$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa File: bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa (raw, json) Hash identifier: d9m9sSdMyebRalMkfwbqL4X+ddusGZfwVLLxP4sZDfU= Subject key identifier: 26:CF:2F:2A:1A:07:5E:A1:55:6D:73:8A:4F:55:8D:6A:02:72:24:EC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 558A7E388F74BE069ADDE6AF2F9F97A0BCA37731 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5519::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8a:7e:38:8f:74:be:06:9a:dd:e6:af:2f:9f:97:a0:bc:a3:77:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: serialNumber=6e938fe0d554315dfb39b5bd8df470f5adcc52fd3772d2a78f259cddd2827399, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:9a:80:6e:a9:e5:16:9b:96:bc:fb:9e:c9: 10:69:6c:82:2f:5f:dd:c8:b7:74:2c:c9:fe:93:21: b7:18:0c:52:78:e3:9a:4d:e7:ef:3b:a8:96:5b:9b: f6:5b:ad:9c:e3:d5:89:4f:8e:38:d5:79:ac:fb:63: 80:8a:ff:21:05:de:29:e2:a9:f4:aa:84:04:af:d6: 63:14:9c:08:cf:19:ed:f5:88:d2:09:57:cb:dc:0d: dd:f9:ab:9c:8d:db:3f:89:a1:7e:a1:15:3b:a9:85: 52:bc:39:4d:f3:44:c3:d4:1a:78:16:4c:2d:f1:c5: 65:f4:b2:11:6e:55:e2:5a:7f:78:ef:7c:3a:fb:ec: be:a0:16:42:8b:0b:34:06:03:55:f8:8f:b8:31:9d: 1c:ea:38:16:b7:df:86:96:8b:74:d8:c9:ff:b2:57: f0:93:da:ea:b6:a4:ef:83:13:36:59:3d:8d:24:c9: 86:bf:77:11:03:e8:70:5d:26:4b:56:95:eb:9c:3f: f7:75:8f:ea:7a:ed:ba:88:37:9f:f5:fe:5c:98:8b: 09:70:f7:43:f4:99:8c:ca:d3:78:82:3f:6c:48:04: 7a:ea:fc:2e:9d:5a:82:10:68:e8:ec:4a:6e:f0:29: e2:d9:f9:9d:90:d0:ab:4a:0d:ed:e9:fd:a0:da:b2: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CF:2F:2A:1A:07:5E:A1:55:6D:73:8A:4F:55:8D:6A:02:72:24:EC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5519::/48 Signature Algorithm: sha256WithRSAEncryption 5b:a6:af:10:6e:2b:16:61:88:5c:8f:47:09:44:83:e7:1a:e0: 18:37:d4:11:c3:d2:b2:03:6f:48:5c:89:70:96:d4:dd:bb:54: cd:3f:97:7b:81:31:4b:92:a3:57:34:50:11:1a:e8:71:27:66: 1d:8c:49:a8:b5:5f:32:8e:9f:9e:3b:58:55:83:88:91:81:3c: c3:fe:95:ab:d9:83:3a:da:eb:b7:d9:d1:5e:f0:0c:18:94:8f: 6b:87:82:5b:64:64:8c:84:91:45:d1:d1:a4:62:1b:c3:9e:3f: 3c:6a:56:ac:d2:ba:76:24:07:cb:7c:4d:ba:84:32:02:15:c3: 99:a7:03:95:25:ad:7c:97:e8:3b:4d:de:c4:20:b4:c5:9d:a7: 1f:f9:31:57:2f:14:7b:f6:b8:dd:d4:4b:40:9b:4d:7d:73:69: 7b:46:c0:29:dd:5c:e6:6a:f9:5e:ba:ce:b0:d4:47:06:b5:dd: d9:08:e4:34:d1:c4:c4:c9:33:ee:64:3b:4a:f7:e0:9e:4c:eb: a1:c3:5f:84:ab:37:28:22:e2:b3:41:88:4f:b2:1a:50:98:76: 0d:3e:c2:4e:ad:57:a5:f0:56:04:77:73:98:e1:89:12:ec:1e: 2a:77:62:b8:34:82:f4:76:01:4d:8e:b3:53:83:ce:24:55:dd: fe:e4:da:71 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVYp+OI90vgaa3eavL5+XoLyjdzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTkzOGZlMGQ1NTQzMTVkZmIzOWI1YmQ4ZGY0NzBmNWFk Y2M1MmZkMzc3MmQyYTc4ZjI1OWNkZGQyODI3Mzk5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4FJqAbqnlFpuWvPueyRBpbIIvX93It3Qsyf6TIbcYDFJ4 45pN5+87qJZbm/ZbrZzj1YlPjjjVeaz7Y4CK/yEF3iniqfSqhASv1mMUnAjPGe31 iNIJV8vcDd35q5yN2z+JoX6hFTuphVK8OU3zRMPUGngWTC3xxWX0shFuVeJaf3jv fDr77L6gFkKLCzQGA1X4j7gxnRzqOBa334aWi3TYyf+yV/CT2uq2pO+DEzZZPY0k yYa/dxED6HBdJktWleucP/d1j+p67bqIN5/1/lyYiwlw90P0mYzK03iCP2xIBHrq /C6dWoIQaOjsSm7wKeLZ+Z2Q0KtKDe3p/aDasms1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJs8vKhoHXqFVbXOKT1WNagJyJOwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JkYTMzODAwLTEwOGQtNGViNy1iYmM4LWYxZjNhNWEwODhlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRkwDQYJKoZIhvcNAQELBQADggEBAFumrxBuKxZhiFyPRwlEg+ca 4Bg31BHD0rIDb0hciXCW1N27VM0/l3uBMUuSo1c0UBEa6HEnZh2MSai1XzKOn547 WFWDiJGBPMP+lavZgzra67fZ0V7wDBiUj2uHgltkZIyEkUXR0aRiG8OePzxqVqzS unYkB8t8TbqEMgIVw5mnA5UlrXyX6DtN3sQgtMWdpx/5MVcvFHv2uN3US0CbTX1z aXtGwCndXOZq+V66zrDURwa13dkI5DTRxMTJM+5kO0r34J5M66HDX4SrNygi4rNB iE+yGlCYdg0+wk6tV6XwVgR3c5jhiRLsHip3Yrg0gvR2AU2Os1ODziRV3f7k2nE= -----END CERTIFICATE-----Generated at Sat Jan 18 02:06:48 2025 by rpki-client on console-fra.rpki-client.org