$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc66cd94-30dc-4bdb-9a6d-eb6d5c6666a7.roa File: cc66cd94-30dc-4bdb-9a6d-eb6d5c6666a7.roa (raw, json) Hash identifier: i7Oe/mJsDbAYxBnyAU3AoFU7p6UZd1QLcO0U6XgxoEw= Subject key identifier: 8D:D2:B4:6C:DA:3E:38:33:EF:99:DA:DA:72:3E:C2:9C:46:0E:A4:A7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53BB57C4F890952330DDE34C8465D7C973F7234B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc66cd94-30dc-4bdb-9a6d-eb6d5c6666a7.roa Signing time: Sat 18 Oct 2025 19:40:12 +0000 ROA not before: Sat 18 Oct 2025 19:40:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:bb:57:c4:f8:90:95:23:30:dd:e3:4c:84:65:d7:c9:73:f7:23:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:40:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=dd65fe22001ce0898617b7eb2ea299537c731c882917d1a670b83b2df93d9505, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:ab:94:83:fc:2d:16:3a:53:70:bc:c2:e1: 9c:87:99:91:fe:a3:a9:56:02:58:29:5d:97:a0:a8: c0:90:44:67:0e:70:a3:71:07:ca:9a:4c:87:65:57: b7:8c:a8:06:1d:fe:2e:51:df:83:a9:9c:fb:13:8f: 9c:e8:4e:12:40:d1:0d:4e:c8:0c:26:22:94:91:56: 7f:9a:2c:bd:ac:de:46:31:9c:41:15:29:b6:25:5c: 82:e0:de:45:90:4f:8f:85:cd:e4:c5:35:4c:08:d4: 67:ed:82:fa:88:9a:2a:9e:37:12:3d:0f:52:7d:66: f6:95:bf:e9:18:98:68:25:2f:76:60:62:88:48:34: 8f:61:ba:49:fe:7f:fe:50:58:44:ae:fe:af:02:1a: db:53:ff:c4:1e:03:8f:7f:db:4b:bf:bf:c8:b6:ba: f9:75:7a:1d:8b:c3:79:70:82:2c:b4:73:93:e4:78: 43:ad:26:8e:10:b5:ba:41:f7:c4:8e:ae:69:11:00: 5e:b8:5b:9d:44:ba:d4:e3:b6:04:12:6d:d7:0f:c7: b7:11:52:3c:59:15:34:9c:ba:45:39:22:9c:35:b5: e0:d1:6e:be:58:5f:14:10:a7:59:43:25:9c:d3:36: 6a:d2:ca:e9:4e:c9:cd:55:23:40:05:f3:e7:af:ef: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D2:B4:6C:DA:3E:38:33:EF:99:DA:DA:72:3E:C2:9C:46:0E:A4:A7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc66cd94-30dc-4bdb-9a6d-eb6d5c6666a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.191.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:27:08:2c:d7:15:22:06:e6:3e:f1:03:50:e4:db:fd:d4:b1: 47:9f:27:cf:e7:df:f4:1a:fa:1b:ba:a4:fc:bf:10:1e:fd:a6: 95:4d:4f:27:99:13:cb:e6:9a:a5:3e:70:1d:d4:8c:d7:d6:ef: 8d:90:54:c9:53:92:5a:e6:63:cc:4f:73:01:c8:7a:89:93:51: 2b:8c:cb:19:39:fe:39:93:2b:2b:95:0e:ec:37:39:0f:6d:f3: a2:fe:b7:65:4a:51:8b:c9:a5:15:5c:d6:38:90:d5:61:fc:65: 34:b1:be:b4:19:3d:a3:7b:70:56:bf:29:82:c9:7d:cf:ff:f0: d0:a4:d1:79:73:c6:38:e1:bd:20:80:e2:49:0b:5c:f7:c6:a5: 23:d6:a9:27:bc:6a:5e:88:f6:40:69:2f:70:1c:ed:28:09:dc: 43:b1:d5:40:18:ef:01:d3:01:50:21:a8:9d:58:20:a7:99:bc: 0a:8c:d4:12:f6:75:d7:ce:ca:be:c6:9a:04:14:4c:dc:b1:b6: c3:03:8e:fd:01:6d:b0:41:d0:16:83:b5:d2:f2:b9:22:c0:bf: 48:b5:0d:7d:81:b2:88:9c:04:37:ad:c2:2f:96:22:73:97:2e: bd:04:94:91:82:8c:95:12:b8:48:d8:ba:0c:79:ee:1b:be:93: 77:2f:2f:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU7tXxPiQlSMw3eNMhGXXyXP3I0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTk0MDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDY1ZmUyMjAwMWNlMDg5ODYxN2I3ZWIyZWEyOTk1Mzdj NzMxYzg4MjkxN2QxYTY3MGI4M2IyZGY5M2Q5NTA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA36uUg/wtFjpTcLzC4ZyHmZH+o6lWAlgpXZegqMCQRGcO cKNxB8qaTIdlV7eMqAYd/i5R34OpnPsTj5zoThJA0Q1OyAwmIpSRVn+aLL2s3kYx nEEVKbYlXILg3kWQT4+FzeTFNUwI1GftgvqImiqeNxI9D1J9ZvaVv+kYmGglL3Zg YohINI9hukn+f/5QWESu/q8CGttT/8QeA49/20u/v8i2uvl1eh2Lw3lwgiy0c5Pk eEOtJo4QtbpB98SOrmkRAF64W51EutTjtgQSbdcPx7cRUjxZFTScukU5Ipw1teDR br5YXxQQp1lDJZzTNmrSyulOyc1VI0AF8+ev788jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjdK0bNo+ODPvmdracj7CnEYOpKcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NjNjZjZDk0LTMwZGMtNGJkYi05YTZkLWViNmQ1YzY2NjZhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASob8wDQYJKoZIhvcNAQELBQADggEBAH4nCCzXFSIG5j7xA1Dk2/3UsUef J8/n3/Qa+hu6pPy/EB79ppVNTyeZE8vmmqU+cB3UjNfW742QVMlTklrmY8xPcwHI eomTUSuMyxk5/jmTKyuVDuw3OQ9t86L+t2VKUYvJpRVc1jiQ1WH8ZTSxvrQZPaN7 cFa/KYLJfc//8NCk0XlzxjjhvSCA4kkLXPfGpSPWqSe8al6I9kBpL3Ac7SgJ3EOx 1UAY7wHTAVAhqJ1YIKeZvAqM1BL2ddfOyr7GmgQUTNyxtsMDjv0BbbBB0BaDtdLy uSLAv0i1DX2BsoicBDetwi+WInOXLr0ElJGCjJUSuEjYugx57hu+k3cvL8M= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:45 2025 by rpki-client