$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa File: ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa (raw, json) Hash identifier: zOYkT0ed98s0xDkge/RZdptOWKT52AuoO0dW8taW4Os= Subject key identifier: D7:2C:EF:D0:82:1E:C3:16:DB:05:01:16:82:5F:3A:9B:02:32:1B:9E Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 14A9F9FA3E68247AC044977ED33905F21C88C68E Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa Signing time: Fri 26 Sep 2025 00:50:04 +0000 ROA not before: Fri 26 Sep 2025 00:50:04 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a9:f9:fa:3e:68:24:7a:c0:44:97:7e:d3:39:05:f2:1c:88:c6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Sep 26 00:50:04 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=81ff861273fa7fdf53725ed4467df19e6f9dffb37a1bf5ebd314d7f6091c3f99, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:b8:06:8e:58:86:85:be:af:6d:19:14:94: cb:bc:7f:bd:2d:0c:0e:97:ee:ed:ca:5e:09:e6:6f: 8c:ae:df:ff:44:67:68:3b:3d:14:d4:17:2f:ed:11: c9:48:67:c1:29:17:81:52:91:fc:ef:98:7a:25:6b: 08:35:a6:58:50:df:53:45:b4:d3:75:6e:cd:87:e1: e8:55:ea:81:7f:cd:76:3f:90:ad:1b:72:0a:15:b0: 7b:65:20:b7:a8:25:67:75:b7:4d:a1:4f:03:4c:29: 76:07:f9:99:62:3f:9c:f4:ea:20:75:22:9b:fb:36: 24:31:88:0f:f8:de:72:b6:c0:80:55:b4:76:39:99: 8a:be:9f:04:c5:76:0f:89:13:1e:61:29:99:de:b3: e6:6e:0c:8a:da:b5:8f:57:98:ac:c2:12:fc:47:c5: 82:c0:29:2e:94:5b:87:b5:f1:bc:08:c2:e3:93:16: 0a:d5:3b:24:6b:4f:3a:3f:d6:d8:61:60:8b:64:bc: 78:54:5c:ad:5d:4a:45:0b:8d:a8:69:38:5d:04:ab: 47:9d:9f:e3:46:28:23:c7:44:c8:9e:cd:a9:62:e5: 39:df:39:2f:de:0e:d0:1c:0d:13:56:42:ff:f5:cb: 05:1b:19:e7:10:bd:22:c8:a9:42:c1:38:55:9e:67: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2C:EF:D0:82:1E:C3:16:DB:05:01:16:82:5F:3A:9B:02:32:1B:9E X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.64.0/18 Signature Algorithm: sha256WithRSAEncryption 35:2f:b2:41:a8:34:1a:be:75:a1:03:5d:9f:59:bc:40:bd:23: f6:b5:f5:9f:34:77:93:be:cc:d0:71:e7:ff:09:99:48:40:07: ab:17:26:7d:1d:ff:ed:05:25:4a:50:ab:61:21:85:8c:35:1a: 24:20:5d:9d:fb:11:bd:25:1e:21:7a:a0:8b:c0:45:4c:ec:33: 5f:28:14:f1:5d:0e:e3:d4:ec:8d:b7:4f:95:19:0b:a4:f4:89: e8:08:5c:1a:3a:12:77:ce:d6:e7:57:5a:57:69:6e:92:dd:bc: 73:21:06:71:8b:3c:66:5e:0a:27:40:53:44:8a:28:07:6c:b8: ea:25:e0:51:32:41:e6:6e:ff:46:98:15:5b:83:58:be:3f:18: 7d:d3:80:d4:20:6e:9b:01:08:bd:e5:7d:b8:39:03:42:77:c5: 9b:2a:8a:76:df:0e:a1:e3:db:1c:4d:03:bd:19:b4:f4:62:3e: 4b:74:01:0b:0c:d7:74:1c:3f:50:b5:5a:f8:d2:98:8e:f3:74: a2:78:22:2c:2d:4b:77:34:f3:ce:f4:48:ea:19:be:92:85:4d: ce:3d:e0:df:8b:91:d5:db:a5:f2:88:4f:01:16:98:e3:23:90: 1c:89:55:e5:3a:29:49:62:ea:12:71:cc:11:e8:94:e6:32:7c: 56:e9:f7:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFKn5+j5oJHrARJd+0zkF8hyIxo4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjUwOTI2MDA1MDA0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWZmODYxMjczZmE3ZmRmNTM3MjVlZDQ0NjdkZjE5ZTZm OWRmZmIzN2ExYmY1ZWJkMzE0ZDdmNjA5MWMzZjk5MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfXLgGjliGhb6vbRkUlMu8f70tDA6X7u3KXgnmb4yu3/9E Z2g7PRTUFy/tEclIZ8EpF4FSkfzvmHolawg1plhQ31NFtNN1bs2H4ehV6oF/zXY/ kK0bcgoVsHtlILeoJWd1t02hTwNMKXYH+ZliP5z06iB1Ipv7NiQxiA/43nK2wIBV tHY5mYq+nwTFdg+JEx5hKZnes+ZuDIratY9XmKzCEvxHxYLAKS6UW4e18bwIwuOT FgrVOyRrTzo/1thhYItkvHhUXK1dSkULjahpOF0Eq0edn+NGKCPHRMiezali5Tnf OS/eDtAcDRNWQv/1ywUbGecQvSLIqULBOFWeZ1R7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1yzv0IIewxbbBQEWgl86mwIyG54wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2NjYWE4OGM3LTA1NGItNGNlMS05MmU4LTYyZGQ5NDE3MThlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZgf0AwDQYJKoZIhvcNAQELBQADggEBADUvskGoNBq+daEDXZ9ZvEC9I/a1 9Z80d5O+zNBx5/8JmUhAB6sXJn0d/+0FJUpQq2EhhYw1GiQgXZ37Eb0lHiF6oIvA RUzsM18oFPFdDuPU7I23T5UZC6T0iegIXBo6EnfO1udXWldpbpLdvHMhBnGLPGZe CidAU0SKKAdsuOol4FEyQeZu/0aYFVuDWL4/GH3TgNQgbpsBCL3lfbg5A0J3xZsq inbfDqHj2xxNA70ZtPRiPkt0AQsM13QcP1C1WvjSmI7zdKJ4IiwtS3c08870SOoZ vpKFTc494N+LkdXbpfKITwEWmOMjkByJVeU6KUli6hJxzBHolOYyfFbp91I= -----END CERTIFICATE-----Generated at Mon Oct 20 15:39:50 2025 by rpki-client