$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9f1df9bd-4697-4bd9-97df-7666a8616587.roa File: 9f1df9bd-4697-4bd9-97df-7666a8616587.roa (raw, json) Hash identifier: EzjPDyjPBxznDXWc5RLsoaGEwrpYCYegQukMfScBFao= Subject key identifier: 2F:91:99:20:43:2D:CF:A9:81:01:AF:4E:11:87:A4:4D:8C:40:28:B2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1A40E23202D0F8460D6851546826C378540B7565 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9f1df9bd-4697-4bd9-97df-7666a8616587.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:328::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:40:e2:32:02:d0:f8:46:0d:68:51:54:68:26:c3:78:54:0b:75:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:62:ea:b3:54:16:9d:97:66:b6:c4:ad:b9:87: e8:6f:47:b6:fc:3f:48:40:ed:73:c0:e8:63:cb:09: 7f:e1:83:f2:30:ba:11:0b:55:2a:5a:9d:3b:d2:c5: 4a:85:68:80:f3:bc:ff:e2:58:e5:7b:cf:10:1b:b6: ac:b5:73:c7:b8:85:93:6f:a6:5a:b5:06:8d:ad:1f: eb:14:d9:dc:85:4c:da:2b:0a:3d:79:6d:20:93:0c: 82:d8:52:5e:3a:59:06:76:dd:97:94:0c:44:96:a5: de:02:8b:3b:86:ee:60:71:e1:6e:ee:e3:92:1f:2c: ca:f6:23:d0:7e:3f:37:34:87:2d:2d:85:ae:65:d2: 7a:7f:39:36:51:7c:94:a4:80:b5:ae:02:65:b9:17: 4e:ff:92:75:e5:35:cb:11:da:c5:e3:eb:b8:49:d4: 50:2f:30:17:df:54:65:b2:78:49:27:88:04:cb:39: 36:c9:61:4e:5c:75:5a:fa:e5:96:1e:e6:f4:50:e6: af:72:39:91:9c:34:77:3f:76:c9:bb:61:ef:da:83: ad:bd:4f:66:0d:bd:3b:0e:07:be:59:47:eb:28:ee: 61:08:3c:40:56:3b:18:46:ed:4b:aa:fa:8f:4e:b1: 34:e0:bd:b1:82:a8:0c:64:82:d3:14:03:80:fa:c6: 03:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:91:99:20:43:2D:CF:A9:81:01:AF:4E:11:87:A4:4D:8C:40:28:B2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9f1df9bd-4697-4bd9-97df-7666a8616587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:328::/48 Signature Algorithm: sha256WithRSAEncryption 88:90:b4:94:13:b4:28:02:c1:d8:0c:a2:84:97:d7:21:08:48: fa:17:f9:39:2d:93:b7:96:62:cd:27:24:ad:cc:23:0e:b8:88: 5b:9f:50:aa:79:84:f1:98:39:6d:f9:e9:9a:c0:7a:30:de:0d: 56:d9:cd:b9:cd:a6:28:12:b4:99:5f:af:76:d4:c3:e2:a4:f1: 21:d8:40:b8:16:00:12:3e:4a:7c:28:75:ea:8e:49:b2:31:9a: 9d:18:56:c9:35:1b:15:71:c3:d9:65:02:41:ca:e4:d7:c8:5d: 8c:55:1c:6f:24:df:a6:30:93:33:a7:37:f2:c7:e9:10:4b:b9: 06:07:a2:a6:40:31:0a:77:0c:d8:9e:32:83:fe:82:1d:d6:74: d8:89:1e:ef:49:2a:cf:16:9a:97:14:58:c7:b4:79:51:82:49: e2:d2:75:99:b1:d9:e3:fa:9d:9d:28:d3:11:57:72:5e:40:a6: 20:22:4e:dd:9e:20:77:1d:90:46:01:f7:74:9e:4a:3c:06:30: 54:34:04:b2:8a:53:c1:5d:cb:9b:01:63:a0:ce:39:9d:dc:58: aa:5d:1d:ca:53:d4:d8:7f:a1:15:36:ca:23:fe:bd:cb:69:fd: a8:88:02:59:c4:4c:34:d4:62:2d:63:4a:90:4e:2f:13:cc:ca: 01:95:85:fd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGkDiMgLQ+EYNaFFUaCbDeFQLdWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTc3NjJjOWJiZjAxODY1ODIyMTg5NTBjOTUwM2E2MjVh N2M3YTZiNGQ2ZDY1NTQ1NDQ4ZDQxODNjZDBhMjFkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrYuqzVBadl2a2xK25h+hvR7b8P0hA7XPA6GPLCX/hg/Iw uhELVSpanTvSxUqFaIDzvP/iWOV7zxAbtqy1c8e4hZNvplq1Bo2tH+sU2dyFTNor Cj15bSCTDILYUl46WQZ23ZeUDESWpd4CizuG7mBx4W7u45IfLMr2I9B+Pzc0hy0t ha5l0np/OTZRfJSkgLWuAmW5F07/knXlNcsR2sXj67hJ1FAvMBffVGWyeEkniATL OTbJYU5cdVr65ZYe5vRQ5q9yOZGcNHc/dsm7Ye/ag629T2YNvTsOB75ZR+so7mEI PEBWOxhG7Uuq+o9OsTTgvbGCqAxkgtMUA4D6xgMNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUL5GZIEMtz6mBAa9OEYekTYxAKLIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzlmMWRmOWJkLTQ2OTctNGJkOS05N2RmLTc2NjZhODYxNjU4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAygwDQYJKoZIhvcNAQELBQADggEBAIiQtJQTtCgCwdgMooSX1yEI SPoX+Tktk7eWYs0nJK3MIw64iFufUKp5hPGYOW356ZrAejDeDVbZzbnNpigStJlf r3bUw+Kk8SHYQLgWABI+SnwodeqOSbIxmp0YVsk1GxVxw9llAkHK5NfIXYxVHG8k 36YwkzOnN/LH6RBLuQYHoqZAMQp3DNieMoP+gh3WdNiJHu9JKs8WmpcUWMe0eVGC SeLSdZmx2eP6nZ0o0xFXcl5ApiAiTt2eIHcdkEYB93SeSjwGMFQ0BLKKU8Fdy5sB Y6DOOZ3cWKpdHcpT1Nh/oRU2yiP+vctp/aiIAlnETDTUYi1jSpBOLxPMygGVhf0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:24 2025 by rpki-client