$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568a89e6-9390-4dde-bcf7-9756e7065ef3.roa File: 568a89e6-9390-4dde-bcf7-9756e7065ef3.roa (raw, json) Hash identifier: UgNm2JGTp+8Rg798QjHPUtOY1u28vZLp4v7zyD2rEck= Subject key identifier: C3:8B:2F:6B:B8:07:57:CF:A8:79:54:35:D5:6B:69:9B:27:59:08:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3EB630D89BA6B0761CA1A89BA38E1D4D670249F4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568a89e6-9390-4dde-bcf7-9756e7065ef3.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:803f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b6:30:d8:9b:a6:b0:76:1c:a1:a8:9b:a3:8e:1d:4d:67:02:49:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:e4:d0:a2:e3:dc:23:c2:3c:c2:52:76:ac: e4:7a:61:18:32:9a:16:d7:58:40:c4:e5:65:5f:78: 5b:46:51:e4:0c:81:f4:3d:9c:f1:e9:62:d3:03:19: 17:a4:51:39:28:9a:ff:ab:7b:49:db:b5:f7:2b:19: e2:6e:13:23:ec:cc:c1:d0:9b:d6:8d:2e:ed:4a:cf: 27:2c:85:45:9d:1a:5b:90:c0:cd:0d:5e:c9:5b:bc: 8f:91:08:8a:c7:e8:04:73:9b:90:3d:a2:37:99:49: 39:71:62:40:75:97:3a:cd:10:cf:c0:e0:31:b3:ab: 59:8f:e5:22:20:4b:a5:f3:e6:a7:a9:54:2b:18:1d: f1:cf:cc:40:37:b1:ac:f9:a9:eb:44:26:c3:a4:1e: 6f:35:b3:73:4c:86:6d:01:09:7c:e1:89:5a:8f:78: 8e:8a:74:22:b4:b7:8b:d1:50:3c:ab:f5:11:84:4e: 0a:a3:19:d5:a8:e3:e0:ea:f8:fd:be:09:39:3e:92: e2:ec:36:a2:80:77:54:00:73:1c:df:eb:e7:ab:37: 3d:cc:20:6a:28:99:07:69:cc:6f:64:66:b1:d5:ee: c4:cd:fc:10:e0:af:cd:cb:1c:f8:74:df:7a:d2:ab: 49:3b:54:2b:fb:55:76:04:e2:f3:0d:26:8f:93:ad: 67:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8B:2F:6B:B8:07:57:CF:A8:79:54:35:D5:6B:69:9B:27:59:08:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568a89e6-9390-4dde-bcf7-9756e7065ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:803f::/48 Signature Algorithm: sha256WithRSAEncryption 18:4d:18:5f:8b:a0:b5:3a:1f:b9:12:a3:94:34:2d:47:15:76: 08:b6:ea:9e:49:ac:77:c7:f4:bd:04:53:ac:e3:1e:ec:a4:65: 7d:7a:e9:4e:03:70:7d:d4:02:c2:5d:40:ae:c7:b3:ce:e8:a6: 07:aa:91:1d:59:b7:21:df:ee:26:c6:cf:6c:22:26:d4:aa:d4: 32:05:98:84:dd:2b:0f:c8:9c:bb:96:96:c0:20:d7:35:33:94: eb:a8:56:01:76:0b:81:b9:4e:4c:53:33:24:ee:87:64:a2:20: 4c:f9:27:56:2e:d0:24:f0:44:39:b6:0c:6c:15:2f:d0:3f:2d: 91:51:3d:a2:fc:c5:9a:ec:8c:d5:74:53:d3:19:45:7a:ae:e9: 75:68:71:32:8e:bd:90:30:4f:24:58:94:cc:26:12:9d:9d:28: cf:62:ca:07:aa:82:1a:54:f3:23:aa:20:8b:28:76:89:2f:6a: bf:21:5b:e3:be:18:a6:26:c7:0a:72:b5:58:67:50:87:8e:17: 06:5e:56:30:e3:9c:55:03:75:34:43:d2:13:7a:1f:51:20:ee: 82:5b:ab:85:53:e6:be:26:2f:72:13:90:c0:f8:e9:08:69:7f: 05:d2:8a:9c:62:2d:7d:1c:65:91:bf:7f:2a:66:65:ce:d0:36: 67:5e:38:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPrYw2JumsHYcoaibo44dTWcCSfQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjY1YmVjYjIzN2RmOWFhN2M0ZGE5NjVlNTY1MjI3MDM2 ZTlhMjNjN2MxZGJjOTQ3ZjUzNDFiYmE4NGUwNWM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT3+TQouPcI8I8wlJ2rOR6YRgymhbXWEDE5WVfeFtGUeQM gfQ9nPHpYtMDGRekUTkomv+re0nbtfcrGeJuEyPszMHQm9aNLu1KzycshUWdGluQ wM0NXslbvI+RCIrH6ARzm5A9ojeZSTlxYkB1lzrNEM/A4DGzq1mP5SIgS6Xz5qep VCsYHfHPzEA3saz5qetEJsOkHm81s3NMhm0BCXzhiVqPeI6KdCK0t4vRUDyr9RGE TgqjGdWo4+Dq+P2+CTk+kuLsNqKAd1QAcxzf6+erNz3MIGoomQdpzG9kZrHV7sTN /BDgr83LHPh033rSq0k7VCv7VXYE4vMNJo+TrWfvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUw4sva7gHV8+oeVQ11WtpmydZCGswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2OGE4OWU2LTkzOTAtNGRkZS1iY2Y3LTk3NTZlNzA2NWVmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gD8wDQYJKoZIhvcNAQELBQADggEBABhNGF+LoLU6H7kSo5Q0LUcV dgi26p5JrHfH9L0EU6zjHuykZX166U4DcH3UAsJdQK7Hs87opgeqkR1ZtyHf7ibG z2wiJtSq1DIFmITdKw/InLuWlsAg1zUzlOuoVgF2C4G5TkxTMyTuh2SiIEz5J1Yu 0CTwRDm2DGwVL9A/LZFRPaL8xZrsjNV0U9MZRXqu6XVocTKOvZAwTyRYlMwmEp2d KM9iygeqghpU8yOqIIsodokvar8hW+O+GKYmxwpytVhnUIeOFwZeVjDjnFUDdTRD 0hN6H1Eg7oJbq4VT5r4mL3ITkMD46QhpfwXSipxiLX0cZZG/fypmZc7QNmdeOLU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:03 2025 by rpki-client