$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa File: 4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa (raw, json) Hash identifier: 2sdoL6+Tf/MFTnKbpsetwi2gaN6MmRUOQOurAPbpFQk= Subject key identifier: B1:AE:E6:AC:D4:67:22:D5:F8:6C:D8:3A:B4:08:B4:AA:E3:07:54:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3878172BB1B2CF84B91D9BD7FAFE41A98FBF1976 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f10:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:78:17:2b:b1:b2:cf:84:b9:1d:9b:d7:fa:fe:41:a9:8f:bf:19:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:aa:bf:c2:8a:40:5d:41:4e:e4:c6:85:c8: d7:d6:c0:a1:94:cb:ec:5a:71:71:51:1e:51:8f:1b: c0:6b:22:f7:3e:cc:fb:3c:ed:fa:4c:53:69:d7:e3: f9:27:74:66:df:7b:97:27:49:18:23:67:e1:e1:ed: cf:22:fc:26:4b:a8:11:5c:03:ec:b3:08:36:9f:ef: e9:56:14:dd:e0:ee:79:e8:03:be:d4:76:37:43:f4: 9d:9a:ec:d3:21:4a:69:42:e3:8a:4d:60:75:b7:75: f4:6d:47:2d:b5:a0:70:c2:38:f6:47:62:17:3c:61: 8b:9d:f1:a6:5a:6c:3f:71:5c:b4:b4:9c:5e:21:db: e3:04:f0:e1:31:b0:66:7e:4d:2a:51:8e:d2:52:cf: a3:b3:75:85:46:a5:37:3b:3d:82:d9:5a:a9:64:12: fa:00:6d:ab:03:bc:c8:36:fb:00:6d:54:af:0f:59: ac:84:09:5c:9c:50:35:64:04:50:c0:8b:4c:6f:23: 29:5f:fe:f1:5a:d7:a0:51:43:23:e5:8b:7c:ec:ed: ce:5f:23:5a:7a:7c:12:4e:74:59:5e:f8:33:26:ef: e0:c4:de:f8:68:14:59:fa:58:80:c5:b0:03:90:21: f6:1e:73:63:88:1a:cb:a8:f2:99:12:52:8e:83:48: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AE:E6:AC:D4:67:22:D5:F8:6C:D8:3A:B4:08:B4:AA:E3:07:54:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:4000::/36 Signature Algorithm: sha256WithRSAEncryption 85:03:ee:5f:2c:9d:1a:42:17:dd:cc:b9:db:cc:a4:9a:73:38: 67:f7:99:a9:72:9c:2b:a3:47:c0:54:06:11:07:a1:db:86:32: 36:7a:00:d3:26:c3:70:cd:38:38:1a:07:ff:0f:5b:f2:ca:34: b4:22:96:b5:d8:c0:0e:ff:90:75:75:62:4a:0a:b6:73:72:e2: f9:e0:f9:a6:9f:33:69:2c:8a:19:ef:a7:4f:06:8f:ba:ce:62: 21:30:45:27:70:9a:30:39:6b:3b:96:c6:3b:8a:46:97:6b:fa: b1:93:b1:23:f5:03:f9:80:1f:88:b2:ef:ec:41:d2:74:0f:bd: f6:0d:c0:1f:2b:a4:b4:c3:c8:bb:67:57:56:c1:c3:54:aa:cd: 8e:14:4a:f1:3e:6c:7d:57:0d:d1:77:fe:71:86:6e:6c:1f:0d: fb:1d:a4:74:48:ef:32:ac:cc:af:bf:4f:3d:da:d1:34:48:4e: 2a:cf:3a:5f:31:e2:da:83:ac:f6:4b:8f:ef:5d:19:30:76:81: 18:c7:7c:9b:27:cf:3d:d3:8c:7a:ae:ae:34:e7:2d:17:5d:df: b5:7a:9e:6c:2d:70:38:c5:4a:fc:3f:bd:17:48:73:c4:42:3a: f8:7b:5f:58:e9:13:86:b3:d2:9e:ac:87:7e:53:16:75:d7:ae: 6a:29:b8:7d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOHgXK7Gyz4S5HZvX+v5BqY+/GXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTNjYjdkYTc0MmU1NDIwNzg2YmVkNDM3YWJiOWI1MDIw ZDQ5MDBlYWNjYmY3ZGJhODI5YmQ4ZWFkOGJlNjllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9jqq/wopAXUFO5MaFyNfWwKGUy+xacXFRHlGPG8BrIvc+ zPs87fpMU2nX4/kndGbfe5cnSRgjZ+Hh7c8i/CZLqBFcA+yzCDaf7+lWFN3g7nno A77UdjdD9J2a7NMhSmlC44pNYHW3dfRtRy21oHDCOPZHYhc8YYud8aZabD9xXLS0 nF4h2+ME8OExsGZ+TSpRjtJSz6OzdYVGpTc7PYLZWqlkEvoAbasDvMg2+wBtVK8P WayECVycUDVkBFDAi0xvIylf/vFa16BRQyPli3zs7c5fI1p6fBJOdFle+DMm7+DE 3vhoFFn6WIDFsAOQIfYec2OIGsuo8pkSUo6DSHsVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsa7mrNRnItX4bNg6tAi0quMHVBYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjZDJjYzliLTc4ZjAtNDk3MS1hMTcwLWE5MGNhMDhiOTMzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8QQDANBgkqhkiG9w0BAQsFAAOCAQEAhQPuXyydGkIX3cy528ykmnM4 Z/eZqXKcK6NHwFQGEQeh24YyNnoA0ybDcM04OBoH/w9b8so0tCKWtdjADv+QdXVi Sgq2c3Li+eD5pp8zaSyKGe+nTwaPus5iITBFJ3CaMDlrO5bGO4pGl2v6sZOxI/UD +YAfiLLv7EHSdA+99g3AHyuktMPIu2dXVsHDVKrNjhRK8T5sfVcN0Xf+cYZubB8N +x2kdEjvMqzMr79PPdrRNEhOKs86XzHi2oOs9kuP710ZMHaBGMd8myfPPdOMeq6u NOctF13ftXqebC1wOMVK/D+9F0hzxEI6+HtfWOkThrPSnqyHflMWddeuaim4fQ== -----END CERTIFICATE-----Generated at Wed Feb 5 09:52:24 2025 by rpki-client