$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa File: e7874585-f99e-4906-afcf-7069fe104b33.roa (raw, json) Hash identifier: R4q9laf35+6jFKYR5a5j+LL/0srQ9icpIntUheP8S9A= Subject key identifier: 4B:37:2E:56:DC:67:AC:A4:59:65:89:6D:AB:88:9D:72:D2:8F:93:0C Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 30FABEE730268BA83CA4EE3CBB91676AC9651B74 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa Signing time: Fri 15 Aug 2025 00:50:15 +0000 ROA not before: Fri 15 Aug 2025 00:50:15 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:300f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fa:be:e7:30:26:8b:a8:3c:a4:ee:3c:bb:91:67:6a:c9:65:1b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Aug 15 00:50:15 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=6d7b9679ab0d83461b5df6d0310428b8c8c98e0faaeab1610e286e50931f9508, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:d4:7e:8d:f5:24:de:bb:ff:51:f5:2d:32: d3:dc:ad:88:73:4f:b3:ec:c0:55:3c:c1:4f:66:84: 8f:0c:c7:a3:b4:b8:94:6c:ec:89:0c:1f:35:33:cd: d3:97:ed:52:a5:1a:83:ca:13:c3:91:53:2e:2d:ab: fc:e5:f1:83:e9:20:dd:b4:52:a7:43:f8:e7:07:74: e9:62:51:f4:02:b9:0e:e8:df:57:e4:d1:e4:db:72: 87:6d:b4:94:66:de:c6:e7:a4:86:d8:34:f0:16:c6: c7:f6:87:34:2c:a9:dc:69:f9:f9:3e:66:4a:87:ec: 74:b5:bb:7e:d8:a9:67:d7:0d:b9:4f:62:70:dc:f5: 50:13:ab:11:3d:18:8a:a8:e9:15:bf:70:2e:17:b2: 44:4e:2a:4a:2f:85:39:da:53:f1:13:2f:de:9f:09: 24:52:82:ed:18:7a:22:9e:73:f5:76:dd:a4:b9:fa: 28:ef:5d:ec:10:dc:38:a9:bd:b9:9f:f2:ca:e3:c6: c0:cc:50:95:64:22:44:73:ab:71:7d:0e:a5:76:64: 9e:88:e9:fb:7d:ce:8e:4a:6d:0b:7d:45:c2:36:72: 31:8b:3c:5f:a4:cd:79:63:0d:fb:9a:da:7f:99:8e: 86:63:0d:6a:e2:f3:0b:71:4f:07:a7:63:59:86:f3: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:37:2E:56:DC:67:AC:A4:59:65:89:6D:AB:88:9D:72:D2:8F:93:0C X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:300f::/48 Signature Algorithm: sha256WithRSAEncryption 27:30:c9:de:fc:38:a1:8c:6c:38:b1:f2:62:7e:e8:17:5b:ab: 62:25:a8:af:ea:a8:87:79:78:e0:8e:29:61:6b:d9:90:ae:ec: c2:bb:45:07:81:1b:80:5d:b5:1a:9c:6b:82:72:7a:44:db:b5: 2c:67:79:39:a4:6c:e9:40:b0:28:bc:34:04:47:b3:52:14:26: 6c:91:24:8b:91:f8:21:b3:0b:04:72:e4:3f:41:f1:c5:60:af: 9a:ef:06:8b:43:99:23:3c:9c:80:21:a2:05:ee:e8:a7:de:05: d4:01:30:72:73:f2:e4:53:12:24:f8:2b:65:03:30:3e:31:1f: f0:9e:dd:19:15:eb:8f:b0:32:85:7b:70:21:81:29:d0:ca:7c: b2:ce:fe:36:41:f7:ed:14:87:20:df:87:a5:94:88:7a:4f:30: b4:37:36:4f:62:d7:99:02:cb:fa:8a:e8:c5:f1:e7:3c:16:fa: 40:f0:a4:05:bc:29:b6:c1:aa:2a:58:7b:6c:dd:c0:b2:5f:56: f5:c1:0b:ee:78:c1:8e:e6:1a:cc:74:ac:34:0c:ba:34:7d:43: 8d:34:cf:05:b4:17:3f:31:c4:7d:87:6a:dd:a9:b5:19:cf:53: b4:3c:89:1a:a7:2b:ae:3e:02:6d:ed:f9:e3:8c:26:0f:47:ad: a5:77:d0:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMPq+5zAmi6g8pO48u5FnasllG3QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwODE1MDA1MDE1WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDdiOTY3OWFiMGQ4MzQ2MWI1ZGY2ZDAzMTA0MjhiOGM4 Yzk4ZTBmYWFlYWIxNjEwZTI4NmU1MDkzMWY5NTA4MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpNNR+jfUk3rv/UfUtMtPcrYhzT7PswFU8wU9mhI8Mx6O0 uJRs7IkMHzUzzdOX7VKlGoPKE8ORUy4tq/zl8YPpIN20UqdD+OcHdOliUfQCuQ7o 31fk0eTbcodttJRm3sbnpIbYNPAWxsf2hzQsqdxp+fk+ZkqH7HS1u37YqWfXDblP YnDc9VATqxE9GIqo6RW/cC4XskROKkovhTnaU/ETL96fCSRSgu0YeiKec/V23aS5 +ijvXewQ3Dipvbmf8srjxsDMUJVkIkRzq3F9DqV2ZJ6I6ft9zo5KbQt9RcI2cjGL PF+kzXljDfua2n+ZjoZjDWri8wtxTwenY1mG82DtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSzcuVtxnrKRZZYltq4idctKPkwwwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2U3ODc0NTg1LWY5OWUtNDkwNi1hZmNmLTcwNjlmZTEwNGIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMA8wDQYJKoZIhvcNAQELBQADggEBACcwyd78OKGMbDix8mJ+6Bdb q2IlqK/qqId5eOCOKWFr2ZCu7MK7RQeBG4BdtRqca4JyekTbtSxneTmkbOlAsCi8 NARHs1IUJmyRJIuR+CGzCwRy5D9B8cVgr5rvBotDmSM8nIAhogXu6KfeBdQBMHJz 8uRTEiT4K2UDMD4xH/Ce3RkV64+wMoV7cCGBKdDKfLLO/jZB9+0UhyDfh6WUiHpP MLQ3Nk9i15kCy/qK6MXx5zwW+kDwpAW8KbbBqipYe2zdwLJfVvXBC+54wY7mGsx0 rDQMujR9Q400zwW0Fz8xxH2Hat2ptRnPU7Q8iRqnK64+Am3t+eOMJg9HraV30LU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:37:26 2025 by rpki-client