$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa File: bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa (raw, json) Hash identifier: vesapq4H496gLKo9F8YRB5Ic/04lySuDXMUYuWnANQ8= Subject key identifier: 1C:57:58:88:39:D2:B4:80:7F:DA:8A:AD:66:84:25:12:39:58:BB:41 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 398B0A30470A594713618F37A83953204D7E6AAD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa Signing time: Fri 24 Oct 2025 15:37:48 +0000 ROA not before: Fri 24 Oct 2025 15:37:48 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2606:8140:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8b:0a:30:47:0a:59:47:13:61:8f:37:a8:39:53:20:4d:7e:6a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 15:37:48 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=863d3c2437747d654259d8fb49588870290eff45ed0da169d036c32d39c01198, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:f1:89:20:90:78:14:f8:5e:8a:d1:40:08: 0a:9f:3a:21:52:7e:36:85:52:ee:a6:16:4a:05:11: 84:6c:03:09:63:24:14:9c:e9:f4:d8:b4:b5:70:17: cf:82:23:5f:2f:ed:95:1a:76:2a:8e:ec:63:eb:72: f3:58:53:01:3d:e6:02:17:5d:9a:d8:ce:96:eb:1b: 01:f2:8a:f5:68:2a:a4:4b:a8:6a:f1:c3:c0:e1:f9: 2c:fb:2a:61:3f:28:7e:5c:11:3a:e0:90:b6:47:ff: 87:75:15:ae:54:56:05:2e:dd:68:1e:91:04:6b:7e: f5:15:6c:5a:50:eb:14:25:ff:5d:3b:67:84:52:d2: 81:d5:cf:1c:ce:4b:7b:6e:2c:94:e9:16:87:b1:ea: e1:d5:4b:18:b6:13:50:56:6c:bd:a6:10:a5:49:ce: 4a:ca:e2:37:f6:78:ee:c7:08:26:59:f7:40:c6:f5: ea:7b:5f:dc:c8:5f:d7:64:1f:0e:1a:69:fd:af:3a: ec:56:40:34:e7:c9:71:c4:65:ce:0e:c7:d4:82:4a: 9c:16:ab:b6:3f:04:2e:34:13:2d:2a:18:02:70:08: 32:46:67:dc:19:40:3c:f8:92:7b:29:8e:18:14:a1: bf:57:aa:e8:50:4a:dc:dd:73:a6:41:9c:1b:ef:f2: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:57:58:88:39:D2:B4:80:7F:DA:8A:AD:66:84:25:12:39:58:BB:41 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:100::/40 Signature Algorithm: sha256WithRSAEncryption 3f:6f:cd:0e:82:44:65:90:d7:37:54:aa:ea:8e:8b:59:f8:1a: 01:5f:e0:8f:ae:a4:d4:20:95:fa:83:8e:d9:9c:f6:6c:b5:de: 8a:6c:1b:0f:41:fc:c3:2e:cc:95:51:e7:e0:f2:3d:c9:a0:b9: 77:80:a2:ea:95:39:df:58:98:d7:ec:58:31:8b:90:7e:72:07: 66:a4:56:0e:34:bf:bf:a4:28:76:2a:5a:0c:2d:8f:72:02:c4: 45:ec:65:f4:a9:e2:28:fe:82:3c:17:d1:0e:56:6b:a4:49:8e: 96:ad:d5:a0:c7:68:e9:64:8f:36:fb:05:9a:9d:8a:db:7e:bf: 60:d0:41:1f:b4:d3:1d:51:58:cf:69:e2:9e:f7:c9:b1:fc:50: 18:58:25:46:b8:7d:85:3c:bc:52:73:59:33:95:4e:0a:fb:30: 06:5e:a7:1b:c8:5f:b7:c1:30:68:73:43:a2:fd:29:b8:1c:23: 67:82:b3:e1:e9:28:2b:76:92:1d:2b:8a:a5:6f:59:f5:e6:e5: eb:55:e1:0e:f6:3e:e1:c2:0a:f1:1d:30:61:33:fc:35:8c:ca: 9c:97:a7:ea:a0:4f:ef:e7:4e:47:e2:e5:b2:21:e4:50:90:c7: 57:75:db:d6:f4:52:3e:b9:78:05:15:3b:9b:05:19:03:f2:63: 1f:0b:e0:e1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOYsKMEcKWUcTYY83qDlTIE1+aq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDI0MTUzNzQ4WhcNMjUxMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjNkM2MyNDM3NzQ3ZDY1NDI1OWQ4ZmI0OTU4ODg3MDI5 MGVmZjQ1ZWQwZGExNjlkMDM2YzMyZDM5YzAxMTk4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjUfGJIJB4FPheitFACAqfOiFSfjaFUu6mFkoFEYRsAwlj JBSc6fTYtLVwF8+CI18v7ZUadiqO7GPrcvNYUwE95gIXXZrYzpbrGwHyivVoKqRL qGrxw8Dh+Sz7KmE/KH5cETrgkLZH/4d1Fa5UVgUu3WgekQRrfvUVbFpQ6xQl/107 Z4RS0oHVzxzOS3tuLJTpFoex6uHVSxi2E1BWbL2mEKVJzkrK4jf2eO7HCCZZ90DG 9ep7X9zIX9dkHw4aaf2vOuxWQDTnyXHEZc4Ox9SCSpwWq7Y/BC40Ey0qGAJwCDJG Z9wZQDz4knspjhgUob9XquhQStzdc6ZBnBvv8pXPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHFdYiDnStIB/2oqtZoQlEjlYu0EwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2JiYTgxOTFiLTViNWItNDUxNS1hM2VlLTQ5M2NhYjY2YTJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFAATANBgkqhkiG9w0BAQsFAAOCAQEAP2/NDoJEZZDXN1Sq6o6LWfga AV/gj66k1CCV+oOO2Zz2bLXeimwbD0H8wy7MlVHn4PI9yaC5d4Ci6pU531iY1+xY MYuQfnIHZqRWDjS/v6QodipaDC2PcgLERexl9KniKP6CPBfRDlZrpEmOlq3VoMdo 6WSPNvsFmp2K236/YNBBH7TTHVFYz2ninvfJsfxQGFglRrh9hTy8UnNZM5VOCvsw Bl6nG8hft8EwaHNDov0puBwjZ4Kz4ekoK3aSHSuKpW9Z9ebl61XhDvY+4cIK8R0w YTP8NYzKnJen6qBP7+dOR+LlsiHkUJDHV3Xb1vRSPrl4BRU7mwUZA/JjHwvg4Q== -----END CERTIFICATE-----Generated at Fri Oct 31 21:02:41 2025 by rpki-client