:F3:21:F6:8D:93:4E:22 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 1DBC3A3F4AB0DD9F9FD9F5D80062290ADBCF4DAC Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/c13ef5fa-467a-4ccd-b4f6-ae4cf71ee957.roa Signing time: Tue 08 Jul 2025 17:40:18 +0000 ROA not before: Tue 08 Jul 2025 17:40:18 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:bc:3a:3f:4a:b0:dd:9f:9f:d9:f5:d8:00:62:29:0a:db:cf:4d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Jul 8 17:40:18 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=711eaca10650e2473d199d142d537bcee5da5c7bb38a2dcfb198bc85cee0040c, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:ee:1c:1b:3a:d6:87:54:9f:8f:86:73:bf: 47:b4:18:ac:c1:b9:df:d0:9b:02:7c:3f:4e:f1:c0: 56:8f:4b:d3:d4:72:ea:7a:e9:ef:f0:f6:a0:13:87: 98:39:a0:6b:d5:a1:e1:ef:c3:ab:63:20:c4:7c:85: 9f:bb:b1:7e:72:e4:fd:e4:ae:b6:ad:76:04:b8:a5: aa:47:60:ab:da:5b:eb:c6:bf:77:e8:e0:78:a8:f6: 1c:dd:1a:04:e2:fc:18:c4:cf:b9:fc:e5:4b:00:ea: 15:44:33:1d:b7:42:75:26:ff:bf:5c:6a:46:0e:7e: 2d:ce:d0:5f:05:8a:ae:aa:59:ff:0d:6a:1d:b7:e4: db:80:12:81:17:ff:c3:44:f4:e8:97:be:2f:98:39: ce:17:88:af:3a:e6:a7:38:d4:c8:7f:7c:1a:f9:84: f1:90:62:e8:ba:cf:dd:16:b4:40:d8:a4:56:b7:8e: 7e:54:fe:11:a7:76:78:06:a4:e1:97:3d:44:40:7a: b8:09:23:d3:64:39:2c:3e:7f:8a:b8:b4:fd:07:d0: 3c:51:a8:52:e8:3a:a0:09:c5:aa:7c:22:b2:ea:a3: f6:a7:be:bd:83:fd:a5:cb:d4:40:2f:19:75:b6:6d: eb:37:36:af:84:4c:95:78:6e:36:b1:c3:a3:2f:89: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:48:2D:58:6D:8B:60:76:53:6E:E4:B2:0F:F3:21:F6:8D:93:4E:22 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/c13ef5fa-467a-4ccd-b4f6-ae4cf71ee957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9b:81:d6:62:0d:bb:ac:3b:af:d8:ff:ab:ae:ef:a3:d6:5a:24: c5:86:c8:ee:77:c6:34:88:f3:52:34:cf:88:30:7c:ef:6c:5c: 65:c3:45:14:04:07:30:dc:52:c1:fe:a0:84:94:cf:85:9b:4f: 7a:2e:de:61:fd:c8:97:97:95:b8:21:2c:24:41:53:ba:77:af: 51:9e:9b:75:78:94:56:7b:18:47:5a:8e:49:a4:9c:bf:e5:8f: f6:fe:69:3b:7b:5c:23:ea:5d:98:c7:89:3f:93:fb:90:29:37: e1:1e:b9:90:5f:69:80:79:62:30:e5:d6:be:ef:fd:15:62:c0: 16:12:d4:3c:e8:40:06:32:db:12:f0:fb:3f:24:39:05:d9:c8: 14:ea:e5:d4:a2:bb:40:a9:ad:91:7e:e2:e4:69:ba:58:af:06: 19:2e:79:76:58:20:c1:00:ca:c4:5f:aa:3a:ad:9a:90:00:2e: 6c:48:8a:41:4a:5d:fa:b1:50:e3:8b:df:dc:38:86:ed:ae:a6: fc:d9:61:ce:93:ea:98:4a:3b:4e:cc:a7:31:02:4e:8b:5c:16: 48:15:ff:08:7f:63:0b:40:78:eb:c6:01:a9:75:5e:bf:86:6b: 06:d0:d3:b3:15:b0:30:7f:cc:ff:05:6d:59:11:3b:a1:9f:64: f1:6b:de:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHbw6P0qw3Z+f2fXYAGIpCtvPTawwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwNzA4MTc0MDE4WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTFlYWNhMTA2NTBlMjQ3M2QxOTlkMTQyZDUzN2JjZWU1 ZGE1YzdiYjM4YTJkY2ZiMTk4YmM4NWNlZTAwNDBjMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl1+4cGzrWh1Sfj4Zzv0e0GKzBud/QmwJ8P07xwFaPS9PU cup66e/w9qATh5g5oGvVoeHvw6tjIMR8hZ+7sX5y5P3krratdgS4papHYKvaW+vG v3fo4Hio9hzdGgTi/BjEz7n85UsA6hVEMx23QnUm/79cakYOfi3O0F8Fiq6qWf8N ah235NuAEoEX/8NE9OiXvi+YOc4XiK865qc41Mh/fBr5hPGQYui6z90WtEDYpFa3 jn5U/hGndngGpOGXPURAergJI9NkOSw+f4q4tP0H0DxRqFLoOqAJxap8IrLqo/an vr2D/aXL1EAvGXW2bes3Nq+ETJV4bjaxw6MviXoFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx0gtWG2LYHZTbuSyD/Mh9o2TTiIwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2MxM2VmNWZhLTQ2N2EtNGNjZC1iNGY2LWFlNGNmNzFlZTk1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAa4qcAwDQYJKoZIhvcNAQELBQADggEBAJuB1mINu6w7r9j/q67vo9ZaJMWG yO53xjSI81I0z4gwfO9sXGXDRRQEBzDcUsH+oISUz4WbT3ou3mH9yJeXlbghLCRB U7p3r1Gem3V4lFZ7GEdajkmknL/lj/b+aTt7XCPqXZjHiT+T+5ApN+EeuZBfaYB5 YjDl1r7v/RViwBYS1DzoQAYy2xLw+z8kOQXZyBTq5dSiu0CprZF+4uRpulivBhku eXZYIMEAysRfqjqtmpAALmxIikFKXfqxUOOL39w4hu2upvzZYc6T6phKO07MpzEC TotcFkgV/wh/YwtAeOvGAal1Xr+GawbQ07MVsDB/zP8FbVkRO6GfZPFr3pI= -----END CERTIFICATE-----Generated at Mon Jul 21 23:16:32 2025 by rpki-client