$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa File: 272c4ae3-4134-472f-8b64-c9388a26cc0a.roa (raw, json) Hash identifier: xc7MStLzAekVdfrG3vBbLbS/P+fZvbbSnlyudBVuKfI= Subject key identifier: 2E:C1:72:18:3F:31:AE:1B:4A:DC:08:03:3B:82:0B:D5:F7:78:B8:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 386ED0A570CEA93A64C72DEFAA12A73D409558E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa Signing time: Fri 08 Aug 2025 00:11:23 +0000 ROA not before: Fri 08 Aug 2025 00:11:23 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.17.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6e:d0:a5:70:ce:a9:3a:64:c7:2d:ef:aa:12:a7:3d:40:95:58:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:11:23 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=02a7b3632b7f514a8db0bce0fb0d048d5e2a38eafb22f760604c19873af581cf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:dc:7c:e1:07:03:8c:4d:82:c0:27:e1:5a: cf:30:e6:4f:15:bf:21:a0:b8:d4:89:54:b3:09:4b: a8:ff:6f:4f:12:87:5c:d8:1d:32:ac:f2:81:67:c3: e5:60:a6:db:e2:7e:ce:3b:c9:cc:33:91:eb:ca:2b: 5e:a8:1c:b1:bb:59:2a:29:98:78:52:71:a5:09:92: df:e3:83:d0:77:cc:82:47:d5:05:e9:1c:8c:fa:a6: fb:64:49:b2:a1:c7:5e:7d:2b:9a:ff:19:aa:e3:9e: 71:f3:c5:30:15:63:4e:81:76:df:eb:cc:cc:ff:20: 03:0c:b9:10:f3:55:c2:4a:97:12:6b:19:1c:a6:77: 0d:f2:c0:8a:77:60:47:ad:b0:66:e8:ed:a4:07:d0: 33:b4:96:30:07:23:d6:a9:1e:50:ad:35:73:e0:da: 56:84:4d:f9:21:1d:dc:f7:aa:a1:77:b1:be:47:4a: 62:48:64:8a:b4:f8:be:7d:0c:5b:0e:5d:14:8f:ca: 3a:08:74:93:f8:81:a0:d6:2a:78:36:67:67:4f:3b: d0:31:a3:fd:e8:8c:3d:f5:5a:b5:83:50:b8:26:eb: 05:6c:b0:68:89:8d:d2:64:a6:79:3b:fe:a1:c5:32: 8d:b6:af:07:81:5a:fb:4a:f6:3b:82:3a:28:f8:67: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:72:18:3F:31:AE:1B:4A:DC:08:03:3B:82:0B:D5:F7:78:B8:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8e:e6:85:82:06:b9:06:d2:aa:3a:98:38:8b:bd:50:56:f9:63: 93:ef:b1:d6:96:e8:63:07:4d:0f:23:34:e9:0c:13:f9:a9:75: 45:83:e6:8c:ea:77:3a:ab:cd:76:5c:df:ec:b2:1a:44:16:85: 32:97:d3:f6:37:bf:f0:fa:ed:22:2b:54:93:31:3c:b5:f1:f8: 4e:53:d2:2d:75:30:8e:2d:a6:30:26:28:33:0e:e4:1d:9c:47: 0c:b5:d3:60:08:10:c4:37:5d:a5:0d:53:c3:43:65:db:ec:0e: 3e:67:3a:67:83:16:07:5a:85:a8:77:ba:2a:52:02:c3:35:8f: d4:ee:f4:11:99:5e:ac:19:0c:1b:1b:9c:1e:a8:fb:06:fc:71: e4:99:fe:27:da:85:84:f3:84:ad:28:35:33:46:90:25:d3:f1: 02:e1:5a:be:06:12:01:cc:68:9f:77:8b:8f:3f:26:0e:de:4d: 2e:a6:ab:a6:95:58:06:ec:5f:e7:c3:9d:06:99:d2:49:b2:4a: 5f:23:ca:7d:b0:7c:b0:f2:0e:27:56:76:0b:fa:07:f9:a4:da: c4:54:5d:b2:f1:76:2c:eb:26:d1:a5:f3:36:01:c5:c1:0f:b5: 70:d7:f7:30:db:35:e2:f4:e6:62:ea:19:65:32:22:77:2b:f6: 15:b3:a4:37 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOG7QpXDOqTpkxy3vqhKnPUCVWOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAxMTIzWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmE3YjM2MzJiN2Y1MTRhOGRiMGJjZTBmYjBkMDQ4ZDVl MmEzOGVhZmIyMmY3NjA2MDRjMTk4NzNhZjU4MWNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChitx84QcDjE2CwCfhWs8w5k8VvyGguNSJVLMJS6j/b08S h1zYHTKs8oFnw+Vgptvifs47ycwzkevKK16oHLG7WSopmHhScaUJkt/jg9B3zIJH 1QXpHIz6pvtkSbKhx159K5r/GarjnnHzxTAVY06Bdt/rzMz/IAMMuRDzVcJKlxJr GRymdw3ywIp3YEetsGbo7aQH0DO0ljAHI9apHlCtNXPg2laETfkhHdz3qqF3sb5H SmJIZIq0+L59DFsOXRSPyjoIdJP4gaDWKng2Z2dPO9Axo/3ojD31WrWDULgm6wVs sGiJjdJkpnk7/qHFMo22rweBWvtK9juCOij4Z1L/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULsFyGD8xrhtK3AgDO4IL1fd4uBkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3MmM0YWUzLTQxMzQtNDcyZi04YjY0LWM5Mzg4YTI2Y2MwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjETANBgkqhkiG9w0BAQsFAAOCAQEAjuaFgga5BtKqOpg4i71QVvljk++x 1pboYwdNDyM06QwT+al1RYPmjOp3OqvNdlzf7LIaRBaFMpfT9je/8PrtIitUkzE8 tfH4TlPSLXUwji2mMCYoMw7kHZxHDLXTYAgQxDddpQ1Tw0Nl2+wOPmc6Z4MWB1qF qHe6KlICwzWP1O70EZlerBkMGxucHqj7Bvxx5Jn+J9qFhPOErSg1M0aQJdPxAuFa vgYSAcxon3eLjz8mDt5NLqarppVYBuxf58OdBpnSSbJKXyPKfbB8sPIOJ1Z2C/oH +aTaxFRdsvF2LOsm0aXzNgHFwQ+1cNf3MNs14vTmYuoZZTIidyv2FbOkNw== -----END CERTIFICATE-----Generated at Sat Aug 23 06:50:52 2025 by rpki-client