$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27aff6e8-577a-42bb-8881-56b16bef8f81.roa File: 27aff6e8-577a-42bb-8881-56b16bef8f81.roa (raw, json) Hash identifier: oSYNcVU0mzeZzYwcUsjbO7oyZK/NOXLvTehfRhyLQ0w= Subject key identifier: 33:C5:8B:4E:39:9C:76:F0:BC:91:7C:C8:1D:2E:30:FB:C9:C2:6F:0B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 721B2BA93307D1B6DE88279E0BFB328C995A27C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27aff6e8-577a-42bb-8881-56b16bef8f81.roa Signing time: Fri 29 Aug 2025 16:30:29 +0000 ROA not before: Fri 29 Aug 2025 16:30:29 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 40.164.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1b:2b:a9:33:07:d1:b6:de:88:27:9e:0b:fb:32:8c:99:5a:27:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:30:29 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=ce396543cc73c13fd38c89659f0081388804c35e6e712bcf4ff13ea619e46284, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:0d:24:ec:f9:a9:59:fd:6b:98:38:f8:a5: ef:b8:1d:5a:3b:47:4a:97:40:3e:6a:3d:c4:b4:09: c6:c8:fe:df:10:3b:eb:1f:b2:d8:a5:8f:15:de:41: d5:b6:e8:61:6a:dc:d0:5e:82:de:04:a7:02:ad:b7: 63:5a:1d:ec:96:31:06:42:68:76:e6:7f:fb:a7:dd: 66:4f:82:79:6f:21:2d:6b:61:0e:72:ce:9c:fb:cd: 7d:9c:25:8d:ed:bc:d9:75:ce:24:83:a3:89:da:82: 42:b7:76:f2:c1:14:8d:80:05:b2:df:c7:eb:26:c1: 14:51:b3:d2:29:58:eb:32:a4:02:42:65:ed:17:36: 2d:53:c7:1b:de:1e:df:92:90:16:ac:6a:7e:90:26: a0:a2:b4:85:77:bd:b2:00:87:4a:67:68:05:e7:d3: d1:55:b6:92:ae:76:75:8d:a6:5d:b5:e6:58:52:d1: 7c:c8:8c:40:21:9a:c5:a0:ee:7c:2c:99:ac:33:e1: 4a:dd:09:46:6f:66:d9:3d:8c:e3:ed:05:23:ae:05: e6:36:84:9a:5c:3d:4b:a5:bd:85:2c:cf:15:41:ea: ee:ba:0e:27:90:c2:70:bb:34:7b:bb:49:87:02:5a: 9e:13:37:3a:84:94:50:c3:b8:92:f4:12:9d:00:38: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C5:8B:4E:39:9C:76:F0:BC:91:7C:C8:1D:2E:30:FB:C9:C2:6F:0B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27aff6e8-577a-42bb-8881-56b16bef8f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.164.0.0/16 Signature Algorithm: sha256WithRSAEncryption a9:a9:d4:ae:15:50:1c:17:a0:10:2b:54:1f:32:be:39:e0:8c: 49:e9:66:17:e0:ff:9f:16:13:b8:12:3a:48:50:49:a4:c2:18: 15:5e:14:d3:85:51:15:61:3b:0d:f8:27:75:8f:37:d1:45:ea: 3d:a4:89:3d:4e:1f:fb:95:80:57:9a:35:1e:63:a1:72:14:69: 42:5d:5f:1b:4c:2c:c3:79:51:d6:d8:37:92:0b:1f:77:e9:30: fb:7f:04:b1:bb:63:58:91:1b:40:67:d0:f8:10:34:a2:91:7a: e4:5d:22:57:6d:7e:fd:5c:78:57:5f:30:23:f7:ef:ea:af:d2: 1e:5a:5e:56:e1:95:f5:92:f8:5f:eb:44:5c:2d:b6:ba:e9:02: 8a:72:8d:c7:d4:c1:ab:ec:9d:70:85:66:6e:aa:da:53:80:e8: 34:58:ba:26:e0:f1:89:e0:c4:c0:34:18:9a:50:f2:dc:0d:29: c3:d4:8a:33:61:a6:bf:37:40:24:40:11:53:b4:15:eb:1b:27: 82:34:81:f2:79:84:71:31:8f:77:0f:fc:12:db:22:a3:72:c0: fa:9a:c8:da:d8:93:e9:11:5c:8c:c6:e8:98:1b:67:42:60:4e: 16:70:a4:14:58:63:05:87:a9:15:c5:67:cc:f9:8a:d0:c5:0f: 01:ab:7f:01 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUchsrqTMH0bbeiCeeC/syjJlaJ8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYzMDI5WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTM5NjU0M2NjNzNjMTNmZDM4Yzg5NjU5ZjAwODEzODg4 MDRjMzVlNmU3MTJiY2Y0ZmYxM2VhNjE5ZTQ2Mjg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClvA0k7PmpWf1rmDj4pe+4HVo7R0qXQD5qPcS0CcbI/t8Q O+sfstiljxXeQdW26GFq3NBegt4EpwKtt2NaHeyWMQZCaHbmf/un3WZPgnlvIS1r YQ5yzpz7zX2cJY3tvNl1ziSDo4nagkK3dvLBFI2ABbLfx+smwRRRs9IpWOsypAJC Ze0XNi1TxxveHt+SkBasan6QJqCitIV3vbIAh0pnaAXn09FVtpKudnWNpl215lhS 0XzIjEAhmsWg7nwsmawz4UrdCUZvZtk9jOPtBSOuBeY2hJpcPUulvYUszxVB6u66 DieQwnC7NHu7SYcCWp4TNzqElFDDuJL0Ep0AOO/rAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUM8WLTjmcdvC8kXzIHS4w+8nCbwswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3YWZmNmU4LTU3N2EtNDJiYi04ODgxLTU2YjE2YmVmOGY4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAopDANBgkqhkiG9w0BAQsFAAOCAQEAqanUrhVQHBegECtUHzK+OeCMSelm F+D/nxYTuBI6SFBJpMIYFV4U04VRFWE7DfgndY830UXqPaSJPU4f+5WAV5o1HmOh chRpQl1fG0wsw3lR1tg3kgsfd+kw+38EsbtjWJEbQGfQ+BA0opF65F0iV21+/Vx4 V18wI/fv6q/SHlpeVuGV9ZL4X+tEXC22uukCinKNx9TBq+ydcIVmbqraU4DoNFi6 JuDxieDEwDQYmlDy3A0pw9SKM2GmvzdAJEARU7QV6xsngjSB8nmEcTGPdw/8Etsi o3LA+prI2tiT6RFcjMbomBtnQmBOFnCkFFhjBYepFcVnzPmK0MUPAat/AQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:02 2025 by rpki-client