$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60b296a6-081b-429f-8e69-18c8ea04f43d.roa File: 60b296a6-081b-429f-8e69-18c8ea04f43d.roa (raw, json) Hash identifier: nKiinDcL4URTumz9a7X59SdR4c5X2v4+wmbMja926XQ= Subject key identifier: 61:91:7F:54:31:36:32:34:6A:D7:22:6F:32:F4:04:4E:EE:1E:97:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70AD2A03811589B66D3C8170D2151F37344DD0BF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60b296a6-081b-429f-8e69-18c8ea04f43d.roa Signing time: Mon 22 Sep 2025 21:17:17 +0000 ROA not before: Mon 22 Sep 2025 21:17:17 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ad:2a:03:81:15:89:b6:6d:3c:81:70:d2:15:1f:37:34:4d:d0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:17:17 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=5ec9d2ed31cf26f5b5ad8e28d23e4e6ce828ea281d7a72424d97d51b07f4d9d6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:0d:36:e6:a3:98:4d:b5:4d:d0:bc:42:f3: 4f:78:fd:3e:41:a4:61:94:f5:c1:09:dd:49:ea:6a: 71:34:e4:92:af:eb:50:aa:5a:c8:3b:49:ea:9a:0d: d8:e0:22:96:82:ed:bc:fe:0d:f3:3d:dd:dd:d6:18: 06:2c:33:5f:2a:80:45:d7:dc:bf:e2:d5:a3:d2:10: a7:e5:13:0c:dc:bf:a9:8d:f3:46:e2:94:0f:36:d2: ca:5f:37:50:16:ac:74:6b:05:18:b7:e6:a4:06:65: 33:d5:8a:1d:28:25:b5:9f:22:91:af:53:7b:f2:b6: 41:63:12:18:ca:ab:88:62:81:6c:f9:21:af:54:6c: cd:93:de:7d:cd:96:40:8b:c5:e8:6c:60:10:42:6c: b7:e8:16:73:51:8c:50:66:4b:51:bc:82:52:e3:ca: 56:64:d7:ba:af:3c:1c:79:7c:52:58:33:64:40:ab: 88:3f:32:57:5d:67:f2:65:4a:8a:f3:04:23:80:bb: d8:87:11:c4:ad:4f:ec:39:3e:5b:c0:8b:d9:9c:ae: 95:61:b4:01:a4:27:fe:ea:fb:3d:d2:da:53:a7:9e: 81:2f:81:5b:3a:8f:10:5b:95:33:12:0e:da:24:0b: e3:ae:3f:b5:f0:86:b9:ed:ef:2a:d7:57:44:1a:4d: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:91:7F:54:31:36:32:34:6A:D7:22:6F:32:F4:04:4E:EE:1E:97:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60b296a6-081b-429f-8e69-18c8ea04f43d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.32.0/21 Signature Algorithm: sha256WithRSAEncryption 67:07:17:cc:14:68:f1:90:2c:49:7d:37:f4:57:df:b2:62:ec: 2d:3b:57:ea:4c:d6:7b:61:5f:11:1f:66:9e:55:b7:fb:e1:8c: 49:93:44:d2:2b:d8:83:81:d9:03:37:9a:70:3f:34:9e:b1:08: d4:07:88:1a:6f:92:1c:c0:45:bc:9f:12:a9:0f:38:9e:74:8b: 2b:31:0c:12:31:8f:8d:83:fc:ed:eb:ae:67:8a:29:1c:ed:4f: 7a:de:16:4d:e4:95:a4:c9:1c:7e:16:54:04:b1:0c:4d:3d:7a: f2:36:02:db:29:83:5e:a4:96:92:1d:29:cf:0f:4f:08:49:e7: 79:88:2a:f1:66:87:23:e9:f2:63:96:83:60:5a:31:4c:69:e6: a5:10:e0:ab:41:3a:ca:99:6a:30:56:63:70:c3:0f:4a:40:69: d7:4f:aa:68:29:d4:a2:d0:1c:4c:c1:df:5a:ef:74:06:27:cf: 4a:9c:22:01:b2:80:f0:ea:7b:7b:88:d7:32:c9:ec:9a:98:db: 40:95:60:af:db:e4:67:4b:ea:bb:66:73:3c:f6:33:a2:55:64: a4:c6:c9:88:7a:96:18:e6:39:a7:d7:64:5d:9a:0d:1d:92:97: fa:bd:c6:d3:5e:8f:32:a4:bb:29:a1:38:41:68:ca:3e:18:83: 39:f5:b9:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcK0qA4EVibZtPIFw0hUfNzRN0L8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjExNzE3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZWM5ZDJlZDMxY2YyNmY1YjVhZDhlMjhkMjNlNGU2Y2U4 MjhlYTI4MWQ3YTcyNDI0ZDk3ZDUxYjA3ZjRkOWQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn+A025qOYTbVN0LxC8094/T5BpGGU9cEJ3UnqanE05JKv 61CqWsg7SeqaDdjgIpaC7bz+DfM93d3WGAYsM18qgEXX3L/i1aPSEKflEwzcv6mN 80bilA820spfN1AWrHRrBRi35qQGZTPVih0oJbWfIpGvU3vytkFjEhjKq4higWz5 Ia9UbM2T3n3NlkCLxehsYBBCbLfoFnNRjFBmS1G8glLjylZk17qvPBx5fFJYM2RA q4g/MlddZ/JlSorzBCOAu9iHEcStT+w5PlvAi9mcrpVhtAGkJ/7q+z3S2lOnnoEv gVs6jxBblTMSDtokC+OuP7Xwhrnt7yrXV0QaTTBPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYZF/VDE2MjRq1yJvMvQETu4elwEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYwYjI5NmE2LTA4MWItNDI5Zi04ZTY5LTE4YzhlYTA0ZjQzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSrCAwDQYJKoZIhvcNAQELBQADggEBAGcHF8wUaPGQLEl9N/RX37Ji7C07 V+pM1nthXxEfZp5Vt/vhjEmTRNIr2IOB2QM3mnA/NJ6xCNQHiBpvkhzARbyfEqkP OJ50iysxDBIxj42D/O3rrmeKKRztT3reFk3klaTJHH4WVASxDE09evI2Atspg16k lpIdKc8PTwhJ53mIKvFmhyPp8mOWg2BaMUxp5qUQ4KtBOsqZajBWY3DDD0pAaddP qmgp1KLQHEzB31rvdAYnz0qcIgGygPDqe3uI1zLJ7JqY20CVYK/b5GdL6rtmczz2 M6JVZKTGyYh6lhjmOafXZF2aDR2Sl/q9xtNejzKkuymhOEFoyj4Ygzn1uX0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:25 2025 by rpki-client