$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae0d7583-9ad3-4fe7-8ebe-f0fac1225d00.roa File: ae0d7583-9ad3-4fe7-8ebe-f0fac1225d00.roa (raw, json) Hash identifier: 74TWvq1FiWqgY/SV41jXCYbWSBWRCK7r9DjnbViDNK8= Subject key identifier: E0:25:D8:7C:8A:71:19:61:73:BA:13:FF:2E:3B:26:45:B5:D9:3D:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4265A48F1D2B6BF1D50F1E5D8B759D78A922FA68 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae0d7583-9ad3-4fe7-8ebe-f0fac1225d00.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:65:a4:8f:1d:2b:6b:f1:d5:0f:1e:5d:8b:75:9d:78:a9:22:fa:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:ea:59:4b:72:d0:4d:a4:4a:36:78:bd:49: 06:85:7f:2c:5b:73:b1:b1:ae:eb:b8:6c:84:fc:fe: 62:c9:04:a7:33:79:da:1e:ce:20:fa:2c:13:07:e2: 2e:67:10:43:e6:6d:b9:38:12:b1:b4:52:d5:89:d2: 55:47:be:ee:a7:77:b1:19:75:64:8f:99:c3:05:2c: d8:36:fc:4a:1a:c4:ad:7b:56:39:95:12:2b:76:a7: 10:f3:cf:0a:32:18:b5:6f:ec:3c:d2:da:51:d1:a9: fd:e0:55:46:72:c0:09:66:42:28:f4:13:42:00:40: ca:ad:dc:64:79:43:6c:60:93:68:ff:72:2c:44:7d: 67:42:be:07:b6:f6:63:18:02:7a:08:1c:11:a2:a6: 22:d4:98:b1:a3:d2:28:2c:b3:f0:2f:f3:17:41:44: 05:ae:f9:96:9d:ed:d0:dd:d3:49:dd:74:45:4d:be: 61:15:a3:89:9a:e9:28:f4:85:13:1b:16:12:50:dc: 5f:68:fa:1b:98:ab:a4:7c:b2:6e:a3:6f:bf:ab:d0: 68:89:70:de:a6:c1:9c:7e:75:1d:93:8c:db:01:f0: 61:f9:ce:2b:87:51:26:47:ee:34:1f:3d:76:ed:e0: ea:71:64:74:aa:9c:d1:2e:de:06:7d:1f:2f:dd:05: c0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:25:D8:7C:8A:71:19:61:73:BA:13:FF:2E:3B:26:45:B5:D9:3D:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae0d7583-9ad3-4fe7-8ebe-f0fac1225d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:5080::/48 Signature Algorithm: sha256WithRSAEncryption 87:73:4f:18:67:75:d2:a6:d4:69:ff:72:63:6d:f1:3b:1e:99: f1:1c:c3:df:b5:f7:e5:bc:e2:c2:50:31:5d:c1:8f:b3:be:bd: 59:25:a8:5d:2d:6a:ac:0c:84:57:8f:a1:75:3d:37:dc:20:41: b7:42:09:44:79:12:d0:c1:21:bc:91:b4:88:01:bc:77:e9:9e: 5f:fc:72:c2:72:d7:32:60:b8:b3:0d:66:af:25:b2:6a:f7:ce: df:cd:61:90:8b:74:0a:70:63:81:27:ae:b3:cf:d6:e1:77:54: f6:5d:d8:d5:6a:34:cb:3f:f1:67:51:05:84:7e:68:b3:fa:11: 29:b2:84:15:23:f8:a1:78:f6:43:11:4d:e5:eb:3b:3d:11:3a: 1d:2a:11:47:ce:9e:d6:63:db:40:ef:c6:c7:80:68:9b:08:88: 54:7d:5b:b8:bb:e4:13:5f:7c:f0:e6:f5:11:ba:5f:8f:c8:75: 61:2a:ed:fa:b4:f3:ec:b3:a0:d5:0a:a1:aa:6f:56:b9:61:99: 78:a9:6e:52:4a:bf:3a:04:3a:5e:3a:46:e3:99:97:5e:43:6e: 0b:46:3d:3f:0d:f2:8a:c8:d8:cf:0d:48:39:9e:86:2f:fb:76: 7e:73:c9:89:44:0e:e7:ac:0c:75:15:cb:bf:33:9b:28:a7:c2: 6d:27:6c:bc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQmWkjx0ra/HVDx5di3WdeKki+mgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjAzMDAwMDAwWhcNMjUwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDlmNjJkZWM2Yzc4MDVhNTIzMzllMWM0ZGU3NDYyNzUx MDdmODQwOGU2NDA1MmMyNTJhNmU1ZTBhYzg0ZTY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1BOpZS3LQTaRKNni9SQaFfyxbc7Gxruu4bIT8/mLJBKcz edoeziD6LBMH4i5nEEPmbbk4ErG0UtWJ0lVHvu6nd7EZdWSPmcMFLNg2/EoaxK17 VjmVEit2pxDzzwoyGLVv7DzS2lHRqf3gVUZywAlmQij0E0IAQMqt3GR5Q2xgk2j/ cixEfWdCvge29mMYAnoIHBGipiLUmLGj0igss/Av8xdBRAWu+Zad7dDd00nddEVN vmEVo4ma6Sj0hRMbFhJQ3F9o+huYq6R8sm6jb7+r0GiJcN6mwZx+dR2TjNsB8GH5 ziuHUSZH7jQfPXbt4OpxZHSqnNEu3gZ9Hy/dBcDRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4CXYfIpxGWFzuhP/LjsmRbXZPXcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlMGQ3NTgzLTlhZDMtNGZlNy04ZWJlLWYwZmFjMTIyNWQwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84UIAwDQYJKoZIhvcNAQELBQADggEBAIdzTxhnddKm1Gn/cmNt8Tse mfEcw9+19+W84sJQMV3Bj7O+vVklqF0taqwMhFePoXU9N9wgQbdCCUR5EtDBIbyR tIgBvHfpnl/8csJy1zJguLMNZq8lsmr3zt/NYZCLdApwY4EnrrPP1uF3VPZd2NVq NMs/8WdRBYR+aLP6ESmyhBUj+KF49kMRTeXrOz0ROh0qEUfOntZj20DvxseAaJsI iFR9W7i75BNffPDm9RG6X4/IdWEq7fq08+yzoNUKoapvVrlhmXipblJKvzoEOl46 RuOZl15DbgtGPT8N8orI2M8NSDmehi/7dn5zyYlEDuesDHUVy78zmyinwm0nbLw= -----END CERTIFICATE-----Generated at Wed Feb 5 15:57:47 2025 by rpki-client