$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa File: a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa (raw, json) Hash identifier: Px9JuIjWXJLjErv1ii4m9CwcNlM2DICEw2r2kPsekOQ= Subject key identifier: BB:C4:79:AA:18:2E:85:7F:D4:76:A1:76:7A:63:1A:C1:C6:C7:A5:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 542AB6709FAB2D26790F371EA471EC733FFC754B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa Signing time: Fri 17 Jan 2025 00:00:00 +0000 ROA not before: Fri 17 Jan 2025 00:00:00 +0000 ROA not after: Fri 21 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fef:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2a:b6:70:9f:ab:2d:26:79:0f:37:1e:a4:71:ec:73:3f:fc:75:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 17 00:00:00 2025 GMT Not After : Feb 21 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:a3:58:d5:f2:8b:6e:79:c6:95:ee:03:53: ff:e2:2c:1e:ee:9e:94:dd:1c:2c:a1:6a:41:83:61: 47:26:0c:61:ae:1d:25:7a:4f:2d:7d:a8:a2:1f:d1: a9:0b:e5:96:c5:0e:8c:e7:8c:fe:05:d3:99:b9:74: f0:7d:e8:f3:75:43:15:5e:50:cf:2d:8f:a0:2c:70: db:49:96:49:ee:28:04:11:57:31:7a:87:9e:1d:22: 46:5b:50:42:39:f1:c5:be:cd:a9:dd:62:b5:9c:d6: 13:10:36:36:41:8b:68:de:6d:05:c1:92:fe:54:45: 21:10:ee:42:df:90:6e:d1:0b:4e:d9:34:cc:a6:86: 01:15:fb:42:4a:16:e8:c5:6e:4b:f0:84:a8:b5:3e: 9b:7c:83:f6:eb:12:2d:97:9d:8f:a1:b1:bc:ef:dc: 08:b0:14:29:01:2f:c3:3e:ed:d0:6d:f2:f3:c4:d0: 68:4e:62:7e:6c:aa:4c:a6:36:a9:83:ef:81:6c:10: 1a:a2:5c:46:f6:53:45:bf:5c:c9:d2:f1:2c:3e:ac: ea:b2:1a:ae:01:3a:2c:33:ad:10:75:d9:10:f5:1c: 22:ea:c3:cc:33:51:98:d9:1d:f6:8c:3a:4a:88:45: 6b:e2:e6:ce:00:2e:dd:b8:9d:63:4a:1a:17:7a:90: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C4:79:AA:18:2E:85:7F:D4:76:A1:76:7A:63:1A:C1:C6:C7:A5:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:8000::/39 Signature Algorithm: sha256WithRSAEncryption 2f:bc:6c:41:c4:97:cb:f4:50:2b:39:1d:fc:86:fd:f9:9f:93: ab:1e:f9:cb:48:dc:45:c7:2c:fb:59:2d:b7:58:15:c0:11:01: 9a:23:c4:17:7b:39:9c:e5:76:4e:91:f7:26:27:94:74:45:39: 49:58:ae:36:5c:88:da:a2:92:1b:4f:d8:84:d8:50:f1:48:f8: 48:2f:9a:86:3b:98:38:05:89:2c:65:f7:5e:a1:b5:55:df:22: 38:e2:17:b1:a5:fb:26:3c:98:aa:45:b5:32:73:9c:3c:e0:9d: f5:0e:cc:28:cb:a8:66:84:85:83:e7:78:c6:5e:d8:23:bf:f6: 9b:d1:cb:c5:2c:55:8a:4e:53:a0:3d:fd:22:4e:99:a6:dc:d6: 77:25:d9:ba:c1:83:b9:cd:82:78:55:10:e2:bb:5c:87:51:0f: a5:43:6a:26:8f:0a:38:bd:05:76:f4:ca:be:df:84:66:1d:35: 53:bf:af:f0:33:af:75:ba:b3:be:91:06:8d:aa:d7:01:fc:a0: 97:a6:a3:ad:0c:fc:38:01:89:89:50:97:b8:fa:ef:11:35:c6: fd:75:f0:97:51:e4:96:8f:fb:8c:a3:b4:48:d2:56:ee:1e:8d: 47:62:a1:09:8a:50:26:3e:52:cc:99:bf:12:ec:8c:ad:a5:6c: 7e:94:46:2b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVCq2cJ+rLSZ5DzcepHHscz/8dUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE3MDAwMDAwWhcNMjUwMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTA1OWRiMzM0OGZjYWY1MmYwMjc0OTA2NTVlZjg3NzY4 NDZiYTkxYWZiYzY3ZGNhZjk2N2MzM2I2YjlkMTRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC55qNY1fKLbnnGle4DU//iLB7unpTdHCyhakGDYUcmDGGu HSV6Ty19qKIf0akL5ZbFDoznjP4F05m5dPB96PN1QxVeUM8tj6AscNtJlknuKAQR VzF6h54dIkZbUEI58cW+zandYrWc1hMQNjZBi2jebQXBkv5URSEQ7kLfkG7RC07Z NMymhgEV+0JKFujFbkvwhKi1Ppt8g/brEi2XnY+hsbzv3AiwFCkBL8M+7dBt8vPE 0GhOYn5sqkymNqmD74FsEBqiXEb2U0W/XMnS8Sw+rOqyGq4BOiwzrRB12RD1HCLq w8wzUZjZHfaMOkqIRWvi5s4ALt24nWNKGhd6kJmJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUu8R5qhguhX/UdqF2emMawcbHpdwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1MWNmNjI5LTNiNWMtNDQ0ZC1hNWEzLWM0OWJmZmNlYmUzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/vgDANBgkqhkiG9w0BAQsFAAOCAQEAL7xsQcSXy/RQKzkd/Ib9+Z+T qx75y0jcRccs+1ktt1gVwBEBmiPEF3s5nOV2TpH3JieUdEU5SViuNlyI2qKSG0/Y hNhQ8Uj4SC+ahjuYOAWJLGX3XqG1Vd8iOOIXsaX7JjyYqkW1MnOcPOCd9Q7MKMuo ZoSFg+d4xl7YI7/2m9HLxSxVik5ToD39Ik6ZptzWdyXZusGDuc2CeFUQ4rtch1EP pUNqJo8KOL0FdvTKvt+EZh01U7+v8DOvdbqzvpEGjarXAfygl6ajrQz8OAGJiVCX uPrvETXG/XXwl1Hklo/7jKO0SNJW7h6NR2KhCYpQJj5SzJm/EuyMraVsfpRGKw== -----END CERTIFICATE-----Generated at Wed Feb 5 09:59:39 2025 by rpki-client