$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa File: e7607360-6fe5-44db-bbe5-edd1b127da54.roa (raw, json) Hash identifier: iBlakifStI9OaD6kxWlmB1bktesGiN+2QIDPDQSI7ds= Subject key identifier: 90:17:53:AB:30:D3:FB:A1:D6:F5:01:B6:BC:4F:44:4F:AB:1A:1E:A2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 70D93A8F730A752F13A1E59420ED05305A16B828 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:f03d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d9:3a:8f:73:0a:75:2f:13:a1:e5:94:20:ed:05:30:5a:16:b8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f5:a8:23:86:01:da:fa:43:6d:b6:7c:db:d6: 06:1c:4e:6c:a7:ba:c0:3e:58:78:77:86:f7:99:7f: 27:56:0f:31:1b:6b:9e:a9:f0:89:dd:9c:50:f0:e7: 3e:62:70:af:34:c5:50:b5:4e:d0:8d:b7:e7:cb:36: ea:04:75:34:51:0c:92:d1:61:0b:ad:b2:92:ae:7e: 8c:ea:c0:5a:d3:e8:ce:9b:c0:34:bd:d6:d6:78:8d: 3c:fd:44:3d:f6:75:31:85:c1:4c:15:ff:a5:4d:0d: f4:98:52:e9:0c:f1:d5:92:9d:7e:34:75:bd:c8:42: 34:1d:47:ee:5d:7a:ed:ca:d1:9e:54:75:12:9a:a8: 58:1e:b9:fd:a8:86:a2:fd:ac:54:73:24:60:05:4d: 83:90:95:82:84:d5:99:15:56:59:52:02:70:c7:36: 7b:4d:47:53:7f:45:00:bc:dc:4a:b1:d2:7d:c7:03: a0:ba:78:00:9d:a3:03:36:96:de:4c:bd:a3:4b:85: 53:63:7b:36:64:dd:1d:8a:88:2f:07:5c:94:5a:5b: 25:c1:d1:1d:5f:3d:cd:8a:5b:5d:16:9a:55:b2:0f: b9:73:b6:39:9e:d0:f5:71:eb:e3:60:a9:ea:cd:2b: 6f:60:0b:05:ee:39:de:5b:c3:37:01:d6:2a:d9:f7: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:17:53:AB:30:D3:FB:A1:D6:F5:01:B6:BC:4F:44:4F:AB:1A:1E:A2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7607360-6fe5-44db-bbe5-edd1b127da54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03d::/48 Signature Algorithm: sha256WithRSAEncryption 2d:52:82:6d:ee:82:43:78:98:e9:b1:08:12:7d:3f:ac:53:85: 74:94:ff:4a:61:52:78:73:31:7a:00:c5:ff:dd:59:97:fb:d6: a7:4f:2b:31:14:b1:01:c2:94:73:35:e3:39:54:1b:6c:37:28: 9a:db:62:99:fc:63:f2:24:7d:9d:13:81:1f:98:fb:33:f3:85: 99:b1:93:20:ce:ec:8d:d6:b5:cb:69:21:be:6c:82:8f:9c:52: 4c:90:e0:d1:fd:cc:3a:6f:7c:07:52:45:b7:45:99:ed:30:37: 62:fc:8a:af:b1:72:a5:be:f4:7b:21:9d:2d:16:7c:0e:9b:08: 0b:99:c0:31:ec:81:b7:1c:1d:9f:0c:9f:8d:ff:82:2d:4c:27: f9:08:42:8f:c3:5b:52:9e:93:25:19:d2:eb:e7:a1:bb:40:d7: 05:5d:92:5d:85:0f:a5:25:51:64:96:6b:5d:03:62:8c:41:16: 4c:dc:b0:a1:fa:14:3c:a2:d1:9c:4b:39:3b:d6:90:a5:e6:f0: 66:8f:d2:ac:94:5c:6e:9c:2a:b7:ba:5e:91:1c:0c:e8:a9:91: 84:80:4d:5a:ce:d6:9c:53:db:5c:8d:c1:be:8f:69:25:75:33: bf:ca:bf:85:5d:09:83:fe:e9:8b:a2:f3:b6:ad:cb:7a:71:5e: 79:e7:56:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcNk6j3MKdS8ToeWUIO0FMFoWuCgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2YwNTQxMDA4MjIyOGRkNmIzMzEyNjMyNzU3ZjViZDEz ZGM4YTdmNjA5MWRjMDk1NjhiOTdmODNjZTg2ZmU2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP9agjhgHa+kNttnzb1gYcTmynusA+WHh3hveZfydWDzEb a56p8IndnFDw5z5icK80xVC1TtCNt+fLNuoEdTRRDJLRYQutspKufozqwFrT6M6b wDS91tZ4jTz9RD32dTGFwUwV/6VNDfSYUukM8dWSnX40db3IQjQdR+5deu3K0Z5U dRKaqFgeuf2ohqL9rFRzJGAFTYOQlYKE1ZkVVllSAnDHNntNR1N/RQC83Eqx0n3H A6C6eACdowM2lt5MvaNLhVNjezZk3R2KiC8HXJRaWyXB0R1fPc2KW10WmlWyD7lz tjme0PVx6+NgqerNK29gCwXuOd5bwzcB1irZ943VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkBdTqzDT+6HW9QG2vE9ET6saHqIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U3NjA3MzYwLTZmZTUtNDRkYi1iYmU1LWVkZDFiMTI3ZGE1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D0wDQYJKoZIhvcNAQELBQADggEBAC1Sgm3ugkN4mOmxCBJ9P6xT hXSU/0phUnhzMXoAxf/dWZf71qdPKzEUsQHClHM14zlUG2w3KJrbYpn8Y/IkfZ0T gR+Y+zPzhZmxkyDO7I3WtctpIb5sgo+cUkyQ4NH9zDpvfAdSRbdFme0wN2L8iq+x cqW+9HshnS0WfA6bCAuZwDHsgbccHZ8Mn43/gi1MJ/kIQo/DW1KekyUZ0uvnobtA 1wVdkl2FD6UlUWSWa10DYoxBFkzcsKH6FDyi0ZxLOTvWkKXm8GaP0qyUXG6cKre6 XpEcDOipkYSATVrO1pxT21yNwb6PaSV1M7/Kv4VdCYP+6Yui87aty3pxXnnnVkA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:20 2025 by rpki-client