$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0572851a-d139-4fbb-bf0e-936ac842ce41.roa File: 0572851a-d139-4fbb-bf0e-936ac842ce41.roa (raw, json) Hash identifier: NmBXVBopuLLOb0kR0/c8i3cG/rBhtNLVfrHOewrauiU= Subject key identifier: 67:BF:DD:7B:DF:4C:3C:00:0D:69:E7:01:21:97:AB:88:39:82:54:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 066D50C5E2C37A868FA48C39AFA41D3485874D67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0572851a-d139-4fbb-bf0e-936ac842ce41.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fa0:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6d:50:c5:e2:c3:7a:86:8f:a4:8c:39:af:a4:1d:34:85:87:4d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:68:1b:7e:ef:66:35:62:8d:3e:dd:ec:ac: 8c:ef:f5:69:33:6b:15:2e:86:b6:60:1e:e3:4f:23: 5c:e0:2e:7a:ad:3b:76:0c:4f:10:68:56:64:7a:a5: 34:9a:5d:86:97:44:b3:98:64:7b:89:ec:92:90:8b: ce:dc:65:41:94:2b:0e:97:15:b0:0f:db:0a:bc:9a: e7:3c:df:4b:5c:48:47:8e:bf:9e:7b:22:0b:04:e7: 87:53:5d:70:56:5a:1a:45:28:eb:ec:19:d3:53:86: 95:5d:5d:19:5f:a4:10:f0:4e:ab:fd:68:e4:7b:4c: fc:c6:10:99:16:66:59:cd:a2:79:37:f8:5e:cd:a4: 1b:ab:23:37:67:15:fa:1f:09:84:cd:b1:7d:a0:74: 1c:b3:b2:df:7e:47:b2:2a:6a:52:71:34:ca:a3:c7: 0c:4b:4d:4b:a5:9b:7b:a4:2b:c1:69:d2:be:94:de: a3:48:f2:06:75:a7:67:bd:07:a4:0a:d6:5e:2e:06: 0b:99:06:f4:7e:6e:2e:1e:57:30:61:27:e9:a3:63: a6:2b:d4:8c:b4:e7:4d:d2:13:cf:18:0d:74:28:71: 23:32:ce:7d:c6:05:65:12:d8:93:5f:c4:9c:0e:59: 43:03:1d:cf:b5:a5:3f:b2:fa:32:f3:fc:18:a1:e3: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:DD:7B:DF:4C:3C:00:0D:69:E7:01:21:97:AB:88:39:82:54:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0572851a-d139-4fbb-bf0e-936ac842ce41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:8000::/39 Signature Algorithm: sha256WithRSAEncryption aa:91:d7:fc:8f:ad:4d:29:6c:f7:ee:34:de:59:cb:07:35:14: 20:c6:f1:14:30:95:85:3a:0b:d9:f3:56:8c:52:7c:ed:bd:04: 43:43:10:81:dd:c4:08:d4:76:7a:e5:c9:75:c9:ee:34:8f:a0: 96:d4:1a:93:8f:1f:d0:32:84:ca:cf:88:62:d4:d3:8c:f7:ea: 69:95:1b:41:46:e8:3e:99:8f:5f:c0:5f:82:9b:f3:29:e1:ba: 84:76:9b:4d:17:bd:1a:b5:5e:a0:fa:48:ab:82:63:6b:c3:c0: 39:8c:f9:19:7a:97:0d:4f:89:54:48:b0:ea:98:d7:5d:8b:20: 63:2f:f4:81:ba:34:f6:a9:87:ee:f7:d0:f8:70:89:d6:e9:74: e6:28:5b:c8:bd:90:3b:ab:4a:65:55:b7:8d:d4:ca:07:ef:6a: 57:dc:ae:46:0b:d3:6c:8d:3e:d7:1c:d5:3d:f6:e4:4b:5f:29: 01:8b:11:1d:d0:7b:c9:2c:14:13:46:10:68:a4:b8:ca:c7:10: 06:59:52:71:e5:80:23:c5:56:5e:74:21:40:85:d7:10:eb:00: 42:8f:e8:79:a5:25:59:0b:4c:24:2c:72:17:22:cc:54:99:36: e3:d5:50:f9:4c:b5:83:e1:b5:2b:5a:57:38:d5:31:c9:87:d2: ca:8c:7b:7d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBm1QxeLDeoaPpIw5r6QdNIWHTWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDljYjkzNGVjYTIwMmI5ZjJiZWRhMjA1ODgzYWFkNjVm ODlmN2JkN2Q3MTg1ZDlmMTU4ODgxMzFlODNiNGM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNDWgbfu9mNWKNPt3srIzv9WkzaxUuhrZgHuNPI1zgLnqt O3YMTxBoVmR6pTSaXYaXRLOYZHuJ7JKQi87cZUGUKw6XFbAP2wq8muc830tcSEeO v557IgsE54dTXXBWWhpFKOvsGdNThpVdXRlfpBDwTqv9aOR7TPzGEJkWZlnNonk3 +F7NpBurIzdnFfofCYTNsX2gdByzst9+R7IqalJxNMqjxwxLTUulm3ukK8Fp0r6U 3qNI8gZ1p2e9B6QK1l4uBguZBvR+bi4eVzBhJ+mjY6Yr1Iy0503SE88YDXQocSMy zn3GBWUS2JNfxJwOWUMDHc+1pT+y+jLz/Bih4x3dAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZ7/de99MPAANaecBIZeriDmCVGowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NzI4NTFhLWQxMzktNGZiYi1iZjBlLTkzNmFjODQyY2U0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+ggDANBgkqhkiG9w0BAQsFAAOCAQEAqpHX/I+tTSls9+403lnLBzUU IMbxFDCVhToL2fNWjFJ87b0EQ0MQgd3ECNR2euXJdcnuNI+gltQak48f0DKEys+I YtTTjPfqaZUbQUboPpmPX8BfgpvzKeG6hHabTRe9GrVeoPpIq4Jja8PAOYz5GXqX DU+JVEiw6pjXXYsgYy/0gbo09qmH7vfQ+HCJ1ul05ihbyL2QO6tKZVW3jdTKB+9q V9yuRgvTbI0+1xzVPfbkS18pAYsRHdB7ySwUE0YQaKS4yscQBllSceWAI8VWXnQh QIXXEOsAQo/oeaUlWQtMJCxyFyLMVJk249VQ+Uy1g+G1K1pXONUxyYfSyox7fQ== -----END CERTIFICATE-----Generated at Wed Feb 5 09:50:45 2025 by rpki-client