$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa File: 5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa (raw, json) Hash identifier: df8rT3iS+C8czQBhjvxmtNMTnDpnbR+OTdAfxEmZIT0= Subject key identifier: A2:10:0E:50:43:D7:2D:E6:8E:62:EA:D9:00:44:D0:D7:E9:09:AC:DB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0342F9A5E270A1924C32B839A36C1CFE6264FCF6 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:42:f9:a5:e2:70:a1:92:4c:32:b8:39:a3:6c:1c:fe:62:64:fc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:82:48:11:42:a7:87:50:d3:ee:43:05:6c: 8c:1f:4f:4d:c7:9a:15:63:55:87:fb:21:f6:3c:80: 83:bf:e0:87:06:9d:69:a1:11:bd:d4:c6:a3:80:85: 8a:b2:e2:a7:6b:83:e1:a5:a0:b2:44:47:21:96:24: 06:ea:ac:e6:8b:a1:88:fc:21:ed:dd:3d:3f:c9:dd: 7b:16:54:68:a3:1c:15:2a:a1:c5:95:da:c4:fb:f6: 97:87:bd:c3:f3:9c:a7:75:45:63:da:40:78:cb:88: 54:9a:25:70:25:05:1e:3b:06:73:57:1f:09:30:3e: a4:b1:38:af:d4:33:65:16:2d:d4:3b:28:ef:b7:77: 30:c8:07:b3:7f:b0:8c:25:7e:60:39:ec:cf:fb:2a: fe:72:84:1c:57:4d:84:02:e1:66:5f:bc:75:05:8c: 23:e9:91:73:67:c5:e5:79:5a:81:1a:69:bd:d5:a7: c3:8c:2b:e7:d5:f4:38:32:35:b2:80:c4:38:f5:3b: 07:1b:42:a6:74:bf:5b:c0:1a:3e:35:a9:33:13:18: 3e:cf:d4:be:01:ca:38:b4:e4:22:73:ef:12:f6:18: 93:54:78:8e:48:87:b9:27:eb:93:e8:75:89:45:8c: 32:01:18:1f:a3:da:9b:af:a6:f4:5d:80:37:f1:61: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:10:0E:50:43:D7:2D:E6:8E:62:EA:D9:00:44:D0:D7:E9:09:AC:DB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c16::/48 Signature Algorithm: sha256WithRSAEncryption 19:79:98:c8:2b:6e:e4:51:46:e8:b5:c2:68:b8:17:5f:86:1e: 40:0a:eb:4d:cc:bf:f3:3c:18:c8:ff:95:7d:1a:c9:b6:66:b1: ef:37:39:ca:37:d6:5b:ef:85:7f:8b:39:70:27:50:94:d7:f2: c6:e9:ab:ce:81:18:db:27:04:b2:f8:b5:0f:1c:60:35:fe:43: ba:ac:8d:0c:43:61:5f:5b:0c:17:40:83:21:3e:39:79:52:8a: 62:18:a7:be:75:b6:58:e5:cd:32:71:d1:44:27:4b:0a:3e:16: 42:1d:94:57:72:03:17:b5:6a:37:cf:aa:54:af:1f:7c:2a:a1: 1e:e0:57:7d:1b:fa:fc:a8:37:d9:04:7b:f2:db:e6:74:19:a5: 33:7d:71:d4:8a:d2:d1:8e:7d:59:60:af:b5:14:c6:fc:29:e7: cf:04:2b:2d:70:cd:1c:1b:dc:dc:94:8d:5a:50:b8:e8:a1:79: 62:01:76:62:c0:31:e6:b4:64:a6:a0:b0:89:bb:8c:db:17:22: b0:de:3b:58:f8:9d:cc:7f:87:df:94:cf:a7:a9:c3:b1:33:43: b5:b3:d6:67:7b:97:97:2d:83:01:e6:33:6c:53:c1:0d:3c:f8: a2:76:6e:a7:9a:c2:5d:14:06:e5:45:5c:c7:e5:72:d6:38:33: 83:9c:d5:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA0L5peJwoZJMMrg5o2wc/mJk/PYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYWM3NjM5YWZjNjIwNDY4MDNkNTNjYjFhZDQ0YThjYzI1 YmY1Y2U0ZDhhZWJlNDFiMDExN2I0OWFjODY0YWViMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrKIJIEUKnh1DT7kMFbIwfT03HmhVjVYf7IfY8gIO/4IcG nWmhEb3UxqOAhYqy4qdrg+GloLJERyGWJAbqrOaLoYj8Ie3dPT/J3XsWVGijHBUq ocWV2sT79peHvcPznKd1RWPaQHjLiFSaJXAlBR47BnNXHwkwPqSxOK/UM2UWLdQ7 KO+3dzDIB7N/sIwlfmA57M/7Kv5yhBxXTYQC4WZfvHUFjCPpkXNnxeV5WoEaab3V p8OMK+fV9DgyNbKAxDj1OwcbQqZ0v1vAGj41qTMTGD7P1L4Byji05CJz7xL2GJNU eI5Ih7kn65PodYlFjDIBGB+j2puvpvRdgDfxYTx1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUohAOUEPXLeaOYurZAETQ1+kJrNswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVjMzk3OWQzLWUxYzAtNGQ2ZC05NGE3LTM0YmMxZTdiM2IwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBYwDQYJKoZIhvcNAQELBQADggEBABl5mMgrbuRRRui1wmi4F1+G HkAK603Mv/M8GMj/lX0aybZmse83Oco31lvvhX+LOXAnUJTX8sbpq86BGNsnBLL4 tQ8cYDX+Q7qsjQxDYV9bDBdAgyE+OXlSimIYp751tljlzTJx0UQnSwo+FkIdlFdy Axe1ajfPqlSvH3wqoR7gV30b+vyoN9kEe/Lb5nQZpTN9cdSK0tGOfVlgr7UUxvwp 588EKy1wzRwb3NyUjVpQuOiheWIBdmLAMea0ZKagsIm7jNsXIrDeO1j4ncx/h9+U z6epw7EzQ7Wz1md7l5ctgwHmM2xTwQ08+KJ2bqeawl0UBuVFXMflctY4M4Oc1Ww= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:12 2025 by rpki-client