$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/057cc5b3-61fa-4467-8717-e375a65640c1.roa File: 057cc5b3-61fa-4467-8717-e375a65640c1.roa (raw, json) Hash identifier: KfXSR1/8neFneb2tNbb/dpH4MMcLNEWv/cAUupJCilk= Subject key identifier: 78:90:80:88:DB:48:2E:14:A3:BA:F4:AF:D8:C0:D0:4E:90:7B:A2:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29D77A8023703ABA08F7D584C43E58ABEBC7E859 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/057cc5b3-61fa-4467-8717-e375a65640c1.roa Signing time: Sat 18 Oct 2025 12:21:26 +0000 ROA not before: Sat 18 Oct 2025 12:21:26 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d7:7a:80:23:70:3a:ba:08:f7:d5:84:c4:3e:58:ab:eb:c7:e8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:21:26 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4c2c9e910ddfc23dc6523cd2c27714d5383f916ca845481f4ececb0c5c358742, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:64:ba:ad:25:42:a8:34:97:98:53:57:24:61: 59:ef:e0:02:91:fc:e1:08:2e:00:f3:88:1f:e7:2d: d0:83:38:32:5b:00:3b:a4:0a:91:f0:3c:00:74:ad: 68:ea:e8:05:c2:e8:da:4b:30:69:b3:fc:b2:43:9f: c3:d1:36:98:eb:e6:0e:0b:2c:d5:89:d4:7d:d5:23: 00:03:78:98:0b:23:f2:49:d9:7f:d6:52:cb:65:f2: 60:34:f7:83:40:87:32:58:61:1c:eb:12:cc:9d:a6: 58:3d:f8:14:f0:55:f8:ab:bd:d1:44:15:30:72:a8: f1:11:8f:e9:9a:88:20:0f:37:f6:f0:20:f3:1b:77: 42:f8:6b:40:8f:92:14:1f:63:f9:a6:f6:d8:a0:d9: bd:91:f8:b6:aa:c3:73:13:23:2d:52:b4:cd:76:f3: 98:61:50:07:9c:dc:d9:b6:5a:16:4c:ad:97:d7:27: 35:de:4e:1c:af:44:de:58:5d:85:64:94:35:d9:b5: 63:9b:d5:86:19:5b:b0:3c:07:d1:2b:fd:9d:02:aa: a9:97:dc:53:94:65:43:00:1f:ef:04:6e:87:27:e4: 0e:d8:84:ec:ba:b0:28:1f:ef:ab:76:5a:b4:a7:d0: 02:5e:ce:c8:d3:fe:b2:f4:5d:35:95:9b:ec:d9:45: 2e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:90:80:88:DB:48:2E:14:A3:BA:F4:AF:D8:C0:D0:4E:90:7B:A2:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/057cc5b3-61fa-4467-8717-e375a65640c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.14.0/24 Signature Algorithm: sha256WithRSAEncryption 54:9d:a0:16:2d:01:0e:f8:88:d0:d0:28:e7:e9:4e:b5:9d:ec: ea:90:70:0e:c6:8c:a7:d0:ee:1f:16:fa:92:4a:1b:96:b3:7f: a3:32:b6:53:05:dd:db:c0:e8:40:91:e3:97:ca:82:bf:3a:77: 1e:30:f6:19:95:af:63:23:59:47:ef:44:76:c4:a8:d6:ba:20: b7:8a:81:bb:7f:38:0c:09:a0:46:2c:a3:bd:b8:35:ad:da:4d: 15:d9:ae:70:04:ff:89:f2:03:c7:fb:0d:d5:5e:e8:ea:f9:82: 5e:b1:55:36:ec:59:59:68:6a:1c:f9:9d:8a:86:28:9b:15:c6: a9:53:06:9d:66:32:5f:5f:c0:1f:e1:35:f8:78:ea:16:db:46: 25:3b:a0:17:02:aa:1c:3b:cd:95:1b:b7:d8:09:8d:d9:c3:40: 8b:60:fb:d8:ec:ab:7b:30:3c:45:e8:49:8a:8a:4e:dc:97:a9: df:e5:f8:33:2a:30:c1:e4:40:bf:36:b6:f9:85:98:2e:07:f7: b4:c8:0b:c9:16:0e:20:bd:8d:a6:91:ee:ef:15:a0:83:36:60: a5:0d:8f:6f:27:d0:68:87:99:c6:c6:f7:5b:7d:f2:26:65:98: fb:f2:ea:dd:fb:82:12:b8:bc:39:f0:ef:01:7e:00:ef:c8:63: d9:d2:7b:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKdd6gCNwOroI99WExD5Yq+vH6FkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIyMTI2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzJjOWU5MTBkZGZjMjNkYzY1MjNjZDJjMjc3MTRkNTM4 M2Y5MTZjYTg0NTQ4MWY0ZWNlY2IwYzVjMzU4NzQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvZLqtJUKoNJeYU1ckYVnv4AKR/OEILgDziB/nLdCDODJb ADukCpHwPAB0rWjq6AXC6NpLMGmz/LJDn8PRNpjr5g4LLNWJ1H3VIwADeJgLI/JJ 2X/WUstl8mA094NAhzJYYRzrEsydplg9+BTwVfirvdFEFTByqPERj+maiCAPN/bw IPMbd0L4a0CPkhQfY/mm9tig2b2R+Laqw3MTIy1StM1285hhUAec3Nm2WhZMrZfX JzXeThyvRN5YXYVklDXZtWOb1YYZW7A8B9Er/Z0CqqmX3FOUZUMAH+8Ebocn5A7Y hOy6sCgf76t2WrSn0AJezsjT/rL0XTWVm+zZRS5TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeJCAiNtILhSjuvSv2MDQTpB7osAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA1N2NjNWIzLTYxZmEtNDQ2Ny04NzE3LWUzNzVhNjU2NDBjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoA4wDQYJKoZIhvcNAQELBQADggEBAFSdoBYtAQ74iNDQKOfpTrWd7OqQ cA7GjKfQ7h8W+pJKG5azf6MytlMF3dvA6ECR45fKgr86dx4w9hmVr2MjWUfvRHbE qNa6ILeKgbt/OAwJoEYso724Na3aTRXZrnAE/4nyA8f7DdVe6Or5gl6xVTbsWVlo ahz5nYqGKJsVxqlTBp1mMl9fwB/hNfh46hbbRiU7oBcCqhw7zZUbt9gJjdnDQItg +9jsq3swPEXoSYqKTtyXqd/l+DMqMMHkQL82tvmFmC4H97TIC8kWDiC9jaaR7u8V oIM2YKUNj28n0GiHmcbG91t98iZlmPvy6t37ghK4vDnw7wF+AO/IY9nSeyc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:59 2025 by rpki-client