$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bda389ba-82f7-473f-a337-f093368602cc.roa File: bda389ba-82f7-473f-a337-f093368602cc.roa (raw, json) Hash identifier: ueDKaBOL6nyPMAlP1O3OAVOe7wCCagBfo8AN/IxSJRQ= Subject key identifier: E1:5E:A1:B1:6E:7F:21:73:96:0F:D4:30:72:01:BC:A0:0A:70:9D:00 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 44A97178CFF5E6FB8105AB2DACEA98DF0F03289D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bda389ba-82f7-473f-a337-f093368602cc.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:307::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a9:71:78:cf:f5:e6:fb:81:05:ab:2d:ac:ea:98:df:0f:03:28:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:c3:49:09:05:df:61:0c:75:1d:34:0d:08: 4e:95:2e:2a:41:f1:6b:a4:5c:c9:0a:d0:58:e1:64: 03:88:74:a9:f3:05:6a:f3:b3:1e:81:47:4b:2c:63: d3:91:64:c8:56:89:92:e2:bb:1b:3c:ec:18:c8:f3: 87:59:12:52:d7:98:eb:6f:79:51:23:79:e4:38:a3: a5:1e:9f:0a:1c:57:1a:59:4c:00:74:91:08:a9:b1: 81:6d:e8:99:32:ce:db:21:6a:1b:97:0b:e5:ac:ac: d9:5f:ac:ad:2b:3b:5d:f7:81:d4:85:f4:47:61:49: d8:97:c1:84:40:c0:28:f4:ff:25:8d:18:9d:85:a2: 2a:33:ca:70:fc:66:6e:9f:5d:c1:39:53:5c:db:8a: 74:9b:e0:a2:37:63:ce:1d:96:f1:8b:94:cb:20:66: 61:6d:8b:f9:1c:e9:2c:64:45:c9:c1:e2:b5:59:41: ff:01:eb:bc:fa:2b:cb:f8:ff:a9:f6:10:c8:a5:7e: cc:cb:b2:ff:c7:5f:af:13:d5:a1:a7:56:47:56:cf: f3:c9:8b:5c:f9:35:7a:c1:81:4b:ef:a6:b2:f6:6d: 78:f2:f5:dd:11:58:c0:59:dc:e0:d2:e9:72:a1:db: 8a:97:4c:67:e8:0b:fd:71:a3:f1:bb:9b:9c:48:fd: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5E:A1:B1:6E:7F:21:73:96:0F:D4:30:72:01:BC:A0:0A:70:9D:00 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bda389ba-82f7-473f-a337-f093368602cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:307::/48 Signature Algorithm: sha256WithRSAEncryption 39:c2:cc:d6:5d:41:9a:a7:da:eb:e8:3d:4c:19:a4:5a:6e:bf: b0:08:6a:13:d1:71:d1:82:94:4c:42:62:ac:3e:2e:e3:1b:cb: 26:65:c6:5b:ef:0c:68:39:67:93:e8:fd:1c:67:5b:11:93:b1: a9:98:e1:16:9c:24:48:42:d7:85:b1:97:68:77:79:88:f7:9a: ef:a3:99:65:25:19:85:a5:e4:d1:6d:ae:55:98:46:b7:2a:9b: f0:5f:89:64:0e:65:e5:5d:a6:3e:a8:f9:8a:33:02:49:a3:1f: 8c:48:da:c0:ae:11:03:ea:b0:45:4a:ff:52:7a:48:21:51:6f: 8e:9e:5e:b1:1b:9a:ad:b3:6b:75:d0:9e:7a:17:e9:7d:42:1f: d7:5d:14:bf:64:25:df:28:95:47:39:97:51:e0:ea:db:f4:bb: 71:4d:60:21:ef:a2:14:03:7d:96:14:75:c4:f9:72:91:bd:84: 62:f8:48:aa:2a:c0:f7:2a:19:1b:f0:89:21:c1:7b:ee:8f:be: 6e:aa:35:0f:ea:23:29:e4:4a:b9:e2:b8:5d:05:68:d1:14:4d: e3:d9:dc:bd:2d:6f:db:72:c5:66:24:2c:25:eb:e1:21:89:a0: d3:b1:88:90:a0:38:06:56:50:31:a7:2a:8a:2a:e0:c6:43:d4: 30:9a:4f:ea -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURKlxeM/15vuBBastrOqY3w8DKJ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDUwYmE5Y2FlZjc5YWRmMzlmYWFkMDdjNmYwZGM2MDAw ZWI3NDE2MzhkZjQxMTYwZGU4NmRjYTZiMjIwMDBlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGi8NJCQXfYQx1HTQNCE6VLipB8WukXMkK0FjhZAOIdKnz BWrzsx6BR0ssY9ORZMhWiZLiuxs87BjI84dZElLXmOtveVEjeeQ4o6UenwocVxpZ TAB0kQipsYFt6JkyztshahuXC+WsrNlfrK0rO133gdSF9EdhSdiXwYRAwCj0/yWN GJ2FoiozynD8Zm6fXcE5U1zbinSb4KI3Y84dlvGLlMsgZmFti/kc6SxkRcnB4rVZ Qf8B67z6K8v4/6n2EMilfszLsv/HX68T1aGnVkdWz/PJi1z5NXrBgUvvprL2bXjy 9d0RWMBZ3ODS6XKh24qXTGfoC/1xo/G7m5xI/bk1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4V6hsW5/IXOWD9QwcgG8oApwnQAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JkYTM4OWJhLTgyZjctNDczZi1hMzM3LWYwOTMzNjg2MDJjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwcwDQYJKoZIhvcNAQELBQADggEBADnCzNZdQZqn2uvoPUwZpFpu v7AIahPRcdGClExCYqw+LuMbyyZlxlvvDGg5Z5Po/RxnWxGTsamY4RacJEhC14Wx l2h3eYj3mu+jmWUlGYWl5NFtrlWYRrcqm/BfiWQOZeVdpj6o+YozAkmjH4xI2sCu EQPqsEVK/1J6SCFRb46eXrEbmq2za3XQnnoX6X1CH9ddFL9kJd8olUc5l1Hg6tv0 u3FNYCHvohQDfZYUdcT5cpG9hGL4SKoqwPcqGRvwiSHBe+6Pvm6qNQ/qIynkSrni uF0FaNEUTePZ3L0tb9tyxWYkLCXr4SGJoNOxiJCgOAZWUDGnKooq4MZD1DCaT+o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:35 2025 by rpki-client