$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa File: 13d95532-571e-4655-86b3-383b815023ba.roa (raw, json) Hash identifier: v2buYfZ/wgzRitauvsOP9Tpo8kGVBg4DgiZ9pIgko7o= Subject key identifier: 03:86:52:2F:65:F3:C4:F7:29:19:94:A3:A7:1D:DA:8B:9F:E8:96:AA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 063F2F272A1943134C88FFB6E85F50C67369C2AF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3f:2f:27:2a:19:43:13:4c:88:ff:b6:e8:5f:50:c6:73:69:c2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:95:8c:a6:02:ff:66:9d:6a:5c:89:da:c3: a4:96:f5:e5:cd:3e:55:fc:60:33:ae:35:c3:e8:d3: 0f:67:7d:60:e8:09:db:cd:e1:40:f2:9d:83:1a:55: 57:16:4c:f2:a6:95:8e:a7:19:ea:fa:83:07:d1:07: ba:80:28:4a:85:9d:0e:b0:71:93:cc:0b:f0:62:cb: 34:c0:9c:78:e1:f9:64:cf:69:7f:4f:88:ff:a1:a9: a4:45:2e:f6:8a:dc:4b:d3:cb:35:28:d0:1e:73:c5: 30:c5:ef:3c:67:19:a0:a3:a7:a0:de:4d:67:c7:6f: ed:ab:35:9e:fa:7f:21:70:ef:c0:7c:45:30:d2:a7: 03:70:05:f6:88:87:55:bc:9f:b2:67:1f:fe:b4:33: c1:55:3a:48:b7:08:d6:76:2c:8d:a9:d2:c4:f7:d6: 5e:25:07:a9:20:08:93:6f:fc:85:f0:0b:b9:fa:28: f8:81:91:b9:b6:46:a6:0a:98:06:ee:e1:15:f1:76: 02:e2:18:6d:4a:89:ca:6a:8a:76:6e:25:53:da:fc: 69:4a:83:de:fb:5b:c3:42:f9:8d:f7:b9:31:21:7b: 6a:85:3a:82:50:39:e5:64:bd:78:ca:eb:14:53:43: 7a:46:f5:6f:cd:fa:82:41:5b:d7:40:c9:a9:5b:a3: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:86:52:2F:65:F3:C4:F7:29:19:94:A3:A7:1D:DA:8B:9F:E8:96:AA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e900::/40 Signature Algorithm: sha256WithRSAEncryption 75:ea:0f:41:98:f6:18:36:36:07:8b:8d:aa:bf:c4:78:a3:79: 7f:82:6a:ac:3e:47:25:48:30:09:96:5c:f1:38:25:87:54:dc: 2f:ed:0c:f5:7b:fd:1e:01:75:88:09:16:84:3c:50:70:f7:4f: 95:32:06:f0:95:b6:56:ef:5d:e3:cc:65:f1:e3:cd:67:39:b6: 43:12:8a:dc:a8:b7:ad:42:80:a5:8e:de:75:19:d2:63:43:cb: 00:50:3f:ed:0f:d0:92:ff:b4:95:4c:09:7a:a2:fc:55:10:6c: 42:53:36:7f:a0:fc:49:43:99:bb:12:a9:ce:1c:7a:5a:d7:e2: f8:e5:ca:c0:25:c9:54:ac:ab:f7:1c:aa:72:3f:72:d8:0b:e8: 08:88:d7:9e:4a:af:71:e6:80:33:db:1f:de:bb:17:ea:f4:16: e0:13:e5:ce:ce:58:d6:fd:f9:00:7f:e3:2c:78:9e:1e:b0:7e: 2f:46:17:5b:81:31:e4:52:e4:1f:24:39:33:1c:fe:5e:69:62: 76:67:04:fc:83:fa:e8:87:c2:bb:41:d9:fa:7a:97:ba:86:71: f9:a3:af:01:58:6e:6d:22:c4:69:f9:50:77:88:3b:14:e3:fd: b8:3c:d0:7d:ac:97:6e:82:fb:16:7d:30:8b:7a:22:42:31:c8: 0f:a3:ea:b7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBj8vJyoZQxNMiP+26F9QxnNpwq8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzdlZmU2OGU2MTVmYmQzZDM1M2EyMDQ1NGU2ZGE0MGFl NDRmZWMxM2E1YzI3ZjYyOTUzMDE4OTZmOGM5YzRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVdZWMpgL/Zp1qXInaw6SW9eXNPlX8YDOuNcPo0w9nfWDo CdvN4UDynYMaVVcWTPKmlY6nGer6gwfRB7qAKEqFnQ6wcZPMC/BiyzTAnHjh+WTP aX9PiP+hqaRFLvaK3EvTyzUo0B5zxTDF7zxnGaCjp6DeTWfHb+2rNZ76fyFw78B8 RTDSpwNwBfaIh1W8n7JnH/60M8FVOki3CNZ2LI2p0sT31l4lB6kgCJNv/IXwC7n6 KPiBkbm2RqYKmAbu4RXxdgLiGG1KicpqinZuJVPa/GlKg977W8NC+Y33uTEhe2qF OoJQOeVkvXjK6xRTQ3pG9W/N+oJBW9dAyalbo2+BAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUA4ZSL2XzxPcpGZSjpx3ai5/olqowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzEzZDk1NTMyLTU3MWUtNDY1NS04NmIzLTM4M2I4MTUwMjNiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76TANBgkqhkiG9w0BAQsFAAOCAQEAdeoPQZj2GDY2B4uNqr/EeKN5 f4JqrD5HJUgwCZZc8Tglh1TcL+0M9Xv9HgF1iAkWhDxQcPdPlTIG8JW2Vu9d48xl 8ePNZzm2QxKK3Ki3rUKApY7edRnSY0PLAFA/7Q/Qkv+0lUwJeqL8VRBsQlM2f6D8 SUOZuxKpzhx6Wtfi+OXKwCXJVKyr9xyqcj9y2AvoCIjXnkqvceaAM9sf3rsX6vQW 4BPlzs5Y1v35AH/jLHieHrB+L0YXW4Ex5FLkHyQ5Mxz+XmlidmcE/IP66IfCu0HZ +nqXuoZx+aOvAVhubSLEaflQd4g7FOP9uDzQfayXboL7Fn0wi3oiQjHID6Pqtw== -----END CERTIFICATE-----Generated at Wed Feb 5 09:51:40 2025 by rpki-client