$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa File: 5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa (raw, json) Hash identifier: MImF2WBjG3gkc0CYczW9jpJEAai99Y+XtpBL3Qaehsc= Subject key identifier: 74:43:30:71:41:95:52:72:67:66:B4:DA:4D:2D:DF:90:27:6C:8E:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 765E76EB312EEB6B135E0D1AA7A3EB000EF32FCD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2c:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5e:76:eb:31:2e:eb:6b:13:5e:0d:1a:a7:a3:eb:00:0e:f3:2f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:dc:fb:66:d1:b1:2f:09:67:5c:54:f3:8b: 29:ca:ee:89:33:af:08:f3:09:b2:db:e4:c6:dc:42: 52:af:f4:56:eb:75:fe:07:0b:55:ef:b4:0c:be:a6: 59:91:aa:40:95:34:af:a1:50:cf:02:26:ff:f0:92: 19:b3:24:12:e4:f8:fa:c7:97:a1:1c:34:94:27:67: 5b:d3:51:6e:a5:5e:58:f4:ee:32:4f:18:46:0a:6a: 62:ab:a3:a6:7c:7f:01:74:b0:14:ae:e7:92:cf:9e: 49:a5:9f:1a:9f:70:7e:73:34:f0:60:b4:d6:99:62: 03:40:7f:44:0b:23:f7:85:cd:96:27:18:67:10:e4: e2:6b:b2:39:f5:0c:63:0d:6f:cd:a6:d1:08:c4:5e: 82:ab:69:11:01:01:71:76:69:f2:e7:28:de:ff:b9: c2:af:10:4a:d6:57:d2:67:9d:bc:c2:4d:c1:8c:77: 8c:d0:90:23:08:46:bd:c2:d3:45:d1:af:92:e2:23: 6c:88:b8:22:1e:57:99:ed:2a:98:9a:5d:c9:aa:77: 0c:40:91:56:37:11:50:a2:e6:66:f9:8d:0d:3b:71: 3c:a0:59:a0:26:a8:2d:a5:23:9d:61:58:32:32:af: aa:3f:78:51:e2:f1:3b:3f:f8:94:a4:2a:0e:26:44: e5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:43:30:71:41:95:52:72:67:66:B4:DA:4D:2D:DF:90:27:6C:8E:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2c:c800::/37 Signature Algorithm: sha256WithRSAEncryption 12:92:a5:34:fa:36:fb:02:4c:8f:fd:5f:f5:ef:1c:cd:d4:69: 1f:d3:a0:ae:e2:c2:ab:06:06:4e:19:05:47:88:c5:94:71:1d: 7b:4a:76:aa:bd:0d:ff:b8:aa:3d:62:06:e0:5f:da:69:26:42: a8:7f:61:5b:b9:88:fc:75:dc:81:b4:33:27:72:13:f2:8c:0e: f7:40:70:1d:9f:06:fe:51:60:16:2a:aa:99:27:17:3f:20:02: 45:19:f8:c9:59:92:77:54:4a:55:43:7b:e0:44:60:0f:9a:d2: 79:02:53:a7:f3:39:6d:95:b9:a1:22:c1:d6:79:6b:57:83:14: 0c:68:01:da:95:32:08:22:50:01:f0:15:1c:2a:7d:2f:58:d5: 64:2d:d4:c5:26:a9:3b:bf:ec:8b:7b:55:b6:11:ff:a8:e0:66: 99:e7:96:40:f8:14:dd:86:51:e6:00:8b:ad:8c:79:87:4c:24: 4d:d5:33:cc:e8:24:51:fd:46:86:30:93:2d:33:f2:b7:30:2e: aa:49:70:bb:f0:5e:b0:8f:89:2d:bc:48:3a:3d:58:23:45:fc: 99:c9:c8:e1:ad:55:82:53:8b:b4:cb:e2:b7:74:65:3a:b0:d0: aa:d1:8f:a7:30:68:39:d2:dc:21:d6:73:80:ee:bb:86:8c:e2: b2:bd:a8:90 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdl526zEu62sTXg0ap6PrAA7zL80wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTg1ZWUxYTkzZjM2MDIyOWViMTJhYmI0NDU3MjYxOWI0 YzM5MzU4NTBkYzU0NzZiZWQxNGEyMzExMmQyNWRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCsNz7ZtGxLwlnXFTziynK7okzrwjzCbLb5MbcQlKv9Fbr df4HC1XvtAy+plmRqkCVNK+hUM8CJv/wkhmzJBLk+PrHl6EcNJQnZ1vTUW6lXlj0 7jJPGEYKamKro6Z8fwF0sBSu55LPnkmlnxqfcH5zNPBgtNaZYgNAf0QLI/eFzZYn GGcQ5OJrsjn1DGMNb82m0QjEXoKraREBAXF2afLnKN7/ucKvEErWV9JnnbzCTcGM d4zQkCMIRr3C00XRr5LiI2yIuCIeV5ntKpiaXcmqdwxAkVY3EVCi5mb5jQ07cTyg WaAmqC2lI51hWDIyr6o/eFHi8Ts/+JSkKg4mROWNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUdEMwcUGVUnJnZrTaTS3fkCdsjrYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlYTViN2FlLTc1NzItNGNiNi1hZDExLWY0NDFhMzQ3NjFmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8syDANBgkqhkiG9w0BAQsFAAOCAQEAEpKlNPo2+wJMj/1f9e8czdRp H9OgruLCqwYGThkFR4jFlHEde0p2qr0N/7iqPWIG4F/aaSZCqH9hW7mI/HXcgbQz J3IT8owO90BwHZ8G/lFgFiqqmScXPyACRRn4yVmSd1RKVUN74ERgD5rSeQJTp/M5 bZW5oSLB1nlrV4MUDGgB2pUyCCJQAfAVHCp9L1jVZC3UxSapO7/si3tVthH/qOBm meeWQPgU3YZR5gCLrYx5h0wkTdUzzOgkUf1GhjCTLTPytzAuqklwu/BesI+JLbxI Oj1YI0X8mcnI4a1VglOLtMvit3RlOrDQqtGPpzBoOdLcIdZzgO67hozisr2okA== -----END CERTIFICATE-----Generated at Wed Feb 5 09:48:11 2025 by rpki-client