$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa File: 2af3cff2-866a-4113-89c5-1f4d664924c6.roa (raw, json) Hash identifier: KiEybmfflSxXUoPuullnD/BY8L6B48fP1x9JeU1FTYw= Subject key identifier: 81:A6:2D:F5:33:56:65:2E:18:BB:33:26:65:4F:30:F6:07:FE:97:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D92521840518AD2C3531EC3FE4F97F8A33D3A19 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f01:4806::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:92:52:18:40:51:8a:d2:c3:53:1e:c3:fe:4f:97:f8:a3:3d:3a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:0e:ff:32:8f:57:d0:7e:48:2f:a5:3e:7c: dc:a4:ae:53:44:49:f1:d6:9d:52:80:d8:e9:56:89: 8f:b7:41:ad:1e:40:d5:05:f7:12:67:8b:72:09:bd: ee:10:24:b7:81:d2:d6:5e:83:ae:2d:51:6b:38:3d: 0b:ec:ea:9c:16:ec:ed:85:1a:c1:e9:45:dd:de:18: 27:ae:03:2e:d7:b5:0d:42:53:c1:c1:92:97:ad:f0: fe:34:fc:68:0a:e5:27:5e:e8:c4:4e:96:9b:57:72: ea:90:2a:53:3e:83:7e:52:89:4f:2e:f4:50:f7:1c: e8:6b:84:31:c3:fb:34:62:8a:bf:69:c3:4a:16:bb: ce:e7:b3:ba:5f:ae:a2:b0:bc:8a:04:0a:ff:76:4c: 5a:51:b7:89:ef:30:dc:63:e6:0a:23:c1:a8:0b:dc: 8f:58:cb:0e:85:c4:30:b7:43:1c:9e:eb:6e:e9:35: 1b:79:cd:d2:e2:a4:9e:25:bc:dd:28:eb:50:88:82: 42:94:79:ed:32:11:fc:d3:2f:a9:3a:bf:be:53:c2: dd:bc:e1:11:4a:b0:42:6f:62:e0:db:1d:4b:f0:2c: 42:61:c1:b1:a4:b2:81:65:b6:34:62:52:b3:a1:95: 6d:0d:ba:15:af:4f:58:90:cb:23:39:ba:3c:dd:24: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A6:2D:F5:33:56:65:2E:18:BB:33:26:65:4F:30:F6:07:FE:97:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4806::/47 Signature Algorithm: sha256WithRSAEncryption 3e:a2:d4:bb:22:89:69:60:a8:6b:29:e2:d8:99:22:6a:df:a7: 5f:00:67:5a:72:27:3d:d4:c1:9d:10:98:ff:71:53:6d:42:4d: 57:90:6c:02:77:a7:7d:4b:63:ac:f4:46:ba:62:a6:ef:76:67: 06:d0:1c:ff:88:09:e1:99:c7:d5:06:3e:f9:8c:3c:e7:93:d0: 98:e6:d6:c7:99:d7:f2:12:83:39:a4:5f:ac:7a:1e:7a:6a:27: 3c:a8:43:d6:a9:33:5f:b2:69:4d:54:1c:78:f5:67:09:c6:e2: c2:22:89:fc:e4:a8:4c:ae:b0:71:a8:7c:6a:35:cc:35:4b:d4: 1d:73:c8:78:49:73:ff:d7:0d:3c:40:fc:11:c9:66:40:b5:83: 9a:b8:23:e6:b3:f3:f6:e4:10:84:68:30:cc:08:f8:dc:83:a7: da:8f:41:4c:5e:55:07:fe:73:2d:89:8d:4b:c1:5b:12:f5:a8: f6:6b:ad:b1:1a:ca:45:dc:00:c3:64:92:02:02:3d:b1:41:4b: f1:e2:69:a7:12:c5:51:36:3a:a2:4f:83:46:17:34:91:a2:bb: 61:40:33:b9:01:e0:c7:f8:6f:81:72:06:b8:bd:d2:c6:89:15: fa:60:c4:7b:96:a2:a4:96:c2:d2:c5:9f:87:14:d8:d1:87:dc: cc:8c:22:e1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfZJSGEBRitLDUx7D/k+X+KM9OhkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODI1MjMxYmM5ZmVkM2RjN2VjNWFmMDU2ZmIyYThjOWFh ZTViNzM4NWI5MTBhNzE2NGZhZjE2NTdiNTdkYTkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOiQ7/Mo9X0H5IL6U+fNykrlNESfHWnVKA2OlWiY+3Qa0e QNUF9xJni3IJve4QJLeB0tZeg64tUWs4PQvs6pwW7O2FGsHpRd3eGCeuAy7XtQ1C U8HBkpet8P40/GgK5Sde6MROlptXcuqQKlM+g35SiU8u9FD3HOhrhDHD+zRiir9p w0oWu87ns7pfrqKwvIoECv92TFpRt4nvMNxj5gojwagL3I9Yyw6FxDC3Qxye627p NRt5zdLipJ4lvN0o61CIgkKUee0yEfzTL6k6v75Twt284RFKsEJvYuDbHUvwLEJh wbGksoFltjRiUrOhlW0NuhWvT1iQyyM5ujzdJHjtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgaYt9TNWZS4YuzMmZU8w9gf+l1kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhZjNjZmYyLTg2NmEtNDExMy04OWM1LTFmNGQ2NjQ5MjRjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSAYwDQYJKoZIhvcNAQELBQADggEBAD6i1LsiiWlgqGsp4tiZImrf p18AZ1pyJz3UwZ0QmP9xU21CTVeQbAJ3p31LY6z0Rrpipu92ZwbQHP+ICeGZx9UG PvmMPOeT0Jjm1seZ1/ISgzmkX6x6HnpqJzyoQ9apM1+yaU1UHHj1ZwnG4sIiifzk qEyusHGofGo1zDVL1B1zyHhJc//XDTxA/BHJZkC1g5q4I+az8/bkEIRoMMwI+NyD p9qPQUxeVQf+cy2JjUvBWxL1qPZrrbEaykXcAMNkkgICPbFBS/HiaacSxVE2OqJP g0YXNJGiu2FAM7kB4Mf4b4FyBri90saJFfpgxHuWoqSWwtLFn4cU2NGH3MyMIuE= -----END CERTIFICATE-----Generated at Wed Feb 5 09:42:24 2025 by rpki-client