$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa File: b2adff31-40d2-4cca-afbd-993e0bc90554.roa (raw, json) Hash identifier: BG33PqWEP7wZH8r/GcH5xOje7eEuzFv+Uh8EKTiBHr8= Subject key identifier: 87:CC:64:E3:B4:09:E9:58:9E:6F:23:30:CD:78:53:27:F1:C2:3B:82 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0E767B0FE3143071EB1CCBFD2E898BFA02C868FB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:54b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:76:7b:0f:e3:14:30:71:eb:1c:cb:fd:2e:89:8b:fa:02:c8:68:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:19:63:ef:c8:87:d4:d6:d4:7a:08:fb:ad: f6:a8:f1:87:ed:44:8e:6e:a5:8d:8a:71:84:dc:1a: bc:51:4e:c5:f8:4e:42:07:75:50:29:a4:46:24:85: 07:b4:39:93:cd:92:61:d0:e6:03:5e:0c:74:3e:af: 23:f9:f4:2e:da:f5:ca:af:9f:cc:f1:94:e2:5f:b5: 80:da:d2:8a:55:c5:d0:96:31:6b:21:d4:53:4f:76: 95:81:21:73:d4:a2:c0:f7:2e:08:e0:6a:f8:f0:46: 21:58:e7:de:ae:8c:de:36:7d:aa:18:da:5a:97:a0: 57:7b:3a:dd:1a:af:b4:f5:57:20:9b:3f:10:38:14: 5e:c9:78:4a:e7:52:c1:b2:9a:7e:f0:ce:61:ca:97: 5f:4c:d9:92:dd:74:f2:5b:0b:1c:31:74:5e:bc:2a: 38:d8:b2:2b:db:f0:3b:66:8f:85:e8:fa:27:e2:c8: 79:f0:c3:2a:b8:46:73:04:b0:19:02:52:ee:44:72: 0a:4f:18:33:06:61:84:13:c5:95:6e:eb:f4:69:ca: 8c:14:c6:13:df:2e:6a:64:6e:2d:0c:df:7d:18:96: e2:0c:15:83:a8:ae:75:69:d1:71:cd:c1:a9:1f:33: ba:c8:e7:53:ba:18:5a:20:6e:fb:5d:ce:bb:30:da: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CC:64:E3:B4:09:E9:58:9E:6F:23:30:CD:78:53:27:F1:C2:3B:82 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54b::/48 Signature Algorithm: sha256WithRSAEncryption 09:c6:53:3f:8e:e1:da:26:4a:2b:03:38:d8:73:4e:36:09:31: e5:4e:27:ff:76:91:fe:71:7b:e5:47:15:99:ea:e4:90:6b:a3: 0e:af:65:6b:0e:d4:7f:ea:4f:2d:f5:99:47:b9:b1:db:45:08: 97:fd:3b:83:31:fc:dc:61:65:57:1c:ae:9a:c9:0a:e1:d6:b9: e0:c3:af:f4:ba:a8:5c:1f:18:53:ea:4c:10:2f:12:14:03:0c: be:b8:45:4e:3b:a7:06:a2:72:3e:76:c4:fe:0d:bc:60:3f:d0: ca:a1:a6:6e:44:84:1d:d2:ef:c9:c1:dd:10:e5:30:51:ea:95: 5f:1b:36:30:c9:9f:14:89:94:15:c2:b5:29:09:49:cd:b8:3b: ab:1d:b6:0a:ca:55:10:0f:36:2a:20:88:5f:f5:53:67:b3:33: 04:1e:40:17:ed:37:a3:38:3b:f2:40:c2:74:18:6e:71:e9:f3: 2f:7a:ba:0d:f4:ec:24:75:52:d5:aa:68:a4:a0:79:5a:bc:21: 73:bb:38:99:58:e7:51:26:22:df:30:a2:cc:52:9b:c8:d5:82: f4:05:a5:54:b0:75:f9:f9:2a:6f:5a:36:7e:dd:e8:ce:ad:5b: 80:4d:90:69:23:76:41:24:3e:38:de:56:09:df:66:01:01:a7: b9:6f:08:1a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDnZ7D+MUMHHrHMv9LomL+gLIaPswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjdhN2U3OGY2YjFhYjdlYTkwNDZkMTVlODE4NTM2YWUy ZjQzNWZlNzZiYTM2YzUyYjQ4YTRkMTdmNzA3ZjhkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHPxlj78iH1NbUegj7rfao8YftRI5upY2KcYTcGrxRTsX4 TkIHdVAppEYkhQe0OZPNkmHQ5gNeDHQ+ryP59C7a9cqvn8zxlOJftYDa0opVxdCW MWsh1FNPdpWBIXPUosD3LgjgavjwRiFY596ujN42faoY2lqXoFd7Ot0ar7T1VyCb PxA4FF7JeErnUsGymn7wzmHKl19M2ZLddPJbCxwxdF68KjjYsivb8Dtmj4Xo+ifi yHnwwyq4RnMEsBkCUu5EcgpPGDMGYYQTxZVu6/RpyowUxhPfLmpkbi0M330YluIM FYOornVp0XHNwakfM7rI51O6GFogbvtdzrsw2prVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUh8xk47QJ6ViebyMwzXhTJ/HCO4IwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IyYWRmZjMxLTQwZDItNGNjYS1hZmJkLTk5M2UwYmM5MDU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUswDQYJKoZIhvcNAQELBQADggEBAAnGUz+O4domSisDONhzTjYJ MeVOJ/92kf5xe+VHFZnq5JBrow6vZWsO1H/qTy31mUe5sdtFCJf9O4Mx/NxhZVcc rprJCuHWueDDr/S6qFwfGFPqTBAvEhQDDL64RU47pwaicj52xP4NvGA/0Mqhpm5E hB3S78nB3RDlMFHqlV8bNjDJnxSJlBXCtSkJSc24O6sdtgrKVRAPNiogiF/1U2ez MwQeQBftN6M4O/JAwnQYbnHp8y96ug307CR1UtWqaKSgeVq8IXO7OJlY51EmIt8w osxSm8jVgvQFpVSwdfn5Km9aNn7d6M6tW4BNkGkjdkEkPjjeVgnfZgEBp7lvCBo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:22 2025 by rpki-client