$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa File: 0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json) Hash identifier: 1penEX8k1bFnTrRjDEYcX94yobyKZ1BgCWv6D8hqees= Subject key identifier: D4:93:53:C7:3C:0C:41:3E:C1:D4:64:C0:22:D4:CD:A0:DD:DA:53:FD Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 6A4FA11B507307E87F2E1EAAF7B6053B27E4EF85 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa Signing time: Tue 05 Aug 2025 15:10:05 +0000 ROA not before: Tue 05 Aug 2025 15:10:05 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4f:a1:1b:50:73:07:e8:7f:2e:1e:aa:f7:b6:05:3b:27:e4:ef:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Aug 5 15:10:05 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=ec452bc9421b86bd89626d6b1ba5c58e70a63f09458e526372c66f4d7d40e5b4, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b5:3c:6c:2e:78:81:cb:13:b7:bd:01:66:d1: 3c:1c:f6:6c:8b:b8:f9:1a:73:86:78:08:7b:ce:c4: 13:9d:57:93:78:2d:69:a1:89:4d:6b:c7:f5:ee:0d: 92:93:d4:b9:fe:43:96:53:1d:96:35:98:5d:2c:54: 0d:ae:a5:4a:73:44:22:35:af:46:ff:64:c3:ca:9a: 3f:74:e3:75:69:fa:1f:41:d8:a1:ae:d8:df:b9:ce: d9:03:09:a8:64:48:0e:63:48:51:52:7f:38:03:ec: 2b:f6:2b:e5:8b:44:bc:44:c3:f5:8e:d3:d2:65:20: 97:40:71:37:40:79:28:93:cc:fa:9a:36:f7:02:9f: 0c:6f:95:f0:57:40:5d:14:e1:85:9c:0d:ef:d9:09: 16:c6:64:19:59:2c:70:bf:c1:6b:63:73:1c:df:46: ef:32:42:aa:81:96:73:dd:13:ae:88:b4:75:75:0e: 57:1b:98:06:d8:75:50:a8:b0:c1:df:f7:24:ff:a8: ce:61:ab:42:77:f8:7f:6f:71:7e:f2:7b:f1:52:34: 83:20:6c:a0:fc:68:2b:07:6b:8b:c3:29:95:ca:45: 4e:ab:95:27:fb:67:4d:c9:00:97:0b:36:71:5d:e6: e4:d7:d8:c9:cc:8a:96:14:71:44:ef:b9:8c:71:9c: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:93:53:C7:3C:0C:41:3E:C1:D4:64:C0:22:D4:CD:A0:DD:DA:53:FD X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/48 Signature Algorithm: sha256WithRSAEncryption a4:45:72:07:dc:4f:c3:90:f9:13:fe:e5:81:25:4c:4f:d2:49: 6c:bc:8e:ff:00:18:50:4b:43:37:c9:c9:bb:b1:2b:2b:fb:0c: 5e:78:4e:25:cd:f9:65:53:c7:c0:3c:d0:75:b9:45:3a:15:64: 77:46:ce:16:a4:41:db:52:63:05:f8:90:c6:75:83:d5:80:64: ee:9e:ee:cd:fb:19:23:23:52:7a:b7:fd:a0:3e:9f:5c:bf:40: fa:c8:c8:52:cd:61:95:4f:d9:4a:0d:7b:bd:21:86:52:39:b6: b6:ce:3b:8c:64:bd:c1:d4:48:18:23:f7:3c:ec:17:08:fe:e4: fd:8a:7d:c1:be:37:b5:ba:26:42:95:c0:d1:26:f4:d6:96:61: c8:c1:64:13:13:02:a6:52:74:6b:93:2a:96:62:45:40:e1:70: d4:44:e3:c0:8c:78:d8:df:5b:94:ac:cc:d5:cb:ef:e1:71:43: 73:0a:24:73:59:60:78:5d:47:93:c0:d0:6d:b3:6a:a0:14:fb: 5c:9f:0e:e4:9d:b5:c7:62:4a:93:a2:e5:8c:c5:64:38:17:d5: 00:d5:66:1e:4c:11:ed:57:07:de:21:d1:f3:78:cf:97:c2:3e: 4c:ca:e6:d0:87:99:a2:5e:48:d4:60:cf:60:7e:fc:a7:20:d5: b4:28:a7:3e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUak+hG1BzB+h/Lh6q97YFOyfk74UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwODA1MTUxMDA1WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzQ1MmJjOTQyMWI4NmJkODk2MjZkNmIxYmE1YzU4ZTcw YTYzZjA5NDU4ZTUyNjM3MmM2NmY0ZDdkNDBlNWI0MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYtTxsLniByxO3vQFm0Twc9myLuPkac4Z4CHvOxBOdV5N4 LWmhiU1rx/XuDZKT1Ln+Q5ZTHZY1mF0sVA2upUpzRCI1r0b/ZMPKmj9043Vp+h9B 2KGu2N+5ztkDCahkSA5jSFFSfzgD7Cv2K+WLRLxEw/WO09JlIJdAcTdAeSiTzPqa NvcCnwxvlfBXQF0U4YWcDe/ZCRbGZBlZLHC/wWtjcxzfRu8yQqqBlnPdE66ItHV1 DlcbmAbYdVCosMHf9yT/qM5hq0J3+H9vcX7ye/FSNIMgbKD8aCsHa4vDKZXKRU6r lSf7Z03JAJcLNnFd5uTX2MnMipYUcUTvuYxxnIPDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1JNTxzwMQT7B1GTAItTNoN3aU/0wHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzBlYzU1YjU1LTcwZDgtNGM5YS1hOTQ5LTk4MzMyNDAwYzU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAKRFcgfcT8OQ+RP+5YElTE/S SWy8jv8AGFBLQzfJybuxKyv7DF54TiXN+WVTx8A80HW5RToVZHdGzhakQdtSYwX4 kMZ1g9WAZO6e7s37GSMjUnq3/aA+n1y/QPrIyFLNYZVP2UoNe70hhlI5trbOO4xk vcHUSBgj9zzsFwj+5P2KfcG+N7W6JkKVwNEm9NaWYcjBZBMTAqZSdGuTKpZiRUDh cNRE48CMeNjfW5SszNXL7+FxQ3MKJHNZYHhdR5PA0G2zaqAU+1yfDuSdtcdiSpOi 5YzFZDgX1QDVZh5MEe1XB94h0fN4z5fCPkzK5tCHmaJeSNRgz2B+/Kcg1bQopz4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:29:33 2025 by rpki-client