$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa File: 0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json) Hash identifier: BhwK0z95fUYEbpFb1Btb9T7oSGzpzvwxhQf/6mslPHs= Subject key identifier: 40:45:F4:30:9C:2E:6B:CB:1E:C9:F6:11:32:87:A8:39:FD:AA:34:52 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 67985446F89D5EBE9CFC1DE35ACB9D5CC7F01461 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa Signing time: Tue 20 May 2025 15:30:19 +0000 ROA not before: Tue 20 May 2025 15:30:19 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:98:54:46:f8:9d:5e:be:9c:fc:1d:e3:5a:cb:9d:5c:c7:f0:14:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: May 20 15:30:19 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=a01ef3438d942fa4949038d4a5e444d1228034f90609da53308afb73660fefe0, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:76:9f:b9:40:49:a5:e0:93:66:fe:eb:9c:79: be:fe:4a:87:35:ec:5b:2e:bc:94:27:0c:66:cc:2c: 81:7c:01:8e:51:18:b2:68:54:ff:7c:a0:a7:1a:67: 67:e3:a4:d8:92:a3:08:8f:a9:fc:8b:20:c4:03:62: 52:07:8a:71:d4:d4:41:aa:c7:92:b4:49:4d:06:8e: 72:0e:46:67:40:38:19:b6:72:33:01:bf:3a:ca:85: 4b:cb:b8:5c:ba:0c:dd:4f:f9:a4:63:f0:26:63:e8: 5d:74:72:be:38:b7:01:cb:f6:a4:17:23:e6:c6:b6: 49:48:f8:6e:cb:e6:31:d4:e5:24:d6:02:f5:fd:b5: 3d:10:8b:16:e7:17:94:e6:4a:e7:19:07:b2:49:b2: f3:0d:06:f9:30:ac:be:2f:4a:4f:b1:d6:b0:1f:30: 2c:06:61:d6:fe:3b:ca:9f:ae:c4:f0:d6:2d:2d:35: a4:ac:16:64:2c:2b:83:e3:b7:aa:4c:fe:91:41:dd: af:75:1f:2c:29:80:b7:cb:bc:fc:86:f3:71:89:c2: 65:f9:b7:65:e5:6c:d0:34:56:69:d2:f9:a1:c3:29: 37:98:81:fe:86:52:fc:54:de:96:9c:7a:5c:49:ca: 55:d6:b6:e9:f5:ca:12:4e:23:3e:8b:3c:ea:3b:30: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:45:F4:30:9C:2E:6B:CB:1E:C9:F6:11:32:87:A8:39:FD:AA:34:52 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/48 Signature Algorithm: sha256WithRSAEncryption 59:cb:a0:41:44:64:8e:83:af:75:45:5f:82:42:08:2f:d3:ae: 36:97:77:91:b7:f6:64:87:db:9f:73:ce:b4:cd:88:2d:90:45: 33:86:a0:05:25:01:d5:65:4d:b6:a4:06:2a:99:0e:33:86:6b: 35:82:d7:79:83:5b:4e:de:65:68:26:61:6e:e1:75:ee:e7:89: 05:70:11:36:a5:be:c1:f5:c4:af:c2:ab:8b:4f:b2:0d:00:c8: fd:de:64:f7:d2:b7:70:cc:2f:e0:64:b8:b6:37:32:5d:7d:39: 45:66:58:14:69:22:6b:99:9f:29:11:6c:a4:f0:c4:20:8b:d0: 89:8a:43:e4:3e:bd:b2:42:f4:89:11:88:4c:ce:91:e0:c6:03: 2e:ec:ea:20:81:f9:c8:2a:e1:5f:f3:54:e8:5e:7f:74:73:d1: e3:58:10:bc:a2:26:d1:48:79:2e:9d:53:54:21:d8:ff:ff:01: 67:69:12:73:c4:b8:36:c3:af:09:c3:04:71:ea:61:d2:a8:f3: e2:79:bf:1b:13:f1:69:55:3c:e5:77:5c:9b:ae:fb:4e:fd:60: c4:74:a2:d7:82:a4:24:1a:87:1a:6d:07:4e:b1:e5:44:36:22: e9:04:e6:5f:c4:11:35:9c:c4:f3:ef:b3:c9:bd:74:5c:24:ec: f6:d4:dd:ac -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZ5hURvidXr6c/B3jWsudXMfwFGEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwNTIwMTUzMDE5WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDFlZjM0MzhkOTQyZmE0OTQ5MDM4ZDRhNWU0NDRkMTIy ODAzNGY5MDYwOWRhNTMzMDhhZmI3MzY2MGZlZmUwMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDadp+5QEml4JNm/uuceb7+Soc17FsuvJQnDGbMLIF8AY5R GLJoVP98oKcaZ2fjpNiSowiPqfyLIMQDYlIHinHU1EGqx5K0SU0GjnIORmdAOBm2 cjMBvzrKhUvLuFy6DN1P+aRj8CZj6F10cr44twHL9qQXI+bGtklI+G7L5jHU5STW AvX9tT0QixbnF5TmSucZB7JJsvMNBvkwrL4vSk+x1rAfMCwGYdb+O8qfrsTw1i0t NaSsFmQsK4Pjt6pM/pFB3a91HywpgLfLvPyG83GJwmX5t2XlbNA0VmnS+aHDKTeY gf6GUvxU3pacelxJylXWtun1yhJOIz6LPOo7MLNRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQEX0MJwua8seyfYRMoeoOf2qNFIwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzBlYzU1YjU1LTcwZDgtNGM5YS1hOTQ5LTk4MzMyNDAwYzU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAFnLoEFEZI6Dr3VFX4JCCC/T rjaXd5G39mSH259zzrTNiC2QRTOGoAUlAdVlTbakBiqZDjOGazWC13mDW07eZWgm YW7hde7niQVwETalvsH1xK/Cq4tPsg0AyP3eZPfSt3DML+BkuLY3Ml19OUVmWBRp ImuZnykRbKTwxCCL0ImKQ+Q+vbJC9IkRiEzOkeDGAy7s6iCB+cgq4V/zVOhef3Rz 0eNYELyiJtFIeS6dU1Qh2P//AWdpEnPEuDbDrwnDBHHqYdKo8+J5vxsT8WlVPOV3 XJuu+079YMR0oteCpCQahxptB06x5UQ2IukE5l/EETWcxPPvs8m9dFwk7PbU3aw= -----END CERTIFICATE-----Generated at Sat Jun 14 05:46:30 2025 by rpki-client