$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa File: 9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa (raw, json) Hash identifier: dAifWdbqde7IVmeweqpywqUPVembIv4wSNnpvV3BYWU= Subject key identifier: 18:66:E5:60:44:FA:C8:FB:34:3B:28:9E:48:52:C8:A7:37:FC:3C:E2 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 2E4B29D7DDD0AD899514C49D7461AF6339E484F2 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa Signing time: Mon 19 May 2025 18:50:02 +0000 ROA not before: Mon 19 May 2025 18:50:02 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 184.169.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4b:29:d7:dd:d0:ad:89:95:14:c4:9d:74:61:af:63:39:e4:84:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: May 19 18:50:02 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=505f7ecac2f7471191c37ff5719fbc44b3d1a1e51e42b35f6b81a69ab576593c, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:a4:3b:59:70:b7:3c:7e:e4:82:29:db:39: dd:c2:e1:e4:3e:95:3f:9a:5c:c0:b9:c4:f8:c4:db: 3f:71:d7:e1:74:ce:02:97:91:46:80:a9:3a:0f:f1: 58:1d:5d:44:9a:09:06:2e:30:24:7a:4b:34:13:13: c3:22:cc:9e:d9:53:3a:cf:bd:1e:89:4c:5d:d1:1c: d6:30:55:d8:db:30:b9:2b:c4:6f:40:be:c1:f3:a7: 09:7f:ea:15:ac:e5:ec:41:5e:32:67:53:8a:26:f0: 52:51:1d:b8:c6:ea:67:9b:a8:a2:c5:e5:3f:59:93: cd:9f:5c:3e:fc:c2:b2:76:ea:fb:a1:48:51:52:2e: 1a:73:93:7e:d7:04:3a:1f:2b:5a:69:a9:2d:63:2e: 98:c6:28:4e:ba:51:44:8a:8b:ae:49:1f:75:54:0b: ad:03:58:9b:ef:6b:24:12:76:5d:23:0e:6d:8a:c9: 66:8e:a3:ea:44:45:28:13:53:6b:59:34:d1:23:cc: ee:7c:20:51:81:30:50:53:a5:ee:b3:95:47:b2:24: ec:d2:82:b6:3d:53:d6:73:33:73:0a:c9:87:4b:ae: 14:e3:ea:07:25:ea:bf:df:0d:10:e5:28:fc:9e:5c: 3d:26:ed:f5:0c:fc:7a:a6:60:ee:59:aa:3d:8e:e5: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:E5:60:44:FA:C8:FB:34:3B:28:9E:48:52:C8:A7:37:FC:3C:E2 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/9dca3890-bee0-4cd0-8fd8-0dee70b0ba33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.169.128.0/17 Signature Algorithm: sha256WithRSAEncryption 41:39:37:6d:d0:c2:a0:0b:e1:0e:fc:ce:5d:75:f8:2f:0d:84: c3:0d:52:3f:5f:2a:60:b3:1c:6f:89:e1:b9:3f:bc:8f:02:9c: 54:94:1e:69:db:d4:6b:84:f8:fd:6c:36:e9:49:2f:79:75:2a: cb:93:f8:66:44:6a:b4:8c:e9:dd:10:b4:f4:da:73:1d:0a:41: d9:06:fa:5f:ec:0e:21:a4:be:df:1a:d7:8a:f7:05:01:7b:6e: 45:9b:53:35:b2:a3:f8:56:e5:9f:86:c9:b9:9d:b6:f6:03:a3: 49:69:ad:1c:29:68:53:21:a2:b8:62:98:63:10:3c:e0:16:ea: bd:ff:ed:24:c0:68:6a:67:b6:a8:97:20:ce:6e:cf:c6:d2:ae: 3b:3b:a2:d2:9e:d4:42:7c:17:30:a7:e0:a9:4e:d9:e1:07:23: 01:16:05:fc:23:99:f9:e3:bd:08:fb:34:70:63:d6:6a:81:a0: 0b:25:f0:85:0b:1f:6a:bb:8d:23:51:96:1a:32:dc:ae:eb:ec: 3d:cd:ef:4c:8e:73:a2:b1:61:6c:44:22:68:c6:00:83:71:0a: 3f:2a:01:ee:50:51:e2:e7:5f:10:0e:29:3c:8f:4b:31:f0:48: de:d6:f7:53:f4:d6:2c:a3:b4:22:ff:45:85:49:93:f5:90:62: 0f:de:da:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULksp193QrYmVFMSddGGvYznkhPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwNTE5MTg1MDAyWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDVmN2VjYWMyZjc0NzExOTFjMzdmZjU3MTlmYmM0NGIz ZDFhMWU1MWU0MmIzNWY2YjgxYTY5YWI1NzY1OTNjMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI26Q7WXC3PH7kginbOd3C4eQ+lT+aXMC5xPjE2z9x1+F0 zgKXkUaAqToP8VgdXUSaCQYuMCR6SzQTE8MizJ7ZUzrPvR6JTF3RHNYwVdjbMLkr xG9AvsHzpwl/6hWs5exBXjJnU4om8FJRHbjG6mebqKLF5T9Zk82fXD78wrJ26vuh SFFSLhpzk37XBDofK1ppqS1jLpjGKE66UUSKi65JH3VUC60DWJvvayQSdl0jDm2K yWaOo+pERSgTU2tZNNEjzO58IFGBMFBTpe6zlUeyJOzSgrY9U9ZzM3MKyYdLrhTj 6gcl6r/fDRDlKPyeXD0m7fUM/HqmYO5Zqj2O5TKTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGGblYET6yPs0OyieSFLIpzf8POIwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzlkY2EzODkwLWJlZTAtNGNkMC04ZmQ4LTBkZWU3MGIwYmEzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe4qYAwDQYJKoZIhvcNAQELBQADggEBAEE5N23QwqAL4Q78zl11+C8NhMMN Uj9fKmCzHG+J4bk/vI8CnFSUHmnb1GuE+P1sNulJL3l1KsuT+GZEarSM6d0QtPTa cx0KQdkG+l/sDiGkvt8a14r3BQF7bkWbUzWyo/hW5Z+GybmdtvYDo0lprRwpaFMh orhimGMQPOAW6r3/7STAaGpntqiXIM5uz8bSrjs7otKe1EJ8FzCn4KlO2eEHIwEW BfwjmfnjvQj7NHBj1mqBoAsl8IULH2q7jSNRlhoy3K7r7D3N70yOc6KxYWxEImjG AINxCj8qAe5QUeLnXxAOKTyPSzHwSN7W91P01iyjtCL/RYVJk/WQYg/e2ms= -----END CERTIFICATE-----Generated at Mon Jun 2 16:30:31 2025 by rpki-client