$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cceb8402-d609-4cd2-bc11-e1c2bc4992de.roa File: cceb8402-d609-4cd2-bc11-e1c2bc4992de.roa (raw, json) Hash identifier: xHfX5zlFUFbvc+Em4qbTTRA+ykoKK9QhblGG/uKBMDQ= Subject key identifier: 3C:08:9E:D2:9A:1F:B2:50:6E:4A:2A:DB:C1:61:4F:76:DB:4B:BC:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 66A29958B2365FFA585CEA1155BEA0E0025755AF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cceb8402-d609-4cd2-bc11-e1c2bc4992de.roa Signing time: Sat 18 Oct 2025 23:43:22 +0000 ROA not before: Sat 18 Oct 2025 23:43:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a2:99:58:b2:36:5f:fa:58:5c:ea:11:55:be:a0:e0:02:57:55:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:43:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3f346a5f11151dfa72ae28eccbe00a7d6dc802c68f367cd0d4738fc78398c2e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:ed:68:89:93:29:88:f1:a5:16:47:27:2b: 52:cd:7d:65:da:a3:13:a9:1f:bb:dd:0e:c2:1f:c1: 58:64:dc:a9:9e:c1:3b:9a:b0:b5:e1:c0:be:bd:4c: ea:76:ad:34:19:92:ae:f2:ed:8d:97:0f:08:bb:e3: 3a:1e:4d:49:83:72:3e:da:7b:e3:03:a4:c4:46:e7: 37:1f:0e:a4:d9:9e:eb:53:ba:aa:fa:0a:91:16:6e: 0f:f7:71:37:2d:9a:86:b2:80:6c:15:86:82:c3:bb: 45:44:61:5c:9b:a9:cd:50:bd:c1:3b:eb:ac:d6:72: f8:b0:7d:4d:e3:ba:33:99:bb:5d:9e:52:56:22:d0: 2d:c0:6e:df:61:bb:11:1d:e1:ef:d1:98:de:f3:af: 26:6f:30:e4:24:0b:91:16:99:c1:fb:7c:63:67:f6: 48:c2:c8:07:77:eb:b3:d1:40:22:7f:9c:4b:ce:15: 52:71:b3:c1:10:bf:81:06:ad:8a:90:86:6c:58:07: 69:97:8b:5a:d6:05:86:e3:61:8a:98:f4:ef:58:f3: 34:6c:15:19:cd:df:a2:04:62:7f:92:43:5d:cc:46: a5:d0:41:25:fd:b2:d8:15:22:ed:dc:ec:8f:bb:5b: 59:cd:f9:f4:8a:23:b5:8a:51:b4:d4:07:e7:12:31: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:9E:D2:9A:1F:B2:50:6E:4A:2A:DB:C1:61:4F:76:DB:4B:BC:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cceb8402-d609-4cd2-bc11-e1c2bc4992de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.104.0/22 Signature Algorithm: sha256WithRSAEncryption 86:56:28:18:49:38:4a:76:3a:ae:94:b5:21:9a:25:70:0b:4a: ab:6b:9b:75:91:4c:ae:1e:ad:c1:f4:15:65:06:0d:70:66:30: cd:d8:bb:78:4e:fb:a7:bb:d7:3c:5b:c7:f5:10:53:77:63:4e: 61:d2:5b:9f:1a:f5:2c:8d:dc:07:85:62:3e:b5:52:0e:0e:2f: 43:0e:a0:c6:bd:0c:c5:3e:34:2d:fd:82:b0:21:77:27:ba:05: 0c:eb:80:f1:a2:2b:e1:37:2b:b8:51:ba:2a:b0:ff:1b:f0:82: 22:bc:fe:44:94:a3:94:f6:37:2c:04:29:01:08:4a:f6:48:75: e5:70:01:71:2d:14:fc:2c:f8:d8:46:0b:54:45:d9:fd:da:56: 72:cd:b5:f5:8d:85:9b:d5:fd:61:4e:54:e0:b2:82:1f:d0:33: 22:cb:ea:a3:14:f6:b8:79:a8:27:92:22:ac:5c:d1:cd:5c:81: e5:66:ec:6b:04:ae:f9:b3:17:62:8d:b8:46:74:11:a3:cd:64: 39:c4:b8:9d:e3:28:d0:12:65:16:b7:02:1a:96:9e:56:44:39: 39:ab:8a:5e:f7:4c:c3:07:cc:e0:38:91:0b:17:72:e5:62:44: a9:45:c6:ed:71:92:51:e0:cc:ec:e8:b4:1c:fc:4d:cc:ee:7e: 56:d4:9e:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZqKZWLI2X/pYXOoRVb6g4AJXVa8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjM0MzIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjM0NmE1ZjExMTUxZGZhNzJhZTI4ZWNjYmUwMGE3ZDZk YzgwMmM2OGYzNjdjZDBkNDczOGZjNzgzOThjMmU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC62e1oiZMpiPGlFkcnK1LNfWXaoxOpH7vdDsIfwVhk3Kme wTuasLXhwL69TOp2rTQZkq7y7Y2XDwi74zoeTUmDcj7ae+MDpMRG5zcfDqTZnutT uqr6CpEWbg/3cTctmoaygGwVhoLDu0VEYVybqc1QvcE766zWcviwfU3jujOZu12e UlYi0C3Abt9huxEd4e/RmN7zryZvMOQkC5EWmcH7fGNn9kjCyAd367PRQCJ/nEvO FVJxs8EQv4EGrYqQhmxYB2mXi1rWBYbjYYqY9O9Y8zRsFRnN36IEYn+SQ13MRqXQ QSX9stgVIu3c7I+7W1nN+fSKI7WKUbTUB+cSMfgDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPAie0pofslBuSirbwWFPdttLvOswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NjZWI4NDAyLWQ2MDktNGNkMi1iYzExLWUxYzJiYzQ5OTJkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISoWgwDQYJKoZIhvcNAQELBQADggEBAIZWKBhJOEp2Oq6UtSGaJXALSqtr m3WRTK4ercH0FWUGDXBmMM3Yu3hO+6e71zxbx/UQU3djTmHSW58a9SyN3AeFYj61 Ug4OL0MOoMa9DMU+NC39grAhdye6BQzrgPGiK+E3K7hRuiqw/xvwgiK8/kSUo5T2 NywEKQEISvZIdeVwAXEtFPws+NhGC1RF2f3aVnLNtfWNhZvV/WFOVOCygh/QMyLL 6qMU9rh5qCeSIqxc0c1cgeVm7GsErvmzF2KNuEZ0EaPNZDnEuJ3jKNASZRa3AhqW nlZEOTmril73TMMHzOA4kQsXcuViRKlFxu1xklHgzOzotBz8TczuflbUnmE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:14 2025 by rpki-client