$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/088d5754-cda4-4d89-86f5-f70a4d75e7fc.roa File: 088d5754-cda4-4d89-86f5-f70a4d75e7fc.roa (raw, json) Hash identifier: 3uzZrDbUJPg2awNPInNoL9AjALBIu12EHIXs+EFkND0= Subject key identifier: AA:99:63:33:9D:04:67:DB:A7:85:1D:9B:44:A8:59:8E:78:5A:28:56 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 048ECBA71C05B947986EDD5A2AF6B569D8C09094 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/088d5754-cda4-4d89-86f5-f70a4d75e7fc.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:64c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8e:cb:a7:1c:05:b9:47:98:6e:dd:5a:2a:f6:b5:69:d8:c0:90:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:2c:79:cc:58:fd:ec:ff:7b:e7:f7:76:74: 7b:db:de:61:0a:c8:cf:ff:44:5f:d4:60:05:67:f0: 00:65:a8:be:f3:18:d6:8a:e6:e2:00:21:df:db:2b: 89:67:cf:b2:58:e7:28:c3:3a:18:28:e4:89:84:49: 75:cc:86:67:14:4d:dd:54:0b:7d:8d:5c:a4:61:d3: 6b:47:a5:79:94:9f:79:21:12:d8:3f:1f:03:62:d8: 15:2f:2e:b2:a3:48:c5:40:22:1e:16:01:6e:cc:35: 3e:67:cb:85:20:25:57:c0:cc:8b:a4:85:2c:2e:42: f8:55:67:4d:35:44:39:b0:22:56:eb:22:cc:4f:3e: 3c:4f:05:50:d7:e6:d3:70:9c:ea:70:11:25:6d:cf: 6e:5f:ac:74:a4:b8:17:58:df:bb:ad:8f:3c:dd:61: 62:85:2e:6c:54:a9:2d:16:cf:bd:21:bf:86:33:fb: da:35:dd:fd:a5:96:5f:53:39:11:47:76:df:07:1b: b6:89:a0:2e:62:48:fb:b3:b3:5d:ca:c2:02:26:d6: ec:56:bc:6d:ea:e7:1f:25:99:0f:91:06:fb:21:1f: 59:31:44:d7:f2:58:31:41:ef:e9:05:f0:ea:0e:5e: 22:65:f5:de:97:df:52:be:5a:eb:b2:5a:3a:12:c8: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:99:63:33:9D:04:67:DB:A7:85:1D:9B:44:A8:59:8E:78:5A:28:56 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/088d5754-cda4-4d89-86f5-f70a4d75e7fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64c::/48 Signature Algorithm: sha256WithRSAEncryption 94:99:b5:a2:bc:27:43:15:ff:9d:d8:d9:5c:29:9c:45:96:f7: f6:61:ce:f4:41:a5:16:f7:6e:3e:4e:fe:5d:79:d5:87:b4:62: f7:25:01:64:c1:fe:ae:69:d8:b4:e0:6d:21:aa:15:12:50:2f: 5b:d1:44:48:3c:48:12:9e:63:a9:bc:57:d5:93:69:a6:c9:87: ee:96:f4:11:54:38:3f:48:92:76:5d:e9:b2:0b:b2:1b:29:59: a0:90:b8:33:bf:03:c2:16:3d:e7:ba:9e:e4:95:28:79:1f:7b: be:a7:55:09:a7:3e:95:a2:98:cc:01:b1:95:83:97:44:8c:5b: 13:e1:88:6b:bf:62:37:2e:cd:c4:5b:94:eb:77:bc:5a:fa:46: ba:4a:4e:14:f7:d5:74:f1:54:0d:24:cb:19:bd:a4:b3:36:70: 97:34:4e:a0:e4:83:01:82:66:5b:af:eb:44:a7:68:10:db:13: 98:81:ea:67:5b:83:4c:7b:a2:5d:af:5a:c0:bc:07:33:fd:7d: 4e:d2:39:42:5e:58:85:6c:af:1d:6e:2b:bd:b0:55:98:63:83: 4b:c7:57:f2:ad:52:ce:35:cb:64:1f:c8:01:84:85:c8:8e:4f: 22:38:cd:47:03:1d:81:8a:c9:b2:ec:73:47:f2:f7:bd:8c:1f: 8c:fa:c6:d7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBI7LpxwFuUeYbt1aKva1adjAkJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTM5ZDA5MWRhN2Q2YmZjNmU5NDE5NzQ3M2Q2ZWFkYWNl NTI5OTA0MzQwMTliN2I0NGFjYWVhOTczYjFjY2Q5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHsyx5zFj97P975/d2dHvb3mEKyM//RF/UYAVn8ABlqL7z GNaK5uIAId/bK4lnz7JY5yjDOhgo5ImESXXMhmcUTd1UC32NXKRh02tHpXmUn3kh Etg/HwNi2BUvLrKjSMVAIh4WAW7MNT5ny4UgJVfAzIukhSwuQvhVZ001RDmwIlbr IsxPPjxPBVDX5tNwnOpwESVtz25frHSkuBdY37utjzzdYWKFLmxUqS0Wz70hv4Yz +9o13f2lll9TORFHdt8HG7aJoC5iSPuzs13KwgIm1uxWvG3q5x8lmQ+RBvshH1kx RNfyWDFB7+kF8OoOXiJl9d6X31K+WuuyWjoSyDlRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqpljM50EZ9unhR2bRKhZjnhaKFYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA4OGQ1NzU0LWNkYTQtNGQ4OS04NmY1LWY3MGE0ZDc1ZTdmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkwwDQYJKoZIhvcNAQELBQADggEBAJSZtaK8J0MV/53Y2VwpnEWW 9/ZhzvRBpRb3bj5O/l151Ye0YvclAWTB/q5p2LTgbSGqFRJQL1vRREg8SBKeY6m8 V9WTaabJh+6W9BFUOD9IknZd6bILshspWaCQuDO/A8IWPee6nuSVKHkfe76nVQmn PpWimMwBsZWDl0SMWxPhiGu/YjcuzcRblOt3vFr6RrpKThT31XTxVA0kyxm9pLM2 cJc0TqDkgwGCZluv60SnaBDbE5iB6mdbg0x7ol2vWsC8BzP9fU7SOUJeWIVsrx1u K72wVZhjg0vHV/KtUs41y2QfyAGEhciOTyI4zUcDHYGKybLsc0fy972MH4z6xtc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:04 2025 by rpki-client