$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa File: 74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa (raw, json) Hash identifier: vaeSzmuuZM1nJMoGVylpkNriH2tnCC2EijKuzXDAzH4= Subject key identifier: 08:E4:EB:97:9E:18:31:6C:2F:19:ED:15:7D:B7:39:87:75:5A:5C:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FAF6F5CAED45F66A222D45F16775EA721447AE8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff6:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:af:6f:5c:ae:d4:5f:66:a2:22:d4:5f:16:77:5e:a7:21:44:7a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:f7:a6:ac:5d:b2:53:c7:47:4c:d6:df:b7: d1:1a:1a:34:af:ca:5b:af:4b:da:74:32:72:81:ab: 8b:da:27:fb:8b:a2:dd:05:64:b7:a5:69:62:ad:b3: cc:87:a7:ef:e7:44:14:08:9f:1e:28:e6:b8:25:cb: 3c:cd:08:fe:04:20:15:f5:1e:ed:81:97:bf:e2:e6: 9e:c0:54:b9:a8:c6:14:4c:f3:c9:62:5e:a0:81:43: 39:08:3f:24:a3:16:3a:1e:94:c8:c4:ae:b7:d5:fd: 42:ce:87:2b:4c:a8:f5:9c:89:0a:8e:f8:7c:a5:8a: 67:72:68:e4:c1:cb:b7:b0:92:3e:b3:70:30:f5:f5: f3:b2:ef:f9:36:b0:1e:4a:fd:ab:9b:02:cb:a6:f9: 04:ff:b9:d3:18:2b:70:eb:4b:43:f0:18:f3:b9:d7: 18:0e:93:bf:d6:93:60:84:5e:70:4d:f6:cf:cd:9e: 52:69:c8:26:63:0a:b3:d8:7e:e2:54:a6:fc:a1:f3: 9f:3c:23:46:2b:40:34:c2:ee:8f:fc:c1:e9:d2:c1: 25:66:4e:2a:b5:7a:f3:2d:9c:9d:8c:a5:38:ae:d8: bc:cf:74:21:dd:1f:18:20:86:a3:17:e9:10:96:70: ca:c1:a8:9a:04:5a:4b:74:97:be:97:a5:00:9f:2a: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E4:EB:97:9E:18:31:6C:2F:19:ED:15:7D:B7:39:87:75:5A:5C:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:5000::/40 Signature Algorithm: sha256WithRSAEncryption 52:80:b4:2d:f8:55:76:2f:3d:30:23:e1:b3:09:f6:04:7e:51: 38:9b:62:63:f9:69:61:4d:72:6a:f9:46:74:f6:a6:cd:0c:a9: 5a:e6:f0:8a:46:62:d3:a9:97:ce:a5:a6:aa:55:76:3a:cd:8c: 81:5c:cc:81:ba:72:6b:06:f3:92:8a:18:21:4d:ec:14:00:4b: 98:ff:41:88:c9:7e:86:8d:30:de:eb:18:67:a6:1a:fe:44:79: 23:16:2c:21:b0:31:1e:8f:ac:2c:a2:4b:f7:d0:c0:0e:37:78: c6:d9:03:32:07:b4:ba:d3:4a:e3:13:f5:8e:ac:e6:bf:c8:07: 9a:df:3f:53:e9:dc:e5:66:a3:6d:28:0a:64:35:6a:ef:98:e5: b9:1c:ec:4b:91:8f:53:db:03:49:89:37:89:05:cd:dd:d5:29: 01:67:a6:9f:ea:12:fa:d1:da:42:38:83:2e:9d:8a:b3:a0:c8: e8:4f:a6:c4:fc:78:3d:a5:aa:6b:46:07:1a:3f:f8:8d:42:0c: c8:b7:c6:8c:c8:c8:59:f5:7e:ae:94:bd:37:01:f4:02:33:37: 94:95:05:fc:d5:e1:71:3b:f7:90:28:28:f7:07:bb:14:0d:bc: b5:4b:bd:45:db:4c:49:74:7f:64:f8:fd:4c:cd:69:c0:ab:a9: 87:cb:86:e8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUT69vXK7UX2aiItRfFndepyFEeugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmJhOTY1MzM1YzFhOTZlNjg0MjBlMTY5OGZhMWI4NjBj NjE4YmJmNmY5MTk0OGVkYjFiZjFjZjg4ZmQ3ZTQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe2PemrF2yU8dHTNbft9EaGjSvyluvS9p0MnKBq4vaJ/uL ot0FZLelaWKts8yHp+/nRBQInx4o5rglyzzNCP4EIBX1Hu2Bl7/i5p7AVLmoxhRM 88liXqCBQzkIPySjFjoelMjErrfV/ULOhytMqPWciQqO+HylimdyaOTBy7ewkj6z cDD19fOy7/k2sB5K/aubAsum+QT/udMYK3DrS0PwGPO51xgOk7/Wk2CEXnBN9s/N nlJpyCZjCrPYfuJUpvyh8588I0YrQDTC7o/8wenSwSVmTiq1evMtnJ2MpTiu2LzP dCHdHxgghqMX6RCWcMrBqJoEWkt0l76XpQCfKmoDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCOTrl54YMWwvGe0Vfbc5h3VaXD4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0YTYwZTY3LWE0NjAtNGIyNC1iNGZmLTNlM2FkYjlhZTdjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/2UDANBgkqhkiG9w0BAQsFAAOCAQEAUoC0LfhVdi89MCPhswn2BH5R OJtiY/lpYU1yavlGdPamzQypWubwikZi06mXzqWmqlV2Os2MgVzMgbpyawbzkooY IU3sFABLmP9BiMl+ho0w3usYZ6Ya/kR5IxYsIbAxHo+sLKJL99DADjd4xtkDMge0 utNK4xP1jqzmv8gHmt8/U+nc5WajbSgKZDVq75jluRzsS5GPU9sDSYk3iQXN3dUp AWemn+oS+tHaQjiDLp2Ks6DI6E+mxPx4PaWqa0YHGj/4jUIMyLfGjMjIWfV+rpS9 NwH0AjM3lJUF/NXhcTv3kCgo9we7FA28tUu9RdtMSXR/ZPj9TM1pwKuph8uG6A== -----END CERTIFICATE-----Generated at Wed Feb 5 15:52:58 2025 by rpki-client