$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ae8e0646-a3de-4f6f-9f98-8689213b0505.roa File: ae8e0646-a3de-4f6f-9f98-8689213b0505.roa (raw, json) Hash identifier: qu62pLVSuWptlUbeTpZGyOsdWxHodGii6KOGiZQ5DZs= Subject key identifier: BF:64:68:D3:78:68:0F:0D:7B:A5:EC:4C:D1:78:36:F7:D3:98:E8:C2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7B8629216834D93EBE405AB49B0C5DACB917AFD4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ae8e0646-a3de-4f6f-9f98-8689213b0505.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ea00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:86:29:21:68:34:d9:3e:be:40:5a:b4:9b:0c:5d:ac:b9:17:af:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:f4:b8:ed:63:bc:18:21:2e:69:4b:f3:30: e4:b3:a5:bb:95:05:55:c7:00:8b:6b:00:bf:83:97: 3a:9a:f0:6a:15:66:e5:3e:ec:40:53:2e:be:20:0e: 82:24:98:d2:d0:a9:e2:ac:9c:71:50:51:9d:8f:b2: cf:63:51:9b:ec:55:a6:b6:75:0e:55:fe:c6:78:2a: ac:d8:da:ee:78:5e:44:f3:4a:0d:7a:df:dd:66:99: 05:99:1e:74:b2:28:6b:02:84:02:59:7b:94:7b:37: 37:40:22:e8:a1:7f:9c:e8:cb:79:25:30:f0:e8:91: 20:c4:04:ff:a0:f7:9a:ff:1e:3b:7d:db:ad:e2:1a: 32:8d:13:9f:6a:76:63:2e:24:7b:e0:14:2d:27:7f: 48:8e:5d:0f:2b:77:65:fc:fa:d2:ea:9b:eb:c2:71: c8:85:c8:87:9c:66:c8:a5:3d:99:64:a3:47:d8:e7: a0:4c:1d:98:c8:dd:0e:00:ad:9d:ca:07:af:57:e1: 62:07:fe:de:aa:98:c3:f9:81:49:0b:6c:cd:87:31: 86:10:02:1f:56:c7:1c:4e:6d:ba:c4:6f:8a:97:de: 93:8e:33:fa:5f:bd:1d:ed:4f:53:b4:0d:b5:52:9f: 97:fa:e5:d0:4a:f5:88:49:30:f3:c0:37:02:e9:f4: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:64:68:D3:78:68:0F:0D:7B:A5:EC:4C:D1:78:36:F7:D3:98:E8:C2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ae8e0646-a3de-4f6f-9f98-8689213b0505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/40 Signature Algorithm: sha256WithRSAEncryption 13:f1:e0:cd:c2:6d:79:6e:76:af:e0:bc:f7:1d:2b:66:45:25: d7:4f:8f:40:2c:35:21:c0:d3:ed:1b:6f:ac:90:a1:64:80:5f: 43:1c:20:63:da:b4:55:61:ce:ee:57:24:cf:58:d3:49:c8:3a: 4f:52:17:7b:4e:6b:c0:0c:1f:37:ea:eb:67:92:07:33:fe:c3: 0e:d1:0d:21:5f:96:1c:b4:fa:28:63:1b:4b:09:1f:dd:2c:31: 6f:f6:18:95:0a:0b:f8:91:2c:47:db:7a:ef:41:30:12:e3:41: 32:97:25:ce:04:9b:4f:75:c1:5d:1f:df:f1:9f:73:5e:85:c0: 42:87:19:31:24:e6:aa:62:20:bf:ad:76:ce:48:26:4b:ed:35: 0e:57:b1:8c:09:1f:84:b7:ac:44:fb:95:5b:b1:c9:8f:60:fa: f3:9c:49:05:2c:a8:85:1f:15:a1:64:c2:ed:2c:32:70:20:c8: bf:e2:b4:34:36:51:c4:70:df:4d:21:7f:38:a8:f3:e5:a4:32: 74:5e:9c:86:c8:06:6b:2c:74:28:13:42:ef:b0:b6:21:d9:84: 85:0a:6e:e4:e4:74:65:e4:7d:67:e3:ee:34:f7:1f:e8:0a:55: 19:dd:24:4c:f0:be:ab:53:09:ee:e7:8a:15:76:d1:3a:f6:5f: f3:59:59:42 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUe4YpIWg02T6+QFq0mwxdrLkXr9QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWY1YmJmYmEyMDU2OWUzN2MzMTAyOGQ1NzFmYTRjMTZi NWU4MDEwZTBhYmYzN2NiMThjZDJlM2NiOTI0NWE4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy8/S47WO8GCEuaUvzMOSzpbuVBVXHAItrAL+Dlzqa8GoV ZuU+7EBTLr4gDoIkmNLQqeKsnHFQUZ2Pss9jUZvsVaa2dQ5V/sZ4KqzY2u54XkTz Sg16391mmQWZHnSyKGsChAJZe5R7NzdAIuihf5zoy3klMPDokSDEBP+g95r/Hjt9 263iGjKNE59qdmMuJHvgFC0nf0iOXQ8rd2X8+tLqm+vCcciFyIecZsilPZlko0fY 56BMHZjI3Q4ArZ3KB69X4WIH/t6qmMP5gUkLbM2HMYYQAh9WxxxObbrEb4qX3pOO M/pfvR3tT1O0DbVSn5f65dBK9YhJMPPANwLp9EGpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUv2Ro03hoDw17pexM0Xg299OY6MIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FlOGUwNjQ2LWEzZGUtNGY2Zi05Zjk4LTg2ODkyMTNiMDUwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76jANBgkqhkiG9w0BAQsFAAOCAQEAE/HgzcJteW52r+C89x0rZkUl 10+PQCw1IcDT7RtvrJChZIBfQxwgY9q0VWHO7lckz1jTScg6T1IXe05rwAwfN+rr Z5IHM/7DDtENIV+WHLT6KGMbSwkf3Swxb/YYlQoL+JEsR9t670EwEuNBMpclzgSb T3XBXR/f8Z9zXoXAQocZMSTmqmIgv612zkgmS+01DlexjAkfhLesRPuVW7HJj2D6 85xJBSyohR8VoWTC7SwycCDIv+K0NDZRxHDfTSF/OKjz5aQydF6chsgGayx0KBNC 77C2IdmEhQpu5OR0ZeR9Z+PuNPcf6ApVGd0kTPC+q1MJ7ueKFXbROvZf81lZQg== -----END CERTIFICATE-----Generated at Wed Feb 5 09:52:44 2025 by rpki-client