$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa File: a0024e00-f937-4b63-91df-d45ce0a6a27d.roa (raw, json) Hash identifier: f6cEUixjhwkyLlBYtH6drqaj7d3nljTePLSkfb+dn7o= Subject key identifier: A5:D5:28:B9:A0:87:3C:6E:0D:43:BA:92:16:75:7F:72:26:3B:47:06 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2858F96B5FAA4CB016F973B00BD55BAAD2BAD88A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:58:f9:6b:5f:aa:4c:b0:16:f9:73:b0:0b:d5:5b:aa:d2:ba:d8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: serialNumber=10a212b7da0259685c664e19bdde9bdad9763b2643216c64a385eb8cac3f7106, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:7c:83:97:10:3b:ee:49:95:e4:5e:8c:11: 3c:7b:51:1b:16:2a:98:2e:4b:d3:47:34:2d:e4:61: 05:a5:71:12:7f:10:35:b9:c0:c8:7d:63:a2:e4:94: 84:e3:3a:1a:7a:b6:d7:af:ba:c1:84:c6:4e:98:b4: 35:24:ff:7e:be:4d:0a:d0:28:84:1b:98:1f:c7:5b: b6:67:36:7f:2e:b0:3b:b0:15:8e:e9:11:f6:09:69: 89:e5:d0:0f:d6:cc:84:b8:3f:ce:82:14:34:ea:14: 78:7c:6c:fa:02:06:f9:25:54:8e:41:85:67:3a:b2: 55:bb:5c:65:84:92:32:39:09:57:63:91:8c:c2:6c: 35:a7:9d:cd:c3:eb:80:32:ad:b2:bb:d5:9b:a0:d9: 71:bb:e8:1f:2b:04:3c:43:d5:1d:b4:1e:7d:61:96: f2:c0:59:fe:4c:6c:7a:9f:13:f5:63:3c:af:0b:2f: 1d:8f:6f:b7:5d:0e:06:7d:66:a5:85:cb:5b:85:97: 12:a7:9f:ce:87:0b:5b:00:14:47:a9:f4:ba:19:7b: 54:fb:fa:ec:cd:5f:2d:fe:02:ca:6d:d3:25:4b:95: 10:3f:67:57:1f:d7:64:62:df:57:0e:0e:9f:99:1b: 64:2a:9f:84:2c:ba:7b:a7:d4:e1:c0:23:7b:d6:c3: 63:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D5:28:B9:A0:87:3C:6E:0D:43:BA:92:16:75:7F:72:26:3B:47:06 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a0024e00-f937-4b63-91df-d45ce0a6a27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6010::/44 Signature Algorithm: sha256WithRSAEncryption 19:82:a9:1f:0e:65:87:7f:3e:32:ff:6a:4a:c0:c1:52:68:d9: d6:81:63:10:18:b6:8f:24:cb:af:35:2b:ba:71:4e:b4:c4:ec: 0b:ae:aa:31:09:85:fa:c8:a6:84:45:a7:09:46:44:47:01:b1: ec:5e:2e:b9:27:2a:fd:c8:70:f2:5d:b8:87:a3:7b:ac:7c:97: 0f:8f:bf:2f:a7:35:c4:ad:d6:df:42:92:42:18:69:6c:d5:67: 5b:b5:88:20:1d:7e:48:80:6f:4b:7c:3f:99:cc:42:77:0d:ac: 91:e1:bd:bd:25:9b:84:e8:3d:2d:68:4d:2c:ee:e0:50:1e:d0: ae:b1:70:37:2a:aa:f0:0c:63:43:db:84:74:22:b3:89:e6:e8: 84:7e:5d:36:2d:fa:ed:79:96:9a:76:54:92:7e:3f:0b:33:bd: e6:f8:12:fd:96:8a:79:cb:3a:bd:6d:db:41:e9:9e:c8:81:99: 1c:31:7a:67:d9:a8:73:45:bd:28:21:24:08:49:57:14:10:42: c2:5c:e2:e3:95:45:91:07:1a:79:96:b1:ce:75:a6:78:54:d7: a1:d2:1d:bc:4b:5b:42:09:23:20:08:33:ae:cf:a8:08:d5:8d: 46:66:92:2d:f0:bd:3e:f8:c5:ff:04:f8:53:22:90:ea:1f:dc: 15:f9:b5:d3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKFj5a1+qTLAW+XOwC9VbqtK62IowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGEyMTJiN2RhMDI1OTY4NWM2NjRlMTliZGRlOWJkYWQ5 NzYzYjI2NDMyMTZjNjRhMzg1ZWI4Y2FjM2Y3MTA2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2OXyDlxA77kmV5F6METx7URsWKpguS9NHNC3kYQWlcRJ/ EDW5wMh9Y6LklITjOhp6ttevusGExk6YtDUk/36+TQrQKIQbmB/HW7ZnNn8usDuw FY7pEfYJaYnl0A/WzIS4P86CFDTqFHh8bPoCBvklVI5BhWc6slW7XGWEkjI5CVdj kYzCbDWnnc3D64AyrbK71Zug2XG76B8rBDxD1R20Hn1hlvLAWf5MbHqfE/VjPK8L Lx2Pb7ddDgZ9ZqWFy1uFlxKnn86HC1sAFEep9LoZe1T7+uzNXy3+Aspt0yVLlRA/ Z1cf12Ri31cODp+ZG2Qqn4Qsunun1OHAI3vWw2NvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpdUouaCHPG4NQ7qSFnV/ciY7RwYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EwMDI0ZTAwLWY5MzctNGI2My05MWRmLWQ0NWNlMGE2YTI3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYBAwDQYJKoZIhvcNAQELBQADggEBABmCqR8OZYd/PjL/akrAwVJo 2daBYxAYto8ky681K7pxTrTE7AuuqjEJhfrIpoRFpwlGREcBsexeLrknKv3IcPJd uIeje6x8lw+Pvy+nNcSt1t9CkkIYaWzVZ1u1iCAdfkiAb0t8P5nMQncNrJHhvb0l m4ToPS1oTSzu4FAe0K6xcDcqqvAMY0PbhHQis4nm6IR+XTYt+u15lpp2VJJ+Pwsz veb4Ev2WinnLOr1t20HpnsiBmRwxemfZqHNFvSghJAhJVxQQQsJc4uOVRZEHGnmW sc51pnhU16HSHbxLW0IJIyAIM67PqAjVjUZmki3wvT74xf8E+FMikOof3BX5tdM= -----END CERTIFICATE-----Generated at Fri Jan 17 21:21:57 2025 by rpki-client on console-ams.rpki-client.org