$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa File: ef9566d5-9096-4d00-ac93-f3df448013d9.roa (raw, json) Hash identifier: WUQGGPU92u1KM3lQVordR/eMKzo7dBmR8t5rzz5TLFk= Subject key identifier: 2C:3A:7A:7B:26:2C:D6:DB:7D:88:F1:95:DC:26:38:36:19:B9:EE:57 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 057AF2AA878D3EBE352B158CAB55100400D899EF Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa Signing time: Fri 25 Apr 2025 15:20:04 +0000 ROA not before: Fri 25 Apr 2025 15:20:04 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7a:f2:aa:87:8d:3e:be:35:2b:15:8c:ab:55:10:04:00:d8:99:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Apr 25 15:20:04 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=e2e960e1920a16156e21aab2afa852f489654c28172cd438155965773f27be1c, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:24:4b:23:cd:f0:a6:5f:dd:f4:e8:7b:40: 6a:c6:57:94:1c:5e:05:69:ab:22:46:a2:49:af:97: 88:04:ab:53:4e:2b:d5:70:2b:1e:f0:e6:f7:d3:92: 0a:2c:d7:ce:3b:ad:51:2a:da:41:94:82:15:a1:b9: cb:ef:c4:b8:5f:a5:be:15:c1:bd:56:d1:72:d0:ed: bb:fb:96:42:d3:c2:90:8b:10:79:20:b8:71:06:10: 9e:32:4b:39:c0:49:30:3c:dc:4b:6f:3f:8e:d1:4f: f0:db:fa:14:17:fc:5f:5e:e2:8a:2a:d0:14:12:11: cd:bf:cd:36:7c:08:1b:86:1d:ff:28:ad:b6:12:7a: 34:43:41:d2:ce:dd:41:e7:46:af:f7:8f:c9:97:b8: 9c:f7:77:f9:84:7c:b6:32:66:c7:92:59:51:c5:fe: 82:22:38:c7:24:54:a4:cc:5e:63:77:40:e3:86:1f: 8a:19:c2:d7:51:c4:48:19:4b:c7:d1:9c:ed:51:9e: 3e:b1:18:fc:3a:2b:89:fd:43:85:f0:6e:ed:63:43: fe:ea:04:7e:77:9a:5c:27:19:74:2b:22:f2:f7:ee: 7a:60:b9:a9:cf:67:24:72:14:bb:b2:97:15:3e:6e: 04:33:f6:62:1d:8a:63:42:ae:ef:3e:c5:13:cc:c0: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3A:7A:7B:26:2C:D6:DB:7D:88:F1:95:DC:26:38:36:19:B9:EE:57 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3002::/48 Signature Algorithm: sha256WithRSAEncryption 65:2c:ba:be:05:8a:d4:69:08:df:a8:99:f7:6d:bb:02:91:72: ad:20:4c:b9:9f:04:06:86:82:9f:23:63:bf:41:15:44:1a:b2: e6:e2:e6:69:5a:c6:8e:81:06:f6:35:87:93:bc:43:5a:94:50: 1c:97:d1:bc:1c:4f:c2:17:8b:a4:77:22:ba:63:57:17:4d:89: ac:53:27:f7:31:b7:58:f7:78:40:92:fc:c6:df:40:7a:ed:f4: b4:bf:3d:8d:5b:9a:29:ce:43:45:3e:52:52:bf:16:4b:19:92: bc:84:64:30:94:83:35:1d:83:7e:bc:97:f7:84:1e:96:93:89: cd:72:a5:9c:64:23:72:ce:0f:28:2e:0a:97:ab:77:3e:12:14: ef:59:eb:be:53:ce:01:89:b1:ee:a7:d9:e3:70:22:41:3e:eb: 67:6d:b0:f3:dd:8c:6b:ba:40:64:53:52:f0:51:03:ab:2f:03: 5a:16:91:b0:6f:6d:02:a7:2f:26:02:74:33:29:69:22:83:37: 28:95:ff:28:c2:07:b7:9b:ec:9c:90:6d:02:6a:b5:05:8e:2b: 00:02:17:ae:4b:3e:f5:f0:80:7c:b0:43:96:01:c8:96:ce:80: c7:92:5c:12:a2:03:79:6c:55:e2:80:95:50:af:48:a1:c8:59: 2f:0e:1e:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBXryqoeNPr41KxWMq1UQBADYme8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwNDI1MTUyMDA0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmU5NjBlMTkyMGExNjE1NmUyMWFhYjJhZmE4NTJmNDg5 NjU0YzI4MTcyY2Q0MzgxNTU5NjU3NzNmMjdiZTFjMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6CyRLI83wpl/d9Oh7QGrGV5QcXgVpqyJGokmvl4gEq1NO K9VwKx7w5vfTkgos1847rVEq2kGUghWhucvvxLhfpb4Vwb1W0XLQ7bv7lkLTwpCL EHkguHEGEJ4ySznASTA83EtvP47RT/Db+hQX/F9e4ooq0BQSEc2/zTZ8CBuGHf8o rbYSejRDQdLO3UHnRq/3j8mXuJz3d/mEfLYyZseSWVHF/oIiOMckVKTMXmN3QOOG H4oZwtdRxEgZS8fRnO1Rnj6xGPw6K4n9Q4Xwbu1jQ/7qBH53mlwnGXQrIvL37npg uanPZyRyFLuylxU+bgQz9mIdimNCru8+xRPMwL6JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULDp6eyYs1tt9iPGV3CY4Nhm57lcwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2VmOTU2NmQ1LTkwOTYtNGQwMC1hYzkzLWYzZGY0NDgwMTNkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAIwDQYJKoZIhvcNAQELBQADggEBAGUsur4FitRpCN+omfdtuwKR cq0gTLmfBAaGgp8jY79BFUQasubi5mlaxo6BBvY1h5O8Q1qUUByX0bwcT8IXi6R3 IrpjVxdNiaxTJ/cxt1j3eECS/MbfQHrt9LS/PY1bminOQ0U+UlK/FksZkryEZDCU gzUdg368l/eEHpaTic1ypZxkI3LODyguCperdz4SFO9Z675TzgGJse6n2eNwIkE+ 62dtsPPdjGu6QGRTUvBRA6svA1oWkbBvbQKnLyYCdDMpaSKDNyiV/yjCB7eb7JyQ bQJqtQWOKwACF65LPvXwgHywQ5YByJbOgMeSXBKiA3lsVeKAlVCvSKHIWS8OHuc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:52:46 2025 by rpki-client