$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba846737-14c5-4b5f-b37b-04331a1d5779.roa File: ba846737-14c5-4b5f-b37b-04331a1d5779.roa (raw, json) Hash identifier: 0KKcsNO4JuhvyKPhPcjJqzuMMJgFsidvWP3skTHoKYQ= Subject key identifier: DE:59:33:4B:07:FF:F8:96:90:9B:F6:E2:8D:A8:29:CA:63:D7:BB:D4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29227AB48131E876F81708E79C666FBC1B64BD7C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba846737-14c5-4b5f-b37b-04331a1d5779.roa Signing time: Wed 21 Oct 2026 01:21:02 +0000 ROA not before: Wed 21 Oct 2026 01:21:02 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 54.150.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:22:7a:b4:81:31:e8:76:f8:17:08:e7:9c:66:6f:bc:1b:64:bd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 01:21:02 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=9a9409789dcb0111b72595f2cda2870c73ff64da52d5d32e39622db24cd254a4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:e0:91:7b:98:ea:03:2e:9f:24:c7:a4:cf: 16:e6:80:17:e5:5b:1f:37:86:00:06:ef:2f:c3:2b: 8d:f8:df:d1:34:13:fa:43:64:49:a7:98:4e:dc:43: 04:f0:fc:6f:c4:66:a4:36:04:d3:63:dd:1e:59:09: 28:71:f6:c3:83:c9:15:fb:a1:46:57:11:5c:b5:8a: ab:e4:e4:04:64:cc:a7:94:21:e4:b4:d9:3b:cf:a3: e3:6e:8b:c5:28:d9:a3:5b:5e:df:cf:47:6a:ed:c5: bf:57:87:ce:3b:be:40:75:f3:81:25:9c:13:43:e9: 3f:f6:e4:06:b8:d0:dc:45:68:fa:d8:06:14:3f:31: 60:d4:78:1f:46:68:fe:71:2b:e2:79:d7:e8:42:d5: 08:b1:e8:4f:cf:52:a4:ff:79:87:fc:2b:34:8d:79: 42:db:5b:ce:0d:74:f3:a0:8b:a5:e3:28:06:cc:6d: 1e:e4:7f:a1:0c:74:f1:a6:69:1f:a0:23:f5:3e:db: 65:5d:81:04:a7:eb:c8:e9:05:42:ee:4c:a3:f1:b6: db:5f:30:0c:a0:d2:2e:1f:9b:da:6d:af:e9:c3:bd: 22:b6:8a:f7:9a:e8:6e:41:c6:03:69:fd:bb:bb:3a: 78:a7:3d:c9:ff:8f:30:39:ff:f2:33:46:0f:b6:e5: aa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:59:33:4B:07:FF:F8:96:90:9B:F6:E2:8D:A8:29:CA:63:D7:BB:D4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba846737-14c5-4b5f-b37b-04331a1d5779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.150.128.0/24 Signature Algorithm: sha256WithRSAEncryption 38:da:35:23:e7:22:88:66:d7:03:34:2f:d0:f3:5e:c9:18:14: ab:8f:f7:c7:c0:df:48:cb:00:ed:37:49:ef:6a:29:2e:d5:19: d0:c5:84:01:c8:c5:bf:78:6d:95:80:0c:39:20:68:44:84:e3: 84:36:c5:1e:2b:cb:c4:ac:f4:bc:e3:23:fa:83:de:3e:69:c4: b5:c8:87:59:71:64:50:b4:26:a5:34:5f:a7:9d:7c:73:0b:27: 66:7a:43:9a:15:65:be:14:47:48:ea:c6:0c:43:28:62:6f:d9: a9:1c:c7:47:68:30:36:ae:53:59:66:1c:e6:f0:aa:00:44:45: c8:e2:91:fe:39:64:23:d6:9c:c1:9e:37:53:f5:ce:55:f3:d4: c1:06:9c:47:e7:6f:ed:32:a3:d0:a0:dd:8b:96:86:24:d4:ac: e7:47:bb:e7:f6:8a:e5:64:f2:9f:a2:b3:e6:ec:3a:dc:b7:2a: a5:07:00:f6:fd:0e:3f:ec:15:f1:29:9e:96:d9:2f:ce:e7:64: a3:cd:16:b0:2b:0c:bf:18:72:0b:c9:5d:61:43:3f:f4:ef:1a: f8:71:ff:24:65:cf:10:fc:d5:48:de:69:53:9b:f3:65:0e:77: c4:7b:5f:47:af:aa:3d:88:d4:50:37:2c:34:56:c7:99:0c:eb: 50:5c:36:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKSJ6tIEx6Hb4FwjnnGZvvBtkvXwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDEyMTAyWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTk0MDk3ODlkY2IwMTExYjcyNTk1ZjJjZGEyODcwYzcz ZmY2NGRhNTJkNWQzMmUzOTYyMmRiMjRjZDI1NGE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmKeCRe5jqAy6fJMekzxbmgBflWx83hgAG7y/DK43439E0 E/pDZEmnmE7cQwTw/G/EZqQ2BNNj3R5ZCShx9sODyRX7oUZXEVy1iqvk5ARkzKeU IeS02TvPo+Nui8Uo2aNbXt/PR2rtxb9Xh847vkB184ElnBND6T/25Aa40NxFaPrY BhQ/MWDUeB9GaP5xK+J51+hC1Qix6E/PUqT/eYf8KzSNeULbW84NdPOgi6XjKAbM bR7kf6EMdPGmaR+gI/U+22VdgQSn68jpBULuTKPxtttfMAyg0i4fm9ptr+nDvSK2 ivea6G5BxgNp/bu7OninPcn/jzA5//IzRg+25arRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3lkzSwf/+JaQm/bijagpymPXu9QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhODQ2NzM3LTE0YzUtNGI1Zi1iMzdiLTA0MzMxYTFkNTc3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2loAwDQYJKoZIhvcNAQELBQADggEBADjaNSPnIohm1wM0L9DzXskYFKuP 98fA30jLAO03Se9qKS7VGdDFhAHIxb94bZWADDkgaESE44Q2xR4ry8Ss9LzjI/qD 3j5pxLXIh1lxZFC0JqU0X6edfHMLJ2Z6Q5oVZb4UR0jqxgxDKGJv2akcx0doMDau U1lmHObwqgBERcjikf45ZCPWnMGeN1P1zlXz1MEGnEfnb+0yo9Cg3YuWhiTUrOdH u+f2iuVk8p+is+bsOty3KqUHAPb9Dj/sFfEpnpbZL87nZKPNFrArDL8YcgvJXWFD P/TvGvhx/yRlzxD81UjeaVOb82UOd8R7X0evqj2I1FA3LDRWx5kM61BcNt4= -----END CERTIFICATE-----Generated at Sun Nov 8 01:17:27 2026 by rpki-client