$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58ea6e56-12c4-42ce-b74e-1a3992285ea3.roa File: 58ea6e56-12c4-42ce-b74e-1a3992285ea3.roa (raw, json) Hash identifier: VTYhBs7KLvEuKuclu0P6cfm/1txy2+zOiXHTP6gSIbY= Subject key identifier: C9:86:94:A0:D2:3F:BD:5D:CF:D3:A2:70:F0:A7:B3:D2:01:85:8B:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46B669F4993CDDAA7D11C422C2A8529229818B9F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58ea6e56-12c4-42ce-b74e-1a3992285ea3.roa Signing time: Wed 08 Oct 2025 01:00:56 +0000 ROA not before: Wed 08 Oct 2025 01:00:56 +0000 ROA not after: Wed 12 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.188.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b6:69:f4:99:3c:dd:aa:7d:11:c4:22:c2:a8:52:92:29:81:8b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 8 01:00:56 2025 GMT Not After : Nov 12 23:59:59 2025 GMT Subject: serialNumber=592d6879e1d80ad405ba6f9d987ddf96e1061a27c3f20dde8763c7a1f2a40e91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:49:bb:1b:e3:02:68:4f:62:58:90:60:e7: b5:27:71:dd:82:84:cd:6f:03:b6:2e:ac:66:65:8f: be:6b:42:c8:63:b1:87:ae:16:7a:51:2d:4a:43:9b: 4c:77:a4:7f:41:7f:f4:b4:bb:af:27:18:52:eb:8a: aa:b1:ea:1f:9c:90:89:61:8e:72:f1:35:96:e5:80: 8e:05:3e:b6:f2:62:de:fc:83:3a:b2:7a:f7:86:d2: c4:e8:66:2e:84:90:4d:c2:07:63:c2:b1:1b:89:de: 51:31:d9:44:be:ed:c6:65:19:fd:82:6a:1d:18:23: 5c:e6:5f:ba:99:de:cd:aa:12:6c:ef:ed:91:0b:fa: 62:fd:c0:3c:52:f9:fa:17:b8:1b:4d:4d:15:e3:01: 7e:66:9f:59:20:15:5a:4b:04:22:33:50:06:d4:4c: 45:28:54:6e:55:dd:17:51:e2:6c:a4:35:01:a9:79: 2d:1d:3e:c3:d5:d6:0f:d1:d8:76:f2:f0:5a:12:53: 40:e8:1a:e1:ef:8a:13:92:50:0e:5b:ea:ec:f7:96: 6d:84:f2:d2:92:0a:42:ea:69:48:d3:73:9c:15:06: c1:de:94:21:c3:47:d1:ee:3c:5b:fa:4f:8f:72:87: dc:aa:c1:47:fe:a4:1e:12:f1:3e:8f:98:4e:92:87: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:86:94:A0:D2:3F:BD:5D:CF:D3:A2:70:F0:A7:B3:D2:01:85:8B:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58ea6e56-12c4-42ce-b74e-1a3992285ea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.158.0/23 Signature Algorithm: sha256WithRSAEncryption b2:91:f7:83:92:8f:3a:d3:55:9c:3f:71:53:64:53:3e:09:bb: 36:40:7a:ff:5c:3d:d6:26:e0:33:6e:8d:67:16:e7:c3:b3:e2: ce:91:22:a4:d4:8c:80:a5:81:4b:b5:75:4e:0a:97:53:1b:13: 49:ad:da:d7:5e:bf:97:64:f7:0d:70:07:6e:51:f3:7b:76:01: 22:a5:26:7a:5c:6e:c4:67:06:30:fd:bb:4d:8d:75:d3:d4:c6: 08:38:30:94:8c:9d:7d:ed:ec:13:46:68:d0:fd:1a:52:34:2e: 27:82:14:ba:4a:bb:a7:7a:53:58:3f:46:da:13:d5:c6:ff:dd: fa:0d:ef:23:30:0c:45:d2:82:a9:fd:99:ce:39:2a:ba:9b:f1: 6a:06:82:c0:4b:fb:7d:e0:d7:6b:0c:02:d6:9d:e1:86:b5:df: 99:83:68:7e:f7:59:f8:7b:a7:b3:bb:43:7a:fa:ff:a8:a2:4b: a7:15:d4:c5:f3:f0:38:84:19:f9:5e:46:71:b7:28:11:63:eb: 76:41:4c:21:60:64:ef:05:eb:ab:9d:72:7e:26:11:71:25:82: 27:10:01:74:66:16:74:b5:d2:cc:e0:79:b6:53:cb:84:6c:2c: b4:3b:80:16:77:32:e8:0b:18:02:85:dd:72:ca:e0:d8:ba:8b: 2f:5c:cd:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURrZp9Jk83ap9EcQiwqhSkimBi58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA4MDEwMDU2WhcNMjUxMTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTJkNjg3OWUxZDgwYWQ0MDViYTZmOWQ5ODdkZGY5NmUx MDYxYTI3YzNmMjBkZGU4NzYzYzdhMWYyYTQwZTkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrz0m7G+MCaE9iWJBg57Uncd2ChM1vA7YurGZlj75rQshj sYeuFnpRLUpDm0x3pH9Bf/S0u68nGFLriqqx6h+ckIlhjnLxNZblgI4FPrbyYt78 gzqyeveG0sToZi6EkE3CB2PCsRuJ3lEx2US+7cZlGf2Cah0YI1zmX7qZ3s2qEmzv 7ZEL+mL9wDxS+foXuBtNTRXjAX5mn1kgFVpLBCIzUAbUTEUoVG5V3RdR4mykNQGp eS0dPsPV1g/R2Hby8FoSU0DoGuHvihOSUA5b6uz3lm2E8tKSCkLqaUjTc5wVBsHe lCHDR9HuPFv6T49yh9yqwUf+pB4S8T6PmE6Sh6SfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyYaUoNI/vV3P06Jw8Kez0gGFi5YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4ZWE2ZTU2LTEyYzQtNDJjZS1iNzRlLTFhMzk5MjI4NWVhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvJ4wDQYJKoZIhvcNAQELBQADggEBALKR94OSjzrTVZw/cVNkUz4JuzZA ev9cPdYm4DNujWcW58Oz4s6RIqTUjIClgUu1dU4Kl1MbE0mt2tdev5dk9w1wB25R 83t2ASKlJnpcbsRnBjD9u02NddPUxgg4MJSMnX3t7BNGaND9GlI0LieCFLpKu6d6 U1g/RtoT1cb/3foN7yMwDEXSgqn9mc45Krqb8WoGgsBL+33g12sMAtad4Ya135mD aH73Wfh7p7O7Q3r6/6iiS6cV1MXz8DiEGfleRnG3KBFj63ZBTCFgZO8F66udcn4m EXElgicQAXRmFnS10szgebZTy4RsLLQ7gBZ3MugLGAKF3XLK4Ni6iy9czZ0= -----END CERTIFICATE-----Generated at Wed Oct 8 21:30:01 2025 by rpki-client