$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/765f48e5-44b1-48b9-95bd-4fb6610759f1.roa File: 765f48e5-44b1-48b9-95bd-4fb6610759f1.roa (raw, json) Hash identifier: clydHfuVJgh0foBl4G5MtMYv+IFOfJ1CEr0FWb72rxo= Subject key identifier: C5:5D:E6:E5:3E:4C:57:D5:2E:BE:5D:1A:BA:AE:9D:E1:4B:46:0A:CB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5FAEAFF852410D05BB5476E393CD0AD10D48618E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/765f48e5-44b1-48b9-95bd-4fb6610759f1.roa Signing time: Tue 18 Feb 2025 16:30:04 +0000 ROA not before: Tue 18 Feb 2025 16:30:04 +0000 ROA not after: Tue 25 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ae:af:f8:52:41:0d:05:bb:54:76:e3:93:cd:0a:d1:0d:48:61:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 18 16:30:04 2025 GMT Not After : Mar 25 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ac:fc:f1:98:d8:de:ab:97:a1:14:a3:06:1c: 71:62:57:a3:24:0e:93:d7:79:67:d4:9d:5a:72:9f: d8:6a:d9:b1:4d:fd:e9:e5:39:1a:cb:97:74:29:7d: 0e:0f:54:18:66:c2:6f:11:bd:be:75:53:12:73:05: e3:80:e3:96:dc:05:3a:55:2d:02:83:f0:4b:c5:77: d9:3a:8e:46:57:8c:dc:6c:81:9f:93:db:7f:12:84: 7b:be:6e:64:2e:e7:fb:b1:ac:8b:e3:68:58:03:17: 70:1e:a6:64:08:11:3b:fc:a1:48:72:5c:03:fc:6a: 94:f8:1d:03:5c:fe:1c:86:76:16:0a:7a:40:f9:ee: 90:22:4d:d6:6f:41:a9:c1:5c:43:a1:78:8c:09:38: 4c:aa:a4:71:26:6e:f5:c4:84:34:4d:1a:df:02:ae: 04:c6:2f:82:17:be:e9:3d:5d:e7:ff:b3:22:1c:7b: e0:db:c3:af:14:6b:99:dc:83:60:ad:4d:2e:30:e0: fc:57:38:19:c1:8b:67:ef:17:ab:5a:09:a7:f9:f0: 85:b4:76:24:a3:98:be:ca:15:b3:5c:68:49:17:17: 26:c0:65:e4:dc:33:60:42:9e:47:a9:dc:ee:9c:4a: e1:c9:98:7d:c9:18:b0:67:bf:cd:cb:11:27:21:a6: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5D:E6:E5:3E:4C:57:D5:2E:BE:5D:1A:BA:AE:9D:E1:4B:46:0A:CB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/765f48e5-44b1-48b9-95bd-4fb6610759f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c17::/48 Signature Algorithm: sha256WithRSAEncryption 06:46:62:ae:67:67:59:1c:11:c1:16:1b:3f:55:90:7f:75:ed: 79:e7:58:79:31:67:f9:a0:40:d6:de:13:79:e3:9f:10:8e:07: 76:5b:4a:96:f0:32:fc:e6:15:61:4c:d9:36:37:bc:be:14:6e: bc:0c:34:43:f1:05:23:12:a3:af:6f:73:1c:5c:29:a2:91:28: 3d:49:ca:c6:2e:69:91:4b:42:12:28:80:03:c0:ac:25:2f:f5: 89:f4:f0:46:d7:0a:9c:58:08:c6:df:d3:bd:99:f2:2b:ca:80: 76:df:5d:49:97:92:68:d9:9c:e1:c3:5e:03:27:67:f1:9b:ae: d6:63:45:0b:ca:78:58:ae:7f:7c:5c:af:76:ce:3b:80:d4:b1: 79:f1:91:af:57:9b:fd:ba:b3:a4:22:23:cb:81:41:34:ff:7d: a3:03:ad:78:7b:85:e5:b2:7b:04:f9:ee:e4:1a:fb:d2:c8:ec: 2d:09:7d:0c:e6:e4:5f:61:8f:97:9f:ad:95:0d:ec:d4:c9:b3: 8b:54:fa:77:67:1e:cf:49:52:c0:72:04:08:f1:d8:28:8a:48: d1:41:47:35:01:54:06:3f:36:27:ec:f2:ce:35:f4:fa:0b:48: 69:ef:7c:79:59:1b:90:3d:14:c8:27:7a:41:cf:b7:21:e6:0f: a4:9a:71:f0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX66v+FJBDQW7VHbjk80K0Q1IYY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjE4MTYzMDA0WhcNMjUwMzI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGFjYjYyY2JkZGQ3ZjUwN2U2MTVhZjRjYzcwZjRjNWU3 NTlhNTI4MDM0OGRlOGQ1NzkxNTMwMWQ5Yzk4YmVkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDirPzxmNjeq5ehFKMGHHFiV6MkDpPXeWfUnVpyn9hq2bFN /enlORrLl3QpfQ4PVBhmwm8Rvb51UxJzBeOA45bcBTpVLQKD8EvFd9k6jkZXjNxs gZ+T238ShHu+bmQu5/uxrIvjaFgDF3AepmQIETv8oUhyXAP8apT4HQNc/hyGdhYK ekD57pAiTdZvQanBXEOheIwJOEyqpHEmbvXEhDRNGt8CrgTGL4IXvuk9Xef/syIc e+Dbw68Ua5ncg2CtTS4w4PxXOBnBi2fvF6taCaf58IW0diSjmL7KFbNcaEkXFybA ZeTcM2BCnkep3O6cSuHJmH3JGLBnv83LESchpjK1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxV3m5T5MV9Uuvl0auq6d4UtGCsswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzc2NWY0OGU1LTQ0YjEtNDhiOS05NWJkLTRmYjY2MTA3NTlmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBcwDQYJKoZIhvcNAQELBQADggEBAAZGYq5nZ1kcEcEWGz9VkH91 7XnnWHkxZ/mgQNbeE3njnxCOB3ZbSpbwMvzmFWFM2TY3vL4UbrwMNEPxBSMSo69v cxxcKaKRKD1JysYuaZFLQhIogAPArCUv9Yn08EbXCpxYCMbf072Z8ivKgHbfXUmX kmjZnOHDXgMnZ/GbrtZjRQvKeFiuf3xcr3bOO4DUsXnxka9Xm/26s6QiI8uBQTT/ faMDrXh7heWyewT57uQa+9LI7C0JfQzm5F9hj5efrZUN7NTJs4tU+ndnHs9JUsBy BAjx2CiKSNFBRzUBVAY/Nifs8s419PoLSGnvfHlZG5A9FMgnekHPtyHmD6SacfA= -----END CERTIFICATE-----Generated at Thu Mar 13 23:54:37 2025 by rpki-client