$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa File: f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa (raw, json) Hash identifier: PUmla6lz2Copg11yey7YKuzewr8CJPFBfio2F2CdSX8= Subject key identifier: 39:7E:77:E3:4C:AD:1B:5B:5F:1C:24:CB:AA:18:30:76:01:D9:3B:39 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 07E7DA7EC9937EA9A7A44F6D19089D8C31E1590B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa Signing time: Fri 07 Mar 2025 00:50:56 +0000 ROA not before: Fri 07 Mar 2025 00:50:56 +0000 ROA not after: Fri 11 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:328::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e7:da:7e:c9:93:7e:a9:a7:a4:4f:6d:19:08:9d:8c:31:e1:59:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 7 00:50:56 2025 GMT Not After : Apr 11 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:11:2a:17:d0:74:7e:10:9f:29:c5:8a:ee: 23:63:70:b9:e8:ec:6d:01:cc:51:94:f2:db:c8:82: 24:a7:2d:28:6e:89:32:a4:8f:4c:93:65:b5:36:c6: f0:43:74:37:68:8d:29:28:45:c2:0d:6a:9c:a5:5d: 96:41:20:17:8f:70:a0:df:a2:77:75:09:41:6d:64: 9f:dd:dd:2d:c7:77:43:78:3c:79:24:06:13:65:8e: bc:91:c6:a3:19:46:c0:37:60:72:87:99:a0:55:24: 3d:b6:01:7b:37:31:17:a6:75:d9:52:88:d7:bd:22: 1a:e5:f5:f4:0f:45:c4:16:d7:e3:af:1f:95:46:87: 7d:48:e4:95:10:ed:a2:0b:80:9e:b4:ea:c1:ff:fa: b1:15:9f:5f:d4:58:e1:f5:1a:e6:e1:c2:ab:b2:ab: e2:e1:6a:1c:14:02:21:76:d9:19:d7:6b:51:35:c7: e1:78:ce:c8:8b:37:42:f8:24:e0:97:7f:f3:87:13: f8:73:c9:c9:ef:8a:9b:4b:11:98:39:d0:b4:6a:57: 29:e6:40:be:a8:85:b0:17:58:cb:6b:c7:3b:22:e7: 49:f4:18:34:e6:d5:d0:ea:08:72:ec:c3:ba:47:0d: 4f:aa:ff:4a:c2:20:b6:1d:ec:7b:d7:6a:d6:66:61: e8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7E:77:E3:4C:AD:1B:5B:5F:1C:24:CB:AA:18:30:76:01:D9:3B:39 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f70dcbfa-0a21-4dcb-b79e-bfd7efa166b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:328::/48 Signature Algorithm: sha256WithRSAEncryption 55:9c:8c:ba:a7:53:a4:ea:bb:6f:c0:2f:86:82:de:14:75:07: 25:8e:29:83:d0:81:91:76:ff:ee:19:9b:96:c9:dd:c1:c2:91: 05:39:23:eb:14:5b:36:3b:19:ce:5e:f1:7c:b6:85:e9:67:ee: cf:b4:ea:52:d0:79:e1:50:5f:4f:7c:ad:25:40:ae:18:14:42: b3:5d:f6:6d:3e:ee:bf:70:fa:99:01:30:85:64:88:e5:ba:37: 1e:f3:cf:53:43:5d:f0:fe:78:73:1b:87:31:83:03:68:ce:cb: b7:10:2e:53:f8:23:a1:a6:4d:1e:a9:98:31:1c:f5:51:1e:8c: c1:17:83:cf:b6:f6:a8:45:ab:77:5b:51:7d:8e:e9:f6:60:4f: 33:7b:c7:80:e4:1f:a2:f6:9d:52:bd:63:79:f8:e2:f0:0a:5a: b7:24:85:ee:95:48:e2:0d:07:c8:17:b1:73:73:ce:8e:78:3a: e6:a1:7a:99:37:09:49:d3:b4:d1:38:98:8e:48:67:c9:08:15: 4c:23:de:fd:3f:a0:c9:04:9e:f0:87:33:87:22:ca:46:9a:c0: bf:d0:86:c2:12:f3:54:a0:40:6b:23:fb:4f:5b:60:7a:f0:9b: ce:66:03:1f:88:f4:dc:a8:8e:76:e1:e8:8c:00:df:3e:d4:03: ec:2c:b2:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB+fafsmTfqmnpE9tGQidjDHhWQswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzA3MDA1MDU2WhcNMjUwNDExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2QzMDhkMTg2YTU5MDI1NjA4YjdmMWVkNzdhNjM4NDY2 NGM1ODI3ODJkMmRlYWQ1MjM2NzkzOTNlNDk3MmVhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIhhEqF9B0fhCfKcWK7iNjcLno7G0BzFGU8tvIgiSnLShu iTKkj0yTZbU2xvBDdDdojSkoRcINapylXZZBIBePcKDfond1CUFtZJ/d3S3Hd0N4 PHkkBhNljryRxqMZRsA3YHKHmaBVJD22AXs3MRemddlSiNe9Ihrl9fQPRcQW1+Ov H5VGh31I5JUQ7aILgJ606sH/+rEVn1/UWOH1Gubhwquyq+LhahwUAiF22RnXa1E1 x+F4zsiLN0L4JOCXf/OHE/hzycnviptLEZg50LRqVynmQL6ohbAXWMtrxzsi50n0 GDTm1dDqCHLsw7pHDU+q/0rCILYd7HvXatZmYej9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOX5340ytG1tfHCTLqhgwdgHZOzkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y3MGRjYmZhLTBhMjEtNGRjYi1iNzllLWJmZDdlZmExNjZiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAygwDQYJKoZIhvcNAQELBQADggEBAFWcjLqnU6Tqu2/AL4aC3hR1 ByWOKYPQgZF2/+4Zm5bJ3cHCkQU5I+sUWzY7Gc5e8Xy2heln7s+06lLQeeFQX098 rSVArhgUQrNd9m0+7r9w+pkBMIVkiOW6Nx7zz1NDXfD+eHMbhzGDA2jOy7cQLlP4 I6GmTR6pmDEc9VEejMEXg8+29qhFq3dbUX2O6fZgTzN7x4DkH6L2nVK9Y3n44vAK Wrckhe6VSOINB8gXsXNzzo54Ouahepk3CUnTtNE4mI5IZ8kIFUwj3v0/oMkEnvCH M4ciykaawL/QhsIS81SgQGsj+09bYHrwm85mAx+I9Nyojnbh6IwA3z7UA+wsspM= -----END CERTIFICATE-----Generated at Thu Mar 13 23:54:16 2025 by rpki-client