$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfb629f-53b7-4fea-9274-7632a64078e2.roa File: 2bfb629f-53b7-4fea-9274-7632a64078e2.roa (raw, json) Hash identifier: GJi1/E2oi47VTihiJyXaOROvIqQ8tVqRVDEL/zGOV3E= Subject key identifier: 28:68:AF:B2:E2:4B:63:0D:F0:B1:85:BC:34:72:47:72:D7:5B:32:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D33964819A59129CCD65E836500017226AEA0D7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfb629f-53b7-4fea-9274-7632a64078e2.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f00:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:33:96:48:19:a5:91:29:cc:d6:5e:83:65:00:01:72:26:ae:a0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:3f:9c:8a:0c:f4:10:14:91:c1:1d:8f:df: ac:9f:a0:cb:8d:ca:a5:8b:3c:be:ae:82:21:4c:82: 08:fc:e9:ae:9d:2b:d6:50:52:1e:a6:ac:ef:1c:1c: 1e:e1:9b:83:c8:2d:f6:44:84:65:99:0f:41:bb:4d: a2:f0:7b:82:29:b9:af:34:02:2a:75:b0:55:2a:7e: a6:d0:ce:a0:79:d8:14:38:68:cc:cb:e0:e3:e3:44: 59:3c:d1:27:cf:7a:24:0d:e6:bf:11:d6:76:d6:e2: ef:5a:af:e6:68:30:5d:0b:f8:0a:f6:07:67:15:31: af:f9:fd:81:75:aa:a8:a9:38:a2:22:87:6f:3c:6b: c5:67:09:7e:2d:08:44:bf:64:ab:c2:b1:09:86:f7: 11:76:52:6e:1e:11:fe:ec:28:4c:a9:13:6d:31:8c: 64:61:0f:f5:27:37:30:39:e7:b8:03:48:82:22:92: 69:16:65:1d:34:53:dc:71:77:32:9c:21:8f:ae:74: dc:09:bb:fc:a7:2a:2d:a4:61:86:ea:ef:5c:51:18: d2:a0:95:84:8b:78:17:02:e3:36:43:8f:cf:62:dc: c3:92:35:9c:20:90:ad:35:5e:70:b3:02:91:cd:ea: 23:c3:d4:d9:a6:df:53:9e:40:9f:de:31:94:5d:09: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:68:AF:B2:E2:4B:63:0D:F0:B1:85:BC:34:72:47:72:D7:5B:32:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfb629f-53b7-4fea-9274-7632a64078e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:2080::/48 Signature Algorithm: sha256WithRSAEncryption d4:b2:87:77:ed:06:82:45:98:a4:75:70:6a:0a:3c:c8:c9:5a: b7:30:c5:09:14:e9:bf:6a:0d:c2:52:27:f3:73:02:72:0f:49: eb:bf:de:6b:a1:47:2b:5b:7f:27:36:b6:97:5d:dc:6b:5b:58: 2d:87:4b:93:1b:10:e3:f6:a8:4a:dd:77:39:4c:bb:59:75:ed: 31:09:0a:d7:f1:50:69:48:8d:e3:57:23:70:82:14:b3:07:cc: e4:9f:a0:24:4f:a5:80:e9:47:50:bb:c4:63:8c:ec:51:7d:93: 25:0f:24:3a:e3:e7:94:13:bc:ae:36:f2:dc:d0:a1:6c:8b:eb: 27:91:5b:83:71:41:3e:0d:19:b2:5d:41:af:3e:3f:6b:20:32: aa:00:74:09:26:23:9d:3d:30:a2:67:a3:10:fd:1a:e9:1d:23: 75:48:61:de:6f:50:65:80:ea:18:fb:5b:b1:5b:5f:a3:7f:cf: 7a:9e:07:ac:3c:c7:7f:42:91:69:c6:b5:18:62:6a:f4:7d:3a: 87:30:9b:56:2d:b1:be:1b:a6:5f:a2:1a:4b:ff:0c:4f:65:cc: 1e:03:01:5e:96:29:af:e3:14:96:ad:73:da:34:3d:54:bf:1c: 15:cf:fd:99:9b:f7:90:45:56:48:ee:2c:3b:49:98:1c:58:3c: ce:8d:14:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHTOWSBmlkSnM1l6DZQABciauoNcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjAzMDAwMDAwWhcNMjUwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzM0Nzk5ZTRkNDM5MjAzOWFmNTFlMGUzOTJmZDZlZTZi Y2VmM2FkMTZlM2Y2NzFmM2MzNmMzMWQ0NWFiZjQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC74j+cigz0EBSRwR2P36yfoMuNyqWLPL6ugiFMggj86a6d K9ZQUh6mrO8cHB7hm4PILfZEhGWZD0G7TaLwe4Ipua80Aip1sFUqfqbQzqB52BQ4 aMzL4OPjRFk80SfPeiQN5r8R1nbW4u9ar+ZoMF0L+Ar2B2cVMa/5/YF1qqipOKIi h288a8VnCX4tCES/ZKvCsQmG9xF2Um4eEf7sKEypE20xjGRhD/UnNzA557gDSIIi kmkWZR00U9xxdzKcIY+udNwJu/ynKi2kYYbq71xRGNKglYSLeBcC4zZDj89i3MOS NZwgkK01XnCzApHN6iPD1Nmm31OeQJ/eMZRdCegJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKGivsuJLYw3wsYW8NHJHctdbMjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZmI2MjlmLTUzYjctNGZlYS05Mjc0LTc2MzJhNjQwNzhlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AIIAwDQYJKoZIhvcNAQELBQADggEBANSyh3ftBoJFmKR1cGoKPMjJ WrcwxQkU6b9qDcJSJ/NzAnIPSeu/3muhRytbfyc2tpdd3GtbWC2HS5MbEOP2qErd dzlMu1l17TEJCtfxUGlIjeNXI3CCFLMHzOSfoCRPpYDpR1C7xGOM7FF9kyUPJDrj 55QTvK428tzQoWyL6yeRW4NxQT4NGbJdQa8+P2sgMqoAdAkmI509MKJnoxD9Gukd I3VIYd5vUGWA6hj7W7FbX6N/z3qeB6w8x39CkWnGtRhiavR9Oocwm1Ytsb4bpl+i Gkv/DE9lzB4DAV6WKa/jFJatc9o0PVS/HBXP/Zmb95BFVkjuLDtJmBxYPM6NFGc= -----END CERTIFICATE-----Generated at Wed Feb 5 15:59:19 2025 by rpki-client