$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/279a14e6-acd1-40ed-a2e4-0c100e001705.roa File: 279a14e6-acd1-40ed-a2e4-0c100e001705.roa (raw, json) Hash identifier: 1mj8rTf/yvzbz6a6LElvkLI5q/Vsfvz4Nu9LetzTDYA= Subject key identifier: F2:47:67:AE:E6:C4:9A:41:17:CC:E4:3F:E2:9C:E7:FF:30:F9:9C:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24A9E813F2FB7E57B0E3EABCAA2D9F85581C9D02 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/279a14e6-acd1-40ed-a2e4-0c100e001705.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a9:e8:13:f2:fb:7e:57:b0:e3:ea:bc:aa:2d:9f:85:58:1c:9d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:2c:80:60:25:27:29:e4:73:b2:be:e7:cd: e3:e9:c8:c1:cf:6f:b3:0e:bb:7b:57:9c:03:e0:01: c4:82:0a:6c:2d:4b:c1:8d:4f:10:2d:27:f6:25:7a: a7:1b:88:77:74:e2:c6:bc:2c:4a:e6:5d:25:42:12: 39:dc:8a:6d:6a:57:7e:e0:5f:9a:37:bf:fa:32:c5: db:b5:39:21:d9:8f:9a:4b:0d:fb:8d:5e:d7:c0:59: 50:75:c1:e4:63:3a:ec:e9:f4:6b:cb:c1:8c:bd:2c: 97:f6:a6:31:65:e4:5c:60:c9:00:17:44:fd:a1:d2: b2:5f:5b:2c:8a:eb:0a:d0:78:67:c1:38:64:59:99: 28:79:98:d6:91:37:06:da:1c:50:ff:90:22:14:72: b6:19:ee:25:68:b6:b6:9c:ca:5b:b2:e9:dc:6a:83: 79:4d:96:8f:6f:0f:99:20:8c:71:7d:18:b6:0a:b0: b2:6a:ba:0f:00:1d:fd:eb:16:a9:e0:41:05:1d:09: 7a:2f:9e:76:3b:23:59:bc:68:6a:72:0f:be:5d:22: ab:a5:10:01:f0:e2:23:39:ae:b8:30:b0:f8:01:6d: 39:ef:b3:39:56:42:47:3d:02:f9:ee:a6:e0:35:cc: 66:4e:3e:8a:43:cd:f7:de:cf:c7:50:48:78:01:26: 45:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:47:67:AE:E6:C4:9A:41:17:CC:E4:3F:E2:9C:E7:FF:30:F9:9C:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/279a14e6-acd1-40ed-a2e4-0c100e001705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2c::/36 Signature Algorithm: sha256WithRSAEncryption 5b:a7:7e:8a:d6:4e:93:28:a1:42:61:17:42:3a:50:de:4f:c9: b2:20:43:58:de:a3:39:43:b5:df:49:40:00:0a:0a:df:e7:99: 00:7a:6a:5f:02:45:06:ea:95:d8:b7:92:3b:29:03:f3:32:b8: a5:42:01:4b:0d:cd:a0:20:31:0f:d5:a8:56:83:18:d0:81:07: 61:4a:c9:76:85:9e:4a:46:2d:d7:9c:20:89:e9:b5:16:29:31: 65:f5:c6:fc:ec:7e:c9:61:9c:36:2c:f5:6b:ae:05:a3:b0:85: b4:2a:2d:42:95:ca:37:33:c4:57:df:e0:e7:10:6b:7c:83:19: a9:37:93:66:26:fa:57:9b:80:6b:51:2a:29:66:c1:67:31:a3: 32:98:a1:e6:b1:35:c1:c1:15:7e:83:c3:b1:fe:50:9a:a3:fa: 96:9b:11:f0:f0:55:f9:39:69:2a:d5:ae:44:07:94:7a:47:91: 01:c6:e9:92:40:17:2c:0a:38:eb:bc:e6:a7:99:3b:cf:ad:8a: 5b:87:a3:e8:d1:f7:f3:cc:1c:47:ba:f3:b6:54:cb:e7:e8:16: 40:db:72:4f:92:3c:a7:ca:8c:07:16:0b:b1:74:a8:4b:7a:14: f2:79:f7:f3:e3:e8:c5:e8:ae:af:d4:93:77:62:dc:f7:9b:8a: d6:04:ee:18 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJKnoE/L7flew4+q8qi2fhVgcnQIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWY5YTBmZmI4YjMwZjc2NWEwNWNmMTg1NjgwYTAyMmYw NTU5Y2U1YWRhN2EwYTkzNDBiYjAzMzYzMTg5MmMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmvyyAYCUnKeRzsr7nzePpyMHPb7MOu3tXnAPgAcSCCmwt S8GNTxAtJ/YleqcbiHd04sa8LErmXSVCEjncim1qV37gX5o3v/oyxdu1OSHZj5pL DfuNXtfAWVB1weRjOuzp9GvLwYy9LJf2pjFl5FxgyQAXRP2h0rJfWyyK6wrQeGfB OGRZmSh5mNaRNwbaHFD/kCIUcrYZ7iVotracyluy6dxqg3lNlo9vD5kgjHF9GLYK sLJqug8AHf3rFqngQQUdCXovnnY7I1m8aGpyD75dIqulEAHw4iM5rrgwsPgBbTnv szlWQkc9AvnupuA1zGZOPopDzffez8dQSHgBJkUBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU8kdnrubEmkEXzOQ/4pzn/zD5nKgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3OWExNGU2LWFjZDEtNDBlZC1hMmU0LTBjMTAwZTAwMTcwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8sADANBgkqhkiG9w0BAQsFAAOCAQEAW6d+itZOkyihQmEXQjpQ3k/J siBDWN6jOUO130lAAAoK3+eZAHpqXwJFBuqV2LeSOykD8zK4pUIBSw3NoCAxD9Wo VoMY0IEHYUrJdoWeSkYt15wgiem1FikxZfXG/Ox+yWGcNiz1a64Fo7CFtCotQpXK NzPEV9/g5xBrfIMZqTeTZib6V5uAa1EqKWbBZzGjMpih5rE1wcEVfoPDsf5QmqP6 lpsR8PBV+TlpKtWuRAeUekeRAcbpkkAXLAo467zmp5k7z62KW4ej6NH388wcR7rz tlTL5+gWQNtyT5I8p8qMBxYLsXSoS3oU8nn38+Poxeiur9STd2Lc95uK1gTuGA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:34 2025 by rpki-client