$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa File: 089a9530-fe26-4bbb-b150-6e821d16225e.roa (raw, json) Hash identifier: QQocoisYLYYHYNCMZ/Phiv7nNEJGZjEBTIDtsZFMlJg= Subject key identifier: FA:48:C4:A9:58:B5:DC:1B:F0:EB:B6:A8:E3:65:6A:B0:9F:FA:F9:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27684D4BAC74ED6F5E3F4937D1291488ADE93C07 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f38:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:68:4d:4b:ac:74:ed:6f:5e:3f:49:37:d1:29:14:88:ad:e9:3c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:d4:47:fa:f0:7e:9f:8f:4f:c3:92:8d:e1: 75:ae:fc:d5:94:4d:a6:43:a3:86:b2:02:98:78:00: 0a:2f:ea:d6:57:da:02:37:cb:bf:61:cd:62:fa:4b: 04:0a:db:7b:69:66:01:1f:ac:9e:f5:e4:38:6c:35: c7:66:ad:6e:d3:07:fc:3e:e6:40:2b:a6:1c:55:e5: 72:27:33:e5:cf:47:45:b0:46:1e:36:23:b8:d6:93: 8b:57:8f:ee:8d:e6:06:98:e7:92:c0:6c:80:e8:27: 6e:ed:ca:3a:5a:51:fd:0a:63:55:77:76:c8:f6:1a: 84:48:93:37:39:c5:1c:b2:c3:67:90:f9:8e:bf:ad: 36:38:b1:37:d1:f5:62:c2:1a:7d:61:4f:d8:03:a7: 8b:13:cb:e6:9a:5d:d2:dc:bf:56:f4:1c:6b:94:ea: 41:43:c5:d1:1c:57:c3:64:ef:2e:b1:0c:ac:da:48: a4:d4:96:5c:f8:fc:d6:c4:78:12:ed:de:8a:12:68: 0a:aa:9c:40:97:da:36:a0:75:01:25:df:92:6a:52: 0a:e2:89:f4:29:27:11:4a:3f:af:79:9f:13:0a:8e: f8:c9:1a:2a:58:7d:c1:10:c6:e1:25:06:77:28:73: 9c:7f:a4:6b:52:f4:3c:ca:c3:c5:c0:20:ac:85:46: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:48:C4:A9:58:B5:DC:1B:F0:EB:B6:A8:E3:65:6A:B0:9F:FA:F9:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:80c0::/48 Signature Algorithm: sha256WithRSAEncryption a9:e3:26:b8:09:7b:69:19:42:ca:6c:94:e0:57:72:9d:ba:90: 31:b1:90:de:de:8b:b3:ff:ce:e2:fe:81:21:60:3d:ce:98:0d: 7b:19:41:8c:8d:36:79:9b:42:e2:10:30:38:32:ad:ba:1c:e4: 6a:c7:4b:30:fd:87:e5:3a:9d:af:3f:0c:f0:0d:fc:ea:a8:64: 1e:91:1f:29:2f:72:42:70:ea:a6:31:49:4b:ea:f7:6b:3c:06: 8c:b9:ba:f6:d6:98:32:48:94:40:80:90:17:8e:94:b8:a6:52: 95:57:49:2e:0b:7c:53:b6:05:3d:9a:de:62:eb:3b:2b:b5:82: 61:97:be:0e:03:46:47:51:fd:71:6b:d3:a6:b8:df:ae:6c:50: 4d:e0:d0:0e:9f:ec:fd:c9:33:71:86:fb:76:e3:11:58:7a:d1: c2:f2:70:89:06:58:80:4f:2e:21:c6:59:83:0c:d7:db:41:8b: 98:7f:70:53:a1:50:29:c1:7a:c8:b7:88:bb:37:73:9c:3b:35: ec:4c:e3:ad:8d:ad:cf:7d:34:77:29:9a:20:b3:5f:3c:7a:62: 10:0e:c4:23:46:06:21:45:fb:88:8b:4e:aa:6b:75:46:b1:1c: fe:46:fb:26:20:64:6d:3e:27:c6:87:28:7a:ce:4a:3d:31:e1: 33:c4:44:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ2hNS6x07W9eP0k30SkUiK3pPAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjAzMDAwMDAwWhcNMjUwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTlkZTA5NDgxODg4N2I4MzMzN2VkZTU3NzRlYzNiYTVj YjgwMjY4NTRhY2FiN2QyNmJhYzRjMzM0ZTdjNGNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6U9RH+vB+n49Pw5KN4XWu/NWUTaZDo4ayAph4AAov6tZX 2gI3y79hzWL6SwQK23tpZgEfrJ715DhsNcdmrW7TB/w+5kArphxV5XInM+XPR0Ww Rh42I7jWk4tXj+6N5gaY55LAbIDoJ27tyjpaUf0KY1V3dsj2GoRIkzc5xRyyw2eQ +Y6/rTY4sTfR9WLCGn1hT9gDp4sTy+aaXdLcv1b0HGuU6kFDxdEcV8Nk7y6xDKza SKTUllz4/NbEeBLt3ooSaAqqnECX2jagdQEl35JqUgriifQpJxFKP695nxMKjvjJ GipYfcEQxuElBncoc5x/pGtS9DzKw8XAIKyFRkh5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+kjEqVi13Bvw67ao42VqsJ/6+dEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4OWE5NTMwLWZlMjYtNGJiYi1iMTUwLTZlODIxZDE2MjI1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gMAwDQYJKoZIhvcNAQELBQADggEBAKnjJrgJe2kZQspslOBXcp26 kDGxkN7ei7P/zuL+gSFgPc6YDXsZQYyNNnmbQuIQMDgyrboc5GrHSzD9h+U6na8/ DPAN/OqoZB6RHykvckJw6qYxSUvq92s8Boy5uvbWmDJIlECAkBeOlLimUpVXSS4L fFO2BT2a3mLrOyu1gmGXvg4DRkdR/XFr06a4365sUE3g0A6f7P3JM3GG+3bjEVh6 0cLycIkGWIBPLiHGWYMM19tBi5h/cFOhUCnBesi3iLs3c5w7NexM462Nrc99NHcp miCzXzx6YhAOxCNGBiFF+4iLTqprdUaxHP5G+yYgZG0+J8aHKHrOSj0x4TPEREM= -----END CERTIFICATE-----Generated at Wed Feb 5 09:53:03 2025 by rpki-client