$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa File: e7874585-f99e-4906-afcf-7069fe104b33.roa (raw, json) Hash identifier: MZFpJ7/FnkliE8ivoMidjf5dwl5CwKOvEvzD+14VEOI= Subject key identifier: 12:44:65:81:AC:38:BF:C7:7D:05:BF:A8:A0:83:29:B8:0A:47:99:7D Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 5E336157D0C67D4192A7BA9BF96DBE5801C46A93 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa Signing time: Mon 17 Mar 2025 15:10:09 +0000 ROA not before: Mon 17 Mar 2025 15:10:09 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:300f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:33:61:57:d0:c6:7d:41:92:a7:ba:9b:f9:6d:be:58:01:c4:6a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Mar 17 15:10:09 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:78:1b:10:7f:90:cb:78:71:c0:65:c4:57:b8: 86:6e:7b:cb:d6:16:41:f9:27:5c:02:9a:ee:c6:95: 24:0a:79:77:6d:1d:c5:c0:3f:9a:26:e2:e5:fd:09: da:0c:01:b8:8d:b6:e7:af:33:23:e5:9f:a4:6f:f2: 69:1f:e7:73:fe:99:5f:4a:9b:18:f2:8b:c9:17:a6: b3:22:51:39:af:97:7f:ac:7b:c3:ea:58:32:7f:d1: 4e:a7:6b:72:01:be:b5:7f:a6:36:5a:2d:90:38:b9: 76:35:35:58:e5:16:fe:70:2c:5e:ce:2d:66:f9:28: 1c:13:68:59:2b:e3:80:85:65:35:3b:0b:79:1b:b7: 77:4d:47:64:94:12:8b:e3:cd:48:ff:4f:40:5f:b5: 81:83:1a:f8:13:18:95:a0:69:97:73:9a:8a:38:e7: b4:85:74:2b:ff:14:f9:21:80:a5:51:3c:09:d6:fe: cd:3d:9d:2f:29:74:86:05:3a:44:b5:31:eb:5b:a3: 4a:fe:a8:98:36:68:8c:c8:e8:7d:5a:76:75:7f:a0: 3f:46:ca:18:78:f5:8b:b5:74:1d:01:8f:03:3e:c4: bc:5d:6f:6e:38:96:58:1a:8d:cb:d0:bb:71:b4:8e: 6a:85:bd:8b:cb:97:8f:2c:83:22:84:ae:4c:58:17: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:44:65:81:AC:38:BF:C7:7D:05:BF:A8:A0:83:29:B8:0A:47:99:7D X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:300f::/48 Signature Algorithm: sha256WithRSAEncryption 91:61:93:6a:dd:bb:e7:bf:40:1b:bd:aa:e8:64:f7:a0:25:bd: bc:16:e8:55:40:27:06:8c:6b:3f:ab:30:5f:87:56:d8:4a:fb: db:c1:cb:36:29:37:73:fb:81:37:b2:60:3c:72:9f:f6:b8:4b: a7:bd:52:6e:42:8a:31:fa:6b:0e:6f:32:7a:70:83:d9:f7:ff: 33:b5:f5:51:cb:e4:4b:02:e7:21:88:00:79:79:a6:7f:7d:80: 22:b4:8b:57:5b:2b:2a:e1:0f:14:5b:40:14:2c:5b:90:1b:d1: b1:7a:e5:e8:3b:11:48:fa:0c:d7:45:50:c2:fe:4f:cc:2d:9a: 1c:55:b5:3e:14:00:23:60:e3:dd:83:68:6d:b5:a3:07:d9:5a: 48:8b:3d:78:f1:a1:d5:38:ef:dc:6d:0f:f0:9d:ca:3b:2f:d4: fc:36:9b:c4:a2:22:45:06:9d:e9:89:53:93:0d:c7:3c:2f:13: 7c:c7:f9:a6:e8:ee:b7:59:aa:72:0e:7d:e1:e3:e3:34:78:e2: 07:3e:85:9b:d4:1c:14:23:5d:71:19:2e:ed:37:3f:ea:f3:12: 7a:29:8a:a2:d5:68:da:b2:12:8e:fd:e9:49:45:a3:e0:ac:ff: 63:c1:07:ca:a8:b8:a4:93:6b:08:42:39:56:ea:dd:30:2d:79: 9a:3b:58:52 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXjNhV9DGfUGSp7qb+W2+WAHEapMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwMzE3MTUxMDA5WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTljNTZkZWMzNzU4MWNiMmY4NTY2YTY3Y2U5MTIzMGQw OGVjNTQ4Y2RlNDRhYzk3Y2U5NTllMWQyZTVhNzY2MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqeBsQf5DLeHHAZcRXuIZue8vWFkH5J1wCmu7GlSQKeXdt HcXAP5om4uX9CdoMAbiNtuevMyPln6Rv8mkf53P+mV9Kmxjyi8kXprMiUTmvl3+s e8PqWDJ/0U6na3IBvrV/pjZaLZA4uXY1NVjlFv5wLF7OLWb5KBwTaFkr44CFZTU7 C3kbt3dNR2SUEovjzUj/T0BftYGDGvgTGJWgaZdzmoo457SFdCv/FPkhgKVRPAnW /s09nS8pdIYFOkS1Metbo0r+qJg2aIzI6H1adnV/oD9Gyhh49Yu1dB0BjwM+xLxd b244llgajcvQu3G0jmqFvYvLl48sgyKErkxYF2vFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEkRlgaw4v8d9Bb+ooIMpuApHmX0wHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2U3ODc0NTg1LWY5OWUtNDkwNi1hZmNmLTcwNjlmZTEwNGIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMA8wDQYJKoZIhvcNAQELBQADggEBAJFhk2rdu+e/QBu9quhk96Al vbwW6FVAJwaMaz+rMF+HVthK+9vByzYpN3P7gTeyYDxyn/a4S6e9Um5CijH6aw5v Mnpwg9n3/zO19VHL5EsC5yGIAHl5pn99gCK0i1dbKyrhDxRbQBQsW5Ab0bF65eg7 EUj6DNdFUML+T8wtmhxVtT4UACNg492DaG21owfZWkiLPXjxodU479xtD/Cdyjsv 1Pw2m8SiIkUGnemJU5MNxzwvE3zH+abo7rdZqnIOfeHj4zR44gc+hZvUHBQjXXEZ Lu03P+rzEnopiqLVaNqyEo796UlFo+Cs/2PBB8qouKSTawhCOVbq3TAteZo7WFI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:50:05 2025 by rpki-client