$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef295804-89a7-4ec3-826e-73e32733dc02.roa File: ef295804-89a7-4ec3-826e-73e32733dc02.roa (raw, json) Hash identifier: At1CkInTychoE6XJ34UQPq4pHNBqIEYSiFmt9AQ3zaQ= Subject key identifier: D3:16:61:BE:AC:7C:27:AA:88:AE:FB:74:7F:3B:A1:86:66:2B:6F:BE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7EAB8D7B7547FCDC53DA5335297AF0A90466437C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef295804-89a7-4ec3-826e-73e32733dc02.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:551d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ab:8d:7b:75:47:fc:dc:53:da:53:35:29:7a:f0:a9:04:66:43:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: serialNumber=1cbd7d678c1caca79f5714fc4cdc0e6eb5eab8d11d837b1fe29cc143f0ad1c8b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c9:f9:de:83:7d:ca:94:51:18:2c:6a:89:cc: 33:72:c1:7e:cd:72:e0:87:db:23:86:c7:9c:54:3a: 39:e1:70:8c:8a:5f:51:c7:95:25:3b:ce:cb:48:ec: 7e:6e:66:31:bf:36:82:a0:b9:ab:8f:90:b2:ec:6d: 10:ec:ea:9c:43:5d:bd:9d:3d:cf:3a:01:57:39:a0: dd:b9:36:90:1f:80:b1:99:bf:12:b6:fd:38:ea:ec: ca:63:62:fa:95:6d:5b:0d:6a:76:25:78:32:91:0f: 9c:81:6e:85:3a:ab:fd:d6:51:68:17:65:22:9e:1e: a5:6b:3d:2b:1d:5e:eb:18:71:1c:de:a0:cd:ce:c6: 56:0f:2e:37:10:c3:35:66:c9:8e:14:5d:4a:52:be: a0:0e:3a:a5:63:08:43:ee:50:20:0e:5f:8b:08:28: bf:af:bb:17:83:e3:80:33:54:06:08:77:1a:42:9d: 0a:78:7e:41:ca:c3:e7:08:aa:60:1c:ef:3f:d8:7d: 90:27:e6:c2:d2:06:25:ac:97:2f:e3:70:56:6c:78: 7a:fd:d0:de:04:a4:75:f5:5d:45:e6:ef:7d:c1:22: ab:96:92:9b:74:69:ca:e5:c4:91:0f:3f:87:da:5a: 5d:66:12:22:55:38:5a:a7:79:cf:32:4c:80:98:57: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:16:61:BE:AC:7C:27:AA:88:AE:FB:74:7F:3B:A1:86:66:2B:6F:BE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef295804-89a7-4ec3-826e-73e32733dc02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551d::/48 Signature Algorithm: sha256WithRSAEncryption 4a:d8:b2:bb:fc:af:8f:11:40:f3:ca:7e:8c:53:bb:a2:cb:73: b7:cb:e2:3f:8a:08:33:e7:33:1d:03:88:ce:86:b6:57:bd:e2: d2:68:13:cc:c3:ed:94:f1:28:04:64:72:c6:36:10:15:2e:5c: e5:f3:fd:ff:ff:da:21:88:19:d1:42:dc:5a:1f:15:3a:34:ca: a3:b0:c4:fa:55:2f:a9:30:ea:e0:3a:19:f3:64:82:d5:d0:81: 2f:e2:76:66:9b:71:42:08:41:63:ac:ba:c5:98:9e:d5:83:94: 92:60:ef:06:85:23:32:8e:fa:ff:e1:f3:e9:27:8f:dd:e2:b8: b5:61:98:a6:d1:66:12:10:cd:d0:4f:6a:da:0b:4d:8d:8f:d4: dc:8d:fe:0b:c5:4e:3d:9f:91:6f:c2:9e:27:38:22:f7:6b:0a: 7e:c8:7f:d3:c5:f0:09:cd:ae:7c:96:1e:6f:7b:ca:b8:21:60: 30:50:f6:1c:63:6e:57:6b:98:9c:8e:38:21:96:94:3e:75:32: f6:d2:bf:5d:54:60:c3:10:01:cc:db:13:66:f3:1f:b1:b2:c3: 0b:46:26:5a:5b:3a:0d:a2:70:65:3b:fe:ae:36:4a:f0:e6:67: f5:2a:bd:55:29:61:90:ba:9d:47:81:a5:92:fd:27:71:d1:30: fe:64:c5:39 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfquNe3VH/NxT2lM1KXrwqQRmQ3wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2JkN2Q2NzhjMWNhY2E3OWY1NzE0ZmM0Y2RjMGU2ZWI1 ZWFiOGQxMWQ4MzdiMWZlMjljYzE0M2YwYWQxYzhiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwyfneg33KlFEYLGqJzDNywX7NcuCH2yOGx5xUOjnhcIyK X1HHlSU7zstI7H5uZjG/NoKguauPkLLsbRDs6pxDXb2dPc86AVc5oN25NpAfgLGZ vxK2/Tjq7MpjYvqVbVsNanYleDKRD5yBboU6q/3WUWgXZSKeHqVrPSsdXusYcRze oM3OxlYPLjcQwzVmyY4UXUpSvqAOOqVjCEPuUCAOX4sIKL+vuxeD44AzVAYIdxpC nQp4fkHKw+cIqmAc7z/YfZAn5sLSBiWsly/jcFZseHr90N4EpHX1XUXm733BIquW kpt0acrlxJEPP4faWl1mEiJVOFqnec8yTICYV/8pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0xZhvqx8J6qIrvt0fzuhhmYrb74wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VmMjk1ODA0LTg5YTctNGVjMy04MjZlLTczZTMyNzMzZGMwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVR0wDQYJKoZIhvcNAQELBQADggEBAErYsrv8r48RQPPKfoxTu6LL c7fL4j+KCDPnMx0DiM6Gtle94tJoE8zD7ZTxKARkcsY2EBUuXOXz/f//2iGIGdFC 3FofFTo0yqOwxPpVL6kw6uA6GfNkgtXQgS/idmabcUIIQWOsusWYntWDlJJg7waF IzKO+v/h8+knj93iuLVhmKbRZhIQzdBPatoLTY2P1NyN/gvFTj2fkW/Cnic4Ivdr Cn7If9PF8AnNrnyWHm97yrghYDBQ9hxjbldrmJyOOCGWlD51MvbSv11UYMMQAczb E2bzH7GywwtGJlpbOg2icGU7/q42SvDmZ/UqvVUpYZC6nUeBpZL9J3HRMP5kxTk= -----END CERTIFICATE-----Generated at Sat Jan 18 02:06:48 2025 by rpki-client on console-fra.rpki-client.org