$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa File: f1746927-d9c4-41c2-8abc-289ecb180bdc.roa (raw, json) Hash identifier: Nphm2gwltTjIsujwpUTaPQiqFDSaJOlK4C+nB0ytYxE= Subject key identifier: 63:BD:E9:A4:B3:AC:CD:D5:46:2B:81:A0:30:DA:3B:CF:4B:ED:01:83 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 350785463953FF835D236EC348406D205D655FC2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa Signing time: Mon 06 Jan 2025 00:00:00 +0000 ROA not before: Mon 06 Jan 2025 00:00:00 +0000 ROA not after: Mon 10 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:07:85:46:39:53:ff:83:5d:23:6e:c3:48:40:6d:20:5d:65:5f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jan 6 00:00:00 2025 GMT Not After : Feb 10 23:59:59 2025 GMT Subject: CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:44:76:cf:78:b6:30:da:57:ca:af:29:af:cb: b5:86:f3:04:ad:5b:7e:be:b5:1e:eb:d1:d3:a0:76: 89:00:d3:9c:97:a6:47:31:da:f7:ad:fe:00:88:3b: 25:e9:78:e3:44:55:08:71:84:85:b5:ef:97:63:74: 20:92:2e:ba:80:9f:f8:80:67:52:ee:7a:52:ba:c7: 50:20:c7:d0:84:74:58:60:f6:ea:ee:61:d6:17:16: 1d:c3:c2:dc:5b:75:75:87:77:08:54:0f:4c:58:d8: b2:a7:62:21:d0:51:f7:82:29:77:7c:87:f2:ca:69: bc:ef:d5:91:71:12:bf:ab:2d:bf:ae:c3:72:38:ea: 45:c9:6a:e8:e5:54:4e:47:50:ea:08:32:59:db:aa: a5:dc:1d:0a:f6:ac:6b:18:6a:8f:d0:60:29:82:0f: 4e:1d:2c:6e:b4:58:ce:b1:a6:c7:c4:18:07:c6:51: 94:30:7f:14:e8:c6:99:61:0c:f6:c9:6e:c9:2d:b6: b3:40:5b:01:09:64:bd:ac:bb:59:91:79:9e:54:ec: c7:c1:ea:c5:16:c9:51:39:24:1a:93:b1:f4:35:6f: 45:ff:b4:65:b0:32:91:e7:de:0b:11:0f:2d:a6:bf: 1a:df:2b:0f:23:07:eb:ec:5a:15:2a:e9:72:af:8c: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:E9:A4:B3:AC:CD:D5:46:2B:81:A0:30:DA:3B:CF:4B:ED:01:83 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e500::/40 Signature Algorithm: sha256WithRSAEncryption 72:c3:3c:61:9f:f6:51:4e:6e:4f:b7:28:44:5a:c1:00:7e:40: 57:4b:39:05:ef:10:cd:61:f1:61:7d:cd:62:94:9f:6c:a9:b1: 5d:86:1a:7f:6c:35:0e:0f:d6:b0:bd:0f:a6:74:17:0c:48:e4: 5a:be:fe:ca:c1:1f:2f:d0:ac:f8:02:fb:28:27:47:11:24:9a: 6b:4e:28:cc:59:41:e0:6b:3b:c4:2a:51:c8:3c:7a:05:77:94: af:54:35:87:c0:0e:6a:9c:1a:45:77:3a:7a:bd:42:71:f4:39: d8:e6:ac:ac:30:0d:fa:68:0f:bb:e8:b5:00:16:b2:ca:ca:25: e1:ef:d3:4d:74:99:b6:2d:fd:76:c1:cd:34:0e:bf:00:f6:1c: bd:70:8a:cc:9d:ea:a0:c3:55:18:cb:fe:e3:25:86:9c:d3:2d: f7:1e:26:4b:b6:3d:9b:8c:a5:15:d5:58:3a:63:a7:06:c0:8d: 47:51:3a:0f:ff:bf:76:2d:13:48:6b:c7:b3:26:71:7b:24:1c: ec:5b:b5:65:33:53:94:5a:3f:a3:ca:e4:d4:95:5c:24:09:80: 1c:33:2a:28:b9:7a:f5:e6:a7:0c:0b:5e:83:32:b8:ae:ed:da: f7:96:a6:00:09:89:f8:01:15:18:fe:ee:02:c9:f3:18:80:5f: 98:73:20:51 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNQeFRjlT/4NdI27DSEBtIF1lX8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwMTA2MDAwMDAwWhcNMjUwMjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmJjZDY1MmJlM2JkOTFmYTdmMDI4ZmFmNjMwY2Q1Njk3 ZDIyMjYzMWJmNjAzZmE3M2NmMzM2NGY3YzY4YmU3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMRHbPeLYw2lfKrymvy7WG8wStW36+tR7r0dOgdokA05yX pkcx2vet/gCIOyXpeONEVQhxhIW175djdCCSLrqAn/iAZ1LuelK6x1Agx9CEdFhg 9uruYdYXFh3DwtxbdXWHdwhUD0xY2LKnYiHQUfeCKXd8h/LKabzv1ZFxEr+rLb+u w3I46kXJaujlVE5HUOoIMlnbqqXcHQr2rGsYao/QYCmCD04dLG60WM6xpsfEGAfG UZQwfxToxplhDPbJbskttrNAWwEJZL2su1mReZ5U7MfB6sUWyVE5JBqTsfQ1b0X/ tGWwMpHn3gsRDy2mvxrfKw8jB+vsWhUq6XKvjGJNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUY73ppLOszdVGK4GgMNo7z0vtAYMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YxNzQ2OTI3LWQ5YzQtNDFjMi04YWJjLTI4OWVjYjE4MGJkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD75TANBgkqhkiG9w0BAQsFAAOCAQEAcsM8YZ/2UU5uT7coRFrBAH5A V0s5Be8QzWHxYX3NYpSfbKmxXYYaf2w1Dg/WsL0PpnQXDEjkWr7+ysEfL9Cs+AL7 KCdHESSaa04ozFlB4Gs7xCpRyDx6BXeUr1Q1h8AOapwaRXc6er1CcfQ52OasrDAN +mgPu+i1ABayysol4e/TTXSZti39dsHNNA6/APYcvXCKzJ3qoMNVGMv+4yWGnNMt 9x4mS7Y9m4ylFdVYOmOnBsCNR1E6D/+/di0TSGvHsyZxeyQc7Fu1ZTNTlFo/o8rk 1JVcJAmAHDMqKLl69eanDAtegzK4ru3a95amAAmJ+AEVGP7uAsnzGIBfmHMgUQ== -----END CERTIFICATE-----Generated at Wed Feb 5 09:59:41 2025 by rpki-client