$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa File: 76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa (raw, json) Hash identifier: XmDHppE4bVLqCFc1zLcs2eL6elu/KjjoTyNseKxC7LA= Subject key identifier: 18:ED:1A:A2:77:34:4C:CB:E6:02:9D:AC:DA:B3:48:DC:2A:94:44:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62F6900F41E0C7EEC1E972BFED00D9DB1688808F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:81e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f6:90:0f:41:e0:c7:ee:c1:e9:72:bf:ed:00:d9:db:16:88:80:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:dc:d0:c4:ad:07:2a:5f:c0:07:e2:c2:37: fe:a1:8e:49:54:90:bf:40:99:2f:80:dc:12:75:98: ff:37:b0:fe:34:a6:c2:a6:1b:ce:e6:2a:c3:62:3d: 67:1b:c4:48:74:6e:05:64:c5:3c:91:a4:23:5a:72: b7:57:c2:42:d5:9a:e9:ee:41:e5:8e:0f:77:f3:6b: 37:be:87:bf:a0:b2:8d:35:ef:2d:d6:7f:12:95:1f: 6c:b3:c1:5c:35:32:d7:5f:2b:b9:08:93:ca:12:da: 1c:d7:5c:c7:bf:9a:f5:e6:61:ba:93:e8:ec:3d:68: 5d:f4:dc:6a:0f:df:f8:74:d4:67:40:cc:30:25:e6: db:e7:54:6f:22:d1:40:e8:de:bb:6c:4b:7e:7e:07: 7b:cd:fa:b1:17:c3:fb:e2:3a:0e:d8:e9:29:e3:88: 88:4b:f4:74:a4:8c:9b:8d:33:99:9c:d4:af:05:e0: 6b:96:b7:76:a2:04:6a:2e:b9:ae:3f:aa:6c:cb:bf: c8:e7:e8:66:20:9b:1f:5c:0a:ef:f0:d1:d9:a5:99: f7:14:7d:14:ad:95:48:93:92:d5:1d:ce:de:26:79: 4b:f6:26:fe:79:b4:f8:64:e6:6a:43:d9:b2:43:46: b4:0c:9e:35:da:2a:9e:30:28:b8:15:99:82:eb:dd: f5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:ED:1A:A2:77:34:4C:CB:E6:02:9D:AC:DA:B3:48:DC:2A:94:44:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76dea53b-00c8-4fbf-95bd-1a58ae1e45f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:81e0::/48 Signature Algorithm: sha256WithRSAEncryption 9d:ea:74:a0:c9:4c:63:6a:13:47:d9:03:31:65:f3:fb:07:ef: 2b:6e:4f:10:b9:3d:ee:c1:4e:5a:50:17:80:0d:0c:a1:98:dc: 61:2a:96:b1:bd:89:02:ce:2c:e6:0b:61:50:3d:2f:ba:ef:e7: 5a:04:a5:0f:7e:2a:79:f4:b0:29:64:54:64:77:dd:7a:bd:f3: cd:c1:2e:79:d2:04:42:73:2e:b1:ef:c5:ed:fd:56:2b:f4:93: ef:6f:87:a9:23:68:eb:72:16:2a:8a:0a:39:cb:77:d8:7b:db: 51:24:13:36:9e:a0:13:80:28:40:db:a7:c0:3c:cb:f1:c0:5e: 60:2c:f6:1c:80:8f:eb:f8:ff:fc:5a:da:4a:3b:05:81:ef:ac: dc:d7:ca:84:7e:76:32:1c:db:d8:c5:a2:12:f7:a5:a8:e0:c6: 12:e7:4b:f0:93:2d:35:20:02:24:78:cd:3a:f8:47:7d:8c:b5: 22:94:17:6e:2d:82:d5:48:dd:0c:58:99:2d:b7:46:b8:bb:c4: 12:77:13:78:f3:12:bd:fb:d1:2a:c6:39:52:35:8a:5a:2e:35: a8:01:e6:7a:d9:e9:5f:a1:e2:8e:9c:0d:1d:44:ba:26:58:20: 21:2d:0a:fb:f7:d5:39:ae:20:eb:f2:ef:43:61:49:34:bd:dd: fb:cf:63:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYvaQD0Hgx+7B6XK/7QDZ2xaIgI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGQwZmNjMjIwMDQ5NTMyYjExZWU3YzQ4MGE5OTk2OGI3 Y2FkZDg0NTA3OTE4ZDNkZjExN2Q1ODRjNWQ5YzZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiX9zQxK0HKl/AB+LCN/6hjklUkL9AmS+A3BJ1mP83sP40 psKmG87mKsNiPWcbxEh0bgVkxTyRpCNacrdXwkLVmunuQeWOD3fzaze+h7+gso01 7y3WfxKVH2yzwVw1MtdfK7kIk8oS2hzXXMe/mvXmYbqT6Ow9aF303GoP3/h01GdA zDAl5tvnVG8i0UDo3rtsS35+B3vN+rEXw/viOg7Y6SnjiIhL9HSkjJuNM5mc1K8F 4GuWt3aiBGouua4/qmzLv8jn6GYgmx9cCu/w0dmlmfcUfRStlUiTktUdzt4meUv2 Jv55tPhk5mpD2bJDRrQMnjXaKp4wKLgVmYLr3fU5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGO0aonc0TMvmAp2s2rNI3CqURA4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc2ZGVhNTNiLTAwYzgtNGZiZi05NWJkLTFhNThhZTFlNDVmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgeAwDQYJKoZIhvcNAQELBQADggEBAJ3qdKDJTGNqE0fZAzFl8/sH 7ytuTxC5Pe7BTlpQF4ANDKGY3GEqlrG9iQLOLOYLYVA9L7rv51oEpQ9+Knn0sClk VGR33Xq9883BLnnSBEJzLrHvxe39Viv0k+9vh6kjaOtyFiqKCjnLd9h721EkEzae oBOAKEDbp8A8y/HAXmAs9hyAj+v4//xa2ko7BYHvrNzXyoR+djIc29jFohL3pajg xhLnS/CTLTUgAiR4zTr4R32MtSKUF24tgtVI3QxYmS23Rri7xBJ3E3jzEr370SrG OVI1ilouNagB5nrZ6V+h4o6cDR1EuiZYICEtCvv31TmuIOvy70NhSTS93fvPYys= -----END CERTIFICATE-----Generated at Wed Feb 5 09:49:27 2025 by rpki-client