$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa File: 03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa (raw, json) Hash identifier: xw+Gzo82ymI5rVh9bWm0Z+VffJZSnU11Nw/uzdx2IH8= Subject key identifier: 31:4B:BE:1F:9C:F9:17:69:E0:7F:6C:3C:04:F9:72:CA:52:48:E5:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39E7F256FC305A69C8DE097DFF63CE54ADEADB19 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:81a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e7:f2:56:fc:30:5a:69:c8:de:09:7d:ff:63:ce:54:ad:ea:db:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:93:16:ea:a4:f9:26:50:88:b0:2a:f7:29: 91:f4:ed:e4:78:a0:3a:87:05:92:f6:26:85:21:5c: 61:1f:ff:c4:80:d5:5b:b0:17:2e:f5:37:06:db:fd: 8b:fa:c6:3e:5b:d0:3d:ff:7e:d7:43:ab:82:78:4d: f6:29:fa:56:90:ee:ab:d0:01:44:a7:74:87:db:38: 35:b2:b2:1c:19:79:be:d2:81:37:e3:14:ce:ae:09: 95:88:dc:93:84:f1:37:a9:52:ec:4b:a8:bc:62:ca: a1:3d:13:a9:f8:70:c7:da:65:63:14:68:af:fe:a4: 1b:6e:27:7e:d1:37:e5:cb:58:c0:70:73:32:83:c7: 5d:f3:6b:70:06:ec:d2:83:c8:75:d6:25:25:d8:7f: da:73:e2:bd:5c:5b:c7:b4:81:0c:40:17:2d:3f:99: 78:77:e4:7f:cf:38:89:95:73:19:7f:74:e2:40:d7: e8:8a:fc:c9:8d:7f:32:e7:2b:14:f0:2b:5c:16:4d: 46:14:59:c7:e8:03:3c:8a:d5:c2:ad:89:7a:20:f5: 91:a5:d0:0b:20:0a:41:ad:4d:fd:66:9e:b6:ef:ee: 7d:af:2e:53:6b:e6:a9:61:ee:93:87:3c:80:db:e0: ba:02:66:f7:cb:62:bd:33:07:c2:f2:fa:a4:b3:cd: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:BE:1F:9C:F9:17:69:E0:7F:6C:3C:04:F9:72:CA:52:48:E5:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:81a0::/48 Signature Algorithm: sha256WithRSAEncryption 57:07:04:9c:00:08:0f:72:39:f0:35:d7:75:84:53:9f:ee:5f: 35:5e:6a:77:3b:9b:ea:5b:fd:1a:0e:f8:3c:07:c7:c7:4f:25: b4:49:37:db:12:3f:e9:f6:d1:55:f6:5b:20:e8:08:b6:d9:2e: cf:5c:25:a0:90:59:e5:40:8a:d9:10:ac:7e:30:f8:bc:ba:7a: 58:cb:95:9e:ae:b1:0e:e8:4f:aa:2d:b4:2e:ef:c2:01:d7:bf: 09:5a:78:f0:76:c6:f7:66:f6:d4:49:09:2a:9a:91:65:3b:e4: ce:65:89:62:4a:a5:55:b5:04:04:99:b0:61:b2:74:61:6f:1a: cb:e7:32:5c:fa:cf:ef:94:8d:73:8a:c7:e4:6e:66:7a:bf:2d: 7d:a3:75:05:11:16:9b:32:c3:60:0e:64:5b:6a:54:10:e9:53: d5:57:31:4d:73:5c:5f:7c:75:30:d6:92:c6:5b:92:ff:1a:a3: 95:af:3e:ed:4f:fa:18:76:dc:d3:49:94:94:36:ef:2a:aa:84: 7c:b1:07:19:d4:fd:c0:29:a3:62:5d:72:97:b0:ae:ae:5d:f3: e3:d1:b6:69:b3:bb:5a:ec:9b:91:f4:bf:55:04:12:11:89:38: e3:d6:e3:0f:80:12:9c:e1:1c:9a:1d:48:5a:9e:e5:ca:7e:09: b4:64:13:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOefyVvwwWmnI3gl9/2POVK3q2xkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjAzMDAwMDAwWhcNMjUwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjgwMzg2NWRjZGQwMGQ2ZTM1ZmE4OGI2MTI2NDgzZWI0 YzIwMDJiZTRmNjc1ZGUzOGVmY2ViY2Y4MGIzNTAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQjpMW6qT5JlCIsCr3KZH07eR4oDqHBZL2JoUhXGEf/8SA 1VuwFy71Nwbb/Yv6xj5b0D3/ftdDq4J4TfYp+laQ7qvQAUSndIfbODWyshwZeb7S gTfjFM6uCZWI3JOE8TepUuxLqLxiyqE9E6n4cMfaZWMUaK/+pBtuJ37RN+XLWMBw czKDx13za3AG7NKDyHXWJSXYf9pz4r1cW8e0gQxAFy0/mXh35H/POImVcxl/dOJA 1+iK/MmNfzLnKxTwK1wWTUYUWcfoAzyK1cKtiXog9ZGl0AsgCkGtTf1mnrbv7n2v LlNr5qlh7pOHPIDb4LoCZvfLYr0zB8Ly+qSzzaH5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMUu+H5z5F2ngf2w8BPlyylJI5SYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzZjFlYzZjLTRmZWEtNGZmNi1iYmFlLWFjMWFiMWM5ZTcyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgaAwDQYJKoZIhvcNAQELBQADggEBAFcHBJwACA9yOfA113WEU5/u XzVeanc7m+pb/RoO+DwHx8dPJbRJN9sSP+n20VX2WyDoCLbZLs9cJaCQWeVAitkQ rH4w+Ly6eljLlZ6usQ7oT6ottC7vwgHXvwlaePB2xvdm9tRJCSqakWU75M5liWJK pVW1BASZsGGydGFvGsvnMlz6z++UjXOKx+RuZnq/LX2jdQURFpsyw2AOZFtqVBDp U9VXMU1zXF98dTDWksZbkv8ao5WvPu1P+hh23NNJlJQ27yqqhHyxBxnU/cApo2Jd cpewrq5d8+PRtmmzu1rsm5H0v1UEEhGJOOPW4w+AEpzhHJodSFqe5cp+CbRkE84= -----END CERTIFICATE-----Generated at Wed Feb 5 09:59:02 2025 by rpki-client