$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba733f17-c07e-4c8d-afb8-658a7082fa19.roa File: ba733f17-c07e-4c8d-afb8-658a7082fa19.roa (raw, json) Hash identifier: vJJaJmLq1zv2QQw9cXEkLno2u3EjMSv4x588Vx9/YKY= Subject key identifier: C0:FE:A3:74:B8:B6:3B:57:E3:DC:B9:BB:BC:52:6E:5A:2A:F5:32:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5DB8C0C1D978812D4F4279712801A3321E328449 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba733f17-c07e-4c8d-afb8-658a7082fa19.roa Signing time: Tue 04 Nov 2025 02:00:14 +0000 ROA not before: Tue 04 Nov 2025 02:00:14 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.208.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b8:c0:c1:d9:78:81:2d:4f:42:79:71:28:01:a3:32:1e:32:84:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 02:00:14 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=3388d172bb1812a0ae06b08602fa3017d5f0cad7ef1d7951c303c5cfe60744e7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b6:d1:92:19:16:e9:6e:cd:e4:8d:18:33:c5: 5a:d2:f5:1a:bd:31:b6:47:21:be:4d:de:a1:8e:45: 3b:16:e0:82:92:f5:33:8d:df:b3:dd:8a:f6:bd:2d: 70:20:46:36:1e:af:71:14:af:02:42:4f:c0:bc:0f: 50:61:bd:5e:07:31:5a:8e:dd:a9:51:c7:8e:89:e6: d1:3b:17:7c:7a:45:03:5e:f1:0e:94:3f:14:5b:85: 07:e2:9e:85:f4:7a:4c:6f:6e:76:0f:0d:d9:5e:65: f8:3c:2f:05:d5:d1:13:f0:f1:5a:bf:91:84:74:e9: fc:12:70:2f:3f:67:3c:63:91:fe:b1:83:43:a4:4e: 73:60:76:55:87:a0:e3:0e:6e:de:71:ee:4f:0c:2a: 51:fa:75:76:01:84:7e:d2:ab:68:ae:12:23:91:18: 7f:95:3d:de:9f:d6:e1:70:89:c0:cd:83:3f:53:67: 04:c8:47:a3:08:da:d5:0d:8f:10:5d:a5:37:2b:73: c0:79:8f:b0:b7:31:9b:87:c0:e6:d1:50:2c:2e:ff: a4:96:87:95:d4:95:f2:60:e4:15:be:9d:6c:48:cb: 6e:39:b5:06:4f:56:65:ab:aa:ae:83:e8:e3:f8:8b: f8:9e:07:a3:cf:fe:d3:ed:70:34:66:ed:a6:f7:6e: 38:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FE:A3:74:B8:B6:3B:57:E3:DC:B9:BB:BC:52:6E:5A:2A:F5:32:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba733f17-c07e-4c8d-afb8-658a7082fa19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.208.0.0/15 Signature Algorithm: sha256WithRSAEncryption b2:49:d2:1f:ca:78:f5:3c:37:6d:79:22:09:96:bb:4f:83:69: 51:cd:23:0b:9c:cf:e9:b7:84:1b:ce:26:b7:a0:41:50:dd:e2: bc:f5:60:94:15:4c:63:0b:10:ae:53:34:83:2c:d4:81:fb:d8: c3:8b:c3:9c:67:96:bd:bc:29:af:45:08:d1:43:16:65:1b:83: 91:b6:18:81:40:89:7a:21:98:cd:19:08:96:ad:8c:8e:f3:52: af:48:59:4d:f6:fa:c4:52:42:01:f9:4e:bb:ba:44:e8:df:66: d4:2a:2b:3f:fa:17:4d:ff:54:6c:fb:fc:60:8a:3c:d5:2d:28: 90:85:5b:9f:9e:5b:ee:78:cd:b8:bc:95:0e:7e:d4:bb:1b:f7: 06:ae:12:2f:a6:a2:b0:01:d5:d6:af:48:1e:ba:0f:40:7f:c2: d8:ce:5e:e9:d8:71:3d:e5:d1:f2:5a:00:40:89:78:ee:96:ee: 49:5a:b3:f4:3b:14:ea:60:50:ca:a3:4b:74:45:73:3d:5c:16: 0f:2b:bd:c0:35:9e:69:44:f8:54:d1:34:35:d8:39:b3:03:e9: d7:1d:3b:24:8a:4b:f7:22:af:2f:43:ea:4d:2b:9e:70:46:14: 1d:bb:12:c2:96:51:b5:14:77:6a:2a:71:23:60:c9:33:12:8d: a2:7f:63:77 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXbjAwdl4gS1PQnlxKAGjMh4yhEkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDIwMDE0WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzg4ZDE3MmJiMTgxMmEwYWUwNmIwODYwMmZhMzAxN2Q1 ZjBjYWQ3ZWYxZDc5NTFjMzAzYzVjZmU2MDc0NGU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGttGSGRbpbs3kjRgzxVrS9Rq9MbZHIb5N3qGORTsW4IKS 9TON37Pdiva9LXAgRjYer3EUrwJCT8C8D1BhvV4HMVqO3alRx46J5tE7F3x6RQNe 8Q6UPxRbhQfinoX0ekxvbnYPDdleZfg8LwXV0RPw8Vq/kYR06fwScC8/Zzxjkf6x g0OkTnNgdlWHoOMObt5x7k8MKlH6dXYBhH7Sq2iuEiORGH+VPd6f1uFwicDNgz9T ZwTIR6MI2tUNjxBdpTcrc8B5j7C3MZuHwObRUCwu/6SWh5XUlfJg5BW+nWxIy245 tQZPVmWrqq6D6OP4i/ieB6PP/tPtcDRm7ab3bjhzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwP6jdLi2O1fj3Lm7vFJuWir1MiEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhNzMzZjE3LWMwN2UtNGM4ZC1hZmI4LTY1OGE3MDgyZmExOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE20DANBgkqhkiG9w0BAQsFAAOCAQEAsknSH8p49Tw3bXkiCZa7T4NpUc0j C5zP6beEG84mt6BBUN3ivPVglBVMYwsQrlM0gyzUgfvYw4vDnGeWvbwpr0UI0UMW ZRuDkbYYgUCJeiGYzRkIlq2MjvNSr0hZTfb6xFJCAflOu7pE6N9m1CorP/oXTf9U bPv8YIo81S0okIVbn55b7njNuLyVDn7Uuxv3Bq4SL6aisAHV1q9IHroPQH/C2M5e 6dhxPeXR8loAQIl47pbuSVqz9DsU6mBQyqNLdEVzPVwWDyu9wDWeaUT4VNE0Ndg5 swPp1x07JIpL9yKvL0PqTSuecEYUHbsSwpZRtRR3aipxI2DJMxKNon9jdw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:54:11 2025 by rpki-client