$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa File: 644f882a-d42c-4c76-bb70-882838f6e3e0.roa (raw, json) Hash identifier: gP9+Nd7R/jCOH8PUySIjFnMTsUO7tioEi8c2lTwvCxk= Subject key identifier: 95:21:44:D1:15:C2:D8:4D:1C:54:0D:3D:3E:FC:07:95:FD:0C:AD:A9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4143F0A089C48ABFA091DDD15DBC62496EE95203 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:43:f0:a0:89:c4:8a:bf:a0:91:dd:d1:5d:bc:62:49:6e:e9:52:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:45:48:eb:76:b4:2f:23:59:4b:46:25:d3: 7b:9c:72:21:b3:f8:5e:62:fc:cb:12:0b:75:91:26: b4:23:43:22:da:59:c5:0f:9f:2e:73:d9:26:df:f2: 74:d7:59:dd:58:df:93:ff:ff:b7:a3:bd:c3:1d:8e: 10:3f:da:3d:07:88:12:9e:90:95:11:df:4f:01:96: 5d:84:9f:f5:c1:99:9c:3d:0c:f2:5e:28:cc:db:03: fd:c6:fe:f5:51:a6:68:97:df:cf:55:14:b4:85:22: b8:04:3e:a0:ae:ac:c4:28:3a:b5:75:60:29:95:91: 45:38:73:0d:57:66:32:05:8d:b7:75:cb:d6:37:39: 14:f0:52:8f:87:df:cd:55:a4:da:ba:4c:bb:00:e6: d4:a6:ed:1d:db:ed:41:4e:fa:ad:54:ae:79:72:d1: b8:a2:7e:28:55:f6:ae:d7:fc:32:e9:ca:c3:ee:15: 09:6d:d8:6e:2d:0a:89:32:ff:17:39:3c:f1:1d:45: b1:48:03:f9:82:a4:fb:75:d7:2f:4e:39:89:09:10: 98:2b:5f:56:4e:08:3b:b3:4d:61:cc:fa:c3:af:d0: d6:b0:e5:da:98:61:23:0a:93:dc:c1:92:1d:e7:d1: 7c:37:88:fb:d2:b7:65:38:00:40:72:bd:ed:d9:dd: 69:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:21:44:D1:15:C2:D8:4D:1C:54:0D:3D:3E:FC:07:95:FD:0C:AD:A9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e600::/40 Signature Algorithm: sha256WithRSAEncryption 27:f9:ac:74:25:8b:ec:e7:cd:6a:c0:20:44:c2:c1:20:dd:cc: 16:c2:14:6c:37:ba:ba:38:a5:f7:25:69:54:63:ba:be:00:0b: 0a:a4:dd:bf:8b:7c:1b:0b:7b:04:2b:b9:64:bd:b7:51:fb:2c: 9f:20:cc:dd:d8:e1:99:e9:d3:a8:33:97:d7:bf:9c:50:95:49: 49:e9:72:79:53:dd:b3:b0:25:2b:69:e0:2e:63:50:a6:4e:48: ef:64:ac:fa:52:12:c2:d4:93:13:92:cc:a2:f9:37:12:e5:67: 56:88:36:94:58:62:50:e0:cd:a9:b1:ee:9c:36:10:1b:ab:43: e3:81:24:f3:40:a7:90:88:d5:ba:be:34:49:7d:0d:33:e4:0c: eb:ba:ee:f6:0e:88:93:85:6f:1b:74:44:58:a0:76:d6:7a:31: f3:89:47:d2:13:55:c8:73:12:3b:19:14:fc:87:ca:ab:a8:72: 4d:37:ec:44:45:f1:ba:08:12:4b:22:02:89:d2:c8:e2:ca:1b: c3:85:de:be:eb:df:fe:af:75:60:5b:2a:62:fd:e5:53:37:7c: f8:19:f2:b9:cb:6c:a3:81:b0:8b:98:a4:de:86:f0:9e:b8:c8: 0b:48:a4:59:d4:68:a7:47:51:3b:ae:45:a2:4b:71:6a:87:26: 23:e9:53:a6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQUPwoInEir+gkd3RXbxiSW7pUgMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjlhMjlhMzkwOTYwNTNkN2FhNjcwY2YwOGY5MjBkZGE5 MzY0Y2E1OWEwZTcyMmJjNmQ1YjdhZTYzMjNmOTQ1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5EUVI63a0LyNZS0Yl03ucciGz+F5i/MsSC3WRJrQjQyLa WcUPny5z2Sbf8nTXWd1Y35P//7ejvcMdjhA/2j0HiBKekJUR308Bll2En/XBmZw9 DPJeKMzbA/3G/vVRpmiX389VFLSFIrgEPqCurMQoOrV1YCmVkUU4cw1XZjIFjbd1 y9Y3ORTwUo+H381VpNq6TLsA5tSm7R3b7UFO+q1Urnly0biifihV9q7X/DLpysPu FQlt2G4tCoky/xc5PPEdRbFIA/mCpPt11y9OOYkJEJgrX1ZOCDuzTWHM+sOv0Naw 5dqYYSMKk9zBkh3n0Xw3iPvSt2U4AEByve3Z3WmXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlSFE0RXC2E0cVA09PvwHlf0MrakwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0NGY4ODJhLWQ0MmMtNGM3Ni1iYjcwLTg4MjgzOGY2ZTNlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD75jANBgkqhkiG9w0BAQsFAAOCAQEAJ/msdCWL7OfNasAgRMLBIN3M FsIUbDe6ujil9yVpVGO6vgALCqTdv4t8Gwt7BCu5ZL23UfssnyDM3djhmenTqDOX 17+cUJVJSelyeVPds7AlK2ngLmNQpk5I72Ss+lISwtSTE5LMovk3EuVnVog2lFhi UODNqbHunDYQG6tD44Ek80CnkIjVur40SX0NM+QM67ru9g6Ik4VvG3REWKB21nox 84lH0hNVyHMSOxkU/IfKq6hyTTfsREXxuggSSyICidLI4sobw4Xevuvf/q91YFsq Yv3lUzd8+Bnyuctso4Gwi5ik3obwnrjIC0ikWdRop0dRO65FoktxaocmI+lTpg== -----END CERTIFICATE-----Generated at Wed Feb 5 09:49:46 2025 by rpki-client