$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/033647ee-1115-4c6e-8a12-56cae6ea01f5.roa File: 033647ee-1115-4c6e-8a12-56cae6ea01f5.roa (raw, json) Hash identifier: T2j9gUAY/qaaX5e+P58PxaoXA099azPSOYMF/EJlpYg= Subject key identifier: 9F:F3:F8:D6:6B:F5:D7:10:29:1B:EE:65:6C:9F:BA:57:E5:A9:32:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21784EE1054E1EB1E1C712AEDA044A8784A8B264 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/033647ee-1115-4c6e-8a12-56cae6ea01f5.roa Signing time: Fri 08 Aug 2025 00:11:21 +0000 ROA not before: Fri 08 Aug 2025 00:11:21 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.128.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:78:4e:e1:05:4e:1e:b1:e1:c7:12:ae:da:04:4a:87:84:a8:b2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:11:21 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=cb5acc498b17c7d98735de8c11f43ef2a196b32b05ae2decdadf2d96a3544f77, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:cc:b0:07:3f:1b:6b:32:64:67:59:55:d8: 0f:e4:3f:83:22:9c:2a:6c:b9:25:2b:09:64:cb:f0: 02:38:06:0e:98:d3:b1:a5:12:75:55:f0:11:b2:b9: ec:52:1e:b1:14:49:15:32:00:5b:36:4c:23:24:c3: 5a:48:9b:27:ed:e0:a8:10:92:24:26:c2:aa:9f:c5: 92:27:cf:51:30:aa:52:04:2d:ce:5d:b1:54:54:13: 61:3c:fb:18:0a:97:c5:da:37:ae:6a:9e:f7:78:aa: 55:e4:19:de:26:36:93:7b:ac:a0:e9:38:0d:c3:e3: 25:9f:9f:6a:bb:fa:76:a2:87:84:e6:2a:e4:e7:6a: 7e:21:4f:38:50:26:eb:69:1d:b4:12:a5:c6:8e:53: c6:74:8f:db:34:6b:cd:5d:56:19:a4:f4:7b:d3:7a: 39:90:83:43:7d:cd:1f:76:61:4c:96:c1:cc:ed:f3: 24:e3:53:cf:7d:3f:ff:09:cf:f2:fe:1a:af:e8:84: 86:56:bc:e3:b7:b2:d4:73:c4:a4:82:ab:c2:1e:44: 93:37:f5:ae:94:07:1c:7a:0c:e7:34:fa:cb:29:64: 82:b6:76:20:41:20:3a:cc:79:98:05:c7:53:79:89: 4b:ca:f2:d4:a3:5d:9c:07:1d:98:48:b7:8d:58:77: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F3:F8:D6:6B:F5:D7:10:29:1B:EE:65:6C:9F:BA:57:E5:A9:32:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/033647ee-1115-4c6e-8a12-56cae6ea01f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.128.128.0/18 Signature Algorithm: sha256WithRSAEncryption d7:cb:9c:d5:48:cf:83:be:c9:ff:8d:25:21:0c:4e:24:5b:6b: fb:05:e0:b3:97:e6:98:88:50:2d:79:32:59:a9:eb:e9:8a:3e: 09:02:12:c5:33:89:ff:22:c4:3a:99:22:c1:f9:db:ab:39:64: 1d:a5:a5:f2:41:e1:e1:76:02:37:dd:e6:01:98:eb:55:0e:eb: dc:c9:c2:84:6c:33:04:32:92:54:c1:fc:3d:ca:80:1e:c2:d5: 25:29:32:32:a1:29:a2:7c:62:aa:d8:9a:c4:61:f8:2c:4a:26: 9e:25:5d:d9:34:64:78:86:26:27:81:f5:7e:a0:ac:a3:01:93: 87:97:86:96:10:6c:8f:dc:06:71:0b:bb:e9:fd:83:62:c6:4d: 74:96:66:c0:ca:97:55:0e:52:6a:a3:3b:c3:67:6d:d2:3f:c7: 42:48:5e:10:bb:7a:b0:d7:e1:8c:c9:69:25:00:ee:de:53:8e: 8b:4c:8c:ac:97:07:96:c9:f6:c0:21:a0:f1:91:40:82:fe:22: ae:ff:d6:81:53:b8:91:7d:a7:c3:1f:4d:cd:12:4b:ff:22:c5: d8:ca:01:72:6d:27:b7:f6:92:c1:25:d2:9a:e6:79:b0:d2:70: 77:14:f5:6a:c4:d6:20:31:c5:20:24:73:34:64:c2:b8:2e:f7: 19:7d:0a:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIXhO4QVOHrHhxxKu2gRKh4SosmQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAxMTIxWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjVhY2M0OThiMTdjN2Q5ODczNWRlOGMxMWY0M2VmMmEx OTZiMzJiMDVhZTJkZWNkYWRmMmQ5NmEzNTQ0Zjc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbqcywBz8bazJkZ1lV2A/kP4MinCpsuSUrCWTL8AI4Bg6Y 07GlEnVV8BGyuexSHrEUSRUyAFs2TCMkw1pImyft4KgQkiQmwqqfxZInz1EwqlIE Lc5dsVRUE2E8+xgKl8XaN65qnvd4qlXkGd4mNpN7rKDpOA3D4yWfn2q7+naih4Tm KuTnan4hTzhQJutpHbQSpcaOU8Z0j9s0a81dVhmk9HvTejmQg0N9zR92YUyWwczt 8yTjU899P/8Jz/L+Gq/ohIZWvOO3stRzxKSCq8IeRJM39a6UBxx6DOc0+sspZIK2 diBBIDrMeZgFx1N5iUvK8tSjXZwHHZhIt41Yd4CRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn/P41mv11xApG+5lbJ+6V+WpMuIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzMzY0N2VlLTExMTUtNGM2ZS04YTEyLTU2Y2FlNmVhMDFmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYjgIAwDQYJKoZIhvcNAQELBQADggEBANfLnNVIz4O+yf+NJSEMTiRba/sF 4LOX5piIUC15Mlmp6+mKPgkCEsUzif8ixDqZIsH526s5ZB2lpfJB4eF2Ajfd5gGY 61UO69zJwoRsMwQyklTB/D3KgB7C1SUpMjKhKaJ8YqrYmsRh+CxKJp4lXdk0ZHiG JieB9X6grKMBk4eXhpYQbI/cBnELu+n9g2LGTXSWZsDKl1UOUmqjO8NnbdI/x0JI XhC7erDX4YzJaSUA7t5TjotMjKyXB5bJ9sAhoPGRQIL+Iq7/1oFTuJF9p8MfTc0S S/8ixdjKAXJtJ7f2ksEl0prmebDScHcU9WrE1iAxxSAkczRkwrgu9xl9Cis= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:10 2025 by rpki-client