$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa File: 3983d9b9-cb06-4315-b0e8-52b47d039b39.roa (raw, json) Hash identifier: Gg3/tcuz0Wy5+hY8ro4dSQ3z6DO8fdowllxHszpxCeg= Subject key identifier: FC:63:27:49:F6:28:D7:2F:34:AC:88:CC:ED:DD:5A:BC:F2:6A:94:5C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 33CBEEC9EF621145BEFF07BE9E0F209EAFA0E7C0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cb:ee:c9:ef:62:11:45:be:ff:07:be:9e:0f:20:9e:af:a0:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:a3:35:9a:ef:38:8e:bf:38:07:e1:62:e6: 60:37:76:d5:74:21:1d:88:6a:8e:ba:8a:e9:2f:d8: f9:c6:fb:69:5a:18:6c:97:7d:f8:8a:e5:df:70:10: f2:53:db:54:19:74:31:5a:99:0b:62:00:7b:2e:a3: 76:73:f0:ed:31:2a:d5:f7:38:79:6c:99:fb:e5:39: 5c:11:1c:1d:cb:43:58:f6:c5:b2:0e:94:88:ce:79: 1f:75:91:a3:fc:20:b3:b8:9c:37:69:38:0c:d7:a8: bd:10:92:0f:b1:e9:f1:2e:5f:ba:db:62:9c:74:a4: d4:97:4d:4e:37:c3:20:11:48:67:fe:fa:01:7f:dc: ed:57:0a:e5:41:0e:be:86:4e:9b:eb:ff:b7:6b:d1: cf:09:9d:3f:c9:27:01:46:48:1a:fe:8d:39:83:be: 25:82:4c:05:9f:6f:10:36:0b:e7:d8:e9:c7:9d:6e: cc:3c:90:4a:ea:9a:1c:f9:cf:02:28:5d:06:21:ae: 05:b0:89:c4:e6:ee:77:63:fd:66:b7:9f:ad:ec:cc: bf:62:47:27:34:69:53:54:71:7a:c2:b8:05:da:bc: b2:54:7d:5f:b7:06:ea:6b:01:c3:41:ca:23:45:e0: 03:6f:96:14:f3:95:7b:4f:f8:df:e6:29:28:db:67: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:63:27:49:F6:28:D7:2F:34:AC:88:CC:ED:DD:5A:BC:F2:6A:94:5C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3983d9b9-cb06-4315-b0e8-52b47d039b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0d::/48 Signature Algorithm: sha256WithRSAEncryption 06:29:0c:a7:75:ae:48:9b:c0:6e:2a:ef:5a:54:65:41:e0:ac: 19:a9:e9:2d:d9:1f:b0:66:bf:79:84:ca:2c:ed:63:1d:41:2e: 64:34:dd:2c:6e:2b:12:72:9b:21:c0:8a:67:3f:06:50:a8:51: cc:89:0c:b3:79:12:91:e4:e4:a6:53:d0:48:d9:e3:d9:45:45: ff:37:bd:08:26:3e:2f:d2:1e:ce:56:c3:76:e8:0e:d5:0e:ec: b6:33:ff:51:c9:12:52:58:0f:59:63:ee:66:b8:08:22:8b:a3: 62:77:5a:4e:a8:bc:6f:13:5c:05:a2:71:11:d7:63:d5:a9:b8: ab:9b:75:85:5b:60:14:0c:70:82:b4:0a:e3:7a:59:85:30:48: 8e:eb:df:9b:d5:78:85:71:d6:47:82:77:4b:54:bf:de:a0:bb: b6:55:e0:b3:2b:35:81:a1:a7:97:e6:57:2a:b9:94:de:bc:ff: e8:33:f4:c1:ad:85:88:65:df:1f:92:e8:14:52:24:9c:05:64: 62:34:a9:9c:9e:e8:2a:0d:ad:03:66:68:55:64:b4:90:d9:28: e8:ca:06:d9:19:f6:aa:1d:f8:13:51:ba:bc:f5:f6:8f:02:95: bd:7a:fc:de:18:12:99:af:be:e8:9c:27:ee:83:9d:ed:20:95: 7d:c7:9e:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM8vuye9iEUW+/we+ng8gnq+g58AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjI4NWJlY2RjODVhZjdjNzg2ZmZjOWQ5MmY3MTliNWU1 NzEwMGUxZmE3ZDY5MDNlYjg3MGU5MTI2Nzk0NWViMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7cKM1mu84jr84B+Fi5mA3dtV0IR2Iao66iukv2PnG+2la GGyXffiK5d9wEPJT21QZdDFamQtiAHsuo3Zz8O0xKtX3OHlsmfvlOVwRHB3LQ1j2 xbIOlIjOeR91kaP8ILO4nDdpOAzXqL0Qkg+x6fEuX7rbYpx0pNSXTU43wyARSGf+ +gF/3O1XCuVBDr6GTpvr/7dr0c8JnT/JJwFGSBr+jTmDviWCTAWfbxA2C+fY6ced bsw8kErqmhz5zwIoXQYhrgWwicTm7ndj/Wa3n63szL9iRyc0aVNUcXrCuAXavLJU fV+3BuprAcNByiNF4ANvlhTzlXtP+N/mKSjbZyt1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/GMnSfYo1y80rIjM7d1avPJqlFwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM5ODNkOWI5LWNiMDYtNDMxNS1iMGU4LTUyYjQ3ZDAzOWIzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA0wDQYJKoZIhvcNAQELBQADggEBAAYpDKd1rkibwG4q71pUZUHg rBmp6S3ZH7Bmv3mEyiztYx1BLmQ03SxuKxJymyHAimc/BlCoUcyJDLN5EpHk5KZT 0EjZ49lFRf83vQgmPi/SHs5Ww3boDtUO7LYz/1HJElJYD1lj7ma4CCKLo2J3Wk6o vG8TXAWicRHXY9WpuKubdYVbYBQMcIK0CuN6WYUwSI7r35vVeIVx1keCd0tUv96g u7ZV4LMrNYGhp5fmVyq5lN68/+gz9MGthYhl3x+S6BRSJJwFZGI0qZye6CoNrQNm aFVktJDZKOjKBtkZ9qod+BNRurz19o8Clb16/N4YEpmvvuicJ+6Dne0glX3Hnns= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:43 2025 by rpki-client