$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa File: 272c4ae3-4134-472f-8b64-c9388a26cc0a.roa (raw, json) Hash identifier: brddi4zmvfQqNWVnw/0K0Q4DTws/RjdJBb0NE70dUBc= Subject key identifier: 43:20:3D:BE:CA:73:2B:CA:C9:D1:E6:99:71:A0:6E:57:4D:D7:16:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5640615F57DD5F3506B3B65000F5A8F786599789 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa Signing time: Sat 08 Aug 2026 00:31:27 +0000 ROA not before: Sat 08 Aug 2026 00:31:27 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.17.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:40:61:5f:57:dd:5f:35:06:b3:b6:50:00:f5:a8:f7:86:59:97:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:31:27 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=9ecfc671de2e468f51a7ddcb442bdc827d206875d01ef2e45ea5afe2646649fb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:43:fa:dd:a2:0b:ba:83:fe:ca:53:dd:70: ca:4a:7f:32:72:7e:75:52:65:20:e4:dc:a5:79:0b: 57:13:27:79:40:00:71:d5:09:8a:fe:f4:9e:ec:a3: 0a:ce:4e:ff:02:6f:51:b1:03:95:bd:6c:a0:b4:51: f3:3e:95:d7:13:eb:a4:88:b5:1a:bc:2d:8f:39:86: 48:04:cd:fb:c5:67:b1:1b:1f:83:54:1e:3c:d4:37: 6e:52:9a:4f:d6:5a:94:ca:83:f1:88:ab:1c:11:e4: df:a2:f2:dc:93:a9:85:11:bc:4d:af:6d:eb:c1:15: ae:68:1a:bf:be:3c:07:76:ae:18:d2:21:f7:f7:6f: d8:ad:cf:50:da:0c:56:45:7f:c0:4a:80:a5:fc:f6: 96:a7:6f:c0:12:f9:4b:b4:bd:77:d1:69:fd:1a:ad: 00:1a:45:6b:62:96:dd:5a:f7:8f:f2:46:ce:33:2c: b9:b9:6c:ea:ac:a2:a6:74:a9:59:7d:c2:8e:a5:b7: 02:f9:35:ab:d2:d8:0b:18:96:e9:9b:d8:2d:bd:ff: a8:51:89:c7:94:50:6e:90:aa:91:cc:a6:ed:cf:82: 0f:1c:cf:f2:14:c0:18:24:1d:9d:45:1c:51:75:60: 33:47:5e:9b:c7:94:ca:be:58:e8:71:42:47:fd:83: 82:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:20:3D:BE:CA:73:2B:CA:C9:D1:E6:99:71:A0:6E:57:4D:D7:16:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272c4ae3-4134-472f-8b64-c9388a26cc0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:f4:88:16:98:15:26:e7:f9:9e:d0:d4:1a:fb:2b:a8:86:a4: b4:57:dd:d7:02:aa:f8:b9:ae:21:30:55:b5:99:82:7b:04:20: 1c:39:33:5c:c3:ba:92:5e:88:62:f6:30:07:2e:71:33:35:51: a3:27:29:6a:ba:1e:89:74:79:22:3c:59:b4:c8:ab:92:95:e6: 66:d7:35:bf:0f:81:82:50:bf:89:ce:b3:73:8a:89:44:d8:15: 51:2c:30:b6:18:72:b4:79:5d:3d:a2:6d:2a:78:ab:52:1d:87: 29:d0:70:6f:2e:b7:b9:a0:47:14:2d:3d:8e:c1:85:a6:d0:26: 3e:df:c7:67:35:13:13:61:17:cd:b2:be:da:c3:5d:03:2a:ac: 71:a7:1a:6a:4c:04:7d:ef:e9:d7:b1:51:5f:aa:36:45:1c:51: 23:f6:19:e1:01:c0:fb:68:a0:2e:e7:ec:47:c9:36:c5:7c:de: ae:db:34:e0:82:5a:e8:53:b5:21:1f:da:51:a0:28:06:c4:a9: f5:62:53:cb:da:11:89:ad:84:50:00:8a:ef:38:15:d2:5b:df: d2:ef:47:f3:d9:98:f5:ec:61:5d:ea:d5:f4:31:4f:9c:76:d5: 8d:be:53:bd:bf:00:c3:21:35:93:c2:4f:90:8b:92:58:6b:1a: 0b:7d:a9:4a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVkBhX1fdXzUGs7ZQAPWo94ZZl4kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAzMTI3WhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWNmYzY3MWRlMmU0NjhmNTFhN2RkY2I0NDJiZGM4Mjdk MjA2ODc1ZDAxZWYyZTQ1ZWE1YWZlMjY0NjY0OWZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCtkP63aILuoP+ylPdcMpKfzJyfnVSZSDk3KV5C1cTJ3lA AHHVCYr+9J7sowrOTv8Cb1GxA5W9bKC0UfM+ldcT66SItRq8LY85hkgEzfvFZ7Eb H4NUHjzUN25Smk/WWpTKg/GIqxwR5N+i8tyTqYURvE2vbevBFa5oGr++PAd2rhjS Iff3b9itz1DaDFZFf8BKgKX89panb8AS+Uu0vXfRaf0arQAaRWtilt1a94/yRs4z LLm5bOqsoqZ0qVl9wo6ltwL5NavS2AsYlumb2C29/6hRiceUUG6QqpHMpu3Pgg8c z/IUwBgkHZ1FHFF1YDNHXpvHlMq+WOhxQkf9g4IFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQyA9vspzK8rJ0eaZcaBuV03XFs4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3MmM0YWUzLTQxMzQtNDcyZi04YjY0LWM5Mzg4YTI2Y2MwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjETANBgkqhkiG9w0BAQsFAAOCAQEAlvSIFpgVJuf5ntDUGvsrqIaktFfd 1wKq+LmuITBVtZmCewQgHDkzXMO6kl6IYvYwBy5xMzVRoycparoeiXR5IjxZtMir kpXmZtc1vw+BglC/ic6zc4qJRNgVUSwwthhytHldPaJtKnirUh2HKdBwby63uaBH FC09jsGFptAmPt/HZzUTE2EXzbK+2sNdAyqscacaakwEfe/p17FRX6o2RRxRI/YZ 4QHA+2igLufsR8k2xXzerts04IJa6FO1IR/aUaAoBsSp9WJTy9oRia2EUACK7zgV 0lvf0u9H89mY9exhXerV9DFPnHbVjb5Tvb8AwyE1k8JPkIuSWGsaC32pSg== -----END CERTIFICATE-----Generated at Thu Sep 17 17:58:41 2026 by rpki-client