$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa File: fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa (raw, json) Hash identifier: UZfJdpc0ZwcKZ8KLQkryzHzJXD9JHbgsZoJLGTeK7Ro= Subject key identifier: F2:8A:66:85:C6:27:95:91:2A:90:66:F4:1C:94:41:9B:CC:D4:0D:35 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 48E2FB6E4F152AFBAF5AE4E4897A40C7BEB4D440 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa Signing time: Fri 07 Mar 2025 00:50:47 +0000 ROA not before: Fri 07 Mar 2025 00:50:47 +0000 ROA not after: Fri 11 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e2:fb:6e:4f:15:2a:fb:af:5a:e4:e4:89:7a:40:c7:be:b4:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 7 00:50:47 2025 GMT Not After : Apr 11 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:dd:bc:18:2c:d7:28:6f:3e:1e:88:da:81: 8f:c1:ef:21:f7:ff:10:0c:10:6b:9a:e8:cf:37:9e: f3:e7:93:68:c0:5c:f2:a9:7d:46:b5:6a:a9:9e:9f: af:10:be:11:76:bd:a2:df:d5:c9:08:f5:7c:5d:12: 3e:ef:cc:61:6f:64:4e:16:a1:84:a7:e7:63:96:d3: 8b:ef:6c:bf:4c:9e:94:08:e3:e3:d8:b7:71:ca:2d: a8:15:ab:f9:47:c9:e4:68:63:96:20:51:4e:08:2f: a6:76:5c:67:70:7f:1f:de:85:85:bc:23:18:3c:1d: bb:97:41:28:c0:c1:ee:53:86:b9:3a:87:bb:9e:02: 61:8e:15:56:1b:72:9f:3d:40:39:31:32:a2:a8:5a: d5:6c:e8:1d:bf:1f:72:b2:b5:37:0a:7e:e9:71:76: 8b:1e:c2:5f:98:a2:e1:47:7c:cf:3d:87:03:f8:9a: 3d:c8:4c:1f:f8:3d:3f:e6:07:4c:c2:cd:2b:1d:6a: 74:a4:4c:f5:f7:3f:6b:5d:28:f1:04:d4:25:78:78: 9f:88:0d:15:fe:41:76:85:d2:3d:a7:73:47:d9:c6: 74:ed:46:ed:2b:a8:ca:e6:f7:29:82:ad:58:87:6d: 1a:ce:1b:06:44:f2:ef:0d:b5:c8:06:5f:b9:39:ab: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8A:66:85:C6:27:95:91:2A:90:66:F4:1C:94:41:9B:CC:D4:0D:35 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fe892d2f-75ba-4086-8a56-5fe24de8d9c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30d::/48 Signature Algorithm: sha256WithRSAEncryption 1b:a9:ae:c0:2e:99:cc:c1:83:ed:57:4a:ce:61:91:a9:53:8d: d8:32:d0:6b:1b:41:3b:cc:9a:fd:fe:df:6f:96:5b:ac:33:c1: f2:ed:6e:71:38:7f:c0:17:a3:a8:31:17:ab:23:08:f2:93:93: 83:a0:a8:02:30:e7:b5:a5:7d:97:71:50:d1:22:e1:2f:31:58: e1:eb:ea:10:ef:01:bc:2e:db:e1:b4:27:e2:f6:3c:4a:ff:f9: 55:3a:32:ae:c4:54:84:38:b5:de:dd:58:7a:7b:a9:40:31:01: 2e:01:12:e7:e6:20:da:e5:6d:d5:95:d0:2a:33:b6:1a:15:60: 1b:94:b3:14:f0:a1:b3:81:66:fa:9e:91:35:99:ea:ad:ca:4d: 18:13:bc:52:3b:c2:11:24:9c:dd:8e:bb:a8:b0:da:33:7f:9b: a1:4a:31:e0:c0:1b:3f:7f:17:97:8d:4c:ac:b7:94:04:f8:02: 04:78:cf:e5:84:00:70:91:bc:85:05:85:ea:ee:25:30:5f:b7: 04:a8:39:d4:05:b7:e5:6c:9c:79:1d:19:92:a6:7c:c8:96:63: 25:80:8f:fb:e7:a1:a4:10:de:53:74:8e:c8:3f:6d:13:70:0b: df:4e:70:b8:8b:1d:ac:42:f1:ee:91:bb:41:23:02:17:22:25: 1d:db:40:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSOL7bk8VKvuvWuTkiXpAx7601EAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzA3MDA1MDQ3WhcNMjUwNDExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzAxNGMyZGNlNDNkNjljOTUyZGRkOTIzNjlmNDgxZDk0 NTBkNzRmNzQ3ZWFjYWYzY2Q2MzVlZjliOGJlM2YxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkWN28GCzXKG8+HojagY/B7yH3/xAMEGua6M83nvPnk2jA XPKpfUa1aqmen68QvhF2vaLf1ckI9XxdEj7vzGFvZE4WoYSn52OW04vvbL9MnpQI 4+PYt3HKLagVq/lHyeRoY5YgUU4IL6Z2XGdwfx/ehYW8Ixg8HbuXQSjAwe5Thrk6 h7ueAmGOFVYbcp89QDkxMqKoWtVs6B2/H3KytTcKfulxdosewl+YouFHfM89hwP4 mj3ITB/4PT/mB0zCzSsdanSkTPX3P2tdKPEE1CV4eJ+IDRX+QXaF0j2nc0fZxnTt Ru0rqMrm9ymCrViHbRrOGwZE8u8NtcgGX7k5qxYfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8opmhcYnlZEqkGb0HJRBm8zUDTUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2ZlODkyZDJmLTc1YmEtNDA4Ni04YTU2LTVmZTI0ZGU4ZDljNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw0wDQYJKoZIhvcNAQELBQADggEBABuprsAumczBg+1XSs5hkalT jdgy0GsbQTvMmv3+32+WW6wzwfLtbnE4f8AXo6gxF6sjCPKTk4OgqAIw57WlfZdx UNEi4S8xWOHr6hDvAbwu2+G0J+L2PEr/+VU6Mq7EVIQ4td7dWHp7qUAxAS4BEufm INrlbdWV0CozthoVYBuUsxTwobOBZvqekTWZ6q3KTRgTvFI7whEknN2Ou6iw2jN/ m6FKMeDAGz9/F5eNTKy3lAT4AgR4z+WEAHCRvIUFheruJTBftwSoOdQFt+VsnHkd GZKmfMiWYyWAj/vnoaQQ3lN0jsg/bRNwC99OcLiLHaxC8e6Ru0EjAhciJR3bQLY= -----END CERTIFICATE-----Generated at Thu Mar 13 23:46:55 2025 by rpki-client