$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87fc20f7-0de9-48d8-850e-c430d88860e9.roa File: 87fc20f7-0de9-48d8-850e-c430d88860e9.roa (raw, json) Hash identifier: ocBi7BUw0KLNOcEl/JaRb2/s3/Wf7ZV9pjo2QD5wr5E= Subject key identifier: 88:82:F2:EF:E5:FF:79:55:24:1D:85:D0:53:C9:11:96:25:34:04:3D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 418445FF3048373EBDD827F3F630C5F2FD40D3B8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87fc20f7-0de9-48d8-850e-c430d88860e9.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:84:45:ff:30:48:37:3e:bd:d8:27:f3:f6:30:c5:f2:fd:40:d3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: serialNumber=74580d22da79baf0406c7706cf92d214459f0ccbd1ef6472e7a3fa501f079090, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:86:ef:cf:22:25:07:c2:aa:2a:19:9c:b3: 3f:37:4b:8d:f0:22:30:e6:5e:0e:75:23:51:78:73: 0c:1d:60:25:cb:88:ed:67:0f:3f:3d:6f:4f:48:74: 2c:a8:af:b4:8b:63:11:9b:79:11:22:4b:ab:6c:b9: bc:f0:97:3d:95:e8:39:e0:7f:24:4d:8d:6c:d5:d6: 18:44:93:bd:e0:0e:20:84:33:1f:9d:6c:e8:97:d3: 11:da:32:9d:88:b1:62:79:87:ba:7b:b9:7d:c5:b3: 2a:a6:14:b5:90:fa:a3:0d:cb:4d:90:43:ea:42:a9: 87:ac:16:b6:2f:fa:26:40:4e:6e:64:13:96:4d:92: 82:15:ce:bc:45:fc:50:90:1c:3d:81:22:a1:bb:30: 24:47:f5:07:09:6a:29:b9:23:fd:da:43:9a:92:a7: 84:5d:d2:d0:9e:88:81:53:eb:2c:fb:06:6a:88:69: 06:4f:2f:ab:71:f3:62:55:8b:89:39:2a:63:81:74: d5:38:6f:87:67:3a:fd:be:51:e7:46:1f:33:85:99: 75:79:a8:64:8a:ad:bd:4b:e6:c3:59:15:02:2d:00: ea:40:8f:53:67:74:95:92:af:6d:8f:8d:85:0b:d2: 13:bb:3e:87:f1:98:6b:4d:a0:62:31:e0:b2:62:e7: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:82:F2:EF:E5:FF:79:55:24:1D:85:D0:53:C9:11:96:25:34:04:3D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87fc20f7-0de9-48d8-850e-c430d88860e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:3::/48 Signature Algorithm: sha256WithRSAEncryption 46:7b:67:09:02:a4:83:83:08:71:0c:94:32:df:fa:f2:fd:4d: aa:74:87:63:91:1a:42:22:3f:51:2e:ad:f0:18:5d:8e:d1:fe: 3e:7d:2d:0d:d9:e8:09:e4:dd:50:1a:d6:6c:4d:f7:d6:60:70: 54:77:09:ef:01:62:e8:1b:9f:25:8d:57:c8:ea:2c:80:1d:ce: 58:ac:9c:6c:82:1f:73:ab:d2:3f:3e:25:cd:b8:76:e5:26:f3: f2:60:fd:31:24:26:a8:e6:d8:ab:22:ff:56:48:22:c2:f9:dc: ca:ee:75:f0:54:d4:3a:6b:98:da:f3:b8:83:5f:51:60:3e:28: 00:78:35:1e:c9:ca:d2:41:cd:c1:bb:46:f2:9d:63:d8:0e:c9: 82:d1:6c:1e:97:11:2d:97:a9:71:88:80:bf:4c:56:63:fb:df: 49:9b:3b:a5:c9:f1:4e:b0:9c:7f:f3:82:f1:a6:8b:dc:ca:24: 37:93:a8:37:f1:7c:56:60:27:34:c1:6b:b4:bf:ec:64:4a:be: 4c:f6:a0:bd:41:c8:c8:1b:30:e3:f1:26:bc:00:3d:f1:2e:23: d9:a9:0c:78:81:e0:73:d7:47:34:cc:08:94:28:7c:aa:a9:9d: 69:3b:16:71:3e:a6:fd:bd:7c:44:f7:c0:d2:09:83:d2:f1:12: ac:e4:bd:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQYRF/zBINz692Cfz9jDF8v1A07gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDU4MGQyMmRhNzliYWYwNDA2Yzc3MDZjZjkyZDIxNDQ1 OWYwY2NiZDFlZjY0NzJlN2EzZmE1MDFmMDc5MDkwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChi4bvzyIlB8KqKhmcsz83S43wIjDmXg51I1F4cwwdYCXL iO1nDz89b09IdCyor7SLYxGbeREiS6tsubzwlz2V6DngfyRNjWzV1hhEk73gDiCE Mx+dbOiX0xHaMp2IsWJ5h7p7uX3FsyqmFLWQ+qMNy02QQ+pCqYesFrYv+iZATm5k E5ZNkoIVzrxF/FCQHD2BIqG7MCRH9QcJaim5I/3aQ5qSp4Rd0tCeiIFT6yz7BmqI aQZPL6tx82JVi4k5KmOBdNU4b4dnOv2+UedGHzOFmXV5qGSKrb1L5sNZFQItAOpA j1NndJWSr22PjYUL0hO7PofxmGtNoGIx4LJi50dfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiILy7+X/eVUkHYXQU8kRliU0BD0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg3ZmMyMGY3LTBkZTktNDhkOC04NTBlLWM0MzBkODg4NjBlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAMwDQYJKoZIhvcNAQELBQADggEBAEZ7ZwkCpIODCHEMlDLf+vL9 Tap0h2ORGkIiP1EurfAYXY7R/j59LQ3Z6Ank3VAa1mxN99ZgcFR3Ce8BYugbnyWN V8jqLIAdzlisnGyCH3Or0j8+Jc24duUm8/Jg/TEkJqjm2Ksi/1ZIIsL53MrudfBU 1DprmNrzuINfUWA+KAB4NR7JytJBzcG7RvKdY9gOyYLRbB6XES2XqXGIgL9MVmP7 30mbO6XJ8U6wnH/zgvGmi9zKJDeTqDfxfFZgJzTBa7S/7GRKvkz2oL1ByMgbMOPx JrwAPfEuI9mpDHiB4HPXRzTMCJQofKqpnWk7FnE+pv29fET3wNIJg9LxEqzkvc4= -----END CERTIFICATE-----Generated at Sat Jan 18 02:06:48 2025 by rpki-client on console-fra.rpki-client.org