$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/29afec76-525a-4bc4-b33b-bce824242df2.roa File: 29afec76-525a-4bc4-b33b-bce824242df2.roa (raw, json) Hash identifier: Auu2DREDHCJ2pWYv4awPT87vA+s0Z08JTu1D6lzMpNs= Subject key identifier: AE:1F:A6:06:56:1A:0E:EF:E2:F2:04:B6:1A:C2:99:44:47:C3:38:42 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5A0F222B7190620A056192EDF300610C6E59F770 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/29afec76-525a-4bc4-b33b-bce824242df2.roa Signing time: Fri 15 Aug 2025 15:10:55 +0000 ROA not before: Fri 15 Aug 2025 15:10:55 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0f:22:2b:71:90:62:0a:05:61:92:ed:f3:00:61:0c:6e:59:f7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 15 15:10:55 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=a1f6402e1228d842be71019342935be3b45f5a71d615e52f2769b1edcfa4ee5c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:70:74:53:7c:68:dd:47:1d:5e:89:94:30: c0:95:59:b3:f3:4d:2c:57:ec:c0:9a:43:96:3c:ac: c9:83:ab:7f:a8:1b:25:cc:77:af:d5:0d:1d:bc:e2: ed:eb:00:60:58:34:4d:9f:07:61:af:dd:55:89:4a: 68:08:80:04:6f:5b:ba:9b:29:e5:df:39:87:a1:80: c6:69:c6:83:71:d7:63:46:87:34:99:e7:b9:68:ff: 9d:7e:b6:1a:25:2d:e9:1b:1e:f6:b7:14:7c:2a:bf: eb:94:22:af:4e:84:f3:cd:e8:3d:22:92:d5:d0:4c: 24:d0:45:ee:2d:31:75:ea:30:e8:ca:6f:19:cb:17: 6f:c3:6f:1e:4e:c3:8c:d0:29:84:fc:17:c8:a9:72: 87:5c:47:89:7f:26:0c:5a:3d:2c:32:95:f3:23:90: 0e:73:8e:2a:6d:cd:e8:8f:dd:fc:5c:88:94:9d:96: 21:97:5a:a9:8e:fc:56:18:fb:ae:39:49:67:35:af: e7:b2:29:14:bf:92:08:d7:79:da:1f:6c:aa:da:ef: 4c:a0:19:48:a4:c5:f4:5e:7d:0a:3c:3e:ba:8b:53: eb:6a:36:39:24:ef:d7:8d:bf:77:61:f4:b1:3a:66: 50:e2:41:f4:c3:1b:7f:82:a3:b2:66:34:5e:95:77: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1F:A6:06:56:1A:0E:EF:E2:F2:04:B6:1A:C2:99:44:47:C3:38:42 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/29afec76-525a-4bc4-b33b-bce824242df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c08::/48 Signature Algorithm: sha256WithRSAEncryption 22:6b:5c:4c:c9:02:1c:00:62:3b:39:4b:5d:ff:a2:88:0f:03: ff:13:d7:c2:8d:3c:2c:cc:a8:27:a3:8c:08:54:d2:47:b1:9d: 5b:72:3b:e3:83:46:4f:9a:5d:09:63:29:10:57:51:e0:f4:fd: 13:ff:75:13:b9:8d:0c:a0:f8:37:0a:89:99:9f:2b:3b:2c:f7: db:9f:8f:a5:eb:cd:6c:a2:6e:98:75:78:2f:63:41:7a:be:37: 56:86:05:47:b7:9b:e0:47:3f:3e:f2:9f:e0:24:ea:3d:35:9d: d2:85:ed:b8:b0:7d:7f:85:17:88:5b:1e:ac:28:6c:13:95:3d: 1f:82:cb:5d:94:59:c5:7a:49:63:24:57:e5:6b:d5:e1:25:c6: dc:e0:68:ae:ab:10:35:5d:bc:84:e1:1a:91:bf:67:12:2c:10: f6:e4:ef:92:03:86:43:7d:31:01:94:bb:4d:be:29:68:42:ac: 09:e0:c9:26:8b:05:cc:bb:1a:ef:87:40:a5:f1:78:49:f6:af: 10:28:c4:5f:61:8b:94:73:28:66:3e:c6:d6:0d:40:6b:9e:36: 68:d4:64:13:c1:73:88:9d:42:7d:70:15:11:30:af:d0:f0:f8: a3:4e:23:d4:94:2b:20:00:ad:77:61:72:86:22:f8:dd:9e:4c: 68:43:aa:86 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWg8iK3GQYgoFYZLt8wBhDG5Z93AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE1MTUxMDU1WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWY2NDAyZTEyMjhkODQyYmU3MTAxOTM0MjkzNWJlM2I0 NWY1YTcxZDYxNWU1MmYyNzY5YjFlZGNmYTRlZTVjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEB3B0U3xo3UcdXomUMMCVWbPzTSxX7MCaQ5Y8rMmDq3+o GyXMd6/VDR284u3rAGBYNE2fB2Gv3VWJSmgIgARvW7qbKeXfOYehgMZpxoNx12NG hzSZ57lo/51+tholLekbHva3FHwqv+uUIq9OhPPN6D0iktXQTCTQRe4tMXXqMOjK bxnLF2/Dbx5Ow4zQKYT8F8ipcodcR4l/JgxaPSwylfMjkA5zjiptzeiP3fxciJSd liGXWqmO/FYY+645SWc1r+eyKRS/kgjXedofbKra70ygGUikxfRefQo8PrqLU+tq Njkk79eNv3dh9LE6ZlDiQfTDG3+Co7JmNF6VdwhhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrh+mBlYaDu/i8gS2GsKZREfDOEIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI5YWZlYzc2LTUyNWEtNGJjNC1iMzNiLWJjZTgyNDI0MmRmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAgwDQYJKoZIhvcNAQELBQADggEBACJrXEzJAhwAYjs5S13/oogP A/8T18KNPCzMqCejjAhU0kexnVtyO+ODRk+aXQljKRBXUeD0/RP/dRO5jQyg+DcK iZmfKzss99ufj6XrzWyibph1eC9jQXq+N1aGBUe3m+BHPz7yn+Ak6j01ndKF7biw fX+FF4hbHqwobBOVPR+Cy12UWcV6SWMkV+Vr1eElxtzgaK6rEDVdvIThGpG/ZxIs EPbk75IDhkN9MQGUu02+KWhCrAngySaLBcy7Gu+HQKXxeEn2rxAoxF9hi5RzKGY+ xtYNQGueNmjUZBPBc4idQn1wFREwr9Dw+KNOI9SUKyAArXdhcoYi+N2eTGhDqoY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:23 2025 by rpki-client