$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa File: 43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa (raw, json) Hash identifier: rMww1bkiGf6M7g79Cxz7QN9F4Riongk8Mzk2kGeOHP4= Subject key identifier: 2A:37:3C:76:BD:32:07:B3:5A:32:C1:5E:2A:FF:D5:18:E6:1D:6A:9B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 317588B14EB832A1FC4C1CD2BD0E37FA3294527F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:75:88:b1:4e:b8:32:a1:fc:4c:1c:d2:bd:0e:37:fa:32:94:52:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:fb:16:25:e8:e3:d2:47:a6:58:8d:0d:c9: 02:b5:c7:4e:a9:03:b5:0c:2c:e9:62:99:ad:97:77: 76:55:06:a5:96:cb:ac:f8:59:11:ba:21:c0:9e:7d: 23:c3:00:f1:05:67:2d:9c:9b:22:eb:a1:b7:f4:00: 6b:b1:ec:0a:05:90:c4:e8:f7:f2:c5:85:de:97:d9: 52:36:82:d8:44:de:89:69:78:bc:65:99:45:54:92: 44:e2:00:a3:ff:4f:f8:e9:5c:37:e9:f2:8d:77:2d: a8:7d:c7:20:02:1b:cc:23:0a:4c:2e:41:bf:b8:02: fe:fd:96:3c:20:e7:78:69:54:c4:92:11:f2:30:31: bf:57:ad:87:a7:72:4b:d5:9b:a5:14:31:0d:a6:30: 5e:d9:73:19:69:6f:7c:5f:e5:34:3c:04:a5:c6:09: ad:16:79:b5:60:59:b6:5d:a4:c8:a5:5a:81:02:76: e7:c1:af:f2:88:68:f1:76:3b:20:cb:09:31:ed:8d: fa:42:63:c6:19:5d:0e:cf:ad:16:5d:99:b7:8e:a8: 9d:51:41:04:b5:b0:55:9f:0d:d3:e2:9a:2f:ca:bb: 23:9b:88:40:57:1e:70:b7:74:a6:a6:fa:cd:82:47: db:e1:c5:e2:28:a5:06:1f:b6:eb:63:68:d6:1e:9d: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:37:3C:76:BD:32:07:B3:5A:32:C1:5E:2A:FF:D5:18:E6:1D:6A:9B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption 2c:54:bd:b9:75:55:9e:b0:3b:84:48:14:46:ab:e6:34:87:4a: b5:ee:e4:89:d7:97:6f:5f:38:e7:a2:0b:24:ca:78:60:80:3c: 31:03:ed:18:51:00:60:dd:6c:f9:e0:22:e3:3b:89:2d:cc:0a: e9:79:fb:81:5a:87:79:e8:16:0b:03:78:dc:35:59:22:6b:81: 47:a2:74:08:49:e6:27:e6:45:98:c4:68:c9:91:1f:5f:54:1a: 28:78:e4:ef:e9:e4:3b:16:f2:d8:23:8d:c7:2a:c0:3a:ce:7d: 74:a6:3c:75:d8:42:01:63:44:32:0f:f1:38:87:99:36:24:69: 30:85:7d:db:16:d4:31:cc:0f:00:17:68:e2:60:03:ca:ac:28: 2b:5a:7d:f3:61:25:3e:71:35:ed:29:7a:ee:a4:09:66:cf:07: 07:2d:ba:76:20:69:74:dc:27:b5:43:99:80:ef:8a:c0:11:42: aa:58:aa:5e:fe:bb:1c:4c:62:c7:78:59:76:a9:29:30:1a:9d: e8:b8:54:7d:70:79:1c:8e:9e:10:fd:e3:3d:3a:23:42:ee:76: 38:b0:8c:50:43:52:84:f6:dd:9c:91:6a:f3:45:dc:9d:2b:99: df:ab:ec:9d:cb:01:14:41:7b:2d:62:04:bf:29:9e:e8:53:4a: 47:14:f6:07 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMXWIsU64MqH8TBzSvQ43+jKUUn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzcwZDE0MDFhOGI4MDUxOTIyZTkxMjgyYmU3ZjgzMzky NzUwNWFiNzhkOTg3MzY1MzRjZDcwYTA4YmMxZGZhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXUfsWJejj0kemWI0NyQK1x06pA7UMLOlima2Xd3ZVBqWW y6z4WRG6IcCefSPDAPEFZy2cmyLrobf0AGux7AoFkMTo9/LFhd6X2VI2gthE3olp eLxlmUVUkkTiAKP/T/jpXDfp8o13Lah9xyACG8wjCkwuQb+4Av79ljwg53hpVMSS EfIwMb9XrYenckvVm6UUMQ2mMF7Zcxlpb3xf5TQ8BKXGCa0WebVgWbZdpMilWoEC dufBr/KIaPF2OyDLCTHtjfpCY8YZXQ7PrRZdmbeOqJ1RQQS1sFWfDdPimi/KuyOb iEBXHnC3dKam+s2CR9vhxeIopQYftutjaNYenSgFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKjc8dr0yB7NaMsFeKv/VGOYdapswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzZjM4YTkwLTk0MWMtNGU2MS04YWE1LWVhZDk1N2JmNmFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBACxUvbl1VZ6wO4RIFEar5jSH SrXu5InXl29fOOeiCyTKeGCAPDED7RhRAGDdbPngIuM7iS3MCul5+4Fah3noFgsD eNw1WSJrgUeidAhJ5ifmRZjEaMmRH19UGih45O/p5DsW8tgjjccqwDrOfXSmPHXY QgFjRDIP8TiHmTYkaTCFfdsW1DHMDwAXaOJgA8qsKCtaffNhJT5xNe0peu6kCWbP BwctunYgaXTcJ7VDmYDvisARQqpYql7+uxxMYsd4WXapKTAanei4VH1weRyOnhD9 4z06I0LudjiwjFBDUoT23ZyRavNF3J0rmd+r7J3LARRBey1iBL8pnuhTSkcU9gc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:12 2025 by rpki-client