$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba8f238b-79cc-40a3-9bac-16ec0c069345.roa File: ba8f238b-79cc-40a3-9bac-16ec0c069345.roa (raw, json) Hash identifier: 6v0IzguK/klYfNFFetOfWCBeoj0XmFWo8yOT0JsZGS4= Subject key identifier: AD:29:4E:15:0E:BB:75:79:59:65:46:C5:F3:58:EB:CD:D8:50:3C:3F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 37E96B0547315EB71E7F44CA9CFF18220E7DBF3F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba8f238b-79cc-40a3-9bac-16ec0c069345.roa Signing time: Mon 06 Oct 2025 17:01:13 +0000 ROA not before: Mon 06 Oct 2025 17:01:13 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e9:6b:05:47:31:5e:b7:1e:7f:44:ca:9c:ff:18:22:0e:7d:bf:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 6 17:01:13 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=ec2e99037c510aa0bde5c6a4e212dba503c8202cd8a5ccb5b9f08db86cee1323, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:79:c1:36:f3:7a:f4:c8:03:e8:de:19:01: e1:60:31:82:99:ea:aa:6c:86:69:a1:c6:30:c8:60: d6:e8:8e:27:59:4c:a4:d6:36:fd:7c:a9:55:66:bb: 53:4d:4a:ba:a6:b9:f7:67:c0:ee:4b:04:74:ff:a4: db:e6:12:9a:78:a8:d5:10:fb:f5:7a:1d:38:b3:19: 9e:f3:9d:b9:a6:03:32:48:ed:c4:08:1e:e5:2a:ad: bc:85:f9:56:5d:35:ce:df:29:70:b3:63:e7:2a:3f: c4:09:0b:a4:82:e4:0f:35:1c:fe:a1:8f:26:4b:ae: e4:54:53:5c:c4:08:fa:50:83:a2:3b:ab:d7:0e:09: e8:cb:bd:17:77:37:5c:40:97:b4:2d:74:82:86:18: 60:02:28:fa:bb:86:3d:0b:5f:75:f3:e9:63:84:6a: 3d:97:7e:bc:b7:31:2e:ed:af:3d:69:8d:fd:f0:be: 1d:ba:13:8d:60:7a:39:21:12:8b:c2:40:8c:3f:95: 40:27:72:4a:76:c6:8c:fc:b0:1c:12:d6:d0:0e:24: d8:5b:87:48:2c:d1:bd:97:6a:aa:97:27:9e:f9:e0: fd:c0:38:b0:18:9c:35:30:b0:79:d8:a2:ee:41:85: 7d:89:1d:38:78:18:11:64:cc:87:39:ce:bd:25:1f: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:29:4E:15:0E:BB:75:79:59:65:46:C5:F3:58:EB:CD:D8:50:3C:3F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba8f238b-79cc-40a3-9bac-16ec0c069345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.96.0/24 Signature Algorithm: sha256WithRSAEncryption 93:74:08:a3:ac:57:ab:b0:37:1b:7f:3d:19:da:1f:3b:4e:6f: f1:88:79:36:21:2d:14:96:a3:c0:e9:06:22:ab:c4:21:54:4c: c9:a0:ea:4d:40:ae:c0:86:92:46:b2:ac:0f:6f:f2:9e:d1:5a: bb:2b:8c:4f:10:94:05:ac:33:0f:ae:cb:c1:10:61:9d:2d:44: ea:ad:89:9a:f3:9e:61:0b:90:39:da:fd:ce:13:c6:97:51:d6: 39:1d:21:d3:67:8b:e7:69:fa:f7:28:84:16:4e:df:22:ce:44: 1b:92:16:d1:0f:d4:39:32:10:80:d0:fd:78:3e:a2:65:9d:39: 19:a6:02:ee:10:27:2b:98:b3:08:d0:ba:8f:f8:31:80:de:d1: ad:b7:5f:e8:08:c6:8c:14:d6:c9:8e:c1:d0:9a:ba:95:7f:b1: ad:d8:9f:31:e3:d6:26:a5:7f:42:4f:9b:78:e3:76:48:37:ef: b8:9e:11:8e:c5:b2:cb:17:01:3e:b1:fd:fd:40:ab:5d:48:f6: 10:b5:48:03:80:99:99:5b:89:27:7a:92:41:41:6b:fa:99:5d: c8:50:5a:77:69:12:5a:9c:53:f5:41:9c:bc:42:45:92:c8:36: a1:08:a6:08:a1:c2:6c:0e:34:4f:08:18:dc:52:0f:cb:3e:c7: 82:8e:14:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN+lrBUcxXrcef0TKnP8YIg59vz8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA2MTcwMTEzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzJlOTkwMzdjNTEwYWEwYmRlNWM2YTRlMjEyZGJhNTAz YzgyMDJjZDhhNWNjYjViOWYwOGRiODZjZWUxMzIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjunnBNvN69MgD6N4ZAeFgMYKZ6qpshmmhxjDIYNbojidZ TKTWNv18qVVmu1NNSrqmufdnwO5LBHT/pNvmEpp4qNUQ+/V6HTizGZ7znbmmAzJI 7cQIHuUqrbyF+VZdNc7fKXCzY+cqP8QJC6SC5A81HP6hjyZLruRUU1zECPpQg6I7 q9cOCejLvRd3N1xAl7QtdIKGGGACKPq7hj0LX3Xz6WOEaj2Xfry3MS7trz1pjf3w vh26E41gejkhEovCQIw/lUAnckp2xoz8sBwS1tAOJNhbh0gs0b2XaqqXJ5754P3A OLAYnDUwsHnYou5BhX2JHTh4GBFkzIc5zr0lH3KTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrSlOFQ67dXlZZUbF81jrzdhQPD8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhOGYyMzhiLTc5Y2MtNDBhMy05YmFjLTE2ZWMwYzA2OTM0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAmAwDQYJKoZIhvcNAQELBQADggEBAJN0CKOsV6uwNxt/PRnaHztOb/GI eTYhLRSWo8DpBiKrxCFUTMmg6k1ArsCGkkayrA9v8p7RWrsrjE8QlAWsMw+uy8EQ YZ0tROqtiZrznmELkDna/c4TxpdR1jkdIdNni+dp+vcohBZO3yLORBuSFtEP1Dky EIDQ/Xg+omWdORmmAu4QJyuYswjQuo/4MYDe0a23X+gIxowU1smOwdCaupV/sa3Y nzHj1ialf0JPm3jjdkg377ieEY7FsssXAT6x/f1Aq11I9hC1SAOAmZlbiSd6kkFB a/qZXchQWndpElqcU/VBnLxCRZLINqEIpgihwmwONE8IGNxSD8s+x4KOFHo= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:54 2025 by rpki-client