$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa File: 79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa (raw, json) Hash identifier: nEpEsfyWA7BosHkVJwjnIQCZoI2ovhIFvbZ6JeXMfFI= Subject key identifier: 23:9B:08:17:9D:91:54:58:FC:4A:6C:AA:79:C3:83:CC:22:BC:B1:B4 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 4F784E6FFAC9E12CE366130E1A44A73F58C34D18 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa Signing time: Wed 25 Jun 2025 00:20:05 +0000 ROA not before: Wed 25 Jun 2025 00:20:05 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:78:4e:6f:fa:c9:e1:2c:e3:66:13:0e:1a:44:a7:3f:58:c3:4d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Jun 25 00:20:05 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=b72b287eb7b6add716e472fe80b09dbe5240a9729c5ede7747c0453ae70bd98c, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:66:40:4d:f5:e9:ea:a2:a9:85:36:09:58: da:85:5e:f9:94:a6:b3:78:58:49:78:4c:54:3d:64: 22:41:8f:3c:b1:22:2d:76:35:b1:41:e3:e5:95:4c: c1:08:31:d6:3c:13:94:32:55:57:f1:b5:d9:fa:5b: 63:d5:20:ae:68:2d:49:3b:ac:83:45:76:c0:b8:40: d9:f3:77:c1:01:ba:58:f2:02:a6:9d:bf:c5:1e:23: f9:00:27:11:23:21:0b:42:5e:68:e4:43:0a:cf:1e: d6:07:1b:5f:ce:68:92:b9:36:16:9e:34:af:ae:fb: 4c:b8:80:4d:1b:ac:26:ce:f0:95:f5:cc:70:8a:27: 86:f0:51:76:4e:97:a9:b5:78:d0:9e:ea:cc:92:c6: 80:40:2f:0a:7e:f3:a1:aa:83:69:0d:71:78:86:5d: aa:4e:0c:76:42:0e:f1:6b:03:dd:7b:34:71:ef:2e: 3f:25:01:61:77:44:78:4f:41:ec:3d:db:23:2a:d0: 4a:11:2c:19:9f:1b:19:03:c9:fc:4b:ef:90:5f:5b: 6e:6b:0c:80:95:ac:54:e5:28:b2:24:72:a5:bd:24: f6:98:6d:af:5d:c3:94:64:c1:ff:8d:de:a7:3e:9d: ea:f7:6d:4f:da:53:ee:11:61:8d:af:19:9c:87:ba: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9B:08:17:9D:91:54:58:FC:4A:6C:AA:79:C3:83:CC:22:BC:B1:B4 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/79232961-c24e-4e24-a09f-bc78fb7c0bcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3001::/48 Signature Algorithm: sha256WithRSAEncryption 4e:9d:65:27:0c:89:77:41:a2:1e:71:e0:55:3d:93:21:96:a2: f6:97:60:e6:9a:9c:86:ee:ed:ad:4d:65:a9:f9:7c:15:f0:ab: 84:99:dc:02:35:8c:7e:8f:91:4a:b2:65:ee:e4:77:8d:e4:fa: 94:d3:67:05:74:65:27:85:d8:30:e3:3a:43:37:46:33:41:1f: e9:bc:75:78:74:a4:07:96:84:32:bf:93:02:3f:64:95:50:fe: e2:45:d3:80:84:c9:64:e7:0b:cb:0d:28:4d:94:b5:ec:99:c2: 89:37:2a:d0:4a:3b:87:3f:4c:e5:73:54:a6:eb:c0:ab:10:7b: 56:12:5d:4e:42:99:97:cb:00:fd:32:de:56:d9:07:6b:01:89: af:a8:a7:b5:88:90:f2:14:6b:f0:fb:2b:6d:4e:2a:5b:e1:b6: 82:75:58:53:64:07:b9:0b:5e:df:07:d8:a7:28:b5:cb:1c:1a: 3c:86:d0:1d:f9:53:95:ea:54:70:3d:d6:d6:66:f5:f1:38:b7: b6:ad:b5:5a:44:5b:33:92:83:10:c2:44:a0:5f:ba:bb:53:dd: 73:71:44:1e:c4:60:0e:d3:38:4b:67:66:cb:5a:75:39:30:b7: 55:e2:65:91:30:57:a8:b0:bc:78:2b:fb:f7:2e:85:e3:2f:e7: 81:3b:54:7c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT3hOb/rJ4SzjZhMOGkSnP1jDTRgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUwNjI1MDAyMDA1WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzJiMjg3ZWI3YjZhZGQ3MTZlNDcyZmU4MGIwOWRiZTUy NDBhOTcyOWM1ZWRlNzc0N2MwNDUzYWU3MGJkOThjMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7B2ZATfXp6qKphTYJWNqFXvmUprN4WEl4TFQ9ZCJBjzyx Ii12NbFB4+WVTMEIMdY8E5QyVVfxtdn6W2PVIK5oLUk7rINFdsC4QNnzd8EBuljy Aqadv8UeI/kAJxEjIQtCXmjkQwrPHtYHG1/OaJK5NhaeNK+u+0y4gE0brCbO8JX1 zHCKJ4bwUXZOl6m1eNCe6sySxoBALwp+86Gqg2kNcXiGXapODHZCDvFrA917NHHv Lj8lAWF3RHhPQew92yMq0EoRLBmfGxkDyfxL75BfW25rDICVrFTlKLIkcqW9JPaY ba9dw5Rkwf+N3qc+ner3bU/aU+4RYY2vGZyHumjLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUI5sIF52RVFj8SmyqecODzCK8sbQwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzc5MjMyOTYxLWMyNGUtNGUyNC1hMDlmLWJjNzhmYjdjMGJjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAEwDQYJKoZIhvcNAQELBQADggEBAE6dZScMiXdBoh5x4FU9kyGW ovaXYOaanIbu7a1NZan5fBXwq4SZ3AI1jH6PkUqyZe7kd43k+pTTZwV0ZSeF2DDj OkM3RjNBH+m8dXh0pAeWhDK/kwI/ZJVQ/uJF04CEyWTnC8sNKE2UteyZwok3KtBK O4c/TOVzVKbrwKsQe1YSXU5CmZfLAP0y3lbZB2sBia+op7WIkPIUa/D7K21OKlvh toJ1WFNkB7kLXt8H2KcotcscGjyG0B35U5XqVHA91tZm9fE4t7attVpEWzOSgxDC RKBfurtT3XNxRB7EYA7TOEtnZstadTkwt1XiZZEwV6iwvHgr+/cuheMv54E7VHw= -----END CERTIFICATE-----Generated at Sun Jun 29 04:50:57 2025 by rpki-client