$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cca699d1-563b-48b1-985c-27fc08308011.roa File: cca699d1-563b-48b1-985c-27fc08308011.roa (raw, json) Hash identifier: 6xGeFnm77weTRd9KNA0ExXeFdurtLK6Abzq0DhZNokA= Subject key identifier: 55:52:FA:43:23:FE:D2:0A:B4:1D:25:06:33:B9:68:08:ED:65:41:EA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6AD1A67C9A2DEBA66FF76C48472822DEFE0A770D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cca699d1-563b-48b1-985c-27fc08308011.roa Signing time: Sun 19 Oct 2025 21:03:05 +0000 ROA not before: Sun 19 Oct 2025 21:03:05 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d1:a6:7c:9a:2d:eb:a6:6f:f7:6c:48:47:28:22:de:fe:0a:77:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:03:05 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=084d1e5fec8c49a53ac3d8a6ed713178b8c4184a115357cc94dd0d0412cdd590, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:8e:04:4a:fe:62:7c:67:e5:31:92:c3:ac: 3b:43:24:f0:33:c6:1a:03:f5:72:b8:bc:d3:35:2c: ec:14:04:00:b3:52:5f:79:84:39:cd:44:7e:f6:5b: bd:af:8d:c1:07:8f:6e:95:52:d6:c9:a3:b5:64:7c: 63:0c:ff:f7:8d:ac:4c:ed:93:13:c1:a1:c5:8d:f5: f8:5c:c3:f6:72:dd:cf:27:d2:8c:2c:02:f6:a7:a7: 6a:62:7f:f0:28:2a:ce:9c:55:23:07:97:3e:a8:78: 11:8f:82:8b:34:54:61:30:5f:cd:f1:db:e6:cd:aa: 3f:85:b2:b2:aa:17:87:33:f4:77:b0:dd:4d:2f:dc: b1:04:05:52:62:81:f7:e5:2c:9c:95:2b:ec:1c:35: bf:cc:21:20:ff:cd:b8:6f:d5:a5:c6:61:36:e3:9d: f6:83:c9:59:d3:39:b2:4a:c4:2b:b1:32:d5:8d:fe: 2b:fd:60:b0:b2:c2:ca:86:4d:c5:38:2d:74:a3:ae: f8:53:72:d9:01:57:2a:7c:a6:7f:90:37:73:4d:e2: 78:d2:55:99:cc:1e:2c:9a:05:c5:9e:28:e7:df:68: 42:97:41:c6:d7:e8:2c:29:af:d0:78:87:24:da:88: 6b:ad:ee:71:0c:43:4c:93:52:79:68:8a:a8:e8:4d: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:52:FA:43:23:FE:D2:0A:B4:1D:25:06:33:B9:68:08:ED:65:41:EA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cca699d1-563b-48b1-985c-27fc08308011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.80.0/23 Signature Algorithm: sha256WithRSAEncryption 26:23:6e:2e:ef:83:87:bf:81:54:e7:ea:dd:91:64:82:02:72: 5d:dc:95:3f:ce:a7:f4:3c:86:67:eb:b3:f0:15:a4:19:00:6a: c1:fd:51:2a:8b:97:66:b5:b4:e0:e7:e0:44:29:ca:a6:89:0f: 0b:b9:96:31:8c:41:5a:41:54:b2:37:c4:7b:6e:0e:3a:b7:4f: 0f:82:27:54:ed:70:22:6d:32:d0:3a:9c:07:95:94:bc:57:27: 5b:7b:17:a3:d1:a6:b9:24:48:fe:4e:08:79:7f:c0:f8:19:2c: 82:ef:bc:70:6b:6f:7a:4e:b9:14:e3:00:57:d8:3b:bd:ae:56: e1:55:e1:ea:33:3e:ec:ce:e8:d0:6a:e8:ee:56:d3:97:4e:5f: c1:7b:bd:64:c8:7c:d3:b0:53:2e:66:4a:f5:b9:b2:06:99:78: 9c:5a:d0:f7:8f:78:d7:e1:3e:bf:ca:aa:8f:04:9d:b8:6a:39: c6:b1:27:10:b6:92:a9:af:8a:f8:70:52:49:bb:ca:78:c3:a7: a1:18:d1:a0:ae:40:a0:ce:cc:ab:a4:c8:65:53:f7:47:0a:5b: c4:98:7c:b4:07:65:96:12:4b:80:50:0d:dd:50:81:56:ae:4b: 80:61:6a:35:ee:c1:f3:43:a5:be:50:7d:82:c1:dc:f9:17:04: 82:0f:48:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUatGmfJot66Zv92xIRygi3v4Kdw0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjEwMzA1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODRkMWU1ZmVjOGM0OWE1M2FjM2Q4YTZlZDcxMzE3OGI4 YzQxODRhMTE1MzU3Y2M5NGRkMGQwNDEyY2RkNTkwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDBo4ESv5ifGflMZLDrDtDJPAzxhoD9XK4vNM1LOwUBACz Ul95hDnNRH72W72vjcEHj26VUtbJo7VkfGMM//eNrEztkxPBocWN9fhcw/Zy3c8n 0owsAvanp2pif/AoKs6cVSMHlz6oeBGPgos0VGEwX83x2+bNqj+FsrKqF4cz9Hew 3U0v3LEEBVJigfflLJyVK+wcNb/MISD/zbhv1aXGYTbjnfaDyVnTObJKxCuxMtWN /iv9YLCywsqGTcU4LXSjrvhTctkBVyp8pn+QN3NN4njSVZnMHiyaBcWeKOffaEKX QcbX6Cwpr9B4hyTaiGut7nEMQ0yTUnloiqjoTXCpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVVL6QyP+0gq0HSUGM7loCO1lQeowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NjYTY5OWQxLTU2M2ItNDhiMS05ODVjLTI3ZmMwODMwODAxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQlAwDQYJKoZIhvcNAQELBQADggEBACYjbi7vg4e/gVTn6t2RZIICcl3c lT/Op/Q8hmfrs/AVpBkAasH9USqLl2a1tODn4EQpyqaJDwu5ljGMQVpBVLI3xHtu Djq3Tw+CJ1TtcCJtMtA6nAeVlLxXJ1t7F6PRprkkSP5OCHl/wPgZLILvvHBrb3pO uRTjAFfYO72uVuFV4eozPuzO6NBq6O5W05dOX8F7vWTIfNOwUy5mSvW5sgaZeJxa 0PePeNfhPr/Kqo8EnbhqOcaxJxC2kqmvivhwUkm7ynjDp6EY0aCuQKDOzKukyGVT 90cKW8SYfLQHZZYSS4BQDd1QgVauS4BhajXuwfNDpb5QfYLB3PkXBIIPSHM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:20 2025 by rpki-client