$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a057a0e0-9918-45c0-8e5e-703c8db4b007.roa File: a057a0e0-9918-45c0-8e5e-703c8db4b007.roa (raw, json) Hash identifier: 7P/pK5/Z/myoH9S5KL8HYEB14ZGpygkwhEhAv8oUyS4= Subject key identifier: 0B:1F:78:47:15:59:B3:03:A4:A6:C9:F7:78:85:27:69:27:DB:9A:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A768FC077CCC62999F97226533FC3399C8D2D72 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a057a0e0-9918-45c0-8e5e-703c8db4b007.roa Signing time: Wed 24 Sep 2025 21:08:25 +0000 ROA not before: Wed 24 Sep 2025 21:08:25 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:76:8f:c0:77:cc:c6:29:99:f9:72:26:53:3f:c3:39:9c:8d:2d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:08:25 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=393e07baf14e7d60607f28ec1679574c623954619c356eaa591b1c16a4803497, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:8c:80:ba:15:0d:2d:bb:36:97:01:c1:3d: ca:db:88:34:00:53:d2:b3:e6:a8:33:e0:49:3a:f4: bd:e1:e3:65:48:9c:9e:c4:69:3c:d7:0b:fc:8e:f9: fe:e8:fe:47:e8:be:6f:86:74:b3:dd:f2:43:b7:7b: d8:91:f4:7b:1a:fa:4a:65:31:22:85:cf:92:6a:06: dd:ba:9e:d3:cd:06:52:a8:5e:96:ed:ca:a7:fb:dc: e2:d0:1a:15:11:95:30:a3:90:e4:13:4a:ac:ac:39: f8:ca:5c:a2:0b:cd:02:aa:d2:f3:7b:b3:22:90:43: d9:83:ed:27:c3:5e:93:07:57:03:b6:cc:23:5e:a0: bd:07:e4:d3:41:25:0e:56:c6:08:92:11:2c:0d:ab: 76:e9:dc:9e:4c:5c:fb:37:c6:50:69:f1:fc:70:f9: 40:41:0c:02:82:8e:fa:8e:f7:af:a0:0c:d0:0a:ed: db:16:5b:ec:13:1a:26:07:70:3e:01:04:f7:6a:80: ae:83:72:fa:a1:e7:c1:d1:77:a3:a1:23:0e:ed:55: 2a:91:9d:df:b7:5d:91:1f:70:40:51:09:79:b4:70: 78:63:e6:3d:87:7f:de:9b:c2:59:13:6d:af:8d:9b: 8f:11:8f:db:2c:4a:ad:37:cf:d3:07:17:c3:2a:9e: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:78:47:15:59:B3:03:A4:A6:C9:F7:78:85:27:69:27:DB:9A:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a057a0e0-9918-45c0-8e5e-703c8db4b007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.127.0/24 Signature Algorithm: sha256WithRSAEncryption a9:d9:31:62:5e:06:b1:7b:af:db:55:2b:5d:d7:1c:e3:58:7e: 60:08:32:8a:65:c6:63:87:7c:19:ae:58:64:4b:b5:55:9c:ae: 79:a4:46:99:77:cb:61:30:27:83:cd:05:d5:a4:6e:79:7a:74: 6b:e9:ef:43:98:64:f1:11:cf:60:e2:c9:d7:fd:d8:d3:3e:50: aa:ef:84:97:51:7a:68:d7:a5:3d:27:d5:7d:cc:e9:ca:f9:fe: 72:4a:e4:c5:1e:42:1e:1c:09:da:d2:67:ce:fa:ed:96:89:6e: 63:3e:78:6b:4b:ff:55:e0:77:27:64:d6:d8:11:a5:58:b9:e3: 16:0e:63:1d:9f:a9:a5:09:17:d4:dd:f3:ab:86:d6:06:97:b0: 78:3b:d0:9d:68:91:ff:37:57:64:31:ac:3d:81:29:9a:4b:83: 28:22:4b:be:de:af:fa:b3:b9:ef:3d:43:c8:f7:47:98:bb:50: b0:c9:13:ef:91:18:6b:8b:2c:b4:66:af:e0:f2:b5:3e:98:9d: a0:28:d7:09:ec:cd:b1:1d:25:c3:3f:68:e5:c9:b5:c6:51:3d: a4:4c:2c:a7:aa:f0:d5:a8:45:47:b9:cb:de:6f:04:11:f1:fc: ee:06:7f:e1:cf:09:4e:87:4c:5f:29:6d:63:85:79:7e:b1:64: 50:62:11:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKnaPwHfMximZ+XImUz/DOZyNLXIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjEwODI1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTNlMDdiYWYxNGU3ZDYwNjA3ZjI4ZWMxNjc5NTc0YzYy Mzk1NDYxOWMzNTZlYWE1OTFiMWMxNmE0ODAzNDk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz14yAuhUNLbs2lwHBPcrbiDQAU9Kz5qgz4Ek69L3h42VI nJ7EaTzXC/yO+f7o/kfovm+GdLPd8kO3e9iR9Hsa+kplMSKFz5JqBt26ntPNBlKo Xpbtyqf73OLQGhURlTCjkOQTSqysOfjKXKILzQKq0vN7syKQQ9mD7SfDXpMHVwO2 zCNeoL0H5NNBJQ5WxgiSESwNq3bp3J5MXPs3xlBp8fxw+UBBDAKCjvqO96+gDNAK 7dsWW+wTGiYHcD4BBPdqgK6Dcvqh58HRd6OhIw7tVSqRnd+3XZEfcEBRCXm0cHhj 5j2Hf96bwlkTba+Nm48Rj9ssSq03z9MHF8MqntMbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCx94RxVZswOkpsn3eIUnaSfbmpYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwNTdhMGUwLTk5MTgtNDVjMC04ZTVlLTcwM2M4ZGI0YjAwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQH8wDQYJKoZIhvcNAQELBQADggEBAKnZMWJeBrF7r9tVK13XHONYfmAI MoplxmOHfBmuWGRLtVWcrnmkRpl3y2EwJ4PNBdWkbnl6dGvp70OYZPERz2Diydf9 2NM+UKrvhJdRemjXpT0n1X3M6cr5/nJK5MUeQh4cCdrSZ8767ZaJbmM+eGtL/1Xg dydk1tgRpVi54xYOYx2fqaUJF9Td86uG1gaXsHg70J1okf83V2QxrD2BKZpLgygi S77er/qzue89Q8j3R5i7ULDJE++RGGuLLLRmr+DytT6YnaAo1wnszbEdJcM/aOXJ tcZRPaRMLKeq8NWoRUe5y95vBBHx/O4Gf+HPCU6HTF8pbWOFeX6xZFBiEbo= -----END CERTIFICATE-----Generated at Fri Oct 17 23:47:53 2025 by rpki-client