$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa File: ef61cc60-17a6-4a87-9035-322b2907a5e5.roa (raw, json) Hash identifier: YRAq+hHbnckKhaDdnyVJofw6p8bgd978d+OQQ6C/ub0= Subject key identifier: E2:2F:C4:39:0A:BA:61:3E:9F:3A:12:83:B5:81:37:01:99:63:5F:65 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 48CC32173B80574565983238A060EBC2CF4CF054 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa Signing time: Fri 24 Jan 2025 00:00:00 +0000 ROA not before: Fri 24 Jan 2025 00:00:00 +0000 ROA not after: Fri 28 Feb 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:cc:32:17:3b:80:57:45:65:98:32:38:a0:60:eb:c2:cf:4c:f0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jan 24 00:00:00 2025 GMT Not After : Feb 28 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:ac:60:18:ef:b7:bc:47:b2:c7:a6:ed:a5: 91:82:22:de:84:8f:64:60:a8:a9:dd:a6:97:9a:28: 01:b1:a6:bb:a0:9a:e5:bb:47:5f:ba:69:a9:46:4b: dd:c1:ba:c6:73:6a:27:50:55:8a:bc:b4:a6:e5:e8: 91:ba:75:ff:b7:f3:b6:bc:58:1c:2b:0a:af:38:bc: 3e:71:a2:ed:10:23:a3:d6:dd:4e:82:fd:48:d0:dd: d5:eb:fb:fb:53:cf:dd:71:a3:06:f8:0e:a0:80:47: 5f:df:7f:15:76:e7:85:e6:30:cc:fb:11:f4:7a:70: 8d:b6:b6:b6:39:67:c4:cc:d0:d4:42:a5:ab:55:6f: 20:cc:40:e1:09:10:2a:6e:91:df:8e:23:76:1a:77: ad:d6:9d:36:ad:80:dd:7c:2a:76:5c:b9:bb:13:5e: 67:1d:9b:24:d1:08:da:85:81:95:b6:12:43:e2:05: 50:0d:e5:66:81:b6:2b:ac:bc:3d:20:3c:e5:3c:cb: f0:51:82:e6:af:f2:bb:43:3c:a0:ed:78:b2:29:08: a8:ee:22:63:b8:a2:8e:fe:e1:de:57:04:78:6f:c6: 35:8a:d5:be:5b:9a:63:c7:36:da:8e:4f:65:26:df: 13:20:9a:3c:0f:c9:cd:37:39:5e:c5:09:73:7d:60: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2F:C4:39:0A:BA:61:3E:9F:3A:12:83:B5:81:37:01:99:63:5F:65 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1c::/48 Signature Algorithm: sha256WithRSAEncryption 8e:c0:5b:b8:c7:08:cb:b0:3e:38:79:e7:8f:cd:38:77:8b:82: c1:c6:3a:8e:46:b1:ae:68:da:b7:39:1f:73:a3:92:f7:06:e5: 0b:23:93:99:60:c9:c0:77:59:24:29:9e:e3:7d:d6:58:0f:8a: 29:47:e2:e6:1d:dc:a8:84:38:16:38:94:5e:43:23:11:1b:30: c8:a9:90:17:ab:08:8e:8d:af:83:e6:34:dc:5d:5b:15:18:da: c4:78:c0:45:b6:c6:4e:e2:54:a4:3e:26:7d:b8:ed:d7:19:0c: 30:68:70:7e:2f:04:96:b1:a8:0d:b6:ec:7a:3e:ff:cd:82:e4: 70:27:31:dd:42:4c:44:68:54:3b:26:aa:c5:15:3f:05:5a:f9: 47:9a:c3:ff:e5:b1:aa:25:e8:c6:c4:91:8d:d0:96:4a:67:f1: b6:c4:3e:81:18:6c:f1:fb:39:b0:96:84:07:4e:46:bd:2c:c8: 43:c7:e7:2b:db:9c:21:74:74:ab:a8:aa:c3:c1:e8:8f:3a:d6: 1b:1a:83:7c:fc:86:8d:cc:24:ce:71:23:9b:d2:0c:94:a7:70: 25:ed:39:14:49:04:c6:57:02:44:f7:92:38:04:63:1b:7b:45: 4f:56:7f:42:05:c0:90:4c:2e:00:00:8c:de:56:45:13:b3:cc: de:01:ad:a8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSMwyFzuAV0VlmDI4oGDrws9M8FQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMTI0MDAwMDAwWhcNMjUwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjZlY2Q1NTQyNDhlZDAxNzU5ZjgzNmRjYTgwYjI2NmNh NGMzNTA4MDYzODEzMDAxODA5OTlmNTcxYWMwNjhhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5IKxgGO+3vEeyx6btpZGCIt6Ej2RgqKndppeaKAGxprug muW7R1+6aalGS93BusZzaidQVYq8tKbl6JG6df+387a8WBwrCq84vD5xou0QI6PW 3U6C/UjQ3dXr+/tTz91xowb4DqCAR1/ffxV254XmMMz7EfR6cI22trY5Z8TM0NRC patVbyDMQOEJECpukd+OI3Yad63WnTatgN18KnZcubsTXmcdmyTRCNqFgZW2EkPi BVAN5WaBtiusvD0gPOU8y/BRguav8rtDPKDteLIpCKjuImO4oo7+4d5XBHhvxjWK 1b5bmmPHNtqOT2Um3xMgmjwPyc03OV7FCXN9YB1hAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4i/EOQq6YT6fOhKDtYE3AZljX2UwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2VmNjFjYzYwLTE3YTYtNGE4Ny05MDM1LTMyMmIyOTA3YTVlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBwwDQYJKoZIhvcNAQELBQADggEBAI7AW7jHCMuwPjh554/NOHeL gsHGOo5Gsa5o2rc5H3OjkvcG5Qsjk5lgycB3WSQpnuN91lgPiilH4uYd3KiEOBY4 lF5DIxEbMMipkBerCI6Nr4PmNNxdWxUY2sR4wEW2xk7iVKQ+Jn247dcZDDBocH4v BJaxqA227Ho+/82C5HAnMd1CTERoVDsmqsUVPwVa+Ueaw//lsaol6MbEkY3Qlkpn 8bbEPoEYbPH7ObCWhAdORr0syEPH5yvbnCF0dKuoqsPB6I861hsag3z8ho3MJM5x I5vSDJSncCXtORRJBMZXAkT3kjgEYxt7RU9Wf0IFwJBMLgAAjN5WRROzzN4Brag= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:27 2025 by rpki-client