$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3fef9d3e-2ad2-4e38-92fc-5eab76a53959.roa File: 3fef9d3e-2ad2-4e38-92fc-5eab76a53959.roa (raw, json) Hash identifier: Q2C0qKhkjuJbfbpvbC7mztdPYUvun6TBSp9waOCthx4= Subject key identifier: 86:50:A1:6C:CB:6F:94:3D:0C:C7:4B:F7:CC:05:7C:56:56:45:14:CB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0DE877CC3272AC6FFCB91CC498327C6DF7B5A8C7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3fef9d3e-2ad2-4e38-92fc-5eab76a53959.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:611::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e8:77:cc:32:72:ac:6f:fc:b9:1c:c4:98:32:7c:6d:f7:b5:a8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:2d:8f:14:81:74:33:93:5f:74:8c:6f:82: a3:b7:ba:10:3c:c0:1c:e1:84:41:29:58:fc:8e:03: 84:68:95:ed:b4:db:b3:2f:e1:d8:bc:38:56:f4:8a: 75:8f:74:dc:45:20:97:c0:00:0c:bc:37:30:7b:06: 4d:8b:83:e2:5d:6c:ce:d2:6c:e4:53:94:93:6c:37: 14:6c:c6:45:36:99:b8:a0:ed:8d:ec:d9:8b:dd:a0: 13:65:7a:86:01:b0:2a:2b:5a:f0:83:23:cf:bc:e2: 68:b1:42:fc:71:32:51:47:0d:47:77:cc:66:af:d6: 8d:93:cf:e3:e5:51:96:c9:6e:ac:35:72:72:43:f6: db:ae:23:39:08:a9:67:75:92:92:5b:a4:c5:7e:0e: 4f:9d:51:47:ab:74:77:5a:d8:fd:12:fa:f2:ab:67: 56:f7:ad:73:c2:82:7c:9e:2c:1d:57:89:53:c2:c2: 29:52:82:39:80:fb:e8:ac:aa:94:67:03:d6:82:54: f5:e5:0c:f7:33:73:25:a1:ca:f3:fc:15:71:65:04: b7:98:4d:be:d7:12:10:53:d0:b5:d0:68:65:f1:31: 0d:e5:09:f3:64:e9:d8:bd:fb:63:ef:01:11:db:5b: f4:4c:c4:d5:e6:99:ad:6e:f6:c9:6e:df:be:e1:1a: 6b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:50:A1:6C:CB:6F:94:3D:0C:C7:4B:F7:CC:05:7C:56:56:45:14:CB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3fef9d3e-2ad2-4e38-92fc-5eab76a53959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:611::/48 Signature Algorithm: sha256WithRSAEncryption 88:9e:fc:1d:f5:59:93:81:dc:ad:2d:bb:00:49:cd:e3:23:fa: da:2b:32:27:53:ee:aa:3c:1c:7c:fc:00:fc:ac:cb:8e:d2:59: 3e:16:ec:30:e7:fa:c6:21:99:5a:6f:97:22:2f:f7:26:96:46: ba:4c:bb:cd:d8:fd:a8:7c:97:a4:0c:aa:ef:5a:e0:4b:93:a7: 1e:f4:8d:af:d2:9a:70:92:bf:c3:87:97:81:7a:d0:ba:3a:d6: b1:fe:96:bb:c9:12:b0:a7:80:d8:5a:8c:db:44:00:42:e3:f5: c8:58:1b:a8:58:57:6a:b8:8f:3e:35:e7:47:5d:19:60:82:83: a3:30:48:22:22:50:c1:47:f6:3a:ca:85:ba:84:cb:db:ef:54: 0c:0d:fb:e5:1d:c4:87:e1:d7:fb:5a:f4:88:53:8f:a9:7a:36: 24:8c:b9:34:0e:0b:ee:c0:26:2b:35:1a:a1:77:47:14:37:ba: 61:6f:50:2c:fb:96:89:11:8e:9b:53:03:0a:9f:fc:2e:c5:0d: ee:04:88:d3:16:35:06:4c:05:d6:b8:e5:09:33:a8:17:c4:a7: 07:89:0d:27:00:4e:89:72:bd:7e:4b:b9:24:15:aa:83:56:96: 28:b4:10:ea:6c:70:3e:95:34:46:33:75:04:13:f3:1d:0f:72: e1:2e:0f:10 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDeh3zDJyrG/8uRzEmDJ8bfe1qMcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTlmYjA1MWE5MTIxOTUwZDg5M2QwMWI2Y2Y4ZTczZTMz YWMwY2NkNWI3MDIyODY4MWUzNjgxMzZlZmM2YjkwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUkC2PFIF0M5NfdIxvgqO3uhA8wBzhhEEpWPyOA4Role20 27Mv4di8OFb0inWPdNxFIJfAAAy8NzB7Bk2Lg+JdbM7SbORTlJNsNxRsxkU2mbig 7Y3s2YvdoBNleoYBsCorWvCDI8+84mixQvxxMlFHDUd3zGav1o2Tz+PlUZbJbqw1 cnJD9tuuIzkIqWd1kpJbpMV+Dk+dUUerdHda2P0S+vKrZ1b3rXPCgnyeLB1XiVPC wilSgjmA++isqpRnA9aCVPXlDPczcyWhyvP8FXFlBLeYTb7XEhBT0LXQaGXxMQ3l CfNk6di9+2PvARHbW/RMxNXmma1u9slu377hGmu7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhlChbMtvlD0Mx0v3zAV8VlZFFMswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzNmZWY5ZDNlLTJhZDItNGUzOC05MmZjLTVlYWI3NmE1Mzk1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhEwDQYJKoZIhvcNAQELBQADggEBAIie/B31WZOB3K0tuwBJzeMj +torMidT7qo8HHz8APysy47SWT4W7DDn+sYhmVpvlyIv9yaWRrpMu83Y/ah8l6QM qu9a4EuTpx70ja/SmnCSv8OHl4F60Lo61rH+lrvJErCngNhajNtEAELj9chYG6hY V2q4jz4150ddGWCCg6MwSCIiUMFH9jrKhbqEy9vvVAwN++UdxIfh1/ta9IhTj6l6 NiSMuTQOC+7AJis1GqF3RxQ3umFvUCz7lokRjptTAwqf/C7FDe4EiNMWNQZMBda4 5QkzqBfEpweJDScATolyvX5LuSQVqoNWlii0EOpscD6VNEYzdQQT8x0PcuEuDxA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:59 2025 by rpki-client