$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4228f803-893e-4e2e-bc79-4f8d310d79d6.roa File: 4228f803-893e-4e2e-bc79-4f8d310d79d6.roa (raw, json) Hash identifier: gfSaaX4a/RR83OEz7V5/TRB0Sc2Xq8xZi9YG0UtSIck= Subject key identifier: 54:74:C6:06:EC:5B:EE:6D:64:51:07:29:C3:82:B0:12:60:B7:9D:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7ECE94AA36534D0E6CFAF90B53E4BE6CFE5E40AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4228f803-893e-4e2e-bc79-4f8d310d79d6.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f36:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ce:94:aa:36:53:4d:0e:6c:fa:f9:0b:53:e4:be:6c:fe:5e:40:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:6a:88:0d:82:26:e2:ba:db:f3:41:b9:26: c9:47:9c:60:e8:03:a6:d8:2e:d1:7a:7c:92:33:46: 26:b5:31:97:23:98:08:72:45:d5:d2:9d:ce:d3:fa: 2a:57:9a:75:57:00:18:fd:9b:7b:57:fe:89:93:47: f6:df:e3:81:cb:5e:7d:b6:7f:0a:29:63:8a:f9:d2: d5:c3:0b:34:71:fd:0c:fe:9c:0d:bf:ff:93:7a:98: 95:2c:f7:44:f3:44:2b:40:4d:2b:84:6d:a7:6c:aa: 06:26:d3:85:61:59:8e:10:b1:a6:f7:c2:b5:b8:0f: d1:3b:80:0e:67:af:5d:b3:89:80:12:85:f1:6c:8f: d2:9a:c3:bb:80:af:6e:e2:b7:23:2e:7b:a3:64:95: 66:8f:20:01:f0:1e:01:4f:4e:bb:bb:76:b0:df:98: df:6e:a8:29:57:9b:f4:40:37:d5:c4:a0:e6:d0:0c: 48:62:29:04:c0:55:67:64:1e:6e:f3:27:45:44:55: 79:66:b5:dd:ed:9a:35:15:01:74:79:9d:ea:9f:44: d1:75:01:c4:25:49:f3:49:d0:65:3b:15:24:f3:58: 23:db:58:dd:3e:6d:02:c9:ee:f2:cf:a9:4c:71:c7: 92:ab:d1:a5:a7:a0:0a:e5:69:1f:e9:4d:e6:3d:85: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:74:C6:06:EC:5B:EE:6D:64:51:07:29:C3:82:B0:12:60:B7:9D:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4228f803-893e-4e2e-bc79-4f8d310d79d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:5000::/40 Signature Algorithm: sha256WithRSAEncryption 30:12:49:7b:a7:f9:cf:26:30:5b:23:03:0f:8b:af:7f:45:53: 03:5f:f1:b8:a7:c5:ca:9c:79:3c:c4:66:08:7a:d7:bc:58:91: 11:f1:84:d9:f3:07:dc:b5:d7:28:9c:26:84:9a:82:0d:70:63: b4:b5:42:80:2b:5d:a4:da:97:67:aa:1e:8c:d1:fd:cf:68:1b: 89:7f:13:08:18:c2:9c:d3:ca:33:68:f3:99:89:06:0b:33:18: 34:16:91:13:35:bb:1d:b2:f9:e0:14:de:90:99:ac:7e:55:83: d1:07:e3:bc:b9:17:cd:7b:ef:99:8e:87:ce:60:95:2b:52:ae: 56:b6:28:ac:a6:62:e1:93:75:85:24:7b:d6:53:c6:95:b5:df: bc:65:3f:cc:63:2e:aa:4b:5c:4b:9d:9f:19:4c:f5:3a:19:7e: 6d:c2:cd:1b:a6:f8:63:94:67:b2:16:6f:9b:53:c3:8e:5e:82: 1f:b9:b1:8a:0f:1a:03:8d:9f:8a:b5:c4:1e:16:32:aa:85:21: e2:20:ed:38:1d:b0:5f:c4:a5:ba:9e:e3:cf:01:95:8a:2e:c3: 53:4d:30:df:56:65:78:a4:55:5d:f4:db:5f:0c:5f:51:73:e1: 19:9d:af:ca:a6:80:1c:ee:9a:fe:2d:65:a6:48:d8:01:43:cf: f1:dd:be:d9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfs6UqjZTTQ5s+vkLU+S+bP5eQKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzNiZGE4MTdkMzcyMzAyZGMwNzg4YzM2ZTMyZWZjYWM5 ZWZmMTRmOGM1YmEyMWExZjY0MmQxZDU3ZDRlOTc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj+GqIDYIm4rrb80G5JslHnGDoA6bYLtF6fJIzRia1MZcj mAhyRdXSnc7T+ipXmnVXABj9m3tX/omTR/bf44HLXn22fwopY4r50tXDCzRx/Qz+ nA2//5N6mJUs90TzRCtATSuEbadsqgYm04VhWY4Qsab3wrW4D9E7gA5nr12ziYAS hfFsj9Kaw7uAr27ityMue6NklWaPIAHwHgFPTru7drDfmN9uqClXm/RAN9XEoObQ DEhiKQTAVWdkHm7zJ0VEVXlmtd3tmjUVAXR5neqfRNF1AcQlSfNJ0GU7FSTzWCPb WN0+bQLJ7vLPqUxxx5Kr0aWnoArlaR/pTeY9hfBvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUVHTGBuxb7m1kUQcpw4KwEmC3ncAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyMjhmODAzLTg5M2UtNGUyZS1iYzc5LTRmOGQzMTBkNzlkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB82UDANBgkqhkiG9w0BAQsFAAOCAQEAMBJJe6f5zyYwWyMDD4uvf0VT A1/xuKfFypx5PMRmCHrXvFiREfGE2fMH3LXXKJwmhJqCDXBjtLVCgCtdpNqXZ6oe jNH9z2gbiX8TCBjCnNPKM2jzmYkGCzMYNBaREzW7HbL54BTekJmsflWD0QfjvLkX zXvvmY6HzmCVK1KuVrYorKZi4ZN1hSR71lPGlbXfvGU/zGMuqktcS52fGUz1Ohl+ bcLNG6b4Y5RnshZvm1PDjl6CH7mxig8aA42firXEHhYyqoUh4iDtOB2wX8Slup7j zwGVii7DU00w31ZleKRVXfTbXwxfUXPhGZ2vyqaAHO6a/i1lpkjYAUPP8d2+2Q== -----END CERTIFICATE-----Generated at Wed Feb 5 15:48:31 2025 by rpki-client