$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e53e42b-8598-4415-9367-0fdb09b37153.roa File: 5e53e42b-8598-4415-9367-0fdb09b37153.roa (raw, json) Hash identifier: WIXFGeuh2AIhrRUiARpbgom9gcuxrhANop8H6HpsMds= Subject key identifier: 69:58:3E:30:CF:E9:40:B1:B3:4A:09:63:DC:0E:DD:53:76:5F:FB:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 111F2A3E5B3268BCF10932218C2437FA8F61B42E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e53e42b-8598-4415-9367-0fdb09b37153.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff8:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1f:2a:3e:5b:32:68:bc:f1:09:32:21:8c:24:37:fa:8f:61:b4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:47:4c:ab:85:bc:e7:e0:ed:e9:60:bc:b4: 67:80:35:7a:84:84:ee:56:84:3e:35:bf:31:2c:64: b5:d7:ca:e8:1a:24:ff:46:4f:0d:37:e0:90:12:0a: e0:39:c0:aa:62:1b:3e:96:b4:46:7f:6e:c8:e1:ae: 81:d8:a8:65:25:8e:75:03:dc:e5:66:36:6f:be:a7: d7:ec:4d:e5:a5:b7:95:a6:27:03:62:be:c0:02:3f: ae:78:92:e1:ca:cd:dc:e1:12:18:aa:44:32:fc:03: f0:0a:89:91:76:2a:f6:4c:b3:3c:35:11:b1:7e:7c: cb:1c:37:43:1f:bb:6e:84:9e:b4:0a:27:57:91:0e: 51:cc:87:22:bd:fe:94:5f:dc:c8:f9:df:a1:b7:ec: a3:f2:92:1b:ad:c3:9b:7d:87:62:dc:1c:9c:05:48: 8b:01:e2:bc:b6:04:f9:c7:32:e5:96:63:7b:86:44: 8a:8c:a0:d8:64:79:cc:2f:18:42:cc:24:5c:d9:46: 8b:a3:9d:0d:92:e9:b7:81:23:d2:20:9c:9e:47:ac: fe:68:31:f4:38:45:c6:8c:3e:22:b7:47:06:63:74: 80:be:a9:2b:f3:b2:69:24:79:37:5c:65:0a:1f:57: 22:f4:7d:a8:f3:2f:3b:44:13:5d:8d:31:93:3e:61: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:58:3E:30:CF:E9:40:B1:B3:4A:09:63:DC:0E:DD:53:76:5F:FB:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e53e42b-8598-4415-9367-0fdb09b37153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:8000::/39 Signature Algorithm: sha256WithRSAEncryption 3e:bd:9b:72:47:c6:b6:fd:60:37:5f:8c:04:b1:55:60:c7:a9: 23:25:21:b1:44:ff:83:ee:52:50:9f:52:32:c2:c7:69:ca:8e: ee:da:e8:2e:c3:5b:1c:1e:67:7e:8b:65:d8:05:39:02:32:ea: 40:61:f9:98:42:68:38:fd:56:57:62:85:e2:ab:25:77:06:8c: 0f:cb:69:cf:7d:e5:53:21:bb:f6:03:f4:ee:0b:a7:68:d3:3a: 49:bd:e5:bb:6f:8c:9c:c7:e4:46:11:50:11:a8:c8:b8:cc:ad: 63:5d:c6:7a:3d:11:ba:41:b3:3b:ce:80:c1:d2:c4:74:b6:f4: d5:ea:45:63:96:a9:1c:18:65:b5:3a:91:53:12:48:52:65:ee: 8b:de:f8:94:b7:c7:69:5b:50:db:4f:24:49:64:51:49:b2:0e: 49:31:cb:7f:f9:a7:1f:3a:e9:18:b5:06:47:6b:25:df:f9:1f: e9:64:b4:29:ad:16:77:1c:48:64:1b:52:8e:b7:bf:70:5a:db: fa:25:df:d6:ab:49:ac:0d:7e:92:9c:8e:89:43:88:74:1c:e7: 90:12:c2:eb:af:5b:b3:2b:01:64:2d:d1:2e:31:f0:f3:21:a7: f9:7d:9a:8c:7a:50:c9:dd:55:ce:63:a1:12:d7:53:fa:bc:9b: 37:1f:21:fb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUER8qPlsyaLzxCTIhjCQ3+o9htC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTIxMDAwMDAwWhcNMjUwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjQxZDcwMDMyZTU4YzI2NzJiYWVmOGMxM2RlZWVjOWFl MjcwN2U0ZDRlMjQxYWRlODc3MTdjMGRkNDdlNDBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9OkdMq4W85+Dt6WC8tGeANXqEhO5WhD41vzEsZLXXyuga JP9GTw034JASCuA5wKpiGz6WtEZ/bsjhroHYqGUljnUD3OVmNm++p9fsTeWlt5Wm JwNivsACP654kuHKzdzhEhiqRDL8A/AKiZF2KvZMszw1EbF+fMscN0Mfu26EnrQK J1eRDlHMhyK9/pRf3Mj536G37KPykhutw5t9h2LcHJwFSIsB4ry2BPnHMuWWY3uG RIqMoNhkecwvGELMJFzZRoujnQ2S6beBI9IgnJ5HrP5oMfQ4RcaMPiK3RwZjdIC+ qSvzsmkkeTdcZQofVyL0fajzLztEE12NMZM+YaitAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUaVg+MM/pQLGzSglj3A7dU3Zf+3gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlNTNlNDJiLTg1OTgtNDQxNS05MzY3LTBmZGIwOWIzNzE1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/4gDANBgkqhkiG9w0BAQsFAAOCAQEAPr2bckfGtv1gN1+MBLFVYMep IyUhsUT/g+5SUJ9SMsLHacqO7troLsNbHB5nfotl2AU5AjLqQGH5mEJoOP1WV2KF 4qsldwaMD8tpz33lUyG79gP07gunaNM6Sb3lu2+MnMfkRhFQEajIuMytY13Gej0R ukGzO86AwdLEdLb01epFY5apHBhltTqRUxJIUmXui974lLfHaVtQ208kSWRRSbIO STHLf/mnHzrpGLUGR2sl3/kf6WS0Ka0WdxxIZBtSjre/cFrb+iXf1qtJrA1+kpyO iUOIdBznkBLC669bsysBZC3RLjHw8yGn+X2ajHpQyd1VzmOhEtdT+rybNx8h+w== -----END CERTIFICATE-----Generated at Wed Feb 5 09:54:50 2025 by rpki-client