$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba8d09f9-403b-4f2e-b801-e0a90e94c3d4.roa File: ba8d09f9-403b-4f2e-b801-e0a90e94c3d4.roa (raw, json) Hash identifier: upRslmjczP2sPxiBfDB2NUGLWxO84kUMzfUVYgLOUIM= Subject key identifier: C8:EE:4E:AE:37:BB:44:09:5B:76:4C:DA:3F:9E:08:3E:C9:25:12:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F34AB8C48E1E4CF1D4B6DF14447B71EDF0F10FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba8d09f9-403b-4f2e-b801-e0a90e94c3d4.roa Signing time: Sun 19 Oct 2025 19:00:32 +0000 ROA not before: Sun 19 Oct 2025 19:00:32 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:34:ab:8c:48:e1:e4:cf:1d:4b:6d:f1:44:47:b7:1e:df:0f:10:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:00:32 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=7e69d067a9981ab6e2196e19e72151ff913221a6b0e3509e3e49fac506ca2b21, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:89:29:e1:b5:96:d0:89:75:96:41:b1:80: b2:35:cc:42:7b:4a:07:34:c5:c0:d5:61:3c:fb:64: 56:ca:ef:25:28:83:7b:6f:33:cc:2d:fb:fa:6b:be: 77:14:69:a8:c4:0f:8e:7f:81:09:c9:36:34:4c:72: c2:3a:57:12:0e:07:2e:cd:48:19:b3:87:5a:3d:5b: 19:7a:2c:14:f4:14:9e:9b:0e:2f:81:38:90:e7:c3: 31:94:da:a7:43:f2:2e:79:46:83:41:18:0a:09:e5: ad:bd:25:17:02:77:30:58:8b:d3:b0:a8:15:ff:26: 8b:97:02:79:d4:a9:a2:eb:5d:96:fe:29:32:90:9c: dd:62:31:1b:5d:db:59:d5:b2:89:cb:38:46:37:f1: f3:f6:ba:34:df:c4:7c:50:19:e9:bc:3e:4b:ac:3d: 86:e2:de:d8:d7:36:68:82:6b:36:75:06:a1:69:c8: 8e:6b:52:a5:81:49:62:f7:4f:99:5d:f0:20:17:e7: b7:7a:2e:8a:29:e7:d5:97:2c:ec:3e:32:0e:a8:4a: 86:49:3f:9a:c6:35:a0:c1:9a:9d:eb:c8:ad:1b:4c: 79:8a:7e:9e:61:0f:b0:8b:cb:48:b3:e6:80:7d:3c: a2:c1:af:64:81:73:42:de:b8:79:78:3c:45:6c:43: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EE:4E:AE:37:BB:44:09:5B:76:4C:DA:3F:9E:08:3E:C9:25:12:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba8d09f9-403b-4f2e-b801-e0a90e94c3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.162.0/24 Signature Algorithm: sha256WithRSAEncryption 22:0c:b4:a3:be:f3:b4:58:73:27:31:2a:e4:f0:b3:20:7a:26: 5f:0f:61:89:be:34:4d:cd:34:d9:c7:6c:1f:3a:e4:33:69:70: 66:44:09:c7:be:92:d5:14:bb:5e:f1:61:6c:54:ec:34:15:bb: b4:4d:cd:7e:d5:4d:3c:f8:9e:dd:00:42:61:ea:89:5d:2b:50: 5e:29:0d:59:c3:8c:2a:4a:21:07:2d:68:65:38:12:e0:d7:31: 52:a8:37:a1:f5:ef:7a:e7:77:37:7e:59:bf:b0:43:fd:8d:62: 22:ce:c4:0a:c6:70:da:a3:31:b4:cd:b4:df:a9:8b:7d:ff:10: 7c:35:36:77:42:aa:d7:65:a8:32:e4:85:aa:86:2a:62:33:28: 08:6c:9a:a6:32:2c:d7:2c:19:d1:cf:f5:40:55:fa:2a:70:96: 66:73:20:58:2b:89:b9:64:06:d7:1d:7e:12:9a:55:dc:db:de: e1:41:ef:f3:7a:5a:27:34:ce:6a:82:13:2c:f1:ea:52:c8:da: f7:12:bf:15:aa:1f:64:23:e3:71:02:29:54:f1:48:27:72:76: 64:47:9c:7e:2c:6f:3a:18:3e:aa:9a:98:6f:57:19:a0:a9:39: d8:1c:ed:43:bd:3d:7f:26:95:0f:de:31:40:44:cc:8a:b2:3d: 38:2d:0a:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXzSrjEjh5M8dS23xREe3Ht8PEP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkwMDMyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTY5ZDA2N2E5OTgxYWI2ZTIxOTZlMTllNzIxNTFmZjkx MzIyMWE2YjBlMzUwOWUzZTQ5ZmFjNTA2Y2EyYjIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQeIkp4bWW0Il1lkGxgLI1zEJ7Sgc0xcDVYTz7ZFbK7yUo g3tvM8wt+/prvncUaajED45/gQnJNjRMcsI6VxIOBy7NSBmzh1o9Wxl6LBT0FJ6b Di+BOJDnwzGU2qdD8i55RoNBGAoJ5a29JRcCdzBYi9OwqBX/JouXAnnUqaLrXZb+ KTKQnN1iMRtd21nVsonLOEY38fP2ujTfxHxQGem8PkusPYbi3tjXNmiCazZ1BqFp yI5rUqWBSWL3T5ld8CAX57d6Loop59WXLOw+Mg6oSoZJP5rGNaDBmp3ryK0bTHmK fp5hD7CLy0iz5oB9PKLBr2SBc0LeuHl4PEVsQ+JhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyO5Orje7RAlbdkzaP54IPsklEk0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhOGQwOWY5LTQwM2ItNGYyZS1iODAxLWUwYTkwZTk0YzNkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQKIwDQYJKoZIhvcNAQELBQADggEBACIMtKO+87RYcycxKuTwsyB6Jl8P YYm+NE3NNNnHbB865DNpcGZECce+ktUUu17xYWxU7DQVu7RNzX7VTTz4nt0AQmHq iV0rUF4pDVnDjCpKIQctaGU4EuDXMVKoN6H173rndzd+Wb+wQ/2NYiLOxArGcNqj MbTNtN+pi33/EHw1NndCqtdlqDLkhaqGKmIzKAhsmqYyLNcsGdHP9UBV+ipwlmZz IFgriblkBtcdfhKaVdzb3uFB7/N6Wic0zmqCEyzx6lLI2vcSvxWqH2Qj43ECKVTx SCdydmRHnH4sbzoYPqqamG9XGaCpOdgc7UO9PX8mlQ/eMUBEzIqyPTgtCoc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:19 2025 by rpki-client