$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d80fd8f1-dc34-4760-b3f2-6fa9b9337efb.roa File: d80fd8f1-dc34-4760-b3f2-6fa9b9337efb.roa (raw, json) Hash identifier: wkONYzYRF1lYz3j3IWOiFhFx6I54l7LIYu8JRC1F8PM= Subject key identifier: 8E:4F:96:D5:6F:BE:FB:A0:B8:5D:DB:7B:1F:68:37:44:90:CB:45:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5777BC73AD5C72E6FD75D8A17F5FBCF01EDBD054 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d80fd8f1-dc34-4760-b3f2-6fa9b9337efb.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb9:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:77:bc:73:ad:5c:72:e6:fd:75:d8:a1:7f:5f:bc:f0:1e:db:d0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:cb:ed:2f:e8:2e:b1:ff:03:d9:b1:37:03: 9f:72:24:3a:8d:ee:5e:4b:63:1b:1c:95:6b:73:d5: aa:2b:8b:2f:ce:b8:04:b7:8a:91:35:28:83:04:bd: f4:84:bc:1c:18:d6:0c:55:13:a3:db:c7:c2:82:31: 58:53:12:fa:4c:bc:66:2e:73:2a:a6:4f:b7:ea:f4: 40:25:89:ed:59:e4:0e:d5:4f:c4:e1:17:87:69:c4: 73:5a:96:5e:20:7c:58:50:c6:f7:e3:8b:cf:d6:7f: 0b:24:a1:70:8c:3f:f8:be:b7:58:55:a0:84:f9:04: 5a:d6:f1:b0:18:c4:28:1b:0a:b0:26:84:11:1c:25: 42:da:59:2e:15:36:3a:03:30:cb:f1:8e:61:70:a6: 63:bf:bd:bf:65:8b:ff:2f:40:bb:8b:5a:b7:d9:b2: 2c:46:f1:3c:e5:be:7e:cd:26:89:7d:3b:2e:3a:cd: 27:b0:e1:d5:88:b5:16:d9:74:40:9c:5c:3f:82:85: ca:23:ee:aa:b0:ed:77:ff:f2:fb:7f:46:02:f0:4f: 27:d2:5e:fa:14:c9:ba:84:f4:c2:03:83:5f:51:8b: 7d:00:67:58:47:74:54:67:ee:03:34:11:4c:f2:18: 0f:31:19:03:9a:22:6a:30:e9:f9:ed:57:85:fd:97: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4F:96:D5:6F:BE:FB:A0:B8:5D:DB:7B:1F:68:37:44:90:CB:45:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d80fd8f1-dc34-4760-b3f2-6fa9b9337efb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:5000::/40 Signature Algorithm: sha256WithRSAEncryption 12:87:97:a4:9d:a1:ce:d1:d3:8a:50:3a:90:00:f8:b4:8f:10: bd:f3:50:36:9c:69:2d:80:b9:1c:b6:4c:ce:a1:4e:ba:ba:d4: 5c:d2:a1:82:4d:bf:6d:38:4f:2b:5f:41:76:51:a2:22:79:12: f6:11:45:9e:27:14:07:ea:df:0d:7f:2b:0a:07:c4:58:e5:cb: 49:9c:d7:00:e4:11:6d:56:5e:f9:d5:87:51:66:58:31:6f:33: f5:98:b5:f9:95:05:44:46:8b:2c:18:45:b7:3e:e9:b6:86:43: 02:eb:96:66:f1:72:cd:00:d4:90:39:60:12:d1:07:e7:1f:18: 69:2c:5a:47:13:92:6d:27:ca:e6:77:68:b0:b8:89:06:bd:8f: c1:fd:35:8e:e4:41:06:e6:62:88:13:ba:91:d3:a3:d8:0f:78: 73:69:d9:fe:19:1f:2b:f1:52:c7:2f:74:54:9e:14:51:11:c6: cd:bd:6b:16:86:cd:c3:79:29:82:37:30:31:3c:ad:20:00:69: a1:09:06:1d:a6:b9:f6:9e:48:bc:26:ca:e6:46:74:57:06:ef: 39:fc:cb:c1:07:2d:20:b4:c2:d8:91:64:e5:47:bc:68:9d:ff: 03:3d:d8:38:e2:63:cd:fb:bd:ae:47:49:4d:03:1a:f6:5d:62: 9f:d0:11:98 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUV3e8c61ccub9ddihf1+88B7b0FQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDg2ZmQ1MjI5OTA0ZGZiMGQ1Y2MwODVkMjhlYjEwMzNm ZjdlZmQ4YjFlOGUzYjdjYmZiOWFkMzA0MmY3NjQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1AsvtL+gusf8D2bE3A59yJDqN7l5LYxsclWtz1aoriy/O uAS3ipE1KIMEvfSEvBwY1gxVE6Pbx8KCMVhTEvpMvGYucyqmT7fq9EAlie1Z5A7V T8ThF4dpxHNall4gfFhQxvfji8/WfwskoXCMP/i+t1hVoIT5BFrW8bAYxCgbCrAm hBEcJULaWS4VNjoDMMvxjmFwpmO/vb9li/8vQLuLWrfZsixG8Tzlvn7NJol9Oy46 zSew4dWItRbZdECcXD+Chcoj7qqw7Xf/8vt/RgLwTyfSXvoUybqE9MIDg19Ri30A Z1hHdFRn7gM0EUzyGA8xGQOaImow6fntV4X9l0AHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjk+W1W+++6C4Xdt7H2g3RJDLRZYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4MGZkOGYxLWRjMzQtNDc2MC1iM2YyLTZmYTliOTMzN2VmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+5UDANBgkqhkiG9w0BAQsFAAOCAQEAEoeXpJ2hztHTilA6kAD4tI8Q vfNQNpxpLYC5HLZMzqFOurrUXNKhgk2/bThPK19BdlGiInkS9hFFnicUB+rfDX8r CgfEWOXLSZzXAOQRbVZe+dWHUWZYMW8z9Zi1+ZUFREaLLBhFtz7ptoZDAuuWZvFy zQDUkDlgEtEH5x8YaSxaRxOSbSfK5ndosLiJBr2Pwf01juRBBuZiiBO6kdOj2A94 c2nZ/hkfK/FSxy90VJ4UURHGzb1rFobNw3kpgjcwMTytIABpoQkGHaa59p5IvCbK 5kZ0VwbvOfzLwQctILTC2JFk5Ue8aJ3/Az3YOOJjzfu9rkdJTQMa9l1in9ARmA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:57 2025 by rpki-client