$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa File: 0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json) Hash identifier: 2RjEqqmt91vYtX5wcgtt575B4laKbT85GdVxX7EJSok= Subject key identifier: 73:58:7E:57:4B:D1:B7:A8:FD:6B:33:ED:F2:17:DF:DB:DE:3E:8C:4C Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 5E5DE5B3F598E5A0117D88C46B613321F75EB2C6 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa Signing time: Mon 16 Jun 2025 16:00:02 +0000 ROA not before: Mon 16 Jun 2025 16:00:02 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5d:e5:b3:f5:98:e5:a0:11:7d:88:c4:6b:61:33:21:f7:5e:b2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Jun 16 16:00:02 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=645ac81fa5c2fefc4cd268cecf81d8622c4b81dfffd0ff2665f2dde7c5ea1faf, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:93:b0:3c:f9:8d:a8:43:27:75:21:b9:16: 70:87:32:c0:1d:3f:4f:26:31:1a:4b:30:7b:97:6c: 8f:36:8b:f8:40:c2:8d:c9:9d:22:cf:fe:3e:1b:95: e0:be:b7:3a:3a:13:30:d4:b2:ee:04:c2:0e:33:90: 50:40:f7:70:70:aa:23:7a:b9:b0:6f:bf:e7:0d:f1: 49:72:d1:d0:08:20:30:60:1d:9e:23:33:31:27:7e: 6c:fe:ad:1d:33:70:34:98:cc:bc:40:84:4f:f8:df: d3:39:07:03:82:ef:78:ec:60:91:65:5b:48:2c:2d: 16:e4:5d:22:4f:78:7a:8e:9c:59:c1:e5:57:d6:15: 07:b9:91:1e:97:9b:cc:e4:11:b0:2d:7d:bd:30:e5: d5:df:99:1f:ca:95:d7:9c:9a:86:97:bf:f3:52:27: 0c:17:bb:d4:b3:d0:d3:07:30:1b:26:a9:9d:2c:e2: 1f:f1:a3:1e:41:ab:84:10:83:37:91:f8:ec:02:40: 99:e8:08:4e:08:ed:12:74:ce:57:82:15:06:15:67: 4e:0b:b3:54:11:5c:b1:bd:08:53:88:86:2f:71:2b: 08:2b:a7:ea:d1:75:88:11:b6:f4:13:da:d9:05:a9: c9:64:ca:a9:60:ec:40:d4:34:c1:16:02:15:f0:5a: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:58:7E:57:4B:D1:B7:A8:FD:6B:33:ED:F2:17:DF:DB:DE:3E:8C:4C X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/48 Signature Algorithm: sha256WithRSAEncryption 62:4b:db:69:b5:30:dc:5e:6f:5f:7a:be:94:ca:b5:a3:23:83: 80:cc:96:4b:a5:25:e8:14:f2:c5:cb:1b:fe:24:87:af:a7:62: d2:05:92:47:e6:ec:df:a3:31:75:c5:fa:3c:f9:34:3e:44:94: 1c:31:5e:da:94:20:75:7e:cf:31:a1:59:85:15:14:63:0f:8c: ad:d1:56:8d:13:01:bf:70:02:af:4d:ad:52:18:a4:7a:80:2f: 6f:36:a2:a6:8a:0d:f8:fc:b9:4c:7e:92:f8:57:59:fd:2e:3c: 99:7e:9c:2b:0d:2f:79:1c:6f:50:86:1e:e0:6c:87:d2:d8:5c: 82:c9:5b:72:01:2a:6e:7f:79:ab:d4:35:17:73:63:e3:c8:e2: 36:c9:ba:b2:d7:0e:03:9b:14:7a:c0:8c:31:d5:12:a3:02:cb: ac:9e:45:b8:7a:4e:a2:8f:cd:8c:0e:d2:06:e9:83:e1:16:5c: 9d:2d:6b:81:42:63:3b:b2:c9:e9:96:33:32:bc:6f:50:50:16: 7c:2b:94:54:3e:c1:d6:7a:86:a1:8d:95:c9:7f:64:e4:ad:eb: 62:5f:bb:8e:b3:61:74:16:d1:90:25:f2:bf:a4:eb:0a:05:2c: b3:6d:8e:a8:8f:3c:a3:95:52:ac:dd:12:3f:a4:1a:c8:38:1a: 9e:77:a8:04 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXl3ls/WY5aARfYjEa2EzIfdessYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwNjE2MTYwMDAyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDVhYzgxZmE1YzJmZWZjNGNkMjY4Y2VjZjgxZDg2MjJj NGI4MWRmZmZkMGZmMjY2NWYyZGRlN2M1ZWExZmFmMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjsJOwPPmNqEMndSG5FnCHMsAdP08mMRpLMHuXbI82i/hA wo3JnSLP/j4bleC+tzo6EzDUsu4Ewg4zkFBA93BwqiN6ubBvv+cN8Uly0dAIIDBg HZ4jMzEnfmz+rR0zcDSYzLxAhE/439M5BwOC73jsYJFlW0gsLRbkXSJPeHqOnFnB 5VfWFQe5kR6Xm8zkEbAtfb0w5dXfmR/KldecmoaXv/NSJwwXu9Sz0NMHMBsmqZ0s 4h/xox5Bq4QQgzeR+OwCQJnoCE4I7RJ0zleCFQYVZ04Ls1QRXLG9CFOIhi9xKwgr p+rRdYgRtvQT2tkFqclkyqlg7EDUNMEWAhXwWoPVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc1h+V0vRt6j9azPt8hff294+jEwwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzBlYzU1YjU1LTcwZDgtNGM5YS1hOTQ5LTk4MzMyNDAwYzU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAGJL22m1MNxeb196vpTKtaMj g4DMlkulJegU8sXLG/4kh6+nYtIFkkfm7N+jMXXF+jz5ND5ElBwxXtqUIHV+zzGh WYUVFGMPjK3RVo0TAb9wAq9NrVIYpHqAL282oqaKDfj8uUx+kvhXWf0uPJl+nCsN L3kcb1CGHuBsh9LYXILJW3IBKm5/eavUNRdzY+PI4jbJurLXDgObFHrAjDHVEqMC y6yeRbh6TqKPzYwO0gbpg+EWXJ0ta4FCYzuyyemWMzK8b1BQFnwrlFQ+wdZ6hqGN lcl/ZOSt62Jfu46zYXQW0ZAl8r+k6woFLLNtjqiPPKOVUqzdEj+kGsg4Gp53qAQ= -----END CERTIFICATE-----Generated at Sun Jun 29 05:09:02 2025 by rpki-client