$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/91d3d8ea-8280-4f13-9d3e-db15c03ae61c.roa File: 91d3d8ea-8280-4f13-9d3e-db15c03ae61c.roa (raw, json) Hash identifier: 3YYY8BixOrp2DPn1wHCsntetc2q5FtS8Ey/fn3p+TAg= Subject key identifier: 5B:42:64:A2:45:3C:5D:81:7D:E1:B1:D4:77:25:3B:09:0D:1B:91:C6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2F8F985323B628937D053863165C31BF4D5A94D0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/91d3d8ea-8280-4f13-9d3e-db15c03ae61c.roa Signing time: Tue 18 Feb 2025 16:40:13 +0000 ROA not before: Tue 18 Feb 2025 16:40:13 +0000 ROA not after: Tue 25 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8f:98:53:23:b6:28:93:7d:05:38:63:16:5c:31:bf:4d:5a:94:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 18 16:40:13 2025 GMT Not After : Mar 25 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:ce:9b:18:f6:17:e3:d1:d5:16:04:9a:1e: 4b:f6:fe:22:57:ea:e8:ae:a9:36:f9:16:a8:19:05: 0a:17:8c:94:70:7f:4c:6d:f6:7e:b8:7d:09:6f:3c: 7e:43:68:a7:cc:66:4a:37:d1:c3:03:78:1e:9a:c8: 68:97:5c:7a:3c:a4:67:b3:cb:41:b2:38:dc:5a:dc: 30:4b:7e:09:4a:c1:c4:bb:92:65:51:54:57:21:48: aa:ac:0e:14:c6:a5:00:7c:f9:d7:82:93:1e:8c:c7: 55:9d:c1:2f:37:d9:ca:47:6d:03:77:0c:84:82:ae: 7b:22:13:1e:cd:fb:bd:92:87:13:34:44:1a:38:8d: 15:f2:76:11:83:1c:c6:31:7f:17:34:c0:f4:59:12: 61:05:9f:9b:2d:ea:04:8e:d9:28:d0:1b:6c:28:b6: a9:19:14:fe:a7:17:18:61:ac:92:a8:3b:32:f9:28: b4:83:e3:91:04:ab:63:be:a0:d7:7a:27:ba:27:4e: b1:eb:3d:cd:25:92:f0:c7:5f:26:f9:18:3a:44:78: 70:18:f5:7b:f1:0a:35:c9:3c:f3:02:ae:8e:65:3e: df:16:c9:32:d9:9a:b3:57:5e:f2:e7:4e:b1:a5:99: 7f:7f:01:1e:43:7d:a4:44:80:b7:70:27:ce:b8:21: 93:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:64:A2:45:3C:5D:81:7D:E1:B1:D4:77:25:3B:09:0D:1B:91:C6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/91d3d8ea-8280-4f13-9d3e-db15c03ae61c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1e::/48 Signature Algorithm: sha256WithRSAEncryption 13:c7:c8:bd:63:d5:9d:76:64:70:45:e7:4f:2e:6c:75:05:ec: e9:00:f7:50:80:79:5f:d2:b4:a1:e0:d1:af:1e:45:7e:37:56: c9:cd:71:56:b5:7c:ab:fe:e2:e8:58:27:14:6d:be:7c:e6:3c: 07:1c:e0:aa:f1:3f:78:3a:7b:7e:2d:1e:d5:71:95:4b:dd:10: c8:01:53:47:00:ae:3d:5a:aa:a3:be:10:f3:c2:17:8e:b6:26: 8f:a3:05:20:63:00:af:49:29:d5:64:18:2e:eb:0f:42:15:7a: a8:2c:72:6b:c9:86:e8:30:11:8e:fd:6f:dc:58:9e:f1:d6:1b: 4b:54:bf:ec:45:ca:ea:b7:55:8c:f3:3f:85:67:db:e6:7b:ac: cd:70:08:67:04:9a:95:ea:06:b9:22:65:b5:31:ca:f9:f8:5d: cd:ae:93:51:e2:65:91:11:d3:75:95:35:da:c1:93:84:c4:16: 97:ad:f6:d5:7e:a9:e1:bf:4d:ae:13:8a:20:a4:55:54:05:dc: eb:fe:56:f8:ca:90:c5:bb:43:b0:21:65:57:b7:65:1b:a6:c8: 60:23:d0:c9:59:97:37:ec:10:cd:7f:e7:24:5f:54:4f:76:9f: fc:98:e4:11:4b:2c:53:4d:fc:52:e4:b9:7a:5b:56:2a:a6:c3: 1a:ed:fd:dc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL4+YUyO2KJN9BThjFlwxv01alNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjE4MTY0MDEzWhcNMjUwMzI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Mjg5MWFlNWEwYjZkNmRjY2JlYTVlNjI4ZDkxOTY4NWVm ZGExMzU2MmRiNTI1OGMxZDdjNmE4NjE4MmE5OTc0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAgM6bGPYX49HVFgSaHkv2/iJX6uiuqTb5FqgZBQoXjJRw f0xt9n64fQlvPH5DaKfMZko30cMDeB6ayGiXXHo8pGezy0GyONxa3DBLfglKwcS7 kmVRVFchSKqsDhTGpQB8+deCkx6Mx1WdwS832cpHbQN3DISCrnsiEx7N+72ShxM0 RBo4jRXydhGDHMYxfxc0wPRZEmEFn5st6gSO2SjQG2wotqkZFP6nFxhhrJKoOzL5 KLSD45EEq2O+oNd6J7onTrHrPc0lkvDHXyb5GDpEeHAY9XvxCjXJPPMCro5lPt8W yTLZmrNXXvLnTrGlmX9/AR5DfaREgLdwJ864IZORAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW0JkokU8XYF94bHUdyU7CQ0bkcYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzkxZDNkOGVhLTgyODAtNGYxMy05ZDNlLWRiMTVjMDNhZTYxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB4wDQYJKoZIhvcNAQELBQADggEBABPHyL1j1Z12ZHBF508ubHUF 7OkA91CAeV/StKHg0a8eRX43VsnNcVa1fKv+4uhYJxRtvnzmPAcc4KrxP3g6e34t HtVxlUvdEMgBU0cArj1aqqO+EPPCF462Jo+jBSBjAK9JKdVkGC7rD0IVeqgscmvJ hugwEY79b9xYnvHWG0tUv+xFyuq3VYzzP4Vn2+Z7rM1wCGcEmpXqBrkiZbUxyvn4 Xc2uk1HiZZER03WVNdrBk4TEFpet9tV+qeG/Ta4TiiCkVVQF3Ov+VvjKkMW7Q7Ah ZVe3ZRumyGAj0MlZlzfsEM1/5yRfVE92n/yY5BFLLFNN/FLkuXpbViqmwxrt/dw= -----END CERTIFICATE-----Generated at Thu Mar 13 23:52:45 2025 by rpki-client