$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa File: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (raw, json) Hash identifier: 1kP2M++fmWMNdeWHhWRDYGmhyBjDh9eVYNPrBWNpzCg= Subject key identifier: AB:74:F6:CB:86:77:BF:04:E0:58:79:73:30:E3:64:28:81:1F:0F:37 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 7438C4ABBB6B98A3B5A9AE84E8537B1EB54418A1 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa Signing time: Sat 18 Oct 2025 00:10:05 +0000 ROA not before: Sat 18 Oct 2025 00:10:05 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:38:c4:ab:bb:6b:98:a3:b5:a9:ae:84:e8:53:7b:1e:b5:44:18:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Oct 18 00:10:05 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=8608bbf48496e0768ba6ef2bf73c29b3b35c163e38aa663a8cc7f2d36a2e59c4, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:13:28:c9:4b:ae:f9:57:e3:12:15:bf:48: d5:17:32:d2:8d:12:c7:d8:1b:26:ea:e1:90:a4:0d: e7:71:d5:18:62:8a:73:c8:89:a0:7d:e6:37:fd:71: d6:b2:5d:7b:31:be:78:ea:d2:e7:65:e7:c9:31:fe: 28:3d:e9:30:b6:ef:35:f1:be:5c:52:95:70:cb:23: 02:8d:f0:a5:75:55:0b:89:8a:63:b6:a2:65:c8:96: 3a:fe:18:51:52:2a:fd:84:67:fc:84:73:d1:ce:7a: 70:cf:f5:8a:4a:d3:8e:60:25:db:90:0c:22:b9:df: cf:33:4b:de:fc:ca:6e:e6:63:d9:b2:b6:09:01:15: fa:5a:fd:af:d4:de:37:ee:83:3f:6b:e4:e0:a6:82: 9f:aa:e3:8b:4d:9e:b2:ce:cb:fd:39:bf:5a:1b:7f: e8:83:74:19:75:f2:19:46:59:40:0c:37:49:ee:fa: 97:d2:90:24:47:db:e4:4f:5e:ce:b4:e7:6d:c5:cb: 2b:28:dc:4c:77:41:2b:5a:49:2f:82:cf:67:f2:14: ad:cc:97:cd:7e:f4:9b:8d:1f:74:38:cd:b0:1a:d4: 5b:27:ef:2d:d0:d3:07:95:f6:9a:79:7c:fe:32:1d: 5f:ad:3e:39:01:21:66:d8:ad:55:57:57:46:09:f8: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:74:F6:CB:86:77:BF:04:E0:58:79:73:30:E3:64:28:81:1F:0F:37 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.100.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:33:b6:a7:09:47:6a:b8:6e:2d:22:d8:5c:5d:c4:63:c9:72: c8:6a:80:b2:37:58:58:1a:53:91:8a:63:95:32:25:78:7d:83: 78:bb:da:40:c3:1b:45:c4:c3:02:ba:97:61:f9:ff:13:41:55: 87:b0:3b:ed:4e:b7:b6:1d:ff:4d:88:be:e7:f1:fc:af:09:12: df:af:99:57:8e:03:07:bc:17:ef:9b:aa:30:34:6f:3d:c6:98: 0e:d2:61:2b:f3:f6:03:3b:aa:6e:4f:7a:0f:c0:55:ee:ce:1c: 6b:48:a2:d4:1b:7f:1c:e1:80:21:b0:66:fd:d6:69:1d:3f:ee: bf:ca:ce:a5:a0:e6:2b:98:be:05:f1:a2:82:c2:12:b4:10:df: 41:70:27:2e:05:aa:1f:d9:f5:cc:3b:7b:18:72:a1:55:fc:6f: 3f:0b:c8:5b:2a:41:ab:d6:2d:0d:d2:e2:9d:77:00:22:46:70: 21:88:d9:f6:5e:7f:3f:23:1b:07:a2:cc:60:e9:ca:0b:f2:33: 87:ed:3b:b8:ec:74:aa:8f:94:cd:a2:c8:68:c9:f0:9a:17:c4: 3b:7b:08:81:f7:cd:40:31:71:65:1c:bb:81:16:70:ed:5c:31: 69:3c:76:66:6f:96:78:b5:64:5e:47:3d:56:78:50:fc:f4:85: bb:8d:55:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdDjEq7trmKO1qa6E6FN7HrVEGKEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUxMDE4MDAxMDA1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjA4YmJmNDg0OTZlMDc2OGJhNmVmMmJmNzNjMjliM2Iz NWMxNjNlMzhhYTY2M2E4Y2M3ZjJkMzZhMmU1OWM0MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCezhMoyUuu+VfjEhW/SNUXMtKNEsfYGybq4ZCkDedx1Rhi inPIiaB95jf9cdayXXsxvnjq0udl58kx/ig96TC27zXxvlxSlXDLIwKN8KV1VQuJ imO2omXIljr+GFFSKv2EZ/yEc9HOenDP9YpK045gJduQDCK5388zS978ym7mY9my tgkBFfpa/a/U3jfugz9r5OCmgp+q44tNnrLOy/05v1obf+iDdBl18hlGWUAMN0nu +pfSkCRH2+RPXs60523Fyyso3Ex3QStaSS+Cz2fyFK3Ml81+9JuNH3Q4zbAa1Fsn 7y3Q0weV9pp5fP4yHV+tPjkBIWbYrVVXV0YJ+PZTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq3T2y4Z3vwTgWHlzMONkKIEfDzcwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzA1YmE5Y2E1LWE5YTktNGRlZi05YzcxLTBjZjQ3ZDA2ZmUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWQwDQYJKoZIhvcNAQELBQADggEBAFsztqcJR2q4bi0i2FxdxGPJcshq gLI3WFgaU5GKY5UyJXh9g3i72kDDG0XEwwK6l2H5/xNBVYewO+1Ot7Yd/02Ivufx /K8JEt+vmVeOAwe8F++bqjA0bz3GmA7SYSvz9gM7qm5Peg/AVe7OHGtIotQbfxzh gCGwZv3WaR0/7r/KzqWg5iuYvgXxooLCErQQ30FwJy4Fqh/Z9cw7exhyoVX8bz8L yFsqQavWLQ3S4p13ACJGcCGI2fZefz8jGweizGDpygvyM4ftO7jsdKqPlM2iyGjJ 8JoXxDt7CIH3zUAxcWUcu4EWcO1cMWk8dmZvlni1ZF5HPVZ4UPz0hbuNVb0= -----END CERTIFICATE-----Generated at Wed Nov 5 23:37:27 2025 by rpki-client