$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa File: 0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json) Hash identifier: zvFtQ6Q6B7DSQiUdIfSWzzocIuuekf9Hp2YjKoDVBYQ= Subject key identifier: 55:6E:F9:1E:F0:12:77:E6:5F:20:B4:C1:62:21:38:F3:C7:6B:D3:55 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 03D29EC07B88A965F195792000B54B3516D9D331 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa Signing time: Fri 25 Apr 2025 15:20:06 +0000 ROA not before: Fri 25 Apr 2025 15:20:06 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d2:9e:c0:7b:88:a9:65:f1:95:79:20:00:b5:4b:35:16:d9:d3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Apr 25 15:20:06 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2ab985e1f2c9f0c2960e96f0dbe33dc76cb904ed6f6c8dcfe34fa5c27ce8f559, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:2a:53:fc:c2:56:74:1c:81:9f:44:96:cb: 64:4e:00:fb:cc:1a:36:06:c3:4f:a9:54:c4:0b:de: f1:04:31:dd:9c:a5:7b:a3:ff:9a:3f:1f:2f:09:22: c9:1b:54:19:34:9e:59:0a:f3:f1:81:12:7e:81:c1: da:79:78:af:5f:8d:f5:24:4d:26:4e:19:f7:a5:b4: e8:a9:08:8b:a4:2b:be:aa:53:7b:26:15:c9:dd:6a: f5:a5:55:24:06:8d:94:91:72:8f:42:77:da:b4:88: 06:11:43:c8:52:7e:e2:52:19:b5:e6:91:51:c6:b2: 2d:7e:1c:25:fe:84:ad:ec:16:a9:bd:09:b8:6a:d1: 51:46:a1:fb:d1:c6:4d:2f:86:bf:7b:d5:01:08:6a: 13:ab:06:d0:00:3f:24:02:7c:d1:0f:06:d5:93:c9: 50:4d:2a:ca:9c:41:e2:c6:53:d0:95:62:62:dd:c1: 2f:ff:6c:e8:6a:63:44:bc:65:b6:7f:be:54:de:78: 05:c3:19:9a:46:cf:3c:f3:7a:5d:4a:ef:37:56:b8: 4b:6b:e6:b4:02:25:ab:29:73:38:02:05:62:84:63: e4:b5:be:3d:1c:86:48:e4:34:ef:63:e9:e8:79:11: 4b:c1:da:f1:e0:5e:55:ba:06:c2:c6:b0:1a:61:5e: 80:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6E:F9:1E:F0:12:77:E6:5F:20:B4:C1:62:21:38:F3:C7:6B:D3:55 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/48 Signature Algorithm: sha256WithRSAEncryption 90:40:0a:cc:97:42:55:52:2d:ad:1b:96:26:9b:84:f0:84:61: 11:8b:9b:c1:51:8e:8e:1c:03:92:3a:83:96:ca:31:12:ad:db: 2e:1f:63:58:aa:4a:3c:a9:4e:44:d9:84:7e:a5:cb:8f:49:5e: 62:04:4a:b9:f9:0b:8c:6f:54:8b:9c:61:54:8d:57:f0:08:54: c4:c1:fd:86:6d:70:b5:d7:93:ee:03:10:d7:0e:1d:29:da:2c: 0e:12:a0:e6:52:23:9e:8b:08:1e:8d:3a:ed:c8:e7:fc:85:df: b9:03:54:d0:7f:8d:c7:c4:83:02:7b:b1:21:dc:f9:99:f5:2d: 8c:52:8b:09:7a:e2:9b:d0:39:82:ae:6c:64:c3:8d:dd:8f:87: 00:3b:a8:bf:3d:e5:8a:a8:11:b9:a8:96:e4:dc:43:a6:bd:6b: 79:97:fc:d1:39:39:18:58:e1:6e:08:d5:58:88:f0:06:a8:e1: 57:0a:b8:14:26:60:57:d7:37:e8:e2:5a:58:ab:e2:b5:bd:cc: 6f:cf:2e:20:f2:df:64:2a:d6:13:70:ba:82:91:e3:a9:f1:a7: 63:2f:e5:08:86:76:2d:27:34:ae:f6:2d:f5:d7:23:72:22:3f: f1:82:af:11:7f:9d:59:87:6b:6d:3d:db:ed:7c:eb:1b:04:17: b4:e0:60:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA9KewHuIqWXxlXkgALVLNRbZ0zEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwNDI1MTUyMDA2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWI5ODVlMWYyYzlmMGMyOTYwZTk2ZjBkYmUzM2RjNzZj YjkwNGVkNmY2YzhkY2ZlMzRmYTVjMjdjZThmNTU5MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCYypT/MJWdByBn0SWy2ROAPvMGjYGw0+pVMQL3vEEMd2c pXuj/5o/Hy8JIskbVBk0nlkK8/GBEn6Bwdp5eK9fjfUkTSZOGfeltOipCIukK76q U3smFcndavWlVSQGjZSRco9Cd9q0iAYRQ8hSfuJSGbXmkVHGsi1+HCX+hK3sFqm9 Cbhq0VFGofvRxk0vhr971QEIahOrBtAAPyQCfNEPBtWTyVBNKsqcQeLGU9CVYmLd wS//bOhqY0S8ZbZ/vlTeeAXDGZpGzzzzel1K7zdWuEtr5rQCJaspczgCBWKEY+S1 vj0chkjkNO9j6eh5EUvB2vHgXlW6BsLGsBphXoAlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVW75HvASd+ZfILTBYiE488dr01UwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzBlYzU1YjU1LTcwZDgtNGM5YS1hOTQ5LTk4MzMyNDAwYzU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAJBACsyXQlVSLa0bliabhPCE YRGLm8FRjo4cA5I6g5bKMRKt2y4fY1iqSjypTkTZhH6ly49JXmIESrn5C4xvVIuc YVSNV/AIVMTB/YZtcLXXk+4DENcOHSnaLA4SoOZSI56LCB6NOu3I5/yF37kDVNB/ jcfEgwJ7sSHc+Zn1LYxSiwl64pvQOYKubGTDjd2PhwA7qL895YqoEbmoluTcQ6a9 a3mX/NE5ORhY4W4I1ViI8Aao4VcKuBQmYFfXN+jiWlir4rW9zG/PLiDy32Qq1hNw uoKR46nxp2Mv5QiGdi0nNK72LfXXI3IiP/GCrxF/nVmHa2092+186xsEF7TgYFk= -----END CERTIFICATE-----Generated at Sat Apr 26 17:36:10 2025 by rpki-client