$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa File: ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa (raw, json) Hash identifier: 1p2HOhN6SwqUL38EuVn4ZKzZYZ+Q6qq5aT+5Kg2yRvQ= Subject key identifier: 85:65:92:A1:13:CF:85:D7:54:90:12:D9:4A:AE:33:F6:F7:AB:DB:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 338988EAEEA47DB9D05CE0DC24AE80AF69C6238A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa Signing time: Tue 04 Feb 2025 00:00:00 +0000 ROA not before: Tue 04 Feb 2025 00:00:00 +0000 ROA not after: Tue 11 Mar 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff2:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:89:88:ea:ee:a4:7d:b9:d0:5c:e0:dc:24:ae:80:af:69:c6:23:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 4 00:00:00 2025 GMT Not After : Mar 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:53:2e:79:a5:58:68:e0:34:23:89:73:7e:44: a3:62:54:93:2b:91:9c:f3:39:06:ab:39:8a:cb:7d: db:22:bb:3d:46:df:cb:bd:42:b5:87:0e:d6:ec:ee: dc:d1:32:cf:7f:d9:3f:12:22:f6:4f:23:da:d9:a4: 2c:74:0a:8a:f3:21:8d:0b:57:68:91:24:b9:84:1f: 4a:ac:e3:7b:99:0b:ba:76:0b:8f:8b:cf:29:d4:5b: 59:05:a3:92:7d:04:16:48:68:38:61:64:4c:66:42: 02:ff:c9:cb:bf:d0:4a:e9:5d:14:61:83:89:61:01: 49:24:32:f0:a9:a2:bc:47:b4:4d:df:b9:f8:a9:ab: 05:51:59:a2:4a:43:fe:e3:95:3b:28:d8:88:26:57: 03:da:8a:49:35:51:28:10:4b:f3:4c:12:e4:00:d6: a9:e4:dd:70:4f:52:00:af:0a:a1:49:10:96:95:36: 75:c7:1e:ba:3e:a4:49:4c:62:8b:23:67:bc:10:cf: 82:89:99:0d:92:3e:a6:57:be:12:ea:80:7d:29:70: 69:00:de:f6:96:a7:66:45:19:a7:94:82:bc:49:99: 39:ea:ec:2e:c7:3f:d8:41:48:3d:39:e0:eb:4c:97: c2:c8:2e:97:9b:44:7d:06:df:7e:86:7a:72:c6:67: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:65:92:A1:13:CF:85:D7:54:90:12:D9:4A:AE:33:F6:F7:AB:DB:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec768f57-5cc4-44b7-b7f3-8da4ac4ef3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:5000::/40 Signature Algorithm: sha256WithRSAEncryption bf:33:3a:16:11:1b:1e:04:93:39:91:2d:86:b8:b9:54:b9:07: 5e:e3:a7:48:82:88:a7:ff:28:ef:b4:39:bc:25:bc:04:df:f4: c6:5f:12:b3:9d:f4:af:37:19:ac:88:b5:fd:39:75:69:80:f2: c2:e5:a1:1d:1c:7a:c5:90:8a:50:2e:ae:54:57:03:b1:5e:31: 2d:ad:3a:dd:b8:7e:6b:ae:68:70:c6:be:95:8d:ea:34:bb:da: 55:39:ee:00:02:6d:60:88:24:f8:2b:31:de:54:c8:c6:2d:4f: a4:0f:6b:63:10:0b:1b:49:4b:ac:76:21:dd:3f:db:a9:e9:fc: c6:70:96:06:8f:47:76:c5:04:80:2c:cf:3e:37:2f:e3:4e:73: 61:2e:2b:3a:d7:5d:4d:6f:0f:bc:b5:3e:eb:10:09:a5:d3:e0: 20:e1:6e:21:c0:66:4f:31:4e:e8:2d:df:20:01:f4:9c:45:3e: 23:be:f4:87:ae:5f:ec:97:47:29:80:f9:16:93:da:e0:2b:fe: bc:d2:10:e8:db:c8:0f:07:0b:78:44:5f:33:0e:f1:de:02:e0: 7d:b0:12:a8:a4:cb:cd:8c:21:2a:f0:9f:e4:de:d0:92:5f:b5: 3b:41:87:c7:e5:67:09:f0:ad:10:35:a9:7c:94:3d:4f:aa:3c: c3:0e:23:99 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUM4mI6u6kfbnQXODcJK6Ar2nGI4owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMjA0MDAwMDAwWhcNMjUwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjU1OTBhZTAzNzQxZjg3MmQ5NWNkNWUxY2RlMzhiOWJk Zjc0NTU5NDNjOTE5NjY0YzNkMDhjOGYzYmMzYmI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwUy55pVho4DQjiXN+RKNiVJMrkZzzOQarOYrLfdsiuz1G 38u9QrWHDtbs7tzRMs9/2T8SIvZPI9rZpCx0CorzIY0LV2iRJLmEH0qs43uZC7p2 C4+LzynUW1kFo5J9BBZIaDhhZExmQgL/ycu/0ErpXRRhg4lhAUkkMvCporxHtE3f ufipqwVRWaJKQ/7jlTso2IgmVwPaikk1USgQS/NMEuQA1qnk3XBPUgCvCqFJEJaV NnXHHro+pElMYosjZ7wQz4KJmQ2SPqZXvhLqgH0pcGkA3vaWp2ZFGaeUgrxJmTnq 7C7HP9hBSD054OtMl8LILpebRH0G336GenLGZ9iHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhWWSoRPPhddUkBLZSq4z9ver29UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VjNzY4ZjU3LTVjYzQtNDRiNy1iN2YzLThkYTRhYzRlZjNjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/yUDANBgkqhkiG9w0BAQsFAAOCAQEAvzM6FhEbHgSTOZEthri5VLkH XuOnSIKIp/8o77Q5vCW8BN/0xl8Ss530rzcZrIi1/Tl1aYDywuWhHRx6xZCKUC6u VFcDsV4xLa063bh+a65ocMa+lY3qNLvaVTnuAAJtYIgk+Csx3lTIxi1PpA9rYxAL G0lLrHYh3T/bqen8xnCWBo9HdsUEgCzPPjcv405zYS4rOtddTW8PvLU+6xAJpdPg IOFuIcBmTzFO6C3fIAH0nEU+I770h65f7JdHKYD5FpPa4Cv+vNIQ6NvIDwcLeERf Mw7x3gLgfbASqKTLzYwhKvCf5N7Qkl+1O0GHx+VnCfCtEDWpfJQ9T6o8ww4jmQ== -----END CERTIFICATE-----Generated at Wed Feb 5 16:04:30 2025 by rpki-client