$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa File: a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa (raw, json) Hash identifier: aSCN7u+R1B2RNvC9UhLDGF93XtDbxTsaiwlozDuUfjw= Subject key identifier: 83:C6:99:88:18:6A:C6:DC:57:2C:C6:64:02:59:A7:1C:51:36:63:CB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6123055A0C07279F63B25B933F6359A02E43FF79 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:23:05:5a:0c:07:27:9f:63:b2:5b:93:3f:63:59:a0:2e:43:ff:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:65:03:4b:2b:0d:af:79:c7:e8:0b:22:1c:31: 94:8e:2a:1a:21:ad:52:53:46:43:ac:31:5a:8f:bf: ba:82:b1:1e:4d:52:62:75:31:a5:66:a6:61:b8:f1: 8a:c9:15:1a:69:11:11:88:cc:da:e3:ea:27:ed:a5: 8c:32:5f:b1:8c:cc:ff:15:0d:da:10:d2:71:ef:33: 7c:d8:40:7e:21:1f:13:3a:15:db:03:f7:a0:59:c8: d7:f0:e7:1c:c4:b8:3c:f9:f1:f0:c2:06:68:fb:95: ed:5b:bb:19:09:57:2d:74:8e:00:00:0b:46:27:0a: 1d:f3:4e:bc:78:fb:fd:7e:5a:5b:c4:be:11:23:03: d3:79:33:18:db:86:2e:ef:d5:b6:0e:f1:f3:c2:86: 77:27:e9:6d:06:9a:88:3f:30:8d:93:07:5a:77:87: 4d:f7:fd:fb:4b:29:e3:0d:d8:cc:19:5d:df:b4:c5: 63:34:94:29:80:e9:dc:e6:a5:20:0c:c0:d8:d5:b7: e6:bc:b7:d5:dc:62:4c:93:5e:05:1b:57:d8:54:d5: c9:cc:c8:64:25:1b:8a:19:6c:76:aa:ed:a2:18:3e: 52:d6:79:9c:a6:a3:76:fa:fd:3f:82:77:e5:6f:50: 1a:c5:fb:07:f2:80:f9:32:3b:bf:d8:50:e8:8c:47: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C6:99:88:18:6A:C6:DC:57:2C:C6:64:02:59:A7:1C:51:36:63:CB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0e::/48 Signature Algorithm: sha256WithRSAEncryption 1c:42:f3:a3:f8:d3:95:d2:cf:98:48:44:c6:69:7b:e2:18:d8: 4f:1a:72:ae:62:9e:39:fc:2b:c2:26:7f:81:fe:11:6d:4e:32: 7f:d1:14:57:0a:64:3b:ec:1e:b4:fd:8f:2c:71:c5:7b:a3:9d: 45:fd:38:85:eb:84:5a:80:7c:9c:ce:db:31:8e:43:33:e9:3b: 91:c5:30:2d:8e:94:a0:a9:87:33:cc:1a:03:b7:87:0f:9d:f7: f3:37:01:30:47:f9:4a:7e:f4:8f:42:b5:66:c7:9a:30:f3:d4: a2:62:63:ba:a3:a7:ca:79:3e:ec:63:e5:6d:c0:92:9d:e9:12: dc:12:f4:1e:27:56:cf:2c:a5:34:61:d0:f0:56:00:91:51:a3: d1:5d:bf:17:5a:36:db:f2:49:59:f5:55:03:b9:e5:7f:df:dd: 28:d5:0b:88:fd:7e:4f:24:c4:8e:98:3c:b5:40:b5:ac:31:a0: 78:df:41:93:3d:4f:7b:89:a5:d2:3a:9d:db:33:85:77:96:d8: e4:52:60:21:c5:79:df:93:49:d8:f2:73:b4:8e:9d:bf:63:2b: a2:6b:ff:6b:c5:18:03:b2:29:2b:94:e8:c9:a5:92:4d:2a:d2: 16:c8:0e:92:0f:da:c2:d7:e7:85:b3:f8:cd:64:72:fa:07:35: 3e:ba:92:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYSMFWgwHJ59jsluTP2NZoC5D/3kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmE0ODZmYTNlNzY1Zjk4YzM5NDcwNjA4ZTAzZTFhNzdl NDE5MGZjMTM5ZmE5ZjQ5ZTk5MDA4MWI2MWFkZGFmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhZQNLKw2vecfoCyIcMZSOKhohrVJTRkOsMVqPv7qCsR5N UmJ1MaVmpmG48YrJFRppERGIzNrj6iftpYwyX7GMzP8VDdoQ0nHvM3zYQH4hHxM6 FdsD96BZyNfw5xzEuDz58fDCBmj7le1buxkJVy10jgAAC0YnCh3zTrx4+/1+WlvE vhEjA9N5Mxjbhi7v1bYO8fPChncn6W0Gmog/MI2TB1p3h033/ftLKeMN2MwZXd+0 xWM0lCmA6dzmpSAMwNjVt+a8t9XcYkyTXgUbV9hU1cnMyGQlG4oZbHaq7aIYPlLW eZymo3b6/T+Cd+VvUBrF+wfygPkyO7/YUOiMRzfpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUg8aZiBhqxtxXLMZkAlmnHFE2Y8swHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EwZmNkZDdiLTVhOTQtNDYwOC05YmNhLTBlM2NmNTU0OTM3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA4wDQYJKoZIhvcNAQELBQADggEBABxC86P405XSz5hIRMZpe+IY 2E8acq5injn8K8Imf4H+EW1OMn/RFFcKZDvsHrT9jyxxxXujnUX9OIXrhFqAfJzO 2zGOQzPpO5HFMC2OlKCphzPMGgO3hw+d9/M3ATBH+Up+9I9CtWbHmjDz1KJiY7qj p8p5Puxj5W3Akp3pEtwS9B4nVs8spTRh0PBWAJFRo9FdvxdaNtvySVn1VQO55X/f 3SjVC4j9fk8kxI6YPLVAtawxoHjfQZM9T3uJpdI6ndszhXeW2ORSYCHFed+TSdjy c7SOnb9jK6Jr/2vFGAOyKSuU6Mmlkk0q0hbIDpIP2sLX54Wz+M1kcvoHNT66khs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:51 2025 by rpki-client