$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa File: e7874585-f99e-4906-afcf-7069fe104b33.roa (raw, json) Hash identifier: JRo0TMlZaGO/tAO4IJaIGNHrc8raULef/vV8yKoVZjI= Subject key identifier: D4:13:AD:87:AC:03:3D:F2:5E:4F:48:9D:C5:03:3A:A3:A7:89:BB:0F Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 0CD5486DE045BECC1E7733E1A28FD8EFD279EFF5 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa Signing time: Mon 06 Oct 2025 16:41:08 +0000 ROA not before: Mon 06 Oct 2025 16:41:08 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:300f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d5:48:6d:e0:45:be:cc:1e:77:33:e1:a2:8f:d8:ef:d2:79:ef:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Oct 6 16:41:08 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=f5022f0cb07d31c67e60bfe79604f6a3b694da0ad2f2166994715a1f4eab9072, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:ff:5d:28:6f:c1:b1:c8:95:27:c6:6c:e4: ba:f5:65:37:52:18:f8:4a:4c:d8:89:de:cf:dd:74: d7:e3:0e:f6:c5:95:8f:45:34:1e:d9:15:6d:8c:7f: 48:da:6b:c7:9e:7b:05:c7:bf:13:20:ff:2c:bf:87: e4:31:35:7a:de:b5:e8:ac:4d:56:43:dd:da:27:eb: e5:3d:2b:c7:8d:34:8d:59:42:7c:19:26:da:3f:ed: 76:5f:3d:53:56:a3:5f:5f:1a:74:e9:54:de:10:2d: e7:40:93:1b:d3:a3:44:f1:a1:0d:5b:65:6d:cb:14: ad:8c:27:b4:11:3c:7f:a1:08:03:b5:cd:f7:61:83: 02:02:98:89:65:06:21:52:cb:fd:ae:21:af:be:ba: 88:4c:6a:72:b8:58:6d:da:79:ad:1c:e9:a5:31:f4: 1e:26:dd:69:3c:02:e7:ad:8d:1c:af:52:3d:53:6b: e4:2b:8a:d5:45:c8:60:0a:4f:96:6c:e5:97:0f:b6: 81:69:25:dc:6d:27:08:45:c9:7a:aa:29:a6:35:d5: 23:3c:07:9d:7b:d6:20:bf:cf:86:30:09:51:2c:02: e5:a5:39:d7:71:f0:98:d3:dc:a8:b9:14:52:e0:e4: 07:c5:2a:8c:ee:39:ac:3a:64:e4:9a:fa:15:83:23: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:13:AD:87:AC:03:3D:F2:5E:4F:48:9D:C5:03:3A:A3:A7:89:BB:0F X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:300f::/48 Signature Algorithm: sha256WithRSAEncryption 29:4c:a1:b2:65:b7:16:8d:7c:61:ae:15:d6:17:30:c7:60:27: 05:c7:3b:d7:93:92:02:19:d6:4b:67:56:de:f3:c3:ce:f9:f7: 44:1a:92:cf:b3:7c:3d:af:72:06:c8:f5:21:95:88:47:94:f8: c1:22:2d:15:53:e6:1a:74:6f:5e:4a:23:e0:ef:61:c9:3e:6f: dc:f6:39:d3:f6:5c:1f:b6:4f:a6:ea:55:99:94:c4:e1:99:14: 74:2f:67:fc:1f:47:95:88:0e:82:20:a3:af:e7:e0:09:fb:fb: 4c:71:8c:3a:30:63:fd:40:79:56:65:d9:e0:d1:b8:d6:57:30: 21:8f:25:ea:c9:d3:20:35:a4:83:5f:e0:55:42:ac:88:b0:af: 50:db:84:70:c5:ec:cd:06:76:ad:b8:41:05:91:25:6a:7b:9c: 18:8b:93:84:e9:fd:eb:4f:a6:1c:1b:dd:20:af:15:b6:03:2a: 07:d1:f6:68:7e:5b:0c:b6:57:86:92:85:1c:3c:a0:07:34:b1: 6a:4d:38:5b:a0:bb:82:88:a7:67:e9:f6:02:8b:e5:2f:74:0f: 86:9f:61:0b:65:12:94:df:7d:25:bd:4e:18:f2:bf:74:4a:7a: 4c:9d:be:4c:95:3d:e0:0e:9c:99:c3:b6:47:b9:d1:59:27:6a: 8e:be:25:03 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDNVIbeBFvswedzPhoo/Y79J57/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjUxMDA2MTY0MTA4WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTAyMmYwY2IwN2QzMWM2N2U2MGJmZTc5NjA0ZjZhM2I2 OTRkYTBhZDJmMjE2Njk5NDcxNWExZjRlYWI5MDcyMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7L/9dKG/BsciVJ8Zs5Lr1ZTdSGPhKTNiJ3s/ddNfjDvbF lY9FNB7ZFW2Mf0jaa8eeewXHvxMg/yy/h+QxNXreteisTVZD3don6+U9K8eNNI1Z QnwZJto/7XZfPVNWo19fGnTpVN4QLedAkxvTo0TxoQ1bZW3LFK2MJ7QRPH+hCAO1 zfdhgwICmIllBiFSy/2uIa++uohManK4WG3aea0c6aUx9B4m3Wk8AuetjRyvUj1T a+QritVFyGAKT5Zs5ZcPtoFpJdxtJwhFyXqqKaY11SM8B5171iC/z4YwCVEsAuWl Oddx8JjT3Ki5FFLg5AfFKozuOaw6ZOSa+hWDI96pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1BOth6wDPfJeT0idxQM6o6eJuw8wHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2U3ODc0NTg1LWY5OWUtNDkwNi1hZmNmLTcwNjlmZTEwNGIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMA8wDQYJKoZIhvcNAQELBQADggEBAClMobJltxaNfGGuFdYXMMdg JwXHO9eTkgIZ1ktnVt7zw87590Qaks+zfD2vcgbI9SGViEeU+MEiLRVT5hp0b15K I+DvYck+b9z2OdP2XB+2T6bqVZmUxOGZFHQvZ/wfR5WIDoIgo6/n4An7+0xxjDow Y/1AeVZl2eDRuNZXMCGPJerJ0yA1pINf4FVCrIiwr1DbhHDF7M0Gdq24QQWRJWp7 nBiLk4Tp/etPphwb3SCvFbYDKgfR9mh+Wwy2V4aShRw8oAc0sWpNOFugu4KIp2fp 9gKL5S90D4afYQtlEpTffSW9Thjyv3RKekydvkyVPeAOnJnDtke50Vknao6+JQM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:52:06 2025 by rpki-client