$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa File: d7e60239-def6-4254-bb11-383c707d64aa.roa (raw, json) Hash identifier: 0t8GQSqIkLTLuf1hYp8YENgbbWU9VbiP8tSpAMNUW3g= Subject key identifier: B5:6B:E8:7A:0E:4F:24:0C:90:1A:1E:E2:D5:15:2C:2E:1C:01:C4:D2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 33EDC791A07081BF9B19D9BF655D2F0FE8EFA25B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:549::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ed:c7:91:a0:70:81:bf:9b:19:d9:bf:65:5d:2f:0f:e8:ef:a2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:ff:11:7a:db:0f:db:35:9e:63:07:88:b1: 65:35:6a:65:e6:36:d5:e3:28:ec:73:69:1f:6d:8a: e0:94:31:a6:01:d1:99:c1:4f:d7:18:2e:30:e5:48: 7b:55:79:56:97:67:a5:f5:64:97:57:c7:6b:1c:0a: a8:6c:7a:5c:ba:fc:eb:80:82:48:6e:35:29:d8:cb: 8e:17:6a:a4:56:c2:02:7e:85:f3:1d:0b:7a:70:92: 60:0a:61:79:8d:ea:af:80:9d:02:26:e0:9a:56:aa: 9d:b6:21:c7:5c:6f:b9:38:ff:1e:82:90:0e:92:76: 03:34:27:5d:22:b0:91:18:3f:b6:3a:fd:46:d7:65: c8:1a:9a:d2:29:c8:98:55:44:7f:f1:de:a6:41:09: 75:27:40:ef:8d:62:ef:56:82:7a:2a:86:8d:fd:d9: 8f:c4:27:3e:7a:ec:cc:ac:12:41:b6:4d:3f:c1:a3: 4b:6a:6f:40:72:51:61:a7:b7:2b:6a:07:6d:33:38: 9b:00:4b:56:ba:1c:74:f5:aa:a7:75:77:4c:1c:d6: 45:3b:1c:09:c3:31:68:7f:e3:7b:1b:6b:fd:02:38: 21:d1:49:0e:07:a8:7d:09:a4:a8:dc:24:cf:a5:6a: b9:aa:c7:f6:db:4d:4f:ba:70:0a:57:4d:4b:ad:4c: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6B:E8:7A:0E:4F:24:0C:90:1A:1E:E2:D5:15:2C:2E:1C:01:C4:D2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:549::/48 Signature Algorithm: sha256WithRSAEncryption 6f:86:dc:96:cb:86:21:2e:e9:a9:ec:45:a4:73:c6:af:57:17: 00:da:0a:74:6f:0a:28:db:cd:e3:50:00:63:57:e6:52:e7:97: d3:7f:46:13:e4:3c:83:ab:13:73:60:e2:ab:d0:a0:6b:bf:da: 9e:29:cf:84:8f:9b:ac:8f:30:29:2c:d2:7e:be:ef:69:de:42: e1:81:90:77:ff:f2:bc:c6:cb:af:7e:97:6c:22:59:43:85:40: 87:f1:c5:26:01:c0:c5:95:43:5d:a7:5d:a3:f2:84:76:9f:87: 59:ed:8f:20:f9:13:97:13:03:d2:25:7c:f5:0c:be:74:d0:63: 87:56:10:8c:e6:83:ca:08:f6:2a:33:c6:8e:31:92:ce:39:fd: cc:ea:c6:ee:0d:7f:b3:fc:45:7b:f0:49:4b:ae:ef:f8:fd:2f: 88:ab:e7:51:96:ca:3f:f3:00:02:6d:77:6a:ff:6c:6b:1d:e0: ed:ce:64:1a:35:4a:9c:29:e8:85:1a:24:5c:a7:52:c1:3e:bf: cf:7e:11:d2:fa:ad:60:e1:7e:e3:da:c3:b0:9f:05:ab:f3:1e: 6d:c3:72:c4:20:1d:6b:ca:be:ef:72:a5:39:51:c3:09:23:7d: b5:4a:90:5e:0a:3e:e2:de:c9:84:7f:24:cc:3c:12:db:99:b5: 01:d8:19:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM+3HkaBwgb+bGdm/ZV0vD+jvolswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODkxNzRjZDA2NTk2NDgxNmUyM2JlNzJhMjI0NzE3NGI0 ZjZiNDFhYWQ2NjQ1NjEzMGVlMWE0YjM5MjdkMTM3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaxP8RetsP2zWeYweIsWU1amXmNtXjKOxzaR9tiuCUMaYB 0ZnBT9cYLjDlSHtVeVaXZ6X1ZJdXx2scCqhsely6/OuAgkhuNSnYy44XaqRWwgJ+ hfMdC3pwkmAKYXmN6q+AnQIm4JpWqp22Icdcb7k4/x6CkA6SdgM0J10isJEYP7Y6 /UbXZcgamtIpyJhVRH/x3qZBCXUnQO+NYu9Wgnoqho392Y/EJz567MysEkG2TT/B o0tqb0ByUWGntytqB20zOJsAS1a6HHT1qqd1d0wc1kU7HAnDMWh/43sba/0COCHR SQ4HqH0JpKjcJM+larmqx/bbTU+6cApXTUutTNL7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtWvoeg5PJAyQGh7i1RUsLhwBxNIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q3ZTYwMjM5LWRlZjYtNDI1NC1iYjExLTM4M2M3MDdkNjRhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUkwDQYJKoZIhvcNAQELBQADggEBAG+G3JbLhiEu6ansRaRzxq9X FwDaCnRvCijbzeNQAGNX5lLnl9N/RhPkPIOrE3Ng4qvQoGu/2p4pz4SPm6yPMCks 0n6+72neQuGBkHf/8rzGy69+l2wiWUOFQIfxxSYBwMWVQ12nXaPyhHafh1ntjyD5 E5cTA9IlfPUMvnTQY4dWEIzmg8oI9iozxo4xks45/czqxu4Nf7P8RXvwSUuu7/j9 L4ir51GWyj/zAAJtd2r/bGsd4O3OZBo1Spwp6IUaJFynUsE+v89+EdL6rWDhfuPa w7CfBavzHm3DcsQgHWvKvu9ypTlRwwkjfbVKkF4KPuLeyYR/JMw8EtuZtQHYGRs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:57 2025 by rpki-client