$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa File: 2507f91f-043a-4d23-8241-7fcd43474bb7.roa (raw, json) Hash identifier: 2D3ruWJAW4HOpiwVSWrHfCCxHPncNe9yHvoWbmV/5pk= Subject key identifier: 41:AA:07:53:A7:54:FF:5B:36:71:79:8A:5F:17:C8:F2:CF:95:BB:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A2A44CFC861E7210E2644AE651F3D68A4175DE5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1d:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2a:44:cf:c8:61:e7:21:0e:26:44:ae:65:1f:3d:68:a4:17:5d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:64:df:fa:bb:af:eb:7b:a4:aa:74:b8:c3: e4:d4:b4:e2:fe:11:36:66:cf:84:24:97:76:45:02: b7:bb:79:d9:d5:26:f7:04:93:55:e3:f5:4b:25:4e: fc:b5:22:c1:8c:f9:09:f4:1f:2b:22:a4:b0:e5:9e: 64:f4:e2:8f:b6:c1:fd:45:72:06:ce:16:34:b7:a0: 22:c9:09:f8:96:fb:5c:ed:8a:ce:37:92:e4:9b:94: f6:ba:82:8f:f9:e9:fb:cf:fd:3b:c9:d2:e9:c4:d9: 17:11:5e:e6:26:54:b9:8b:17:65:74:97:e5:53:6f: 6d:7a:e4:2e:a8:50:15:50:c3:5a:7f:69:72:8e:de: ee:b4:4c:44:19:3f:39:7a:cc:d4:71:50:d2:8f:2c: 7c:e1:4f:b7:5e:4e:95:6c:7c:81:c4:f7:19:7f:02: 31:59:39:21:03:c4:48:e9:7b:bb:04:21:0f:83:94: 46:51:fe:95:a6:23:6e:2b:dc:27:8f:05:57:e6:21: 98:c3:7c:1a:f8:7b:85:2e:6f:2d:58:4f:c5:e8:0b: 79:21:38:85:8b:58:05:a2:05:81:72:71:69:05:6d: f8:ad:d7:b8:cd:0c:63:b8:16:58:3e:11:6c:6c:06: bc:fa:72:46:80:0f:2f:86:ab:7c:57:30:42:f7:d0: 51:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AA:07:53:A7:54:FF:5B:36:71:79:8A:5F:17:C8:F2:CF:95:BB:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1d:8000::/36 Signature Algorithm: sha256WithRSAEncryption 31:1f:bc:79:c6:05:14:67:c9:16:bf:63:a4:43:c2:ac:e4:2c: 40:ce:77:3f:79:48:08:0c:74:f0:6f:b5:7c:8a:dd:33:b2:9e: 45:11:55:d0:bd:84:e9:89:0a:f0:98:47:69:ae:6e:42:4b:7b: 48:9a:96:7d:7e:f1:bc:97:51:86:0f:5f:1a:53:5b:fc:d3:b2: a7:e6:f6:cb:f4:ab:be:6b:3e:37:5f:cd:db:56:28:9e:7b:74: e3:cd:d2:ca:a0:9b:5e:18:84:04:51:eb:5b:df:a1:35:ee:36: a8:a5:26:9b:f7:f2:77:8f:81:ee:5c:2c:46:35:c9:93:5f:08: 4c:6d:a1:ae:70:03:44:64:c0:1a:34:43:c8:24:e6:28:2c:9a: 77:2c:07:fd:11:41:9e:e8:7e:c4:dc:d5:13:d7:6c:0d:6c:31: e4:fc:96:19:0d:ba:fd:32:ec:45:2b:ef:f5:4a:19:89:99:23: b0:d8:ca:c5:c0:be:66:d5:8d:0a:e9:95:a4:d7:5e:67:ea:05: 7d:5c:e1:5c:9e:42:72:3e:c6:0e:6e:68:b6:d9:69:4d:2f:d2: d2:96:2a:83:1b:24:f3:ca:93:08:a3:b5:5d:d3:ab:dc:71:f5: 0d:09:e2:7a:ac:71:6a:af:ab:66:45:56:7d:93:20:49:fc:14: 1b:ba:48:0c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaipEz8hh5yEOJkSuZR89aKQXXeUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTBhNjVhNGQ4ZTQ5OWYxZGU5ZjM4NmUyODI5NzJhNzM3 ZDQ2Yzc5YWVmZjc5YTUwNWIyNzAyZjE5YzVmMjk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDad2Tf+ruv63ukqnS4w+TUtOL+ETZmz4Qkl3ZFAre7ednV JvcEk1Xj9UslTvy1IsGM+Qn0HysipLDlnmT04o+2wf1FcgbOFjS3oCLJCfiW+1zt is43kuSblPa6go/56fvP/TvJ0unE2RcRXuYmVLmLF2V0l+VTb2165C6oUBVQw1p/ aXKO3u60TEQZPzl6zNRxUNKPLHzhT7deTpVsfIHE9xl/AjFZOSEDxEjpe7sEIQ+D lEZR/pWmI24r3CePBVfmIZjDfBr4e4Uuby1YT8XoC3khOIWLWAWiBYFycWkFbfit 17jNDGO4Flg+EWxsBrz6ckaADy+Gq3xXMEL30FHxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQaoHU6dU/1s2cXmKXxfI8s+Vu7EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1MDdmOTFmLTA0M2EtNGQyMy04MjQxLTdmY2Q0MzQ3NGJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8dgDANBgkqhkiG9w0BAQsFAAOCAQEAMR+8ecYFFGfJFr9jpEPCrOQs QM53P3lICAx08G+1fIrdM7KeRRFV0L2E6YkK8JhHaa5uQkt7SJqWfX7xvJdRhg9f GlNb/NOyp+b2y/Srvms+N1/N21Yonnt0483SyqCbXhiEBFHrW9+hNe42qKUmm/fy d4+B7lwsRjXJk18ITG2hrnADRGTAGjRDyCTmKCyadywH/RFBnuh+xNzVE9dsDWwx 5PyWGQ26/TLsRSvv9UoZiZkjsNjKxcC+ZtWNCumVpNdeZ+oFfVzhXJ5Ccj7GDm5o ttlpTS/S0pYqgxsk88qTCKO1XdOr3HH1DQnieqxxaq+rZkVWfZMgSfwUG7pIDA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:07 2025 by rpki-client