$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa File: bc9bb346-4bd0-43e3-9369-a842e8d67346.roa (raw, json) Hash identifier: 42WR2CGPfj2UO0Y+dUBXdqPIuIMSNselqKZ39q8nCoE= Subject key identifier: C9:85:06:4B:75:F8:AD:1C:5E:42:29:57:A7:FF:3E:AB:7E:3E:FC:68 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0EB0F1E37C895671673C34C9EF56291E8E36BDC2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa Signing time: Tue 14 Jan 2025 00:00:00 +0000 ROA not before: Tue 14 Jan 2025 00:00:00 +0000 ROA not after: Tue 18 Feb 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:610::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b0:f1:e3:7c:89:56:71:67:3c:34:c9:ef:56:29:1e:8e:36:bd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 14 00:00:00 2025 GMT Not After : Feb 18 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:6f:05:7f:85:2d:0a:58:c2:c6:8d:17:84: 81:73:28:0f:7f:3f:0b:ac:03:44:4e:dd:0e:f2:85: fa:f4:3d:44:02:e0:f2:62:c1:c3:7e:51:11:8d:de: b2:17:94:bc:56:a7:1e:15:e8:ba:a8:3b:21:cb:6a: a2:7f:2d:28:e0:45:3e:fe:8b:7f:be:db:45:1c:3b: da:63:95:ee:f0:06:e9:21:80:38:17:bd:63:fa:57: b4:33:ed:52:b1:3a:49:24:17:ee:ea:85:80:de:bc: 0f:d0:1b:a5:d8:e9:1f:0f:4c:3c:5a:62:d1:20:60: 9a:c0:0a:b5:3f:70:05:15:dc:ee:94:da:91:8f:45: 5e:36:a2:ea:12:bf:ef:29:f8:12:f2:c3:98:98:d1: 6b:c7:e1:85:77:67:af:1c:4a:64:00:2e:9a:6d:3c: 9a:a3:f1:75:cf:b8:01:7b:cf:3f:b0:b9:34:06:c8: f6:20:9d:f1:d0:07:6e:70:9b:d1:ea:dc:39:74:fa: ec:bf:0c:90:99:d9:93:f9:f9:4e:e8:29:21:94:b5: 2f:5a:be:5d:2f:49:36:0a:f6:d3:72:20:0a:ce:cc: 65:6d:76:72:7b:e9:5c:1c:0c:ea:e1:12:f6:2e:72: f8:a9:67:d8:fa:e5:2c:af:b9:45:2b:70:83:9f:76: c6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:85:06:4B:75:F8:AD:1C:5E:42:29:57:A7:FF:3E:AB:7E:3E:FC:68 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc9bb346-4bd0-43e3-9369-a842e8d67346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:610::/48 Signature Algorithm: sha256WithRSAEncryption 41:ad:7b:56:61:32:89:6e:b6:4a:16:df:6d:91:e7:4b:13:97: 4a:ac:12:09:4a:5d:b4:68:96:99:bf:de:7d:7c:2c:e6:04:88: c7:41:f2:20:ce:d9:be:9e:86:39:68:84:e6:c6:e8:9a:ee:97: ec:e3:e2:cf:29:07:9b:92:93:d5:c0:bf:7c:ff:fd:25:cc:2b: 8d:9f:67:ed:03:50:df:45:55:0a:f4:cf:83:b7:41:4e:10:f9: 43:02:4a:9f:b5:52:c2:d2:49:7b:f3:26:63:e6:a6:ec:ef:c9: d1:33:4c:77:f2:47:aa:29:18:f5:07:67:cf:2a:83:61:63:dc: ae:1f:07:f9:aa:7b:75:c6:a7:b3:05:f0:dc:5a:8a:8d:38:f3: b9:a5:63:94:bb:44:00:19:0a:20:af:ef:70:07:5b:b8:76:59: 75:89:ba:9e:8d:93:ab:bd:b6:66:44:4f:ec:bc:e6:e8:80:34: c6:1a:04:61:db:3b:49:4f:7f:d1:76:40:c8:aa:1f:0d:13:e3: 42:44:f8:24:85:74:d4:7a:03:63:4f:37:12:e6:0d:80:8c:76: bb:4d:9b:b1:3c:c9:75:81:66:90:57:ef:6b:ac:a4:2f:e5:5f: f0:c2:d7:7c:fd:0a:b1:aa:65:f7:35:f4:49:3b:71:07:02:c0: fb:a1:f5:6d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDrDx43yJVnFnPDTJ71YpHo42vcIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmU2MjQ0OTcxMDk1Mzk0NzE1MWY2ZWU3YzIyOTdkMjJh ZGFiNDMyMWUzZjNkODJmOWQyNmFiNGM1NmZhN2U5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+0W8Ff4UtCljCxo0XhIFzKA9/PwusA0RO3Q7yhfr0PUQC 4PJiwcN+URGN3rIXlLxWpx4V6LqoOyHLaqJ/LSjgRT7+i3++20UcO9pjle7wBukh gDgXvWP6V7Qz7VKxOkkkF+7qhYDevA/QG6XY6R8PTDxaYtEgYJrACrU/cAUV3O6U 2pGPRV42ouoSv+8p+BLyw5iY0WvH4YV3Z68cSmQALpptPJqj8XXPuAF7zz+wuTQG yPYgnfHQB25wm9Hq3Dl0+uy/DJCZ2ZP5+U7oKSGUtS9avl0vSTYK9tNyIArOzGVt dnJ76VwcDOrhEvYucvipZ9j65SyvuUUrcIOfdsbvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyYUGS3X4rRxeQilXp/8+q34+/GgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjOWJiMzQ2LTRiZDAtNDNlMy05MzY5LWE4NDJlOGQ2NzM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhAwDQYJKoZIhvcNAQELBQADggEBAEGte1ZhMolutkoW322R50sT l0qsEglKXbRolpm/3n18LOYEiMdB8iDO2b6ehjlohObG6Jrul+zj4s8pB5uSk9XA v3z//SXMK42fZ+0DUN9FVQr0z4O3QU4Q+UMCSp+1UsLSSXvzJmPmpuzvydEzTHfy R6opGPUHZ88qg2Fj3K4fB/mqe3XGp7MF8Nxaio0487mlY5S7RAAZCiCv73AHW7h2 WXWJup6Nk6u9tmZET+y85uiANMYaBGHbO0lPf9F2QMiqHw0T40JE+CSFdNR6A2NP NxLmDYCMdrtNm7E8yXWBZpBX72uspC/lX/DC13z9CrGqZfc19Ek7cQcCwPuh9W0= -----END CERTIFICATE-----Generated at Mon Feb 10 16:56:31 2025 by rpki-client