$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b91aa019-2c77-4b86-a6f4-fbada0c3ff10.roa File: b91aa019-2c77-4b86-a6f4-fbada0c3ff10.roa (raw, json) Hash identifier: aPxjai8RjqDq0H7nc1i4Kk9Bzp3KMqzP1X1EKwJkGk0= Subject key identifier: 83:53:0C:23:F8:44:96:1E:35:0E:D8:77:ED:0D:05:4A:7A:4A:96:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19E6F506F0B3B97BC26D6A99D69E8E190E15B71A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b91aa019-2c77-4b86-a6f4-fbada0c3ff10.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1c:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e6:f5:06:f0:b3:b9:7b:c2:6d:6a:99:d6:9e:8e:19:0e:15:b7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:11:33:c2:60:1d:6c:4c:f2:bc:82:0b:6b: c1:45:bd:2b:bf:c9:71:7a:22:e6:3c:9b:43:62:c3: 89:6f:92:88:13:60:e1:2e:7f:32:66:65:9b:d5:c5: 35:a2:c7:68:c5:b1:21:56:91:26:0c:ce:36:d6:79: 1d:6b:9b:93:ea:88:02:54:c8:a5:d9:90:9f:a3:e0: 1e:3d:f1:ea:88:0d:9d:69:b9:4e:d9:ec:e4:b1:e9: ad:b5:ba:99:00:50:51:9b:26:a6:4d:d2:5b:aa:ff: e0:b2:97:b9:c2:07:81:02:46:ef:08:07:bb:1a:95: 8d:c3:60:d7:15:02:c4:71:9a:74:6b:26:72:f1:6f: 5d:29:e6:4e:57:91:f7:0d:dd:49:27:2e:19:f2:80: 30:9f:68:e2:e6:27:d3:d5:ac:d5:be:06:e2:7b:a1: 30:a6:d5:78:4f:32:d8:ab:5f:47:39:0a:01:87:87: 45:50:ed:4d:b6:eb:f5:a3:5e:7d:5d:d4:53:c4:0b: 4a:ad:37:78:7e:e3:c1:52:30:0d:7c:55:ac:ad:f6: 14:9b:63:0f:14:bb:66:80:27:53:df:56:84:d5:7a: 4c:71:e2:b5:e2:73:a9:33:d1:5e:88:68:81:36:b5: c0:d7:d9:e6:cc:45:b2:61:b6:c8:4c:7e:b0:b8:c9: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:53:0C:23:F8:44:96:1E:35:0E:D8:77:ED:0D:05:4A:7A:4A:96:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b91aa019-2c77-4b86-a6f4-fbada0c3ff10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:8000::/36 Signature Algorithm: sha256WithRSAEncryption c7:18:d3:3a:ca:95:77:9c:17:b0:40:af:07:c3:ba:c5:1a:27: 1e:45:fe:87:ec:f9:d3:81:83:4a:92:d3:ef:5b:68:7d:b7:26: 92:0a:8d:f9:39:d5:8a:c1:15:b1:65:49:77:cb:5a:20:7e:df: 04:1e:59:f7:5b:f2:df:b6:fc:b7:da:7c:66:1c:6c:f7:e3:47: a5:3a:b4:92:e5:44:ef:c9:82:9c:7b:54:54:29:36:4f:af:84: b0:62:5c:7a:48:b9:36:58:d9:ec:16:d4:b2:e0:12:d7:50:1b: 6f:63:50:0a:18:1c:0b:d1:32:2b:06:e0:11:73:bd:28:29:79: 0b:8b:33:89:76:a1:89:98:b1:0d:eb:78:60:ca:a1:8d:e4:20: 43:37:73:b3:01:3c:4f:fd:d0:5a:c0:32:e5:84:95:00:64:c0: ab:29:7c:a7:6b:1d:87:6c:89:c7:5a:f9:2d:6d:5f:54:ba:5c: 3a:81:e3:8d:2d:46:92:32:51:a5:64:08:69:68:f9:ad:1a:f8: 1e:4a:55:1e:0a:15:83:c0:aa:09:14:23:25:14:a7:ca:23:e8: b3:07:90:2e:a6:43:ce:5b:17:2b:d8:ca:be:76:24:6d:4c:cc: 4c:1a:f8:b0:29:2e:21:71:ab:88:68:d6:eb:4b:45:76:db:ad: 83:a6:f8:89 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGeb1BvCzuXvCbWqZ1p6OGQ4VtxowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjQxMGEwMWQxMzFhNzkyODVhOWVmMjY4MDU4OTQ1NTdi MjU0OGM2MmIwYjE1ODJlZTMzYjI3ZTY0YTdkYWE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM3BEzwmAdbEzyvIILa8FFvSu/yXF6IuY8m0Niw4lvkogT YOEufzJmZZvVxTWix2jFsSFWkSYMzjbWeR1rm5PqiAJUyKXZkJ+j4B498eqIDZ1p uU7Z7OSx6a21upkAUFGbJqZN0luq/+Cyl7nCB4ECRu8IB7salY3DYNcVAsRxmnRr JnLxb10p5k5XkfcN3UknLhnygDCfaOLmJ9PVrNW+BuJ7oTCm1XhPMtirX0c5CgGH h0VQ7U226/WjXn1d1FPEC0qtN3h+48FSMA18Vayt9hSbYw8Uu2aAJ1PfVoTVekxx 4rXic6kz0V6IaIE2tcDX2ebMRbJhtshMfrC4ydthAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUg1MMI/hElh41Dth37Q0FSnpKlnIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5MWFhMDE5LTJjNzctNGI4Ni1hNmY0LWZiYWRhMGMzZmYxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8cgDANBgkqhkiG9w0BAQsFAAOCAQEAxxjTOsqVd5wXsECvB8O6xRon HkX+h+z504GDSpLT71tofbcmkgqN+TnVisEVsWVJd8taIH7fBB5Z91vy37b8t9p8 Zhxs9+NHpTq0kuVE78mCnHtUVCk2T6+EsGJceki5NljZ7BbUsuAS11Abb2NQChgc C9EyKwbgEXO9KCl5C4sziXahiZixDet4YMqhjeQgQzdzswE8T/3QWsAy5YSVAGTA qyl8p2sdh2yJx1r5LW1fVLpcOoHjjS1GkjJRpWQIaWj5rRr4HkpVHgoVg8CqCRQj JRSnyiPosweQLqZDzlsXK9jKvnYkbUzMTBr4sCkuIXGriGjW60tFdtutg6b4iQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:16 2025 by rpki-client