$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0a13ab87-af2d-4793-9495-8c0d09f5b9b9.roa File: 0a13ab87-af2d-4793-9495-8c0d09f5b9b9.roa (raw, json) Hash identifier: yfVXFVdL1FxS3mYNh18LQUhODOrY3QUo0fVZXAE3FDM= Subject key identifier: 33:B6:75:0A:28:98:F6:78:27:16:E5:BA:80:92:CC:4C:2B:B1:BB:70 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0104ACE1B8E3C915B25FC6929622AAAC72CC0962 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0a13ab87-af2d-4793-9495-8c0d09f5b9b9.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:04:ac:e1:b8:e3:c9:15:b2:5f:c6:92:96:22:aa:ac:72:cc:09:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:1d:7e:53:b9:a0:52:80:76:77:c5:40:39: 51:a5:45:c4:07:ec:5c:45:68:3a:d3:31:29:98:b3: e0:7a:a9:35:5f:2d:d2:7f:9d:e7:ef:b6:3e:d2:02: bd:6c:2f:4b:06:78:ab:ee:bb:d9:74:8c:79:8c:e1: f0:3e:5b:93:45:7c:6f:50:fd:74:f1:e0:15:75:a6: 4b:ed:77:84:5a:8c:ab:61:5d:11:3e:fa:87:4e:e0: db:0b:2c:b8:e1:de:ea:49:fb:72:c1:f2:de:ae:0f: 08:1f:84:ce:2c:d0:f3:07:21:b3:e9:ee:09:9b:63: cf:2d:7e:4f:0d:23:e4:d8:dc:8a:84:a1:29:24:01: 2a:fd:f8:51:13:03:41:ea:3d:ac:83:0e:68:95:80: 67:be:ca:0c:24:9a:bc:4b:44:86:db:52:30:4e:af: 16:2a:aa:88:cb:26:77:97:8f:e3:61:7e:ad:c1:e5: 8b:cd:b9:cf:f4:e4:57:e5:e2:ba:dc:10:67:8c:5f: d9:e8:60:db:24:6d:74:d4:ed:1f:a0:b0:54:cf:cb: cb:42:52:30:5e:62:5d:57:e4:70:51:12:db:04:44: 3e:b1:de:e2:13:11:ae:e5:7e:14:40:1d:62:3b:69: 1c:83:21:16:52:2d:9b:94:45:63:7f:21:c9:16:6b: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B6:75:0A:28:98:F6:78:27:16:E5:BA:80:92:CC:4C:2B:B1:BB:70 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0a13ab87-af2d-4793-9495-8c0d09f5b9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30e::/48 Signature Algorithm: sha256WithRSAEncryption 41:55:83:b8:b7:da:74:f3:12:d0:ad:8b:c0:21:cd:cd:04:15: 4b:82:05:ea:0b:da:03:bb:bf:24:78:63:6c:7e:9a:c3:f8:19: 3a:6b:5b:f8:e2:24:91:21:14:f4:bf:4d:6e:04:c3:68:79:e8: 8c:bb:9c:1e:c6:30:ef:dc:4e:0c:2f:05:17:e9:29:01:e0:2a: 62:3d:ea:53:08:13:72:91:b2:75:53:e9:52:97:6a:31:70:33: a2:fc:bf:7a:a7:96:fc:69:8f:d3:63:3d:9f:81:b2:ee:1f:f5: ad:5f:18:35:b7:16:2e:56:76:cb:b5:5a:fe:e2:5d:48:25:3e: 74:dd:c4:ea:c1:e4:3c:39:c4:f3:d2:85:34:a9:85:e0:27:c5: 30:17:e5:0e:cd:ea:6b:1a:27:91:bf:45:50:0a:53:21:a7:92: 65:dd:02:fe:cb:d4:7a:ef:c1:18:93:7c:c5:b2:0f:97:b0:5c: d0:d5:c7:e4:db:13:c3:c1:8f:2f:5a:65:48:7b:18:6e:09:9f: 98:ae:28:fe:10:7e:58:1f:4e:55:29:9f:47:57:38:55:22:ad: d4:37:35:2c:14:c8:87:3b:08:c4:83:8e:fb:2e:ec:dd:54:9a: 63:6b:0d:ac:19:3b:99:7c:a1:83:ff:ad:09:48:ab:16:f8:98: 55:51:ec:15 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAQSs4bjjyRWyX8aSliKqrHLMCWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxODVlM2Q3NzEyMWExYTRhYjQxZTc0YWRhYmZkYzFkZDk2 ZTFhYmNlZTY0MmQ2M2U4MTI2M2M0ZjU0Y2I5MzlkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwnx1+U7mgUoB2d8VAOVGlRcQH7FxFaDrTMSmYs+B6qTVf LdJ/nefvtj7SAr1sL0sGeKvuu9l0jHmM4fA+W5NFfG9Q/XTx4BV1pkvtd4RajKth XRE++odO4NsLLLjh3upJ+3LB8t6uDwgfhM4s0PMHIbPp7gmbY88tfk8NI+TY3IqE oSkkASr9+FETA0HqPayDDmiVgGe+ygwkmrxLRIbbUjBOrxYqqojLJneXj+Nhfq3B 5YvNuc/05Ffl4rrcEGeMX9noYNskbXTU7R+gsFTPy8tCUjBeYl1X5HBREtsERD6x 3uITEa7lfhRAHWI7aRyDIRZSLZuURWN/IckWa21dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM7Z1CiiY9ngnFuW6gJLMTCuxu3AwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBhMTNhYjg3LWFmMmQtNDc5My05NDk1LThjMGQwOWY1YjliOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw4wDQYJKoZIhvcNAQELBQADggEBAEFVg7i32nTzEtCti8Ahzc0E FUuCBeoL2gO7vyR4Y2x+msP4GTprW/jiJJEhFPS/TW4Ew2h56Iy7nB7GMO/cTgwv BRfpKQHgKmI96lMIE3KRsnVT6VKXajFwM6L8v3qnlvxpj9NjPZ+Bsu4f9a1fGDW3 Fi5Wdsu1Wv7iXUglPnTdxOrB5Dw5xPPShTSpheAnxTAX5Q7N6msaJ5G/RVAKUyGn kmXdAv7L1HrvwRiTfMWyD5ewXNDVx+TbE8PBjy9aZUh7GG4Jn5iuKP4QflgfTlUp n0dXOFUirdQ3NSwUyIc7CMSDjvsu7N1UmmNrDawZO5l8oYP/rQlIqxb4mFVR7BU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:36 2025 by rpki-client