$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa File: 3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa (raw, json) Hash identifier: OowPTSYLrRvvafedXe6NfGIQ7g2Ks/A4Az+SrvkfsYM= Subject key identifier: EB:C8:69:6A:E6:FE:6A:D6:9B:87:74:31:52:0A:35:63:B5:53:CD:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 73BDC92C7DF3EAE7101EA02D89C976385C41D830 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bd:c9:2c:7d:f3:ea:e7:10:1e:a0:2d:89:c9:76:38:5c:41:d8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:40:7e:49:ba:98:47:79:86:c4:06:c5:f7: da:fa:93:9e:d6:45:3a:44:36:ba:6f:79:e8:c5:26: b0:30:d4:58:17:9e:ad:7e:53:7b:5d:9d:81:20:08: ec:ce:57:8f:49:b0:93:50:7e:76:51:2e:b3:d3:40: 97:09:80:c7:4c:ec:0d:16:a8:e9:da:a6:6d:f5:62: be:ed:e3:21:1f:b6:ec:90:5c:52:4f:de:8f:09:94: 02:ff:12:4a:c7:1a:f3:2f:28:fa:4e:fb:5b:97:8b: 07:f1:79:71:9c:77:a8:b8:f7:19:b8:b6:d9:4f:95: 8f:17:6c:b9:40:2e:b4:9d:4f:9e:e6:75:16:67:37: 43:ba:cd:f9:91:0d:95:ee:2a:86:d6:b0:9b:f7:78: 12:b2:41:34:36:8b:db:5a:da:b7:46:67:c9:8c:a7: e7:fd:db:54:ec:c8:f7:b5:15:7b:dd:f9:30:34:f2: 60:c2:f8:6e:77:75:1a:0a:93:ce:3c:cc:11:ad:40: 49:d7:e6:29:34:6a:61:7d:68:69:b7:16:a5:29:2c: cd:22:6e:be:43:c9:81:db:24:d5:4c:43:6e:0f:8e: 3f:fa:09:a4:b4:14:24:17:b1:dd:7d:69:2c:b4:e9: fb:d4:95:63:68:6c:6e:d6:18:87:67:1e:44:56:39: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C8:69:6A:E6:FE:6A:D6:9B:87:74:31:52:0A:35:63:B5:53:CD:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8100::/48 Signature Algorithm: sha256WithRSAEncryption aa:ec:0c:07:b0:d2:00:f5:3b:fc:aa:68:10:76:38:79:66:41: 41:c7:cb:97:3a:70:88:16:3f:2b:33:05:1a:ac:1d:a0:02:9b: af:db:7d:2c:ca:97:94:27:52:c0:bd:24:d4:9d:17:ad:b9:31: c5:ac:b5:5d:4e:5c:a5:84:3d:19:89:ca:dd:c9:19:a4:fb:6e: 59:76:cd:94:a4:57:55:b6:2b:5d:f0:00:e8:d9:73:e1:e5:9e: 2d:3f:89:aa:f0:07:cb:b8:1e:fe:aa:32:86:10:1c:ac:b5:9a: 82:37:37:38:d5:17:0b:83:6b:7b:93:55:f3:23:df:be:dd:f5: fc:a8:ae:10:f4:0e:f7:eb:96:df:4d:00:37:38:9e:ec:2c:96: 0f:96:cc:95:ab:f7:cb:03:8a:c7:6a:71:5b:20:ca:60:4e:c8: 5d:2d:c6:04:7d:7d:70:be:1d:f8:62:dd:5d:01:8e:79:64:de: 5b:66:9a:65:d0:e3:cd:0c:98:5e:59:a4:03:87:20:cc:53:6e: d7:0b:00:43:d1:74:90:fa:eb:7f:21:62:d2:28:76:9f:61:00: 54:99:bb:3e:a5:63:8d:87:d9:00:20:e2:a8:43:94:6c:54:f9: 4d:b7:58:87:ee:72:90:8f:d6:5e:a1:42:a9:27:29:4d:3d:77: 39:53:f9:03 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUc73JLH3z6ucQHqAticl2OFxB2DAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGRhNTAyNmE5MTE3YzAzZTkzYzAzNzAwNjA0ODIwZTg3 OTIyMDRiYWE5Y2I4ZjRjYThkNmFmNDM4NzM1ZTZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYyUB+SbqYR3mGxAbF99r6k57WRTpENrpveejFJrAw1FgX nq1+U3tdnYEgCOzOV49JsJNQfnZRLrPTQJcJgMdM7A0WqOnapm31Yr7t4yEftuyQ XFJP3o8JlAL/EkrHGvMvKPpO+1uXiwfxeXGcd6i49xm4ttlPlY8XbLlALrSdT57m dRZnN0O6zfmRDZXuKobWsJv3eBKyQTQ2i9ta2rdGZ8mMp+f921TsyPe1FXvd+TA0 8mDC+G53dRoKk848zBGtQEnX5ik0amF9aGm3FqUpLM0ibr5DyYHbJNVMQ24Pjj/6 CaS0FCQXsd19aSy06fvUlWNobG7WGIdnHkRWOXS5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU68hpaub+atabh3QxUgo1Y7VTzcwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhNzA3ZGU5LTBmOGYtNGMzNS1iMWRkLWJkZDIxM2I2ODY4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gQAwDQYJKoZIhvcNAQELBQADggEBAKrsDAew0gD1O/yqaBB2OHlm QUHHy5c6cIgWPyszBRqsHaACm6/bfSzKl5QnUsC9JNSdF625McWstV1OXKWEPRmJ yt3JGaT7bll2zZSkV1W2K13wAOjZc+Hlni0/iarwB8u4Hv6qMoYQHKy1moI3NzjV FwuDa3uTVfMj377d9fyorhD0Dvfrlt9NADc4nuwslg+WzJWr98sDisdqcVsgymBO yF0txgR9fXC+Hfhi3V0Bjnlk3ltmmmXQ480MmF5ZpAOHIMxTbtcLAEPRdJD6638h YtIodp9hAFSZuz6lY42H2QAg4qhDlGxU+U23WIfucpCP1l6hQqknKU09dzlT+QM= -----END CERTIFICATE-----Generated at Wed Feb 5 09:51:06 2025 by rpki-client