$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50c8b954-ffa6-4746-9859-9ac0de781ad5.roa File: 50c8b954-ffa6-4746-9859-9ac0de781ad5.roa (raw, json) Hash identifier: AOBzg0foPwRpYqg4yujq0XqPEqrad2doEwHw0k4IO3w= Subject key identifier: ED:07:41:36:F6:1C:58:01:27:92:4C:24:F5:F7:DA:45:9C:23:3C:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60B25A080196567551B2BD1AA3D1705D942A2599 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50c8b954-ffa6-4746-9859-9ac0de781ad5.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f25:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b2:5a:08:01:96:56:75:51:b2:bd:1a:a3:d1:70:5d:94:2a:25:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:b6:33:43:e8:a0:9e:3e:22:79:92:72:73: 9e:78:65:2f:a1:a6:04:dc:5a:85:1d:01:26:d3:6e: f7:73:10:a2:d7:df:5c:49:cc:54:5e:69:df:ce:10: 76:cf:84:ac:a7:ca:6d:ab:4e:b0:43:55:81:8b:8f: 79:b0:ed:0c:a8:b5:e1:51:b1:59:1c:c9:1f:dc:c6: 0e:95:4a:e4:e1:2a:97:7e:77:23:48:72:a1:56:14: 70:b0:f4:53:79:2a:8a:28:50:d1:95:cf:d1:f1:4f: d5:b5:ce:ae:1f:cb:16:57:91:57:88:f0:df:ac:a3: 56:b8:a6:4f:7c:92:f4:3a:b1:85:30:94:11:ea:97: 73:be:21:4e:06:e0:9d:fb:5a:19:93:fe:34:c8:04: 77:94:58:73:20:6d:ad:cc:c0:7a:08:67:69:95:0b: 05:2a:d3:b4:ff:9a:0a:9a:a7:9f:2c:1a:16:b8:40: e5:60:67:7c:3d:c8:58:4e:58:24:00:ed:a0:20:25: 97:7c:1a:0e:73:f2:b1:6a:f7:74:fa:d0:29:d3:a5: db:70:90:9f:e3:21:74:f6:39:a8:17:a0:0d:57:b8: f3:0e:9a:ee:91:cd:d0:cc:0c:4a:6a:8e:36:b7:7a: 66:2f:b9:b3:e5:0e:22:45:d8:88:76:85:56:b2:c0: ce:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:07:41:36:F6:1C:58:01:27:92:4C:24:F5:F7:DA:45:9C:23:3C:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50c8b954-ffa6-4746-9859-9ac0de781ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f25:8000::/36 Signature Algorithm: sha256WithRSAEncryption 89:a5:2d:17:f5:8c:bf:d5:19:4b:3c:0e:6c:4f:4e:f1:3b:5e: 1d:26:ee:66:2b:dd:8c:f3:cc:bd:a1:d0:17:07:5a:01:51:06: 72:77:48:cf:b8:19:e3:5d:64:ae:7d:a4:64:fb:88:f4:8a:0d: d7:a9:82:a0:c4:33:7d:53:c8:2a:bd:d3:83:64:63:9d:23:64: 51:bb:07:00:1a:0d:2e:20:ac:8b:74:e4:85:ed:dc:34:00:d3: 2a:f2:a9:d5:b5:8c:da:34:9a:a6:5f:f4:46:eb:8d:bc:7c:2a: 54:44:c4:34:34:fe:48:0a:6e:ac:bc:88:9f:fe:6f:7f:94:e6: 0a:f5:7c:14:8c:f5:99:c4:5b:3b:c3:f7:03:7b:7e:53:ab:e5: 39:24:70:6a:03:3e:33:13:6e:b4:6a:d0:f3:91:36:89:9c:0d: e0:0e:86:b6:5c:36:4b:59:19:21:cb:0d:9e:12:5a:06:6b:ed: 58:be:66:2b:65:91:ab:c3:35:58:a6:c3:3e:1b:32:b7:63:dc: de:dc:ee:24:fa:f6:d4:7c:73:a0:40:1c:ce:2f:76:b4:66:ce: c4:4b:1e:c9:96:52:86:25:2e:93:55:16:ec:e1:d1:ff:ee:1a: b4:51:a9:8b:dc:e9:1c:49:dc:75:4d:e0:9f:42:6d:26:40:65: 2a:86:0d:5b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYLJaCAGWVnVRsr0ao9FwXZQqJZkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDkzM2QxYTQxODhiNmJhYzBlY2UzMWUxNmJlZmFkMDJm NjQxMjE4MGE3MTU2MzkxMzcxNTMzZDNmNmJlY2NkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg6LYzQ+ignj4ieZJyc554ZS+hpgTcWoUdASbTbvdzEKLX 31xJzFRead/OEHbPhKynym2rTrBDVYGLj3mw7QyoteFRsVkcyR/cxg6VSuThKpd+ dyNIcqFWFHCw9FN5KoooUNGVz9HxT9W1zq4fyxZXkVeI8N+so1a4pk98kvQ6sYUw lBHql3O+IU4G4J37WhmT/jTIBHeUWHMgba3MwHoIZ2mVCwUq07T/mgqap58sGha4 QOVgZ3w9yFhOWCQA7aAgJZd8Gg5z8rFq93T60CnTpdtwkJ/jIXT2OagXoA1XuPMO mu6RzdDMDEpqjja3emYvubPlDiJF2Ih2hVaywM5DAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU7QdBNvYcWAEnkkwk9ffaRZwjPMEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUwYzhiOTU0LWZmYTYtNDc0Ni05ODU5LTlhYzBkZTc4MWFkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8lgDANBgkqhkiG9w0BAQsFAAOCAQEAiaUtF/WMv9UZSzwObE9O8Tte HSbuZivdjPPMvaHQFwdaAVEGcndIz7gZ411krn2kZPuI9IoN16mCoMQzfVPIKr3T g2RjnSNkUbsHABoNLiCsi3Tkhe3cNADTKvKp1bWM2jSapl/0RuuNvHwqVETENDT+ SApurLyIn/5vf5TmCvV8FIz1mcRbO8P3A3t+U6vlOSRwagM+MxNutGrQ85E2iZwN 4A6Gtlw2S1kZIcsNnhJaBmvtWL5mK2WRq8M1WKbDPhsyt2Pc3tzuJPr21HxzoEAc zi92tGbOxEseyZZShiUuk1UW7OHR/+4atFGpi9zpHEncdU3gn0JtJkBlKoYNWw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:00 2025 by rpki-client