$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa File: a34a1cd9-a6e1-4f90-a908-a66252462eae.roa (raw, json) Hash identifier: FwZg6hi0Db6FNIHtONWHXwCV6OdADaG+gSmmHAgCo+Q= Subject key identifier: ED:9A:DF:DD:B0:E6:B2:B9:5F:DA:EC:36:48:9C:19:29:B6:47:85:A3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4DA20549D6D03E365C6142E3C5246BC0C2DB7273 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a2:05:49:d6:d0:3e:36:5c:61:42:e3:c5:24:6b:c0:c2:db:72:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:1f:fb:d3:ab:b4:56:49:91:1e:da:42:61: bd:3a:41:a7:18:5c:33:a2:9d:fa:c2:3e:36:fd:9c: c8:7a:b7:33:28:3c:69:8d:46:8f:ca:06:e8:cc:39: 72:97:03:64:5a:f0:68:38:47:51:58:64:96:f0:2f: b5:73:29:28:7f:b1:e1:6c:fe:70:c6:eb:f6:76:24: 29:e9:27:61:1b:d6:eb:da:4b:31:01:eb:a0:d5:b9: d5:86:e3:56:f9:7b:b3:39:97:d9:cb:c6:c9:27:5c: 7f:11:ee:ad:76:54:65:56:7f:e0:fc:db:4a:24:4e: d7:09:11:a0:f0:d6:db:88:1c:14:33:d5:ab:31:52: 16:31:16:5e:93:e5:d7:a8:bf:71:37:dc:8a:31:f2: fc:29:53:dc:b9:81:07:2c:90:d4:e2:39:32:d5:91: 78:bf:f1:c2:27:b3:6a:14:5a:15:66:b5:bd:40:d9: df:08:26:e9:0d:93:fb:79:ce:01:6e:8e:bd:b2:a8: 56:4b:dd:56:74:e3:07:2e:4c:f8:f1:45:4a:87:3c: 13:65:d2:d7:6d:5e:f1:9a:58:b4:b9:5e:07:cc:cb: e5:d5:4c:bf:90:8c:18:a4:16:86:67:7d:14:02:f4: 76:27:3b:2a:ec:ed:60:39:a2:5c:d7:19:c1:ac:ff: c9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:DF:DD:B0:E6:B2:B9:5F:DA:EC:36:48:9C:19:29:B6:47:85:A3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a34a1cd9-a6e1-4f90-a908-a66252462eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c15::/48 Signature Algorithm: sha256WithRSAEncryption 27:e7:e8:e2:c2:b3:21:d6:c3:16:9b:c5:dd:a4:72:ec:ed:8e: d5:43:7a:07:64:48:9d:b2:0e:0b:8e:61:30:da:43:b5:de:db: 46:37:27:0e:b2:21:0b:f9:da:fc:33:26:04:0a:e9:26:73:be: f2:d9:72:73:7d:78:e2:20:1b:cd:3b:0e:e4:07:36:3e:2e:47: 52:84:cf:be:dd:a7:a4:8f:c7:71:c4:2d:13:0b:1c:c7:2e:eb: 8f:2c:1a:d6:fd:f8:42:08:2c:13:37:53:80:2f:07:b8:49:a6: e6:af:43:bc:18:57:47:43:49:64:1c:d8:36:b7:62:f7:7b:ee: 6d:32:25:99:67:e6:26:76:f5:3b:13:83:f3:18:b8:83:09:70: fd:2c:bd:fa:8c:3b:83:df:e6:f1:7b:b2:34:79:6e:bd:8c:0a: da:44:45:1c:d8:24:70:dd:df:a9:db:83:7f:20:29:89:a5:ae: 23:7f:6b:a8:6b:f2:26:32:d4:69:96:ee:f5:d6:58:d5:8f:f7: ec:9a:3f:af:91:39:56:b6:37:f6:1e:06:20:2a:b9:9f:cb:61: df:e8:bf:70:01:27:47:c7:ea:a2:e4:80:3a:50:01:cc:22:a8: c9:e6:ee:1e:5d:8e:31:97:da:a8:ff:de:5e:8a:26:aa:1d:a7: e4:9e:99:6f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTaIFSdbQPjZcYULjxSRrwMLbcnMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjVkYzFmNjU5MTM1YmIzNGU0MmQ4NmU0MWZlNWYyNzNh MGEzOGIzNDg3YjllM2UzYjQ1MDEzMDg2MzViMGNlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEER/706u0VkmRHtpCYb06QacYXDOinfrCPjb9nMh6tzMo PGmNRo/KBujMOXKXA2Ra8Gg4R1FYZJbwL7VzKSh/seFs/nDG6/Z2JCnpJ2Eb1uva SzEB66DVudWG41b5e7M5l9nLxsknXH8R7q12VGVWf+D820okTtcJEaDw1tuIHBQz 1asxUhYxFl6T5deov3E33Iox8vwpU9y5gQcskNTiOTLVkXi/8cIns2oUWhVmtb1A 2d8IJukNk/t5zgFujr2yqFZL3VZ04wcuTPjxRUqHPBNl0tdtXvGaWLS5XgfMy+XV TL+QjBikFoZnfRQC9HYnOyrs7WA5olzXGcGs/8nXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7Zrf3bDmsrlf2uw2SJwZKbZHhaMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EzNGExY2Q5LWE2ZTEtNGY5MC1hOTA4LWE2NjI1MjQ2MmVhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBUwDQYJKoZIhvcNAQELBQADggEBACfn6OLCsyHWwxabxd2kcuzt jtVDegdkSJ2yDguOYTDaQ7Xe20Y3Jw6yIQv52vwzJgQK6SZzvvLZcnN9eOIgG807 DuQHNj4uR1KEz77dp6SPx3HELRMLHMcu648sGtb9+EIILBM3U4AvB7hJpuavQ7wY V0dDSWQc2Da3Yvd77m0yJZln5iZ29TsTg/MYuIMJcP0svfqMO4Pf5vF7sjR5br2M CtpERRzYJHDd36nbg38gKYmlriN/a6hr8iYy1GmW7vXWWNWP9+yaP6+ROVa2N/Ye BiAquZ/LYd/ov3ABJ0fH6qLkgDpQAcwiqMnm7h5djjGX2qj/3l6KJqodp+SemW8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:20 2025 by rpki-client