$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a17a79-a4f2-4fde-89fd-653cadace6b7.roa File: 35a17a79-a4f2-4fde-89fd-653cadace6b7.roa (raw, json) Hash identifier: v4+uDu/9VH4mB/KvP0pXLTSm3/F7YDPLbh4o6EuAZF8= Subject key identifier: 9B:32:0E:37:91:EF:A7:F8:05:07:31:1E:9B:A4:2C:FC:AE:7D:1A:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 487E6F7F5DC990214230EA7FC4646C6D141055C3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a17a79-a4f2-4fde-89fd-653cadace6b7.roa Signing time: Mon 01 Sep 2025 15:20:29 +0000 ROA not before: Mon 01 Sep 2025 15:20:29 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 202.80.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7e:6f:7f:5d:c9:90:21:42:30:ea:7f:c4:64:6c:6d:14:10:55:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:20:29 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=7b52ca6c61dc665c5a7966643aa77aa3238cf2865aca876bb7c1c198b2b523ac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:a1:c1:c1:bb:fa:cb:c7:22:c0:48:41:de: ff:a8:89:10:c3:b0:23:e4:c8:97:e6:56:d3:9f:96: 18:b8:d2:69:11:af:50:d9:00:ce:0a:c1:ef:0e:b7: 49:8f:de:7c:c7:34:9a:f5:53:11:ea:98:68:ba:6d: 65:62:39:a4:ca:9a:be:bf:b4:3b:d1:f3:e2:7c:87: bc:72:eb:15:82:91:98:68:eb:6d:36:da:c3:5c:a3: 61:dc:e6:77:d2:85:27:1e:9c:e6:82:d3:25:1f:ba: a9:e2:69:46:bc:44:e1:bf:31:ce:27:2a:c7:24:41: 9d:f0:e5:b0:ba:37:a9:32:72:89:f8:ea:2a:57:23: 03:fb:eb:68:0e:d8:e1:4d:9c:a3:5b:ff:e3:4c:e4: 99:8f:60:9d:b8:f3:f0:c1:56:11:36:e1:08:48:0c: dd:52:59:90:25:a5:11:3d:75:08:2f:34:4e:39:24: f6:18:0b:43:70:73:41:35:d6:0e:42:5c:00:6c:dc: 2a:d3:e9:88:da:94:c8:9f:db:c8:4e:c2:5f:d9:13: 9e:5b:57:7f:72:d0:c3:f0:4c:bd:75:74:e8:3e:dd: f3:be:53:d9:81:52:2e:b7:9b:87:4d:05:16:c2:e4: bf:bd:02:6e:c0:5d:6b:43:87:3e:68:16:aa:ee:04: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:32:0E:37:91:EF:A7:F8:05:07:31:1E:9B:A4:2C:FC:AE:7D:1A:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35a17a79-a4f2-4fde-89fd-653cadace6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.80.168.0/24 Signature Algorithm: sha256WithRSAEncryption 09:bc:34:6f:ea:e0:18:1a:26:84:1a:d9:84:87:e7:33:3e:f9: 77:fa:7b:09:2f:f6:29:e5:af:e4:dc:63:68:cd:45:07:3c:43: ac:9f:13:73:d1:f2:ed:bc:2a:21:5a:4b:37:d8:a0:5e:4c:a0: 13:9a:b0:0e:f1:33:3b:e4:e2:96:2e:d4:33:a8:e3:5a:01:d8: 9c:16:eb:e2:c3:82:b7:a8:33:b1:a3:81:22:70:69:63:c9:3a: 4c:43:a3:de:34:09:ca:6e:d2:9e:bc:1c:63:03:89:d2:ee:37: fd:ad:42:64:d6:4d:04:14:db:a4:ac:41:2a:c1:39:a2:91:be: b8:a7:eb:e6:f7:53:40:94:a0:cd:c9:61:08:03:98:01:bb:8d: 46:59:95:a3:e1:2d:95:4f:0f:bd:16:57:be:0c:7f:ca:f9:7a: d5:e4:1b:c2:7c:55:1f:b8:d1:81:c8:b8:76:d7:04:b9:49:3f: bd:e2:38:1a:07:89:a2:eb:c8:6b:20:84:f9:67:88:2f:54:4a: 72:43:65:0c:17:0c:34:4e:7c:44:35:23:f6:5c:ac:75:a0:01: 44:ae:e3:37:24:58:37:08:9b:b3:5c:d5:5b:5f:9d:c8:db:ac: 7b:0a:6a:6a:3f:de:b3:72:2c:2d:f1:b6:17:c9:4a:d5:e6:0b: 1f:23:58:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSH5vf13JkCFCMOp/xGRsbRQQVcMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUyMDI5WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjUyY2E2YzYxZGM2NjVjNWE3OTY2NjQzYWE3N2FhMzIz OGNmMjg2NWFjYTg3NmJiN2MxYzE5OGIyYjUyM2FjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpSqHBwbv6y8ciwEhB3v+oiRDDsCPkyJfmVtOflhi40mkR r1DZAM4Kwe8Ot0mP3nzHNJr1UxHqmGi6bWViOaTKmr6/tDvR8+J8h7xy6xWCkZho 62022sNco2Hc5nfShScenOaC0yUfuqniaUa8ROG/Mc4nKsckQZ3w5bC6N6kycon4 6ipXIwP762gO2OFNnKNb/+NM5JmPYJ248/DBVhE24QhIDN1SWZAlpRE9dQgvNE45 JPYYC0Nwc0E11g5CXABs3CrT6YjalMif28hOwl/ZE55bV39y0MPwTL11dOg+3fO+ U9mBUi63m4dNBRbC5L+9Am7AXWtDhz5oFqruBLIzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmzION5Hvp/gFBzEem6Qs/K59Gs4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1YTE3YTc5LWE0ZjItNGZkZS04OWZkLTY1M2NhZGFjZTZiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKUKgwDQYJKoZIhvcNAQELBQADggEBAAm8NG/q4BgaJoQa2YSH5zM++Xf6 ewkv9inlr+TcY2jNRQc8Q6yfE3PR8u28KiFaSzfYoF5MoBOasA7xMzvk4pYu1DOo 41oB2JwW6+LDgreoM7GjgSJwaWPJOkxDo940Ccpu0p68HGMDidLuN/2tQmTWTQQU 26SsQSrBOaKRvrin6+b3U0CUoM3JYQgDmAG7jUZZlaPhLZVPD70WV74Mf8r5etXk G8J8VR+40YHIuHbXBLlJP73iOBoHiaLryGsghPlniC9USnJDZQwXDDROfEQ1I/Zc rHWgAUSu4zckWDcIm7Nc1VtfncjbrHsKamo/3rNyLC3xthfJStXmCx8jWO8= -----END CERTIFICATE-----Generated at Sat Sep 6 16:44:12 2025 by rpki-client