$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0576e9e3-813e-4fcc-9f30-9f676c7e65d2.roa File: 0576e9e3-813e-4fcc-9f30-9f676c7e65d2.roa (raw, json) Hash identifier: WYs5+0D2xLCP9JqUuc8eqhVzmfW/rCDqORNtXrfipXw= Subject key identifier: 8A:AE:9E:DE:1F:46:8A:C2:23:98:FD:B0:30:9C:E3:BC:87:FD:B4:EE Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 647424899B00F3F23DBCCD8E7B577CB177B036DB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0576e9e3-813e-4fcc-9f30-9f676c7e65d2.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:307::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:74:24:89:9b:00:f3:f2:3d:bc:cd:8e:7b:57:7c:b1:77:b0:36:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:73:61:38:34:19:bc:02:e2:e6:23:88:64: 31:b3:18:b3:a5:aa:a5:12:0e:0f:49:f2:4f:2d:9a: 25:ff:97:80:a6:f7:58:f2:9e:45:e4:3a:9a:63:f2: 68:19:86:75:ae:c2:ae:9d:f0:df:9c:80:ea:64:e4: 13:84:ff:34:0a:44:68:9e:8b:12:45:d8:aa:04:96: 86:66:c3:68:a3:88:6e:06:ca:02:72:41:70:ae:aa: 5e:93:68:82:ce:27:09:90:b1:2e:38:57:bf:eb:6d: 35:00:95:f6:da:17:11:79:d4:eb:38:fd:f8:c0:af: ba:56:a0:82:dd:60:2a:64:db:97:87:cf:a6:6d:bc: 50:fa:6a:72:03:56:43:25:bd:9d:ea:91:6d:73:e3: 1e:ee:7b:d2:56:5d:09:9c:d0:17:55:5f:50:4f:49: eb:a1:7c:27:26:49:95:9d:45:2e:b8:e1:93:f4:07: da:cb:c4:fe:7e:1f:7f:ac:43:4f:13:10:1b:86:e6: f4:b4:b1:51:7c:e6:2f:c1:e9:25:2e:1b:fe:e7:fd: fa:3b:91:78:1b:04:9f:f6:06:30:99:e3:c9:90:82: 6a:2b:9a:7d:9f:cf:f4:8a:5b:c5:4c:ec:34:70:93: 12:63:ad:15:ba:1a:d8:ba:d8:cf:94:a4:e1:16:c1: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AE:9E:DE:1F:46:8A:C2:23:98:FD:B0:30:9C:E3:BC:87:FD:B4:EE X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0576e9e3-813e-4fcc-9f30-9f676c7e65d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:307::/48 Signature Algorithm: sha256WithRSAEncryption 3b:e6:21:0d:c0:93:55:a5:6c:45:48:12:0c:3f:be:9d:8d:14: e8:6a:53:85:c8:cb:5f:59:a1:c7:73:32:af:bc:da:d7:38:5f: 82:09:07:23:f6:c9:cb:bc:b9:45:e7:96:0e:19:05:af:e4:95: 46:f4:79:66:89:30:0a:62:c5:5d:04:ba:2e:af:e8:42:19:a8: 81:77:27:f5:25:2b:7f:a2:03:78:31:87:93:23:96:b8:e1:8d: d1:c4:08:37:90:08:d4:20:d7:4e:2e:e3:ec:2b:61:b3:d3:2d: 67:27:47:b6:c3:6d:76:56:b3:3f:b7:2b:41:16:8d:71:ee:d9: 89:e9:4f:ca:c8:f3:74:e5:4e:e6:52:40:a4:e8:92:b9:6d:e7: 71:2c:49:86:96:f5:00:1f:44:93:db:3a:3e:29:02:c6:62:f7: dd:71:1f:2b:8d:14:a7:17:32:bc:d9:18:4e:9a:9b:8f:a9:13: ed:d2:a2:d8:d3:72:07:c1:7d:1b:d4:4e:61:2f:8f:de:e4:c1: 4f:9a:9c:a1:25:13:d5:17:5c:ba:16:c0:f6:e2:5a:78:cf:b9: ea:b0:91:30:1e:35:bb:4f:b9:47:17:12:58:15:40:f0:47:0d: fb:b0:3a:be:f9:f7:39:17:c5:90:d5:89:1b:a7:cd:3c:ac:c6: bc:b4:e7:97 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZHQkiZsA8/I9vM2Oe1d8sXewNtswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTQwN2I2ZTVkYzhlMDRjZmZjMTM1YjU4YzA0NmVjZjcz NGZiNTBhODMyYTRjMjg5MWJiMmZmMGU5M2MwMWI4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLvnNhODQZvALi5iOIZDGzGLOlqqUSDg9J8k8tmiX/l4Cm 91jynkXkOppj8mgZhnWuwq6d8N+cgOpk5BOE/zQKRGieixJF2KoEloZmw2ijiG4G ygJyQXCuql6TaILOJwmQsS44V7/rbTUAlfbaFxF51Os4/fjAr7pWoILdYCpk25eH z6ZtvFD6anIDVkMlvZ3qkW1z4x7ue9JWXQmc0BdVX1BPSeuhfCcmSZWdRS644ZP0 B9rLxP5+H3+sQ08TEBuG5vS0sVF85i/B6SUuG/7n/fo7kXgbBJ/2BjCZ48mQgmor mn2fz/SKW8VM7DRwkxJjrRW6Gti62M+UpOEWwZ15AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiq6e3h9GisIjmP2wMJzjvIf9tO4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA1NzZlOWUzLTgxM2UtNGZjYy05ZjMwLTlmNjc2YzdlNjVkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwcwDQYJKoZIhvcNAQELBQADggEBADvmIQ3Ak1WlbEVIEgw/vp2N FOhqU4XIy19ZocdzMq+82tc4X4IJByP2ycu8uUXnlg4ZBa/klUb0eWaJMApixV0E ui6v6EIZqIF3J/UlK3+iA3gxh5MjlrjhjdHECDeQCNQg104u4+wrYbPTLWcnR7bD bXZWsz+3K0EWjXHu2YnpT8rI83TlTuZSQKTokrlt53EsSYaW9QAfRJPbOj4pAsZi 991xHyuNFKcXMrzZGE6am4+pE+3SotjTcgfBfRvUTmEvj97kwU+anKElE9UXXLoW wPbiWnjPueqwkTAeNbtPuUcXElgVQPBHDfuwOr759zkXxZDViRunzTysxry055c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:20 2025 by rpki-client