$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/edc37404-046c-4a91-b819-7b616a86162f.roa File: edc37404-046c-4a91-b819-7b616a86162f.roa (raw, json) Hash identifier: 4R1kvaWhvHi3VryMsiIWWPbUmXnzFhX6uTsZ+LBlWv8= Subject key identifier: FC:46:78:C6:64:94:6A:60:19:A7:04:CA:56:CD:AA:4A:4E:8E:92:A4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4EB007187512044654CEA5A046968E0F9C51AA3E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/edc37404-046c-4a91-b819-7b616a86162f.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b0:07:18:75:12:04:46:54:ce:a5:a0:46:96:8e:0f:9c:51:aa:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:b9:0a:e6:c8:bc:29:1b:36:bb:9b:c4:48: f4:0f:26:71:f4:a8:8f:a9:14:a1:70:a9:33:70:3f: 60:ef:ad:7b:45:9a:b9:51:15:35:a8:e0:c7:10:e0: b4:3e:9e:53:1d:d5:25:bc:20:55:cf:be:64:e9:8f: 6b:03:53:59:1f:c7:e1:84:55:80:81:ce:9e:f2:57: 90:0d:79:4a:11:9a:1b:30:96:b1:43:95:5a:c0:0b: 72:b3:10:f1:08:e4:12:f5:6f:75:a1:75:0b:05:d6: 4e:db:71:d0:cd:fe:b1:9f:c1:51:e6:73:68:4c:52: 63:86:00:ce:fd:78:8d:bc:b4:29:6e:a3:bb:1d:e3: 0c:7d:38:de:b8:44:c9:41:a4:cc:60:74:43:61:e6: 58:99:22:ad:06:ae:7e:7b:3e:fa:dc:3d:e5:ff:9e: 16:21:4e:39:46:20:f4:5f:67:2d:b0:e4:31:09:08: 5b:0b:eb:bf:ef:46:d2:2a:ed:64:18:5e:6d:d0:2b: 98:96:6c:7c:1d:55:cb:c1:5b:9e:ad:18:a1:fc:18: cd:3c:10:dc:8e:73:4e:0c:dc:f0:e1:a8:1e:e8:95: e3:e5:e2:dc:55:d9:04:d9:60:a1:8f:72:c0:d1:fb: ad:21:e7:96:a6:60:38:30:41:86:4b:40:0c:01:e6: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:46:78:C6:64:94:6A:60:19:A7:04:CA:56:CD:AA:4A:4E:8E:92:A4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/edc37404-046c-4a91-b819-7b616a86162f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c13::/48 Signature Algorithm: sha256WithRSAEncryption 85:72:0a:43:2a:93:c8:59:eb:98:c7:d9:a8:22:75:d2:15:7b: e8:f7:0c:f0:ea:80:3a:fc:b9:b8:72:b3:3b:b7:0e:8d:71:d0: 31:8d:a9:a8:86:2c:50:29:13:21:e4:54:88:55:f1:2c:bc:2d: 83:71:d5:c3:a0:78:52:7e:66:8a:0e:b2:af:35:89:40:ea:06: 1c:fb:2e:9e:88:37:7d:db:de:6e:5d:de:63:63:37:d4:3f:b0: 89:e8:f9:90:59:cd:1f:11:ad:b5:c4:f2:ce:b2:c8:5d:fd:65: 03:a2:20:c8:8b:be:67:26:d2:2a:65:2e:a1:7d:48:b8:ff:8a: ba:56:08:7e:19:e5:3a:86:ce:77:cd:fb:45:19:1c:73:ea:35: 2b:9e:39:c6:48:b0:22:00:8a:25:b9:b3:3e:1a:83:d9:7a:19: 30:9e:69:41:6d:b0:30:c2:95:a8:99:ce:bb:c8:43:4a:d0:32: 3f:6a:2d:65:ee:de:21:a8:1d:9a:de:db:a6:72:cf:f0:c7:ad: 22:be:04:55:1d:83:b8:6f:ef:7d:23:04:86:37:ff:b4:47:e4: ff:b9:f0:c5:a3:bc:e5:bd:e6:1d:d1:68:8c:78:8e:53:64:61: 55:7f:be:0c:90:e2:16:97:10:e3:3e:c9:f9:b2:14:57:79:3b: a7:d3:00:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTrAHGHUSBEZUzqWgRpaOD5xRqj4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTk1Mjg4YWIzZDA1Y2UyM2RjOTUzNWJiNWRiODYxYjg2 ZGMxYTEyYjBiY2JlYjEyMGNhNTExZmI0YTE2NWI0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQQ7kK5si8KRs2u5vESPQPJnH0qI+pFKFwqTNwP2DvrXtF mrlRFTWo4McQ4LQ+nlMd1SW8IFXPvmTpj2sDU1kfx+GEVYCBzp7yV5ANeUoRmhsw lrFDlVrAC3KzEPEI5BL1b3WhdQsF1k7bcdDN/rGfwVHmc2hMUmOGAM79eI28tClu o7sd4wx9ON64RMlBpMxgdENh5liZIq0Grn57PvrcPeX/nhYhTjlGIPRfZy2w5DEJ CFsL67/vRtIq7WQYXm3QK5iWbHwdVcvBW56tGKH8GM08ENyOc04M3PDhqB7olePl 4txV2QTZYKGPcsDR+60h55amYDgwQYZLQAwB5vOTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/EZ4xmSUamAZpwTKVs2qSk6OkqQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2VkYzM3NDA0LTA0NmMtNGE5MS1iODE5LTdiNjE2YTg2MTYyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBMwDQYJKoZIhvcNAQELBQADggEBAIVyCkMqk8hZ65jH2agiddIV e+j3DPDqgDr8ubhyszu3Do1x0DGNqaiGLFApEyHkVIhV8Sy8LYNx1cOgeFJ+ZooO sq81iUDqBhz7Lp6IN33b3m5d3mNjN9Q/sIno+ZBZzR8RrbXE8s6yyF39ZQOiIMiL vmcm0iplLqF9SLj/irpWCH4Z5TqGznfN+0UZHHPqNSueOcZIsCIAiiW5sz4ag9l6 GTCeaUFtsDDClaiZzrvIQ0rQMj9qLWXu3iGoHZre26Zyz/DHrSK+BFUdg7hv730j BIY3/7RH5P+58MWjvOW95h3RaIx4jlNkYVV/vgyQ4haXEOM+yfmyFFd5O6fTANk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:10 2025 by rpki-client