$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33784f04-dee2-4976-85bf-5c63a7fccca2.roa File: 33784f04-dee2-4976-85bf-5c63a7fccca2.roa (raw, json) Hash identifier: 4kQp6BtVBwhYqiaqNM/2uvOuyL3bZAZ1Z6XtXwVZt9I= Subject key identifier: FD:D4:17:D2:8E:FA:00:5D:D7:4D:73:C9:27:6D:7D:03:0F:EC:CE:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F6FAB1C0381284B6344D9910BBE51FCC11457F6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33784f04-dee2-4976-85bf-5c63a7fccca2.roa Signing time: Fri 21 Feb 2025 00:11:04 +0000 ROA not before: Fri 21 Feb 2025 00:11:04 +0000 ROA not after: Fri 28 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6f:ab:1c:03:81:28:4b:63:44:d9:91:0b:be:51:fc:c1:14:57:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:11:04 2025 GMT Not After : Mar 28 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:c5:75:76:64:4c:9d:d0:62:ce:66:44:47: 14:61:2a:4d:eb:1d:81:51:18:1c:8a:c0:5b:e8:61: e0:8e:04:e6:96:2c:1f:f1:1f:c8:3b:db:56:8b:e2: 76:c5:21:20:44:70:c7:e6:1b:ac:5a:b8:3a:ee:ba: 29:d4:cd:06:e2:7b:c1:65:13:a3:30:c4:2c:6c:63: 92:06:a2:7c:52:49:06:4f:06:b5:bf:9f:64:5b:a6: 1f:7c:d9:e1:bf:e0:fd:85:2c:1a:e3:f5:eb:24:6d: 60:5d:92:47:f9:de:55:35:77:aa:40:fa:a9:71:e4: e5:58:71:0a:58:ae:82:47:42:a9:c8:2d:26:3f:a2: 7a:08:d6:ea:ca:b6:b6:4c:14:72:23:a0:53:1d:c9: a8:0d:62:d3:9c:03:0f:47:90:c8:c6:49:df:37:d2: c0:2a:43:c5:ba:db:f6:90:49:7f:48:6b:7e:d3:52: 62:b2:0d:30:11:36:fe:63:18:62:5d:62:5f:ee:f5: 03:e2:0d:82:f9:a4:24:bb:32:64:f1:8f:ea:00:a9: 11:1c:b5:aa:40:e5:2b:96:ae:ee:7c:c7:54:fb:1c: 80:b1:e6:65:fa:6a:7f:03:4f:d1:e3:77:2a:1d:27: 97:8c:75:26:93:1d:7d:f2:4e:68:36:26:d5:8d:e5: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:17:D2:8E:FA:00:5D:D7:4D:73:C9:27:6D:7D:03:0F:EC:CE:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33784f04-dee2-4976-85bf-5c63a7fccca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:e000::/40 Signature Algorithm: sha256WithRSAEncryption b8:5c:6d:6f:36:5b:97:ea:ea:cf:75:d8:b6:00:cf:6b:3d:74: 2d:06:a4:ce:d9:42:be:a6:f1:62:ff:28:f8:69:b6:0d:61:de: d4:27:ce:68:8a:c0:4d:00:e1:e6:1d:15:ab:25:71:e5:1c:ef: ea:0f:03:c2:3d:41:8d:bd:83:36:41:a7:1f:be:be:39:e7:92: 98:5d:f9:e4:d4:f7:a3:7a:96:fe:2d:2f:9b:05:b0:98:b0:ce: 29:29:0d:c3:6b:01:6a:10:d9:b3:cb:d1:61:d2:ca:c9:c6:71: 23:07:92:ef:88:d5:81:40:52:b5:b6:6c:fc:14:59:a3:1f:ba: 87:53:df:e6:48:3d:d7:5c:d5:84:7f:33:1c:54:18:7f:85:5c: 90:1f:ff:7f:b2:53:4c:ab:ae:d1:7d:b1:49:7a:00:c8:aa:77: b3:09:0b:fe:40:b7:00:ed:e3:02:64:37:37:b0:ec:6b:79:ba: 33:90:e8:25:0d:49:de:f3:61:1c:09:95:e6:8c:b8:78:46:29: 60:25:8e:0c:0f:71:73:7e:6d:9a:ad:17:68:a3:83:a3:b7:fa: ad:1f:97:62:1c:7e:e0:71:ea:2b:83:4e:a4:2d:9d:78:f6:8e: 08:22:f9:89:2b:49:9a:f6:28:ea:96:00:de:e9:b9:5c:aa:5c: d4:2f:9a:19 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUL2+rHAOBKEtjRNmRC75R/MEUV/YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjIxMDAxMTA0WhcNMjUwMzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjQ2ZmVmOGMwMDI3NmRhMmFiZDFjNzM2MDVmODU2YTJh YjJmNGMxOGFiMzc4NDI1ZTM5MWJhNzgzYjQxMmFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqBsV1dmRMndBizmZERxRhKk3rHYFRGByKwFvoYeCOBOaW LB/xH8g721aL4nbFISBEcMfmG6xauDruuinUzQbie8FlE6MwxCxsY5IGonxSSQZP BrW/n2Rbph982eG/4P2FLBrj9eskbWBdkkf53lU1d6pA+qlx5OVYcQpYroJHQqnI LSY/onoI1urKtrZMFHIjoFMdyagNYtOcAw9HkMjGSd830sAqQ8W62/aQSX9Ia37T UmKyDTARNv5jGGJdYl/u9QPiDYL5pCS7MmTxj+oAqREctapA5SuWru58x1T7HICx 5mX6an8DT9HjdyodJ5eMdSaTHX3yTmg2JtWN5RLRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/dQX0o76AF3XTXPJJ219Aw/szlMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzNzg0ZjA0LWRlZTItNDk3Ni04NWJmLTVjNjNhN2ZjY2NhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+44DANBgkqhkiG9w0BAQsFAAOCAQEAuFxtbzZbl+rqz3XYtgDPaz10 LQakztlCvqbxYv8o+Gm2DWHe1CfOaIrATQDh5h0VqyVx5Rzv6g8Dwj1Bjb2DNkGn H76+OeeSmF355NT3o3qW/i0vmwWwmLDOKSkNw2sBahDZs8vRYdLKycZxIweS74jV gUBStbZs/BRZox+6h1Pf5kg911zVhH8zHFQYf4VckB//f7JTTKuu0X2xSXoAyKp3 swkL/kC3AO3jAmQ3N7Dsa3m6M5DoJQ1J3vNhHAmV5oy4eEYpYCWODA9xc35tmq0X aKODo7f6rR+XYhx+4HHqK4NOpC2dePaOCCL5iStJmvYo6pYA3um5XKpc1C+aGQ== -----END CERTIFICATE-----Generated at Thu Mar 13 23:30:28 2025 by rpki-client