$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa File: 321028ee-2e2d-410c-8bdc-39a00f2044f0.roa (raw, json) Hash identifier: otlO9VY3Urky7fv0hk3+GcmhS4X7IM7ezfo9CR4+KR0= Subject key identifier: EE:89:A1:EF:7A:B9:AB:AA:5D:E2:7C:0A:E9:F6:DF:06:A3:6D:2B:AF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 15370EF1CD63D0EF97C5CE0F5E6FC9E0E0FA266E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:37:0e:f1:cd:63:d0:ef:97:c5:ce:0f:5e:6f:c9:e0:e0:fa:26:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:3b:aa:c8:92:01:9c:95:a9:1a:4f:66:74: 80:5b:1c:82:87:8a:ba:9f:53:c0:0b:38:9f:5c:0b: 55:f1:6a:69:11:15:8d:2c:3b:4e:ca:53:9a:36:52: e2:a1:86:1a:cf:b7:f5:71:d5:a0:c4:ff:87:74:92: 81:aa:21:b4:53:69:8a:8b:e6:be:1c:e8:c6:d3:e9: 10:2a:ad:d4:92:71:d7:1c:9c:0d:97:42:1a:82:19: ee:15:8c:a8:94:6a:08:87:34:49:e7:36:95:39:a1: bf:50:d3:f7:f2:34:a2:0a:67:4d:16:eb:37:a0:e6: 06:c8:c3:e0:2c:c5:67:3e:b7:8f:a0:b8:d1:53:56: 65:a4:c3:f2:25:98:9e:c9:aa:71:fb:3a:eb:67:2a: 33:db:29:f2:7f:9f:bd:0a:27:75:ef:89:60:6f:69: b6:99:ff:49:95:13:10:4a:d5:90:35:4f:87:80:58: e0:d7:66:22:64:7e:4c:50:7b:cd:cc:cc:80:8e:7a: fa:76:46:f6:79:fa:26:d1:c0:dc:a0:e5:e0:81:ee: eb:70:e4:d3:06:c4:a3:90:63:c2:49:d2:7e:56:96: 96:cc:1d:a8:b6:2a:7c:3d:52:ee:89:3d:e8:59:45: 1a:c5:cd:07:38:f1:91:53:40:34:85:9b:24:33:32: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:89:A1:EF:7A:B9:AB:AA:5D:E2:7C:0A:E9:F6:DF:06:A3:6D:2B:AF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:500::/48 Signature Algorithm: sha256WithRSAEncryption 5c:69:5c:37:5c:3f:7c:2f:8f:98:1a:b2:04:b9:1c:92:b3:35: 79:14:5b:5a:c6:54:02:46:d7:93:6f:16:91:a4:6a:f0:69:be: 5a:e5:70:be:fc:c8:a5:32:c6:1b:09:52:b1:3f:8f:3e:3f:1e: 65:3b:36:7b:74:74:86:a9:79:98:0f:81:e9:59:79:dd:be:a1: 56:87:3f:89:d1:7c:22:af:08:0d:3a:a9:40:90:32:09:2a:c9: d2:0e:12:d9:0e:73:e9:43:3d:7e:b5:23:84:b9:1d:44:e5:35: 1b:4c:f3:ac:6d:99:a2:22:91:0c:d7:d0:e5:ca:3c:ef:42:bb: 3e:f4:d4:0f:80:ab:96:10:0b:9d:bb:48:8f:7f:21:92:75:e3: b5:25:31:fd:4a:1b:8c:0c:1e:86:12:fa:f9:1e:97:70:e6:59: ef:c8:92:43:11:f0:53:5c:ed:97:3e:c4:69:13:0e:e0:53:1c: c1:7e:23:eb:fe:33:bc:a3:86:d2:ed:e8:77:65:6e:1f:c6:aa: 02:be:68:99:90:9d:f9:47:dd:35:5a:45:41:f8:9e:b6:a1:64: 62:d4:c0:aa:25:07:82:cc:50:82:6f:54:11:aa:94:67:ba:13: 8f:e5:ef:ef:02:e1:a7:0c:de:35:74:03:e0:43:fe:c5:09:39: 42:c0:5e:27 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFTcO8c1j0O+Xxc4PXm/J4OD6Jm4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTk3NWYwMzE3NzU2MjdmYmI1MWM5ZjBhZjhlOTUyNzY4 ZjQ0ODU5YzYxYjgxMzkxMDc0OTY0OWE5OWExZjdhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3pzuqyJIBnJWpGk9mdIBbHIKHirqfU8ALOJ9cC1XxamkR FY0sO07KU5o2UuKhhhrPt/Vx1aDE/4d0koGqIbRTaYqL5r4c6MbT6RAqrdSScdcc nA2XQhqCGe4VjKiUagiHNEnnNpU5ob9Q0/fyNKIKZ00W6zeg5gbIw+AsxWc+t4+g uNFTVmWkw/IlmJ7JqnH7OutnKjPbKfJ/n70KJ3XviWBvabaZ/0mVExBK1ZA1T4eA WODXZiJkfkxQe83MzICOevp2RvZ5+ibRwNyg5eCB7utw5NMGxKOQY8JJ0n5WlpbM Hai2Knw9Uu6JPehZRRrFzQc48ZFTQDSFmyQzMgkxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7omh73q5q6pd4nwK6fbfBqNtK68wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyMTAyOGVlLTJlMmQtNDEwYy04YmRjLTM5YTAwZjIwNDRmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBQAwDQYJKoZIhvcNAQELBQADggEBAFxpXDdcP3wvj5gasgS5HJKz NXkUW1rGVAJG15NvFpGkavBpvlrlcL78yKUyxhsJUrE/jz4/HmU7Nnt0dIapeZgP gelZed2+oVaHP4nRfCKvCA06qUCQMgkqydIOEtkOc+lDPX61I4S5HUTlNRtM86xt maIikQzX0OXKPO9Cuz701A+Aq5YQC527SI9/IZJ147UlMf1KG4wMHoYS+vkel3Dm We/IkkMR8FNc7Zc+xGkTDuBTHMF+I+v+M7yjhtLt6Hdlbh/GqgK+aJmQnflH3TVa RUH4nrahZGLUwKolB4LMUIJvVBGqlGe6E4/l7+8C4acM3jV0A+BD/sUJOULAXic= -----END CERTIFICATE-----Generated at Wed Feb 5 09:53:48 2025 by rpki-client