$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdc5b367-3360-4930-9f1a-341b721401fb.roa File: fdc5b367-3360-4930-9f1a-341b721401fb.roa (raw, json) Hash identifier: OQvwnDRPnv4CSAX64f2uKs5b64oFpZ+P2Yz/W4ANOLA= Subject key identifier: F1:6F:F6:EF:9E:D8:4B:C5:97:36:5C:5F:07:F0:B7:F3:F3:7B:C4:2F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0BB4E4F63219A2A548B1ED93C11C741FED15C092 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdc5b367-3360-4930-9f1a-341b721401fb.roa Signing time: Mon 10 Feb 2025 00:00:00 +0000 ROA not before: Mon 10 Feb 2025 00:00:00 +0000 ROA not after: Mon 17 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:613::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b4:e4:f6:32:19:a2:a5:48:b1:ed:93:c1:1c:74:1f:ed:15:c0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 10 00:00:00 2025 GMT Not After : Mar 17 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:12:a4:05:19:26:18:3d:24:fd:48:b2:c0:b9: 41:ca:a6:f8:c4:3c:64:5e:0b:b5:92:50:1c:74:6e: aa:75:ac:d1:e9:5d:8f:4c:19:33:b7:15:ee:21:59: e2:ac:51:a2:57:ea:a9:fc:bd:50:d2:08:3d:9e:56: c2:be:34:5b:2b:d3:3b:be:27:fa:4c:7d:b4:0d:85: 5c:2b:f7:27:0b:37:2f:04:5e:a5:e7:44:ee:fd:39: f1:5b:b3:7b:b8:0e:c6:9b:aa:7f:74:a0:d2:23:c9: a9:15:e5:8c:00:c9:ef:ad:59:7b:75:6b:36:0c:d4: a9:e2:5b:d0:b7:d6:68:43:6d:02:75:68:0f:70:c4: c9:d3:94:af:5c:bb:c1:5d:3b:64:f5:fe:1c:45:8c: c6:0b:78:d2:e3:bd:a5:18:ea:4d:e4:01:13:a0:9b: 9b:95:7e:cc:d0:6d:a6:16:90:99:4e:74:ef:17:f2: 97:c1:4c:06:02:04:bf:3c:31:b3:a5:5e:dc:b1:ff: ce:a2:79:ee:d6:3e:4a:74:b1:41:4f:5f:a1:1e:06: 41:2f:2c:60:9f:69:bd:7a:33:c7:f1:4a:dc:3c:42: a5:c1:28:6a:88:2b:15:19:4f:23:7d:04:c8:83:20: dc:00:c0:46:c7:91:30:0b:96:05:35:11:50:b6:f6: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6F:F6:EF:9E:D8:4B:C5:97:36:5C:5F:07:F0:B7:F3:F3:7B:C4:2F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fdc5b367-3360-4930-9f1a-341b721401fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:613::/48 Signature Algorithm: sha256WithRSAEncryption ab:00:3c:3a:f6:14:b6:e1:98:09:c8:96:6c:2c:23:4a:94:b5: 8f:ba:fb:d7:74:08:aa:7f:0d:43:c9:a3:68:93:12:1f:92:ec: 37:93:d9:61:80:ee:07:21:6c:32:41:1a:d4:a1:27:df:75:98: 59:fe:6c:4c:09:aa:5e:73:93:9d:e3:79:ad:69:11:7f:43:5e: 3b:9b:5e:2e:4b:ba:62:5a:42:7f:80:26:71:2a:03:10:c5:20: 59:72:4c:63:44:05:a4:f4:ac:b8:f2:3b:3a:9f:33:08:4e:ad: f9:33:42:d5:75:ae:b7:1b:06:d7:ab:5e:75:80:cf:37:12:2e: f3:08:d6:a1:aa:cf:19:4b:1b:ee:e0:c5:74:a3:78:c6:28:f6: 0f:6c:5b:0f:ff:d8:e4:1a:98:12:12:a6:de:fd:9a:6b:62:dc: 6d:23:f4:09:f4:6f:db:6d:1a:50:7b:84:9c:7d:e4:42:c8:a9: 22:d7:74:6c:ae:e6:53:1f:0b:5f:cd:b5:7f:b1:6b:5f:ff:d2: b2:ed:09:d9:b5:31:34:25:be:ef:75:e1:ae:32:56:cb:f5:99: bc:c5:49:af:33:48:c1:18:f1:76:65:d4:5f:bd:d6:39:83:6e: 43:25:b2:aa:14:cd:ed:6c:df:8f:24:df:92:18:37:22:ec:7f: 67:7c:01:0a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC7Tk9jIZoqVIse2TwRx0H+0VwJIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjEwMDAwMDAwWhcNMjUwMzE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGFhZDBlZjk5NDNhN2JhODAyMDgzZDkxMTExODVhMzc1 OGZjOTkzN2IyNjRlOTE4Yjk4MzBhOGE0ZmU1MTI0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoEqQFGSYYPST9SLLAuUHKpvjEPGReC7WSUBx0bqp1rNHp XY9MGTO3Fe4hWeKsUaJX6qn8vVDSCD2eVsK+NFsr0zu+J/pMfbQNhVwr9ycLNy8E XqXnRO79OfFbs3u4Dsabqn90oNIjyakV5YwAye+tWXt1azYM1KniW9C31mhDbQJ1 aA9wxMnTlK9cu8FdO2T1/hxFjMYLeNLjvaUY6k3kAROgm5uVfszQbaYWkJlOdO8X 8pfBTAYCBL88MbOlXtyx/86iee7WPkp0sUFPX6EeBkEvLGCfab16M8fxStw8QqXB KGqIKxUZTyN9BMiDINwAwEbHkTALlgU1EVC29gf1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8W/2757YS8WXNlxfB/C38/N7xC8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2ZkYzViMzY3LTMzNjAtNDkzMC05ZjFhLTM0MWI3MjE0MDFmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABhMwDQYJKoZIhvcNAQELBQADggEBAKsAPDr2FLbhmAnIlmwsI0qU tY+6+9d0CKp/DUPJo2iTEh+S7DeT2WGA7gchbDJBGtShJ991mFn+bEwJql5zk53j ea1pEX9DXjubXi5LumJaQn+AJnEqAxDFIFlyTGNEBaT0rLjyOzqfMwhOrfkzQtV1 rrcbBterXnWAzzcSLvMI1qGqzxlLG+7gxXSjeMYo9g9sWw//2OQamBISpt79mmti 3G0j9An0b9ttGlB7hJx95ELIqSLXdGyu5lMfC1/NtX+xa1//0rLtCdm1MTQlvu91 4a4yVsv1mbzFSa8zSMEY8XZl1F+91jmDbkMlsqoUze1s348k35IYNyLsf2d8AQo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:45 2025 by rpki-client