$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba4c3797-1171-4597-a7e0-83025c3a240d.roa File: ba4c3797-1171-4597-a7e0-83025c3a240d.roa (raw, json) Hash identifier: T1TF62jYp8JOQj+aXBvOJ2VxAMA/7DmurwIVOGpsY1M= Subject key identifier: E4:71:B2:BF:AF:D4:7F:A9:41:2D:69:E3:73:AB:02:99:AC:B2:0C:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 418D2E0BCDCE2C1A772E5E33215B15A2C92B4381 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba4c3797-1171-4597-a7e0-83025c3a240d.roa Signing time: Tue 04 Nov 2025 02:21:39 +0000 ROA not before: Tue 04 Nov 2025 02:21:39 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.128.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8d:2e:0b:cd:ce:2c:1a:77:2e:5e:33:21:5b:15:a2:c9:2b:43:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 02:21:39 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=2dd9c9103e1d74dff4a6373d1722641e93f8a90240c28b029c382a827d064bda, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6c:28:20:2e:06:27:9c:0d:d8:ca:70:ec:05: 00:6a:56:7a:be:0d:25:0d:aa:61:36:b5:ae:7e:10: e6:82:b0:d3:40:d4:64:aa:9b:23:1a:30:03:f7:2c: 15:f0:f2:28:09:88:7b:3d:ca:1c:c2:61:d9:66:ad: cb:54:2d:85:2c:4a:2f:0c:aa:cc:3c:26:23:f3:30: 50:44:81:cf:6b:01:f8:01:4f:e1:68:35:67:9a:b4: e4:bf:6f:d7:f1:ac:82:94:ce:6e:f3:82:04:14:ed: 50:f5:28:c5:0d:df:aa:79:86:69:ad:27:c8:f2:68: 10:97:84:cd:57:73:75:25:bb:cd:4d:59:bd:bf:92: c7:6e:35:2b:c9:20:2a:92:9d:33:c6:21:8d:5d:ef: bc:74:8c:09:72:03:e8:02:b9:3f:92:40:e0:ec:f5: 74:50:34:3e:43:c2:0e:24:43:fb:14:7c:38:9c:53: 50:1d:f8:ec:88:c1:6f:21:12:1b:07:aa:03:ab:78: 64:3d:bb:4e:da:e7:b8:8b:7a:5b:1e:13:af:ee:0a: 9d:43:05:6d:01:ef:7c:1a:c4:41:bd:03:c9:b7:f6: 55:02:ea:a7:81:00:7a:f0:f8:30:8e:f3:aa:41:24: 0b:d3:d2:61:b4:56:68:00:28:ed:05:35:cd:fb:8d: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:71:B2:BF:AF:D4:7F:A9:41:2D:69:E3:73:AB:02:99:AC:B2:0C:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba4c3797-1171-4597-a7e0-83025c3a240d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.128.0.0/15 Signature Algorithm: sha256WithRSAEncryption 48:7a:81:0a:e5:67:b2:b2:91:b2:5d:d3:28:46:fe:0a:9c:98: 36:d0:3c:f5:cb:30:3d:ad:90:03:00:60:10:8e:6b:20:8f:90: 62:dd:16:40:7a:3f:e7:0e:63:82:13:db:6d:88:20:78:83:17: c3:9f:1f:d8:df:34:1f:75:65:51:4d:c6:94:fd:2d:00:95:92: 0c:30:9f:fb:61:06:4d:3b:9e:a0:c3:9c:d8:fd:5b:c9:3f:53: 76:c0:71:06:6d:68:53:e0:01:1f:ad:9a:b9:e2:7f:bc:5d:9e: 7d:a6:39:3d:b0:5e:94:12:7f:89:0d:00:3a:39:01:bf:13:e7: 34:d9:2c:6c:1e:bd:2b:e4:8e:c4:37:99:a9:23:7d:74:5d:e2: 2b:00:93:72:38:95:a6:52:ea:4c:a9:23:00:47:14:67:35:ac: 1b:ff:50:00:a7:38:c6:3b:72:d5:97:d3:e1:26:74:47:50:6d: fb:0e:e6:fe:eb:9e:b9:14:3a:a3:3a:68:69:df:f9:19:e4:87: 6b:8c:1c:e8:dd:30:86:cf:af:d4:6f:3a:fa:eb:32:11:69:67: 75:6f:37:34:49:cd:88:45:f8:4e:32:73:05:46:32:b4:b5:85: 20:1a:5f:5b:82:87:1f:95:4e:86:fa:e8:8c:0c:06:2c:5e:8a: 64:46:c7:bc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQY0uC83OLBp3Ll4zIVsVoskrQ4EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDIyMTM5WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGQ5YzkxMDNlMWQ3NGRmZjRhNjM3M2QxNzIyNjQxZTkz ZjhhOTAyNDBjMjhiMDI5YzM4MmE4MjdkMDY0YmRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDebCggLgYnnA3YynDsBQBqVnq+DSUNqmE2ta5+EOaCsNNA 1GSqmyMaMAP3LBXw8igJiHs9yhzCYdlmrctULYUsSi8Mqsw8JiPzMFBEgc9rAfgB T+FoNWeatOS/b9fxrIKUzm7zggQU7VD1KMUN36p5hmmtJ8jyaBCXhM1Xc3Ulu81N Wb2/ksduNSvJICqSnTPGIY1d77x0jAlyA+gCuT+SQODs9XRQND5Dwg4kQ/sUfDic U1Ad+OyIwW8hEhsHqgOreGQ9u07a57iLelseE6/uCp1DBW0B73waxEG9A8m39lUC 6qeBAHrw+DCO86pBJAvT0mG0VmgAKO0FNc37jT0zAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5HGyv6/Uf6lBLWnjc6sCmayyDBYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhNGMzNzk3LTExNzEtNDU5Ny1hN2UwLTgzMDI1YzNhMjQwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEDgDANBgkqhkiG9w0BAQsFAAOCAQEASHqBCuVnsrKRsl3TKEb+CpyYNtA8 9cswPa2QAwBgEI5rII+QYt0WQHo/5w5jghPbbYggeIMXw58f2N80H3VlUU3GlP0t AJWSDDCf+2EGTTueoMOc2P1byT9TdsBxBm1oU+ABH62aueJ/vF2efaY5PbBelBJ/ iQ0AOjkBvxPnNNksbB69K+SOxDeZqSN9dF3iKwCTcjiVplLqTKkjAEcUZzWsG/9Q AKc4xjty1ZfT4SZ0R1Bt+w7m/uueuRQ6ozpoad/5GeSHa4wc6N0whs+v1G86+usy EWlndW83NEnNiEX4TjJzBUYytLWFIBpfW4KHH5VOhvrojAwGLF6KZEbHvA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:50:47 2025 by rpki-client