$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/29afec76-525a-4bc4-b33b-bce824242df2.roa File: 29afec76-525a-4bc4-b33b-bce824242df2.roa (raw, json) Hash identifier: /8PPCA9Q++vx4KH9YPVj42LFA4lGPglvcSSgYfCjytk= Subject key identifier: 27:A3:10:3D:25:C4:FD:B0:31:60:73:CE:9D:F9:89:D3:E0:8E:E1:55 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 790C94851D4DCB794B9189D4DEAD631AD14220A4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/29afec76-525a-4bc4-b33b-bce824242df2.roa Signing time: Tue 04 Nov 2025 16:50:14 +0000 ROA not before: Tue 04 Nov 2025 16:50:14 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0c:94:85:1d:4d:cb:79:4b:91:89:d4:de:ad:63:1a:d1:42:20:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 4 16:50:14 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=896ffa1248aef3ed38a7e1a6726db74e7ff4009c14867e7d7ee4c72772a0cc62, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:4a:00:b0:c7:c9:ee:d5:8a:c0:84:b4:f1: 72:30:07:a9:fc:c4:f6:50:81:e8:aa:f5:57:ab:62: 2f:e9:6b:e3:ae:23:06:49:d0:b9:c1:a9:8e:31:72: 03:94:89:8d:76:25:0d:73:e0:52:2a:80:25:7e:4d: b1:04:cf:fa:25:63:7a:27:39:77:11:91:e5:84:b9: 50:ae:b2:fb:16:57:93:af:09:30:e5:ec:51:19:07: eb:a9:6b:ae:98:8e:24:90:29:64:1f:3f:a4:bd:44: 30:7d:31:97:a1:20:9b:dd:ea:92:e3:04:f6:29:dc: 02:2e:9e:f2:d3:74:8f:74:88:ff:84:be:4f:8b:ac: 99:94:91:63:86:ee:14:cb:4d:eb:83:7e:58:e5:81: 1a:60:7b:9f:b5:b6:5f:df:4b:c2:b7:7a:70:ba:b1: 73:e8:af:e0:a7:a8:00:15:3a:fe:f5:eb:2c:43:c2: 1a:d0:5e:94:42:25:fc:f3:36:0c:91:34:19:ad:6d: 3b:5a:e9:38:5d:c1:1e:67:ab:34:a3:99:c3:24:94: 73:97:15:9f:a2:7e:c4:dc:b8:7e:bf:fd:fd:38:a8: f8:06:e3:de:0b:4d:ea:32:9f:af:ba:86:0b:d6:8c: ce:7c:49:e9:58:e4:8a:85:ca:ca:5f:06:96:95:c4: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A3:10:3D:25:C4:FD:B0:31:60:73:CE:9D:F9:89:D3:E0:8E:E1:55 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/29afec76-525a-4bc4-b33b-bce824242df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c08::/48 Signature Algorithm: sha256WithRSAEncryption 9a:4c:e9:1c:06:1c:55:78:8e:72:2c:70:bb:58:ae:da:6e:ef: da:87:e3:f0:49:94:fc:27:d5:7c:a5:28:43:7d:a8:62:fb:d8: 09:dd:e7:bc:45:b7:f2:d2:cb:ae:6b:10:8c:47:69:57:53:58: 96:41:d1:56:b8:9c:3b:0b:f0:5e:49:c7:eb:30:e0:d5:02:03: 43:a6:d6:80:ee:0a:82:0d:a2:72:c2:22:a6:e8:9f:97:bf:e9: 23:70:2c:ea:92:2b:3d:80:3c:c4:e2:0b:66:c2:4e:b1:86:06: aa:3a:e4:64:4a:c0:5a:b4:22:c2:ee:95:76:2d:47:7a:97:e2: 67:fe:4b:13:20:a1:e7:b7:eb:ad:42:26:be:17:e8:3c:d7:3c: 8c:5c:3d:e9:e4:a7:65:1d:b5:7f:ce:16:0a:14:bb:2b:01:b7: 66:6d:f1:50:df:6b:ed:0d:ac:b0:5c:dc:d5:6a:6c:57:5f:e9: 27:44:86:67:6f:65:7e:47:54:a6:28:df:cd:db:72:8c:e2:1c: 16:42:b2:a3:69:57:f1:a7:39:9b:08:f7:23:b5:d9:56:3a:22: e1:04:f9:49:42:fc:46:e3:47:90:53:37:7f:5a:c7:5a:46:9e: 55:92:15:bd:6c:7a:9d:00:1b:52:03:f7:eb:4f:89:f1:68:16: 59:cd:5c:18 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeQyUhR1Ny3lLkYnU3q1jGtFCIKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTA0MTY1MDE0WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTZmZmExMjQ4YWVmM2VkMzhhN2UxYTY3MjZkYjc0ZTdm ZjQwMDljMTQ4NjdlN2Q3ZWU0YzcyNzcyYTBjYzYyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkI0oAsMfJ7tWKwIS08XIwB6n8xPZQgeiq9VerYi/pa+Ou IwZJ0LnBqY4xcgOUiY12JQ1z4FIqgCV+TbEEz/olY3onOXcRkeWEuVCusvsWV5Ov CTDl7FEZB+upa66YjiSQKWQfP6S9RDB9MZehIJvd6pLjBPYp3AIunvLTdI90iP+E vk+LrJmUkWOG7hTLTeuDfljlgRpge5+1tl/fS8K3enC6sXPor+CnqAAVOv716yxD whrQXpRCJfzzNgyRNBmtbTta6ThdwR5nqzSjmcMklHOXFZ+ifsTcuH6//f04qPgG 494LTeoyn6+6hgvWjM58SelY5IqFyspfBpaVxJyvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJ6MQPSXE/bAxYHPOnfmJ0+CO4VUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI5YWZlYzc2LTUyNWEtNGJjNC1iMzNiLWJjZTgyNDI0MmRmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAgwDQYJKoZIhvcNAQELBQADggEBAJpM6RwGHFV4jnIscLtYrtpu 79qH4/BJlPwn1XylKEN9qGL72And57xFt/LSy65rEIxHaVdTWJZB0Va4nDsL8F5J x+sw4NUCA0Om1oDuCoINonLCIqbon5e/6SNwLOqSKz2APMTiC2bCTrGGBqo65GRK wFq0IsLulXYtR3qX4mf+SxMgoee3661CJr4X6DzXPIxcPenkp2UdtX/OFgoUuysB t2Zt8VDfa+0NrLBc3NVqbFdf6SdEhmdvZX5HVKYo383bcoziHBZCsqNpV/GnOZsI 9yO12VY6IuEE+UlC/EbjR5BTN39ax1pGnlWSFb1sep0AG1ID9+tPifFoFlnNXBg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:39 2025 by rpki-client