$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1922148-0081-4f06-b9be-a02446d66975.roa File: d1922148-0081-4f06-b9be-a02446d66975.roa (raw, json) Hash identifier: qHsFlhpbjBmnn7SN9Q8fv5vhJ9c8lg/BkgeMphFuYH0= Subject key identifier: AF:99:13:9C:1D:94:1C:04:44:3C:69:2D:CE:A0:5A:FB:DA:7B:0A:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 627421530CDF3A9D51F2C79CF0DC80A7B29306 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1922148-0081-4f06-b9be-a02446d66975.roa Signing time: Tue 21 Jan 2025 00:00:00 +0000 ROA not before: Tue 21 Jan 2025 00:00:00 +0000 ROA not after: Tue 25 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2c:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:74:21:53:0c:df:3a:9d:51:f2:c7:9c:f0:dc:80:a7:b2:93:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 00:00:00 2025 GMT Not After : Feb 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:c6:83:fe:02:fe:e4:4b:b3:31:98:a8:fc: 7b:cd:a3:5b:30:df:64:b0:d1:4f:6a:d7:72:73:32: b0:5a:13:cf:15:85:08:f5:16:44:35:d5:19:88:a4: 50:ab:fd:cd:a2:29:bd:62:83:50:a5:d4:ff:13:a1: db:04:1a:f7:38:33:be:52:8e:96:99:ba:f2:c5:ff: 5b:67:a1:ac:37:84:c9:c3:bb:74:cf:0b:00:72:42: 3b:e2:23:6c:53:bf:a9:a4:d0:b5:4e:12:c4:c6:c7: 1d:fa:7e:9e:42:a7:0f:52:a2:a3:9c:7d:90:f9:d9: d2:2f:58:4f:47:a3:58:07:2b:f4:f8:6a:55:8e:57: cd:b4:db:d9:a7:da:ee:ae:dd:ff:96:2c:d3:50:dc: 2a:99:f9:f5:85:66:81:94:1f:2d:bc:6b:3f:8f:8a: a8:03:96:a1:12:94:f4:77:2e:bc:c7:99:d8:7f:fa: 59:b7:1e:4c:38:e7:6d:06:f4:4d:02:ce:de:2b:74: 31:86:ff:b2:a9:ee:6e:e2:9c:93:34:97:88:9d:ce: a2:01:10:aa:03:ce:2a:c4:53:3e:8c:17:b7:ae:96: 6c:93:d2:0a:a8:5c:94:fb:35:83:02:cb:af:81:3b: a7:51:67:d3:e0:91:52:44:ac:62:a8:3b:78:a9:64: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:99:13:9C:1D:94:1C:04:44:3C:69:2D:CE:A0:5A:FB:DA:7B:0A:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1922148-0081-4f06-b9be-a02446d66975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2c:4000::/36 Signature Algorithm: sha256WithRSAEncryption 30:d2:56:85:34:ea:02:3a:e2:68:d2:3c:46:23:41:b1:a5:14: 95:e4:af:de:40:73:6c:bc:f1:3a:b7:9f:88:c4:15:6a:18:ab: b0:d2:31:a9:c1:f9:81:06:e1:08:22:6a:20:d4:0d:3f:86:61: 05:93:c3:be:b2:82:07:9b:01:94:07:a5:31:24:fa:0f:e3:9e: 48:2f:43:8e:88:61:ff:b3:a1:83:78:2e:b3:2b:be:76:23:ff: a9:ff:5f:e9:a5:61:c2:48:06:a5:98:09:7a:4e:8d:26:37:e9: 07:28:5f:4b:69:44:0a:c8:28:5b:e9:f8:80:8e:03:79:31:33: 98:d5:a2:06:09:d4:5f:0f:16:c4:08:66:e6:ec:1d:ab:a6:78: ed:93:df:ce:d5:0c:ae:4f:6b:88:ea:45:b1:45:5d:d0:f5:68: f5:3a:cd:06:4c:6d:4b:31:3a:1c:6f:09:6d:2e:48:be:23:7e: 35:6c:e8:f8:4b:b0:d6:e4:e3:af:ff:b2:f4:fe:cf:aa:1c:25: 9b:ea:bf:1e:92:69:12:fa:f3:f4:68:b3:d9:4f:a6:bd:3c:3f: a8:e9:bd:c3:dd:d2:4a:5b:22:df:d5:be:29:dd:ca:22:93:5f: cf:7f:62:27:2d:8e:11:da:c8:76:7d:11:b2:a0:62:29:ba:c6: d5:4d:3e:f0 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITYnQhUwzfOp1R8sec8NyAp7KTBjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTAxMjEwMDAwMDBaFw0yNTAyMjUyMzU5NTla MHoxSTBHBgNVBAUTQGEyNjE4NzE1M2E0MGYyZWJhMjhiMjVlYTliYWZhOTgxYmM0 YmNlMDQ4NDBjZmVhODI0ZTVmYzBkMmZhNjg3NzExLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALj4xoP+Av7kS7MxmKj8e82jWzDfZLDRT2rXcnMysFoTzxWF CPUWRDXVGYikUKv9zaIpvWKDUKXU/xOh2wQa9zgzvlKOlpm68sX/W2ehrDeEycO7 dM8LAHJCO+IjbFO/qaTQtU4SxMbHHfp+nkKnD1Kio5x9kPnZ0i9YT0ejWAcr9Phq VY5XzbTb2afa7q7d/5Ys01DcKpn59YVmgZQfLbxrP4+KqAOWoRKU9HcuvMeZ2H/6 WbceTDjnbQb0TQLO3it0MYb/sqnubuKckzSXiJ3OogEQqgPOKsRTPowXt66WbJPS CqhclPs1gwLLr4E7p1Fn0+CRUkSsYqg7eKlksKsCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBSvmROcHZQcBEQ8aS3OoFr72nsKKTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZDE5MjIxNDgtMDA4MS00ZjA2LWI5YmUtYTAyNDQ2ZDY2OTc1LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCYAHyxAMA0GCSqGSIb3DQEBCwUAA4IBAQAw0laFNOoCOuJo0jxGI0GxpRSV 5K/eQHNsvPE6t5+IxBVqGKuw0jGpwfmBBuEIImog1A0/hmEFk8O+soIHmwGUB6Ux JPoP455IL0OOiGH/s6GDeC6zK752I/+p/1/ppWHCSAalmAl6To0mN+kHKF9LaUQK yChb6fiAjgN5MTOY1aIGCdRfDxbECGbm7B2rpnjtk9/O1QyuT2uI6kWxRV3Q9Wj1 Os0GTG1LMTocbwltLki+I341bOj4S7DW5OOv/7L0/s+qHCWb6r8ekmkS+vP0aLPZ T6a9PD+o6b3D3dJKWyLf1b4p3coik1/Pf2InLY4R2sh2fRGyoGIpusbVTT7w -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:29 2025 by rpki-client