$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa File: e7874585-f99e-4906-afcf-7069fe104b33.roa (raw, json) Hash identifier: rt/O20eX80RMW1p8u30wzfhe2N9DWBm2xPa55CSOlds= Subject key identifier: 33:9C:49:30:3F:A6:E2:BF:B7:F4:A8:00:65:12:E4:89:B3:A2:90:1A Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 28A40284BB33734273EC521532B07744FDFAEE68 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa Signing time: Thu 23 Jul 2026 00:00:03 +0000 ROA not before: Thu 23 Jul 2026 00:00:03 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:300f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a4:02:84:bb:33:73:42:73:ec:52:15:32:b0:77:44:fd:fa:ee:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Jul 23 00:00:03 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=9835fcacd8581d648e0ac0fc71ee12366c61abf22a0c5d99df81064b09cb8895, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:50:99:6f:38:23:6b:7f:e7:9d:e6:c2:25:1b: 2b:e0:5c:f4:c8:b7:c6:b2:a4:51:eb:7e:53:aa:e4: e6:60:b6:5f:5a:0b:ff:68:8c:f4:83:11:98:34:6b: d9:be:6e:86:79:d4:ac:af:7d:70:3b:28:6d:64:f4: e7:cb:9a:8f:4d:2c:f2:7f:de:02:78:fa:28:12:61: 4c:91:ef:f4:c7:ef:ae:df:73:35:e1:72:8e:55:ed: 4b:cc:0a:f1:3f:d2:6a:d6:f0:de:32:c4:5a:cf:98: 5c:92:12:ad:09:47:2b:de:3f:6b:c6:08:92:e9:43: 63:8f:7f:74:cd:b3:27:97:fc:83:9b:32:7a:4c:f3: b6:7a:18:1f:1b:8d:6f:8b:d3:fb:76:84:83:c5:91: a7:f0:84:0b:df:cb:96:58:3a:60:3e:ba:5a:2c:cd: 75:d3:42:f1:63:9f:da:af:b2:0c:0e:73:46:cf:bb: 50:5d:89:7f:94:7e:27:6c:9b:c7:c4:c2:6d:8c:bc: f0:4d:d3:8d:ef:5f:e4:e9:7b:f4:e1:00:29:62:87: 3c:02:0a:7b:86:0a:54:c8:4b:d5:2e:26:23:8f:e0: e3:54:7d:61:f0:c5:c3:61:92:96:2c:24:a5:fb:f9: e8:1d:d4:df:c7:5d:46:ed:fa:0c:2f:34:74:fa:da: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9C:49:30:3F:A6:E2:BF:B7:F4:A8:00:65:12:E4:89:B3:A2:90:1A X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:300f::/48 Signature Algorithm: sha256WithRSAEncryption 2c:d0:d6:2f:35:44:cc:9f:e2:b5:63:83:c4:80:0e:5d:5b:a5: 54:b8:25:25:96:1e:75:6e:51:21:17:82:da:8f:56:5a:09:7d: 51:9f:b3:34:01:6f:82:d2:3b:13:18:af:f1:c5:6e:80:8a:77: 2e:f1:f4:41:ec:55:b5:da:19:3e:b3:89:fe:70:86:3e:d1:a3: 40:bf:5a:72:d1:bd:9d:0b:fd:b0:08:ef:b4:68:aa:43:a5:06: c9:1f:21:ee:77:5c:d9:f4:1f:6b:9d:38:58:01:d4:49:92:d1: b6:5f:3b:17:5a:d3:2f:d6:7a:92:e1:49:e1:1c:f8:99:4e:28: 89:25:b2:12:61:d7:48:49:9e:7f:fb:37:2b:b8:90:0b:e8:2a: e9:be:cd:96:60:bf:37:7a:f6:ac:de:08:3d:95:42:60:55:d8: e8:6a:86:aa:7e:f5:a6:db:3e:67:d1:c5:3d:46:58:4e:59:8b: 82:50:be:ff:05:50:68:45:38:f9:cf:05:94:72:51:82:48:24: 4b:c4:f0:ce:d3:dd:59:08:4c:15:e5:7f:a8:8c:86:3c:e1:da: ca:6d:8e:a3:b0:bb:60:23:b5:6e:ad:5a:1e:d0:5f:a1:bb:62: 05:54:7e:11:7c:8e:59:85:96:1f:ef:b4:1b:37:23:bb:c8:4d: 78:ff:30:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKKQChLszc0Jz7FIVMrB3RP367mgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjYwNzIzMDAwMDAzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODM1ZmNhY2Q4NTgxZDY0OGUwYWMwZmM3MWVlMTIzNjZj NjFhYmYyMmEwYzVkOTlkZjgxMDY0YjA5Y2I4ODk1MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVUJlvOCNrf+ed5sIlGyvgXPTIt8aypFHrflOq5OZgtl9a C/9ojPSDEZg0a9m+boZ51KyvfXA7KG1k9OfLmo9NLPJ/3gJ4+igSYUyR7/TH767f czXhco5V7UvMCvE/0mrW8N4yxFrPmFySEq0JRyveP2vGCJLpQ2OPf3TNsyeX/IOb MnpM87Z6GB8bjW+L0/t2hIPFkafwhAvfy5ZYOmA+uloszXXTQvFjn9qvsgwOc0bP u1BdiX+Ufidsm8fEwm2MvPBN043vX+Tpe/ThAClihzwCCnuGClTIS9UuJiOP4ONU fWHwxcNhkpYsJKX7+egd1N/HXUbt+gwvNHT62rLvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM5xJMD+m4r+39KgAZRLkibOikBowHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2U3ODc0NTg1LWY5OWUtNDkwNi1hZmNmLTcwNjlmZTEwNGIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMA8wDQYJKoZIhvcNAQELBQADggEBACzQ1i81RMyf4rVjg8SADl1b pVS4JSWWHnVuUSEXgtqPVloJfVGfszQBb4LSOxMYr/HFboCKdy7x9EHsVbXaGT6z if5whj7Ro0C/WnLRvZ0L/bAI77RoqkOlBskfIe53XNn0H2udOFgB1EmS0bZfOxda 0y/WepLhSeEc+JlOKIklshJh10hJnn/7Nyu4kAvoKum+zZZgvzd69qzeCD2VQmBV 2Ohqhqp+9abbPmfRxT1GWE5Zi4JQvv8FUGhFOPnPBZRyUYJIJEvE8M7T3VkITBXl f6iMhjzh2sptjqOwu2AjtW6tWh7QX6G7YgVUfhF8jlmFlh/vtBs3I7vITXj/MJw= -----END CERTIFICATE-----Generated at Sat Jul 25 02:10:49 2026 by rpki-client