$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa File: f67723c2-64ad-4374-9b2b-3c1633b90448.roa (raw, json) Hash identifier: 7K67ZS0sFs1+/VzFRDxpaNZTdYiVTzxGAnp8l8tfzmQ= Subject key identifier: D8:AB:7B:D4:18:BB:C1:3D:8C:62:DB:0F:0F:B1:A7:7C:4F:09:27:9D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7B3B6B8F207746B9600F8F4831644B6F2FD9EF3D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:39c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3b:6b:8f:20:77:46:b9:60:0f:8f:48:31:64:4b:6f:2f:d9:ef:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:cc:3b:12:f0:fd:cd:bb:ba:74:49:40:4b: 64:69:76:27:15:ca:4c:cf:f0:99:61:8d:91:f0:72: a4:a7:75:00:88:d6:f8:0b:1d:19:6d:7a:9d:dc:d0: 12:b1:08:43:dc:12:0c:db:0d:cb:fb:09:6b:d6:d9: f8:77:53:f2:a3:33:2a:0f:42:90:3b:5d:95:1b:cf: f2:30:37:1a:03:f4:3c:a6:41:a9:2b:b5:b1:79:cd: 3c:a4:0c:b7:45:e8:aa:a3:6e:ec:f1:bf:d1:bd:2a: dd:62:a4:65:1b:6b:43:2e:d5:1c:c7:ca:bf:3f:d5: 3f:55:16:a6:09:07:3a:93:9d:42:c0:81:64:ef:f4: 26:85:ec:61:b8:c4:6f:73:9e:d9:38:5f:3c:b8:de: 25:ac:df:2f:00:e2:8e:9a:94:26:ce:9f:ae:4b:29: c4:70:74:df:7a:4f:6a:87:52:a1:9d:97:91:2b:8a: 07:f8:1e:69:9b:4a:6d:6c:ea:8c:35:00:7b:00:bc: e3:2b:5e:f5:89:24:7b:18:62:9c:ab:79:28:1c:11: 1e:8b:ce:44:e2:90:74:75:6c:89:3a:24:31:4a:10: f7:e8:eb:fa:ac:18:ce:d4:72:3a:f5:b0:c9:f9:13: d3:a0:48:a0:a6:6a:60:ba:26:ca:6d:d9:fd:e9:8f: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AB:7B:D4:18:BB:C1:3D:8C:62:DB:0F:0F:B1:A7:7C:4F:09:27:9D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:39c::/48 Signature Algorithm: sha256WithRSAEncryption 35:40:5d:c8:f9:6f:85:29:a7:68:6d:3f:db:5f:bb:97:7b:b8: 54:c4:e3:b1:d3:a4:dd:37:57:28:c8:94:08:fe:97:69:80:5c: 26:6f:e2:34:fd:e6:8a:4f:e2:79:58:55:d4:ed:85:8e:2f:76: 7e:ea:ee:d1:21:45:5d:33:2f:86:a4:19:71:13:86:6a:41:39: 5d:c9:c2:09:71:e9:53:46:e6:a3:64:23:4b:d8:32:96:05:f4: 18:a3:54:52:28:0c:92:59:f4:f0:31:95:ab:4e:71:f2:c9:f8: 75:0c:3c:0c:4e:4d:91:84:fe:1f:24:c9:73:53:33:d7:ec:03: 94:d8:29:4e:41:11:2d:29:54:04:fd:8c:2f:29:44:31:f6:c5: a7:f3:14:e9:b9:51:b6:4f:04:e6:ed:92:de:40:13:57:c8:01: 0e:8c:93:fc:d9:8a:9d:d7:5f:29:0d:57:30:58:a1:83:f2:30: 6e:72:87:f0:ba:02:02:77:65:db:23:9a:8b:be:85:dc:3b:c7: 54:29:aa:00:77:14:7c:76:c7:9a:ca:3a:f1:df:c5:55:d3:3c: 0b:ff:09:f2:68:87:f1:06:44:6a:e6:b7:7c:00:f1:9e:b4:df: 1c:74:55:5b:9f:29:25:9f:35:3d:3b:22:9d:b9:a2:7b:9b:eb: 28:a5:b6:3e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeztrjyB3RrlgD49IMWRLby/Z7z0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjIzMWU4YzZkMGFhYzlmNWEyOWI3NWQzN2VlYmI1ZWNl M2RlNmQ3NGYxNTg2ZjljMjA2ODMyZmI0Y2NkYmFmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCblMw7EvD9zbu6dElAS2RpdicVykzP8JlhjZHwcqSndQCI 1vgLHRltep3c0BKxCEPcEgzbDcv7CWvW2fh3U/KjMyoPQpA7XZUbz/IwNxoD9Dym QakrtbF5zTykDLdF6Kqjbuzxv9G9Kt1ipGUba0Mu1RzHyr8/1T9VFqYJBzqTnULA gWTv9CaF7GG4xG9zntk4Xzy43iWs3y8A4o6alCbOn65LKcRwdN96T2qHUqGdl5Er igf4HmmbSm1s6ow1AHsAvOMrXvWJJHsYYpyreSgcER6LzkTikHR1bIk6JDFKEPfo 6/qsGM7Ucjr1sMn5E9OgSKCmamC6Jspt2f3pjxF/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2Kt71Bi7wT2MYtsPD7GnfE8JJ50wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y2NzcyM2MyLTY0YWQtNDM3NC05YjJiLTNjMTYzM2I5MDQ0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5wwDQYJKoZIhvcNAQELBQADggEBADVAXcj5b4Upp2htP9tfu5d7 uFTE47HTpN03VyjIlAj+l2mAXCZv4jT95opP4nlYVdTthY4vdn7q7tEhRV0zL4ak GXEThmpBOV3Jwglx6VNG5qNkI0vYMpYF9BijVFIoDJJZ9PAxlatOcfLJ+HUMPAxO TZGE/h8kyXNTM9fsA5TYKU5BES0pVAT9jC8pRDH2xafzFOm5UbZPBObtkt5AE1fI AQ6Mk/zZip3XXykNVzBYoYPyMG5yh/C6AgJ3Zdsjmou+hdw7x1QpqgB3FHx2x5rK OvHfxVXTPAv/CfJoh/EGRGrmt3wA8Z603xx0VVufKSWfNT07Ip25onub6yiltj4= -----END CERTIFICATE-----Generated at Mon Feb 10 17:04:23 2025 by rpki-client