$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60bb4669-f192-4a70-a9b4-de1a270865e3.roa File: 60bb4669-f192-4a70-a9b4-de1a270865e3.roa (raw, json) Hash identifier: PA4ik5+kOXKwPdR8HubqJ4sSoAkLHqC86NtkWGBUJhU= Subject key identifier: A6:4F:02:1A:BA:2F:93:8D:73:62:4A:97:92:E0:AB:31:F9:94:BC:4C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 696CCDEB04221EC7C782C7D85DA2507A756D187C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60bb4669-f192-4a70-a9b4-de1a270865e3.roa Signing time: Mon 22 Sep 2025 21:41:09 +0000 ROA not before: Mon 22 Sep 2025 21:41:09 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6c:cd:eb:04:22:1e:c7:c7:82:c7:d8:5d:a2:50:7a:75:6d:18:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:41:09 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=9262f5e931ac52809e1e1b3b83990c391ab4c5fcf90ec47104c2e916a1e52c53, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:5c:64:db:d7:13:f1:bd:39:c9:b2:42:c7: f4:13:f7:2e:60:a7:c2:8c:74:92:7d:ee:b2:e2:b0: 81:d3:b0:a8:a3:ce:94:a3:6c:ef:61:6b:f1:12:14: c6:f8:b1:41:7d:16:6f:82:47:6f:71:75:6d:80:7e: 62:97:b2:f2:07:d3:2b:d2:e6:0a:24:0f:44:28:a1: a7:b4:5a:0a:f1:8a:c5:1d:4e:3a:ef:90:02:cf:24: e3:f0:be:2a:b8:ed:0d:c5:a8:2f:1c:e2:87:b1:3e: 09:ba:21:80:51:76:f0:d2:d5:3c:52:22:e4:73:2d: 41:f6:87:f7:1a:a1:66:8e:4d:b6:ae:fd:4d:60:91: 8b:64:f6:b4:17:76:92:71:aa:d3:e9:e9:6a:c0:41: 43:35:76:df:26:21:45:0f:8a:7e:84:fc:36:46:45: 52:2e:4e:5f:78:c1:c2:a3:78:72:2b:d0:33:38:2a: 8a:99:7f:f6:59:e7:ef:55:42:47:72:e1:54:51:de: c9:42:43:40:7e:fe:9b:23:09:8f:1d:c7:e8:57:62: 1f:3d:f4:ba:e8:c4:ea:1e:6c:a9:e8:75:c4:9b:5f: f1:c7:a1:b2:f5:fd:d8:b5:2e:b8:02:83:7b:5c:1a: 83:62:af:97:3d:8e:aa:17:f2:24:34:3e:02:a3:52: 2b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4F:02:1A:BA:2F:93:8D:73:62:4A:97:92:E0:AB:31:F9:94:BC:4C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60bb4669-f192-4a70-a9b4-de1a270865e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.61.0/24 Signature Algorithm: sha256WithRSAEncryption 67:30:72:a9:25:d9:26:fe:e3:48:e6:e5:71:8f:28:75:ec:ed: 1c:c6:bb:42:1a:86:54:9b:34:fb:49:a9:06:f4:f1:13:81:b0: 30:08:cc:10:5e:b0:cc:6b:57:64:07:30:dd:c0:6e:06:b2:db: eb:f3:96:95:7e:12:04:0c:8b:52:d2:8a:12:ef:25:a9:5a:e3: 20:2c:50:fe:cb:cd:4e:70:11:e7:99:6a:22:1a:c2:ff:26:6d: 5a:62:65:6f:77:f0:1c:be:c1:44:bb:3c:a2:f8:d8:ba:c5:4a: 5a:57:09:78:f3:36:94:e8:70:c8:9e:55:53:c9:d3:15:01:72: 57:82:28:94:25:bf:ba:18:df:cc:39:73:65:21:a0:8b:ab:c3: d0:74:6a:e7:bb:ea:8b:b5:4c:92:e5:e6:b2:a9:ce:4a:0c:e5: e0:2e:e8:16:84:57:ac:3f:0d:c3:2d:57:0e:f2:a8:95:00:b4: 01:a9:91:f4:cb:f5:e6:f5:f3:da:1f:53:b8:6e:7b:66:6a:a3: 00:c7:68:bb:1a:2f:2e:4e:5f:5b:e5:af:84:3a:55:f7:b0:26: 93:97:e9:4d:cc:c2:a1:f1:24:be:2d:7d:83:2b:37:85:6a:b6: b4:2b:4a:6d:7a:f8:84:b2:09:90:29:05:7c:5a:7d:62:ce:25: 8b:5f:b6:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaWzN6wQiHsfHgsfYXaJQenVtGHwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE0MTA5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjYyZjVlOTMxYWM1MjgwOWUxZTFiM2I4Mzk5MGMzOTFh YjRjNWZjZjkwZWM0NzEwNGMyZTkxNmExZTUyYzUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtFFxk29cT8b05ybJCx/QT9y5gp8KMdJJ97rLisIHTsKij zpSjbO9ha/ESFMb4sUF9Fm+CR29xdW2AfmKXsvIH0yvS5gokD0Qooae0WgrxisUd TjrvkALPJOPwviq47Q3FqC8c4oexPgm6IYBRdvDS1TxSIuRzLUH2h/caoWaOTbau /U1gkYtk9rQXdpJxqtPp6WrAQUM1dt8mIUUPin6E/DZGRVIuTl94wcKjeHIr0DM4 KoqZf/ZZ5+9VQkdy4VRR3slCQ0B+/psjCY8dx+hXYh899LroxOoebKnodcSbX/HH obL1/di1LrgCg3tcGoNir5c9jqoX8iQ0PgKjUivpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpk8CGrovk41zYkqXkuCrMfmUvEwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYwYmI0NjY5LWYxOTItNGE3MC1hOWI0LWRlMWEyNzA4NjVlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7j0wDQYJKoZIhvcNAQELBQADggEBAGcwcqkl2Sb+40jm5XGPKHXs7RzG u0IahlSbNPtJqQb08ROBsDAIzBBesMxrV2QHMN3Abgay2+vzlpV+EgQMi1LSihLv Jala4yAsUP7LzU5wEeeZaiIawv8mbVpiZW938By+wUS7PKL42LrFSlpXCXjzNpTo cMieVVPJ0xUBcleCKJQlv7oY38w5c2UhoIurw9B0aue76ou1TJLl5rKpzkoM5eAu 6BaEV6w/DcMtVw7yqJUAtAGpkfTL9eb189ofU7hue2ZqowDHaLsaLy5OX1vlr4Q6 VfewJpOX6U3MwqHxJL4tfYMrN4VqtrQrSm16+ISyCZApBXxafWLOJYtftjQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:25 2025 by rpki-client