$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba99cf2b-f98d-456e-a185-f4f0abf4c5a5.roa File: ba99cf2b-f98d-456e-a185-f4f0abf4c5a5.roa (raw, json) Hash identifier: x5scdp9nXS5FfxGizxVTOkc+q5WpOr8EPzKyoJ0jdxk= Subject key identifier: 72:CE:B1:C7:98:FD:52:E9:64:33:88:97:D4:22:74:13:18:42:8D:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C7A0766C3C22521F69D20F00018CAA4AF3248EF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba99cf2b-f98d-456e-a185-f4f0abf4c5a5.roa Signing time: Thu 08 Oct 2026 00:30:47 +0000 ROA not before: Thu 08 Oct 2026 00:30:47 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 70.232.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7a:07:66:c3:c2:25:21:f6:9d:20:f0:00:18:ca:a4:af:32:48:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:30:47 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=2561a79fa6dca5285eda653060271199c8cf5a3680a1552ca041361c6fbfd22b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:09:95:06:27:b1:93:21:3f:aa:61:61:87:98: 44:ba:ae:ba:37:22:48:6f:43:6e:65:a2:b3:0d:4b: aa:73:97:30:8f:f0:90:c6:e3:3b:f1:2e:45:1c:3f: 94:74:ae:df:49:81:05:b4:b7:86:4f:13:ed:01:10: e4:f6:09:1f:c3:41:34:83:31:c3:73:a2:59:b9:68: 66:53:17:bf:3b:6e:c4:1b:d2:18:ba:22:8f:41:8d: 1c:1f:45:2c:2f:17:8b:ec:f1:bd:ba:b0:62:02:d9: cc:1f:53:0b:2c:1e:8e:d8:84:89:7c:6c:ad:42:03: 39:db:40:07:45:2e:16:57:72:53:18:45:a3:12:36: ae:f5:43:a1:7e:99:1e:f0:f2:06:d6:1d:3f:8c:db: fd:6a:8f:e9:cd:73:7f:94:f1:c0:e3:0f:f4:27:df: ee:3e:64:03:1a:f5:de:80:ee:75:d8:78:b7:82:77: db:0b:e1:55:f6:58:23:0c:98:73:f7:d1:47:3a:4f: 12:f2:76:f3:28:b2:74:05:fd:e0:f8:be:9d:e2:74: eb:25:f1:25:12:b5:a1:85:c6:70:a1:fa:7e:9c:33: 5c:0f:f5:03:2f:e7:1d:b9:f1:1c:fb:2e:6b:87:67: c6:66:eb:8a:28:5e:ad:20:7c:e2:be:af:c1:30:3b: 32:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CE:B1:C7:98:FD:52:E9:64:33:88:97:D4:22:74:13:18:42:8D:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba99cf2b-f98d-456e-a185-f4f0abf4c5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.232.112.0/21 Signature Algorithm: sha256WithRSAEncryption 55:a9:de:f9:15:4a:78:69:1f:21:f7:5f:c4:89:35:2a:39:88: b6:8a:b5:1b:de:23:70:b5:71:fb:b4:ec:9c:a0:26:5e:aa:30: de:da:e0:3f:43:07:4d:49:51:e5:d5:3c:31:71:3f:55:15:7f: 26:d6:5e:39:36:99:82:1d:89:a8:9c:f8:b6:e9:18:b8:da:b6: 8f:f6:0c:46:4c:ec:4d:69:5b:d7:4f:e0:f1:72:24:fc:11:fe: 0f:af:4d:e2:a6:8a:51:d9:01:ca:97:15:97:79:02:b0:34:a5: 7d:72:16:0e:21:fc:c5:6a:e3:ab:a1:f3:d5:2b:26:cc:31:78: 73:c3:1e:37:ef:d9:4b:2e:6f:9c:31:d8:a9:0f:22:93:e6:cc: 56:f3:8a:ca:f3:07:68:b1:4d:b4:21:5d:1a:08:4f:0b:01:c1: 2b:1a:a5:95:04:04:22:21:ce:3d:86:53:fa:00:4b:54:5d:2d: 86:16:ab:9d:5f:3e:53:37:47:dc:a5:f8:96:1b:c5:f8:0e:31: 85:b1:12:f8:49:86:fb:e3:08:cc:77:59:b8:73:93:50:88:35: 1d:5e:9c:6f:6c:28:75:8c:f1:6d:58:c2:46:c7:c8:a2:9a:60: 13:91:91:15:10:f4:d0:b9:ba:9d:23:51:1e:93:00:a8:50:e2: 3b:ac:ba:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPHoHZsPCJSH2nSDwABjKpK8ySO8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAzMDQ3WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTYxYTc5ZmE2ZGNhNTI4NWVkYTY1MzA2MDI3MTE5OWM4 Y2Y1YTM2ODBhMTU1MmNhMDQxMzYxYzZmYmZkMjJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgCZUGJ7GTIT+qYWGHmES6rro3IkhvQ25lorMNS6pzlzCP 8JDG4zvxLkUcP5R0rt9JgQW0t4ZPE+0BEOT2CR/DQTSDMcNzolm5aGZTF787bsQb 0hi6Io9BjRwfRSwvF4vs8b26sGIC2cwfUwssHo7YhIl8bK1CAznbQAdFLhZXclMY RaMSNq71Q6F+mR7w8gbWHT+M2/1qj+nNc3+U8cDjD/Qn3+4+ZAMa9d6A7nXYeLeC d9sL4VX2WCMMmHP30Uc6TxLydvMosnQF/eD4vp3idOsl8SUStaGFxnCh+n6cM1wP 9QMv5x258Rz7LmuHZ8Zm64ooXq0gfOK+r8EwOzLzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcs6xx5j9UulkM4iX1CJ0ExhCjQAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhOTljZjJiLWY5OGQtNDU2ZS1hMTg1LWY0ZjBhYmY0YzVhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANG6HAwDQYJKoZIhvcNAQELBQADggEBAFWp3vkVSnhpHyH3X8SJNSo5iLaK tRveI3C1cfu07JygJl6qMN7a4D9DB01JUeXVPDFxP1UVfybWXjk2mYIdiaic+Lbp GLjato/2DEZM7E1pW9dP4PFyJPwR/g+vTeKmilHZAcqXFZd5ArA0pX1yFg4h/MVq 46uh89UrJswxeHPDHjfv2Usub5wx2KkPIpPmzFbzisrzB2ixTbQhXRoITwsBwSsa pZUEBCIhzj2GU/oAS1RdLYYWq51fPlM3R9yl+JYbxfgOMYWxEvhJhvvjCMx3Wbhz k1CINR1enG9sKHWM8W1YwkbHyKKaYBORkRUQ9NC5up0jUR6TAKhQ4jusup4= -----END CERTIFICATE-----Generated at Tue Oct 13 02:22:47 2026 by rpki-client