$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/065d3d73-6b2c-4433-833a-80acd47d40a7.roa File: 065d3d73-6b2c-4433-833a-80acd47d40a7.roa (raw, json) Hash identifier: SmTiIWpfh3w5qgfO6qKHGourEMwQ8ReCN0SN2pv20N8= Subject key identifier: D3:B5:6C:92:54:F9:70:CF:13:14:3A:18:F2:D3:0C:17:B7:C5:E9:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C5940F289F4233B9C01CA0C5A48AA5EB1D0E2DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/065d3d73-6b2c-4433-833a-80acd47d40a7.roa Signing time: Thu 16 Oct 2025 16:07:48 +0000 ROA not before: Thu 16 Oct 2025 16:07:48 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:59:40:f2:89:f4:23:3b:9c:01:ca:0c:5a:48:aa:5e:b1:d0:e2:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:07:48 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=33c78fc8d2d6e3f589c97070de20c5a071df26ccecebdb35601ba994a56f1b10, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:31:ff:95:ab:10:8e:f2:6a:c1:c3:df:f0: fe:39:fe:8d:56:ed:b4:76:bb:79:72:cc:1f:85:b9: 2a:91:45:07:f3:08:40:07:3f:bb:a6:e3:05:0f:ea: 2e:20:13:c6:e7:20:05:00:0f:f0:ed:78:7b:7c:47: a9:3a:ab:be:8b:94:bf:24:8b:2c:53:37:14:ac:b9: 40:34:ca:4d:37:2a:93:3f:06:27:ca:4a:02:90:11: ba:f4:f0:30:12:cc:c3:85:e9:8b:89:5d:fd:93:09: dd:1a:49:19:bb:22:90:56:d3:19:24:9b:06:fe:72: 0b:48:f5:f0:03:4e:c3:42:e4:ab:04:d0:1f:3b:18: 4e:06:8b:5f:6c:f9:7a:6e:86:e6:19:ee:ef:53:97: b9:81:f4:d1:9b:4d:af:6d:ca:b8:a8:1b:70:c5:03: 4a:47:32:a2:68:d7:8d:e8:98:dc:2f:0b:e6:a8:60: 2b:60:c3:53:88:d0:52:e5:49:d0:df:0c:71:cb:3b: d3:f6:3e:14:24:5c:70:9e:c7:f1:d8:36:fb:74:b7: 7f:f4:90:72:c1:f2:1b:48:ed:dd:e3:4c:97:cb:50: 15:62:91:0a:1d:97:d5:c2:61:bb:cd:77:9f:37:dc: c4:e8:45:d0:6f:ec:a0:0f:0a:2b:0a:ce:64:33:1b: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B5:6C:92:54:F9:70:CF:13:14:3A:18:F2:D3:0C:17:B7:C5:E9:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/065d3d73-6b2c-4433-833a-80acd47d40a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.60.0/24 Signature Algorithm: sha256WithRSAEncryption 04:bf:32:9a:0f:82:4e:52:d8:8a:39:0f:a7:27:5f:97:78:3e: d8:7b:3d:70:0d:65:de:4d:af:82:e8:61:e7:75:b1:f9:c9:eb: bb:73:ec:ba:95:26:14:54:c4:48:c6:5b:2f:4a:72:3c:40:22: e2:15:cc:01:96:10:36:2f:8c:79:b1:98:b0:0d:a9:73:84:93: 85:fb:3b:1c:24:14:42:96:4d:6c:af:82:86:71:1f:9a:e5:78: 69:a3:c4:30:b9:5f:a2:e1:72:6a:b1:80:98:ca:37:56:d5:92: da:2d:f6:3c:7f:8f:25:be:ac:e0:de:1e:c0:f3:6a:83:df:52: ed:6f:80:06:99:4a:a7:10:e9:ab:cc:b3:fd:a2:d4:23:24:4a: 68:c6:b1:e3:d2:a9:d5:b6:b2:76:76:00:47:46:f2:71:0c:34: d4:e1:3c:a8:ee:db:ca:8e:38:b5:2f:37:2d:ff:c7:a1:16:6b: 6a:f5:99:28:2a:b4:ee:bc:b5:37:1e:8c:6b:85:37:22:b5:74: 6c:e2:ba:17:04:22:1a:07:5b:bc:c9:5d:c3:cd:96:5c:59:55: fd:b6:40:16:d6:70:0a:ef:bd:b8:84:40:b6:46:91:ab:29:06: 48:5c:f1:b5:67:5e:8f:48:7f:60:e7:8f:e5:8e:e4:71:ea:b4: 5b:ea:f0:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbFlA8on0IzucAcoMWkiqXrHQ4towDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTYwNzQ4WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2M3OGZjOGQyZDZlM2Y1ODljOTcwNzBkZTIwYzVhMDcx ZGYyNmNjZWNlYmRiMzU2MDFiYTk5NGE1NmYxYjEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFHzH/lasQjvJqwcPf8P45/o1W7bR2u3lyzB+FuSqRRQfz CEAHP7um4wUP6i4gE8bnIAUAD/DteHt8R6k6q76LlL8kiyxTNxSsuUA0yk03KpM/ BifKSgKQEbr08DASzMOF6YuJXf2TCd0aSRm7IpBW0xkkmwb+cgtI9fADTsNC5KsE 0B87GE4Gi19s+XpuhuYZ7u9Tl7mB9NGbTa9tyrioG3DFA0pHMqJo143omNwvC+ao YCtgw1OI0FLlSdDfDHHLO9P2PhQkXHCex/HYNvt0t3/0kHLB8htI7d3jTJfLUBVi kQodl9XCYbvNd5833MToRdBv7KAPCisKzmQzGw9TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU07VsklT5cM8TFDoY8tMMF7fF6fQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA2NWQzZDczLTZiMmMtNDQzMy04MzNhLTgwYWNkNDdkNDBhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRDwwDQYJKoZIhvcNAQELBQADggEBAAS/MpoPgk5S2Io5D6cnX5d4Pth7 PXANZd5Nr4LoYed1sfnJ67tz7LqVJhRUxEjGWy9KcjxAIuIVzAGWEDYvjHmxmLAN qXOEk4X7OxwkFEKWTWyvgoZxH5rleGmjxDC5X6LhcmqxgJjKN1bVktot9jx/jyW+ rODeHsDzaoPfUu1vgAaZSqcQ6avMs/2i1CMkSmjGsePSqdW2snZ2AEdG8nEMNNTh PKju28qOOLUvNy3/x6EWa2r1mSgqtO68tTcejGuFNyK1dGziuhcEIhoHW7zJXcPN llxZVf22QBbWcArvvbiEQLZGkaspBkhc8bVnXo9If2Dnj+WO5HHqtFvq8EI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:56 2025 by rpki-client