$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc8b4909-55ef-4668-b310-bcef326d6ced.roa File: cc8b4909-55ef-4668-b310-bcef326d6ced.roa (raw, json) Hash identifier: XxAsjgLkdI905D2wq/+AauXXLteG+KQyxeXA25RoTyE= Subject key identifier: 6A:7D:51:EA:EF:FB:9F:21:6C:D7:2D:09:ED:22:26:AF:84:7C:65:4A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1CECC5DD15689FCE8C823EDFF3ED3845001362FF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc8b4909-55ef-4668-b310-bcef326d6ced.roa Signing time: Fri 17 Oct 2025 22:20:14 +0000 ROA not before: Fri 17 Oct 2025 22:20:14 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.244.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ec:c5:dd:15:68:9f:ce:8c:82:3e:df:f3:ed:38:45:00:13:62:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 22:20:14 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=6a228587c0f945cc1247d3aec4725a609203afd18be10847b0ff3ac4263e1f95, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c2:58:29:cd:52:7d:65:57:06:6d:a8:5e:00: 14:2f:43:b5:9c:3b:d0:51:b4:c2:72:a5:f2:5d:9e: b7:60:c3:a9:d1:1e:a9:ab:7d:8c:c5:cc:2c:fa:d6: c7:c9:19:e9:7f:d5:50:aa:7a:fe:19:d5:b6:22:b0: c6:7f:76:8e:48:53:c6:04:2b:5b:56:f7:65:cd:3e: e3:3c:37:4c:50:f0:b0:8b:0c:d6:6c:27:3e:bf:d6: ca:3f:43:2c:45:a9:b3:85:4e:42:12:d3:c7:d6:7b: 5e:29:72:f0:aa:e0:89:a7:50:a4:6f:58:bc:f8:bc: 34:ec:19:ce:c4:46:aa:e4:44:48:42:93:6b:2b:78: 84:2a:74:36:79:0d:99:26:0c:ea:4b:ff:ce:9a:e7: e3:2a:50:85:5d:50:0c:95:34:1f:50:34:a4:09:1a: dc:ff:f6:cd:d9:b4:05:92:7d:a9:9e:84:fb:97:66: af:60:ae:7f:26:0d:5a:86:82:02:33:51:7b:1a:30: d9:b5:44:f2:c7:c1:5a:13:e3:72:a1:0d:e1:45:ad: af:2a:ff:a1:22:0f:00:44:42:ef:15:93:6d:0b:a3: 9f:fd:fb:66:90:5a:c2:a8:7d:2d:fb:99:c9:fd:2a: a6:d9:5b:d7:8d:12:35:ee:fd:38:8f:79:fa:37:9d: ec:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7D:51:EA:EF:FB:9F:21:6C:D7:2D:09:ED:22:26:AF:84:7C:65:4A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc8b4909-55ef-4668-b310-bcef326d6ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.244.64.0/20 Signature Algorithm: sha256WithRSAEncryption 42:3c:51:74:b9:cf:38:76:3f:85:ec:10:f7:08:de:47:fd:d9: 5c:f2:aa:2a:ee:7a:f8:b3:69:6a:89:a0:93:79:5f:fb:07:4d: c7:05:74:ad:a9:d4:d1:41:9a:50:5b:2f:7d:bb:6d:79:54:3e: 5d:3a:c4:65:91:4b:99:f8:fe:46:87:96:9d:28:dd:e7:bd:71: 10:39:51:01:1f:0c:ae:fb:de:1e:87:9a:60:7d:2f:7e:6e:3b: 14:3a:fc:8c:f1:74:73:23:25:58:ce:9d:eb:53:da:34:4d:5a: 2d:96:29:87:1a:c5:bd:2a:81:60:b4:d7:5c:d3:52:c6:51:0a: 62:37:d9:79:3b:6a:0e:9a:eb:59:e2:b6:ca:50:0f:4c:ee:7f: 61:41:b0:76:23:96:c8:66:8b:d0:cb:fe:29:98:31:96:2c:17: 14:f1:da:2c:09:28:62:3f:ac:17:9f:d3:27:42:e1:78:63:80: 33:fe:cb:a1:b4:91:bc:73:d7:47:1e:f1:76:26:0f:bd:19:7f: af:04:94:97:3b:ff:61:86:aa:06:8f:fb:a7:65:c0:dd:23:1c: cf:a0:ba:b1:9d:d4:99:13:1c:34:71:24:72:6a:5f:cb:f7:a5: 35:4e:f5:09:24:c6:0c:09:25:fc:03:7f:f8:bd:76:6d:bb:2e: d2:cd:ff:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHOzF3RVon86Mgj7f8+04RQATYv8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjIyMDE0WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTIyODU4N2MwZjk0NWNjMTI0N2QzYWVjNDcyNWE2MDky MDNhZmQxOGJlMTA4NDdiMGZmM2FjNDI2M2UxZjk1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVwlgpzVJ9ZVcGbaheABQvQ7WcO9BRtMJypfJdnrdgw6nR HqmrfYzFzCz61sfJGel/1VCqev4Z1bYisMZ/do5IU8YEK1tW92XNPuM8N0xQ8LCL DNZsJz6/1so/QyxFqbOFTkIS08fWe14pcvCq4ImnUKRvWLz4vDTsGc7ERqrkREhC k2sreIQqdDZ5DZkmDOpL/86a5+MqUIVdUAyVNB9QNKQJGtz/9s3ZtAWSfamehPuX Zq9grn8mDVqGggIzUXsaMNm1RPLHwVoT43KhDeFFra8q/6EiDwBEQu8Vk20Lo5/9 +2aQWsKofS37mcn9KqbZW9eNEjXu/TiPefo3neznAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUan1R6u/7nyFs1y0J7SImr4R8ZUowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NjOGI0OTA5LTU1ZWYtNDY2OC1iMzEwLWJjZWYzMjZkNmNlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ29EAwDQYJKoZIhvcNAQELBQADggEBAEI8UXS5zzh2P4XsEPcI3kf92Vzy qiruevizaWqJoJN5X/sHTccFdK2p1NFBmlBbL327bXlUPl06xGWRS5n4/kaHlp0o 3ee9cRA5UQEfDK773h6HmmB9L35uOxQ6/IzxdHMjJVjOnetT2jRNWi2WKYcaxb0q gWC011zTUsZRCmI32Xk7ag6a61nitspQD0zuf2FBsHYjlshmi9DL/imYMZYsFxTx 2iwJKGI/rBef0ydC4XhjgDP+y6G0kbxz10ce8XYmD70Zf68ElJc7/2GGqgaP+6dl wN0jHM+gurGd1JkTHDRxJHJqX8v3pTVO9QkkxgwJJfwDf/i9dm27LtLN/+4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:01:09 2025 by rpki-client