$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/53eb388c-327a-4c7b-bd49-ee5ad9558636.roa File: 53eb388c-327a-4c7b-bd49-ee5ad9558636.roa (raw, json) Hash identifier: ZLLIwCxG04cdhGr9PPfqZw0mbff28pNzL1HpTeGM3qM= Subject key identifier: 6E:5D:F6:46:A7:1D:70:A4:6D:C7:44:EB:47:18:CC:3D:FE:07:C4:BD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5201448FC2DA57A16DA70269C709A20ED2DF4F8F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/53eb388c-327a-4c7b-bd49-ee5ad9558636.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:2110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:01:44:8f:c2:da:57:a1:6d:a7:02:69:c7:09:a2:0e:d2:df:4f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:81:c8:60:98:4f:43:8e:4a:e1:a1:3c:6b: 57:44:e5:10:6e:d1:dd:77:8f:d7:46:34:6b:36:52: c6:d2:2a:19:40:9b:01:66:96:9d:bd:38:38:8f:0e: 25:15:db:13:e4:63:a6:a2:f3:25:cc:1c:d1:ed:fa: 64:5b:2d:d4:d7:03:b9:03:26:1e:3f:42:98:39:08: 78:72:4b:60:56:17:60:a2:05:3d:71:23:32:5d:5a: 83:08:d0:79:df:65:73:d4:fc:d2:e0:cd:4c:2a:89: 86:f1:1a:25:56:1a:15:80:84:1e:6a:36:52:75:bb: ae:0e:77:01:b3:fb:ef:8b:38:47:bc:35:d5:ba:d7: cb:20:58:9e:b2:63:7f:b1:cc:02:bb:21:c1:db:68: 63:e3:b6:84:6b:39:d6:f2:22:43:c6:26:1d:a7:57: 90:01:d1:a8:a3:5b:18:1c:ef:22:68:6a:3d:80:a2: bb:4e:cf:1a:39:90:6f:e3:1e:91:1e:7a:f5:ae:23: c9:eb:1c:b7:23:0d:cc:56:1f:26:9a:d4:2a:b2:0a: 71:e7:49:27:24:62:a4:71:5e:80:19:a1:93:9c:34: b7:a0:53:cc:01:b7:9b:c3:9f:d0:fd:2d:41:3f:2e: 89:51:aa:76:08:e1:8f:23:47:d7:8c:dc:85:2b:8b: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5D:F6:46:A7:1D:70:A4:6D:C7:44:EB:47:18:CC:3D:FE:07:C4:BD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/53eb388c-327a-4c7b-bd49-ee5ad9558636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:2110::/44 Signature Algorithm: sha256WithRSAEncryption 58:91:9e:bc:cd:bf:32:a0:d5:17:92:27:e2:f9:ad:bb:81:9e: 8c:3e:52:28:49:7a:fd:76:4d:e1:4c:ff:23:98:62:0e:63:92: 7c:9c:bb:e3:73:79:f0:a3:07:29:a8:ee:6b:84:ca:d3:fc:d1: 19:41:01:be:bf:38:96:12:6c:46:df:a4:68:64:5e:39:67:1f: 4a:aa:f0:64:a8:ee:6d:01:f1:f2:42:21:c3:7a:aa:02:b8:e9: d2:be:e7:8d:65:03:b6:b3:f0:66:50:b2:16:91:99:bb:85:e7: f1:b9:40:c2:52:fc:71:46:f9:65:13:77:34:83:3e:80:49:50: 83:5a:8f:bb:a9:3a:27:0a:55:d9:17:b4:ac:4b:9d:43:f7:62: d0:a7:91:8c:90:47:66:ed:e6:88:6c:ea:7d:da:c6:67:1f:2a: 98:47:c0:ac:2c:f6:89:9d:ec:01:c9:31:72:b0:c3:b4:77:38: 3a:53:f1:37:6b:00:4c:0e:a9:cf:dc:36:3f:2c:c5:18:c6:6c: ce:f4:f4:36:20:39:7b:e4:8b:b4:0d:db:73:12:5f:39:df:14: 58:8d:30:ec:8e:05:9c:47:08:84:37:b8:56:f8:1c:7e:f8:a6: ba:b8:5f:e1:f7:50:3a:24:64:fe:53:de:c6:b5:2b:2d:fa:23: 65:dc:ef:f0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUgFEj8LaV6FtpwJpxwmiDtLfT48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjZmODkzNjJjYmY5N2MwOTE0YjA0MTExNDk0YzJkMzk4 ZmE0NDBhNWNlNjUwMmRmMTNiZDhhZGM5YWJmZjliMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgYIHIYJhPQ45K4aE8a1dE5RBu0d13j9dGNGs2UsbSKhlA mwFmlp29ODiPDiUV2xPkY6ai8yXMHNHt+mRbLdTXA7kDJh4/Qpg5CHhyS2BWF2Ci BT1xIzJdWoMI0HnfZXPU/NLgzUwqiYbxGiVWGhWAhB5qNlJ1u64OdwGz+++LOEe8 NdW618sgWJ6yY3+xzAK7IcHbaGPjtoRrOdbyIkPGJh2nV5AB0aijWxgc7yJoaj2A ortOzxo5kG/jHpEeevWuI8nrHLcjDcxWHyaa1CqyCnHnSSckYqRxXoAZoZOcNLeg U8wBt5vDn9D9LUE/LolRqnYI4Y8jR9eM3IUrizlTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbl32RqcdcKRtx0TrRxjMPf4HxL0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzUzZWIzODhjLTMyN2EtNGM3Yi1iZDQ5LWVlNWFkOTU1ODYzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzAIRAwDQYJKoZIhvcNAQELBQADggEBAFiRnrzNvzKg1ReSJ+L5rbuB now+UihJev12TeFM/yOYYg5jknycu+NzefCjBymo7muEytP80RlBAb6/OJYSbEbf pGhkXjlnH0qq8GSo7m0B8fJCIcN6qgK46dK+541lA7az8GZQshaRmbuF5/G5QMJS /HFG+WUTdzSDPoBJUINaj7upOicKVdkXtKxLnUP3YtCnkYyQR2bt5ohs6n3axmcf KphHwKws9omd7AHJMXKww7R3ODpT8TdrAEwOqc/cNj8sxRjGbM709DYgOXvki7QN 23MSXznfFFiNMOyOBZxHCIQ3uFb4HH74prq4X+H3UDokZP5T3sa1Ky36I2Xc7/A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:26 2025 by rpki-client