$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa File: 935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa (raw, json) Hash identifier: zft7dAl+MCVqakPrL0wPfcPwloWvMg8DYIj5f3L9jzU= Subject key identifier: BE:50:B8:29:17:6E:E6:6E:34:B7:49:8E:C3:4C:10:26:5E:0E:EC:9B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51313244AE2839ACD651D6EAAA8147D6B0F5C712 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1b:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:31:32:44:ae:28:39:ac:d6:51:d6:ea:aa:81:47:d6:b0:f5:c7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:f8:4d:cd:4b:3c:f1:dc:a3:09:47:16:62: e2:86:28:fc:92:a1:7c:6d:33:a1:ef:da:43:54:f8: e1:9d:02:24:8a:12:48:43:f8:52:1e:88:7a:13:5b: 41:d6:55:b2:80:11:28:46:c8:b7:a3:0c:61:1e:56: 1c:5b:f8:79:b5:e5:dd:28:37:e8:38:56:bb:1c:35: 86:26:b0:d9:bf:43:56:d5:f1:35:9d:6e:71:00:a2: 02:ab:16:0a:02:d2:08:d0:0f:ee:13:50:05:d2:b9: 24:ca:5e:b2:f4:c6:01:74:3c:a5:25:f8:83:23:69: b4:55:b7:86:de:e7:c7:3b:c9:04:6e:99:d8:42:91: 66:df:47:21:e9:d9:7f:da:56:61:d5:8e:d7:ef:9d: c3:ba:a3:60:3c:00:ad:c8:c4:c1:a3:2a:9a:45:92: ee:f5:9e:8d:75:ea:59:f4:34:05:96:0c:e6:69:3f: 84:0b:95:fc:eb:d1:f5:45:18:73:db:fb:ac:b7:24: 45:dc:af:4d:57:59:4c:a5:61:1b:d4:ea:78:cf:bd: 85:a5:e2:ee:60:73:a7:dc:34:42:7e:1d:ba:43:3f: 4e:f5:b1:9b:e9:29:52:c7:03:fb:cd:b1:6a:bb:8b: 5a:30:4e:ec:6f:19:83:fa:a1:84:4d:56:70:01:40: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:50:B8:29:17:6E:E6:6E:34:B7:49:8E:C3:4C:10:26:5E:0E:EC:9B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1b:4800::/37 Signature Algorithm: sha256WithRSAEncryption ca:b9:40:64:59:8b:25:4e:c5:7f:ce:59:22:1c:d7:7f:33:7b: 28:06:27:4c:62:8a:f0:66:57:bc:e4:53:f6:03:a7:31:a2:6d: 12:cb:7c:82:a0:34:86:79:b3:b9:24:9b:9f:ee:4c:bd:04:fc: 99:95:75:bf:f0:3f:6f:3c:0d:03:92:b7:03:25:e2:b9:df:df: 71:be:57:d8:a8:49:8d:9d:0e:5b:12:88:6d:3c:e8:bd:34:48: ef:7d:96:ca:69:08:63:4d:15:91:cb:6a:70:eb:ce:ff:f9:96: 01:16:57:64:92:22:70:f0:da:e0:dd:46:03:b0:95:64:1c:2f: 49:e1:27:a3:f7:91:67:ae:04:58:01:81:5f:0c:2b:28:0d:33: 5d:6a:8a:a1:a4:32:e5:33:34:aa:78:96:1f:44:4e:bf:42:d2: 07:ba:12:7f:78:bd:b9:89:da:03:29:8c:99:4a:a1:ee:a8:5b: db:5e:e6:8b:dc:e9:57:36:ce:a5:b2:02:bb:32:fd:2e:9b:41: df:7c:cc:76:28:f2:d0:14:53:95:8c:ce:e6:2d:ce:3c:9b:be: 81:24:42:14:01:4c:8c:8b:a1:1e:14:3a:3e:af:7e:6f:1e:95: 36:43:9b:6b:24:25:e7:32:b7:85:b3:b7:32:6e:b6:34:f6:89: 82:86:26:91 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUTEyRK4oOazWUdbqqoFH1rD1xxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGZhYjQ4MDllNzRhMDVkNTVjMTM0NWVhYTU0OWUwNTI4 NzA1OGI1ZDVmZjQzYjI1YjcyNzBmNzYxYzA1MDFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdCfhNzUs88dyjCUcWYuKGKPySoXxtM6Hv2kNU+OGdAiSK EkhD+FIeiHoTW0HWVbKAEShGyLejDGEeVhxb+Hm15d0oN+g4VrscNYYmsNm/Q1bV 8TWdbnEAogKrFgoC0gjQD+4TUAXSuSTKXrL0xgF0PKUl+IMjabRVt4be58c7yQRu mdhCkWbfRyHp2X/aVmHVjtfvncO6o2A8AK3IxMGjKppFku71no116ln0NAWWDOZp P4QLlfzr0fVFGHPb+6y3JEXcr01XWUylYRvU6njPvYWl4u5gc6fcNEJ+HbpDP071 sZvpKVLHA/vNsWq7i1owTuxvGYP6oYRNVnABQLVvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvlC4KRdu5m40t0mOw0wQJl4O7JswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzNTU1NGJiLTZkNGYtNGNlNi05YzY3LTM4NjU2YjFkM2MxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8bSDANBgkqhkiG9w0BAQsFAAOCAQEAyrlAZFmLJU7Ff85ZIhzXfzN7 KAYnTGKK8GZXvORT9gOnMaJtEst8gqA0hnmzuSSbn+5MvQT8mZV1v/A/bzwNA5K3 AyXiud/fcb5X2KhJjZ0OWxKIbTzovTRI732WymkIY00VkctqcOvO//mWARZXZJIi cPDa4N1GA7CVZBwvSeEno/eRZ64EWAGBXwwrKA0zXWqKoaQy5TM0qniWH0ROv0LS B7oSf3i9uYnaAymMmUqh7qhb217mi9zpVzbOpbICuzL9LptB33zMdijy0BRTlYzO 5i3OPJu+gSRCFAFMjIuhHhQ6Pq9+bx6VNkObayQl5zK3hbO3Mm62NPaJgoYmkQ== -----END CERTIFICATE-----Generated at Wed Feb 5 09:40:32 2025 by rpki-client