$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58dd8dfc-a24a-404c-b9d0-7a1038caaa7b.roa File: 58dd8dfc-a24a-404c-b9d0-7a1038caaa7b.roa (raw, json) Hash identifier: kvbfW58+fagIZeO5NhdyAEPxO1n2a8jZUEKnuHrCz0s= Subject key identifier: D8:9B:F1:5D:14:9C:E8:47:B5:6A:5C:72:A0:81:7C:1B:67:6B:F3:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24F348940A1C648B07E769BB81C2CD745D491405 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58dd8dfc-a24a-404c-b9d0-7a1038caaa7b.roa Signing time: Wed 24 Sep 2025 22:51:45 +0000 ROA not before: Wed 24 Sep 2025 22:51:45 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f3:48:94:0a:1c:64:8b:07:e7:69:bb:81:c2:cd:74:5d:49:14:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:51:45 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=54a9f00430697e07086e95eef9061a7ff76b29aaa9dea68c81a559b48a0ec429, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:47:26:49:dd:31:14:fe:f2:a5:f3:16:ba: 57:b9:c1:94:e0:72:9f:0d:e1:3a:4e:60:11:5b:23: d5:08:1b:f3:90:ee:c2:9a:6e:55:89:29:da:57:be: 05:09:5b:59:68:11:16:da:ed:7f:eb:de:bf:7f:f7: 42:81:2f:23:a7:aa:11:d2:60:84:06:dc:f1:60:9f: 59:c9:97:7a:6d:f8:d9:72:a7:6f:3b:6b:0b:14:55: e2:b4:25:e6:75:2a:b0:82:45:31:93:32:80:a0:61: 52:44:01:20:d2:63:16:b5:46:e1:71:62:4a:22:94: 7c:12:c1:21:be:31:70:6b:e8:4d:69:cb:e2:9c:ce: 84:23:ea:99:03:05:8f:db:42:ef:ab:04:50:09:ad: a8:d5:b4:98:55:e4:46:3d:d3:37:d9:0b:58:76:b7: 9a:b3:17:d4:6b:f4:4a:db:b5:a1:bc:31:b0:34:00: 62:b1:8c:25:10:19:98:63:21:5f:99:6b:5a:3b:5f: cd:32:27:36:c0:e9:8a:7e:8c:ae:5d:9c:a9:cf:e7: 19:97:d9:cc:c1:52:16:92:16:ce:29:ff:3a:83:67: 08:45:39:53:cf:ca:da:9c:f7:bd:ee:43:e6:9f:76: 50:07:fd:3f:cc:06:c2:a8:79:fe:7c:92:0a:de:bf: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9B:F1:5D:14:9C:E8:47:B5:6A:5C:72:A0:81:7C:1B:67:6B:F3:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58dd8dfc-a24a-404c-b9d0-7a1038caaa7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.32.0/22 Signature Algorithm: sha256WithRSAEncryption 09:97:02:b2:a4:73:b8:17:b0:84:50:9b:a2:cf:0d:75:d4:66: 06:19:41:62:48:bb:74:0c:7a:3c:3a:fa:d0:6c:5d:bd:74:da: f9:71:79:d9:2b:a7:0c:f8:a7:b2:c5:00:26:a9:20:ca:e8:42: e3:c5:4e:6c:de:bb:de:a1:fe:75:af:06:4d:f7:5b:44:19:db: 63:a1:5d:b2:b9:ba:cb:5d:60:2f:88:25:79:70:ab:00:2e:ec: 55:e9:13:60:ea:af:b0:e8:03:3e:94:f6:5f:c6:7f:e8:b0:df: 93:08:92:ee:73:4e:ee:cd:e4:60:9c:ac:92:1e:a3:f1:05:be: 01:af:72:41:29:22:6b:03:35:e1:e3:83:41:09:b2:5e:44:41: d4:29:01:e3:69:18:1a:b9:0c:a5:ac:f9:22:71:fe:9a:da:7a: 53:e9:15:9b:e0:8c:9b:64:5f:98:f9:7f:db:f3:bc:66:29:d7: cf:1f:45:48:f0:cc:89:4d:e8:72:8b:68:28:94:b7:ff:bb:6b: d5:3d:a3:46:88:91:39:bf:d6:16:8e:ca:01:c3:48:0a:dc:7c: d1:d5:bf:94:9f:26:34:98:7d:bc:2a:bd:f8:80:21:eb:79:09: 88:de:b6:ac:d3:d2:c0:16:09:d4:5e:e0:16:46:64:d5:a8:23: 81:8a:ef:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJPNIlAocZIsH52m7gcLNdF1JFAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI1MTQ1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGE5ZjAwNDMwNjk3ZTA3MDg2ZTk1ZWVmOTA2MWE3ZmY3 NmIyOWFhYTlkZWE2OGM4MWE1NTliNDhhMGVjNDI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/J0cmSd0xFP7ypfMWule5wZTgcp8N4TpOYBFbI9UIG/OQ 7sKablWJKdpXvgUJW1loERba7X/r3r9/90KBLyOnqhHSYIQG3PFgn1nJl3pt+Nly p287awsUVeK0JeZ1KrCCRTGTMoCgYVJEASDSYxa1RuFxYkoilHwSwSG+MXBr6E1p y+KczoQj6pkDBY/bQu+rBFAJrajVtJhV5EY90zfZC1h2t5qzF9Rr9ErbtaG8MbA0 AGKxjCUQGZhjIV+Za1o7X80yJzbA6Yp+jK5dnKnP5xmX2czBUhaSFs4p/zqDZwhF OVPPytqc973uQ+afdlAH/T/MBsKoef58kgrev8RzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2JvxXRSc6Ee1alxyoIF8G2dr87UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4ZGQ4ZGZjLWEyNGEtNDA0Yy1iOWQwLTdhMTAzOGNhYWE3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQSAwDQYJKoZIhvcNAQELBQADggEBAAmXArKkc7gXsIRQm6LPDXXUZgYZ QWJIu3QMejw6+tBsXb102vlxedkrpwz4p7LFACapIMroQuPFTmzeu96h/nWvBk33 W0QZ22OhXbK5ustdYC+IJXlwqwAu7FXpE2Dqr7DoAz6U9l/Gf+iw35MIku5zTu7N 5GCcrJIeo/EFvgGvckEpImsDNeHjg0EJsl5EQdQpAeNpGBq5DKWs+SJx/praelPp FZvgjJtkX5j5f9vzvGYp188fRUjwzIlN6HKLaCiUt/+7a9U9o0aIkTm/1haOygHD SArcfNHVv5SfJjSYfbwqvfiAIet5CYjetqzT0sAWCdRe4BZGZNWoI4GK79Y= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:28 2025 by rpki-client