$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa File: b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa (raw, json) Hash identifier: tE8S9Dls+5/46Zj2D6ARGIvlSLrIllfxUzaY6rSFHfE= Subject key identifier: 47:8A:CD:57:C1:0E:BB:EC:C9:DC:01:AB:7E:25:48:D5:B3:63:43:74 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 121526757939434C4E4437DA8D6186786FEA2BBE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:15:26:75:79:39:43:4c:4e:44:37:da:8d:61:86:78:6f:ea:2b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6f:ad:67:6b:3e:5a:02:a5:a3:ff:d8:98:d9: 9b:3d:c6:58:05:bd:0c:45:9b:02:2c:53:a8:b7:ed: e8:1a:8e:dd:59:2b:7f:8b:94:de:b6:8a:52:3b:58: fd:1b:d6:7d:b7:00:3a:20:3e:00:56:cd:7e:65:60: a1:6f:d0:80:0a:04:b6:a0:0d:a4:4f:bf:fc:c3:95: 83:06:5a:57:55:c5:13:49:0c:ab:04:cd:85:34:24: d5:07:a4:60:57:39:3f:58:1a:cd:6e:10:fd:ad:6a: d5:7f:eb:2e:60:a5:89:f8:13:fb:a9:f0:73:86:45: ee:2e:2c:35:06:18:80:a7:b4:6e:b7:10:ce:e2:0b: e2:66:4a:01:7e:2a:9a:aa:8e:da:1a:83:56:75:31: ef:01:95:cf:d1:e7:c2:ad:7b:0c:24:9a:37:3b:df: 2e:7b:f5:44:19:92:60:45:d4:28:06:d5:d3:22:2a: b2:7e:34:f7:a1:32:d8:86:93:79:40:66:6c:7d:e2: 53:a5:1c:6d:61:68:71:b7:8d:6d:3e:4c:5c:bf:9a: 4e:c5:81:5a:70:9e:11:31:49:3e:de:17:5f:1a:4a: c3:ee:2e:af:53:db:2f:b4:e5:f6:cc:31:34:57:2d: 56:25:35:5f:81:af:e9:72:ef:b0:cd:c9:41:8a:67: ee:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8A:CD:57:C1:0E:BB:EC:C9:DC:01:AB:7E:25:48:D5:B3:63:43:74 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/42 Signature Algorithm: sha256WithRSAEncryption 19:0c:28:4c:3d:ed:8e:e8:82:ea:96:e3:b3:68:2c:ea:82:2a: 2c:28:1f:ad:9e:62:f5:d4:a8:02:6f:25:fb:e6:48:c5:9d:a7: cd:29:71:6b:67:f8:20:36:4c:6e:e6:77:91:fc:5f:e6:4a:b0: b1:14:a8:e2:65:46:9f:33:90:8d:aa:1e:a6:ff:02:e4:d2:a8: 07:d0:b6:3d:9e:af:ba:0a:02:80:90:d9:06:87:c0:71:56:e4: a7:08:8b:22:01:79:c7:3d:ec:4b:af:1e:40:0f:b8:15:b1:5a: b4:de:1a:b5:53:b1:f1:17:18:ee:6b:d7:95:f8:42:04:b5:27: 26:16:51:6c:37:64:2f:ec:89:ba:fd:da:8d:4e:fe:be:63:cb: 6f:d4:d0:d2:5e:c4:68:01:21:fa:db:cc:b9:19:68:b4:e2:29: 0a:0c:ab:d9:cc:c6:14:df:33:eb:46:f8:99:7e:b7:79:82:57: 03:cc:d7:15:39:ec:3f:84:59:79:13:12:f7:81:b6:b2:e0:43: 36:17:83:a6:01:37:89:ed:ca:49:cc:49:37:20:aa:11:27:92: 1b:ea:3b:58:c0:5c:ac:c9:9b:58:9f:cb:18:71:de:e3:fa:57: 95:90:b3:a3:60:cf:a3:d8:9d:0e:59:45:89:1c:f1:c5:09:2e: 2a:40:d9:f0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEhUmdXk5Q0xORDfajWGGeG/qK74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzQwYjAzYjQ1OTY0MmI4MzYzMzk3Zjk5ZmQ3NDA5YzRk M2EzYzI4N2M4YTkxNTZkMTBlNDdhNDE2N2Y5ZWI2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNb61naz5aAqWj/9iY2Zs9xlgFvQxFmwIsU6i37egajt1Z K3+LlN62ilI7WP0b1n23ADogPgBWzX5lYKFv0IAKBLagDaRPv/zDlYMGWldVxRNJ DKsEzYU0JNUHpGBXOT9YGs1uEP2tatV/6y5gpYn4E/up8HOGRe4uLDUGGICntG63 EM7iC+JmSgF+Kpqqjtoag1Z1Me8Blc/R58Ktewwkmjc73y579UQZkmBF1CgG1dMi KrJ+NPehMtiGk3lAZmx94lOlHG1haHG3jW0+TFy/mk7FgVpwnhExST7eF18aSsPu Lq9T2y+05fbMMTRXLVYlNV+Br+ly77DNyUGKZ+7JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUR4rNV8EOu+zJ3AGrfiVI1bNjQ3QwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I3YjFkOGUwLTdmYmItNDUyOC04Yzk3LTEwNTFjYTQ5NTA1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77AAwDQYJKoZIhvcNAQELBQADggEBABkMKEw97Y7oguqW47NoLOqC KiwoH62eYvXUqAJvJfvmSMWdp80pcWtn+CA2TG7md5H8X+ZKsLEUqOJlRp8zkI2q Hqb/AuTSqAfQtj2er7oKAoCQ2QaHwHFW5KcIiyIBecc97EuvHkAPuBWxWrTeGrVT sfEXGO5r15X4QgS1JyYWUWw3ZC/sibr92o1O/r5jy2/U0NJexGgBIfrbzLkZaLTi KQoMq9nMxhTfM+tG+Jl+t3mCVwPM1xU57D+EWXkTEveBtrLgQzYXg6YBN4ntyknM STcgqhEnkhvqO1jAXKzJm1ifyxhx3uP6V5WQs6Ngz6PYnQ5ZRYkc8cUJLipA2fA= -----END CERTIFICATE-----Generated at Wed Feb 5 09:47:40 2025 by rpki-client