$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa File: ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa (raw, json) Hash identifier: H8bTAowmc+tVgNPicPC0DxmkE4bmis48DIujAFFNmcI= Subject key identifier: EF:BD:37:C3:DF:06:D8:E2:01:05:39:DC:4E:02:20:D5:D4:1D:AE:72 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 389D7305E1F57CFD659DC01C413246A62BC20393 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa Signing time: Mon 26 Oct 2026 00:50:14 +0000 ROA not before: Mon 26 Oct 2026 00:50:14 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9d:73:05:e1:f5:7c:fd:65:9d:c0:1c:41:32:46:a6:2b:c2:03:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Oct 26 00:50:14 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=a7a6588381780089a924361a0f32ef8db9ec7af464c4429cb8c5b353085001ed, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c8:dc:54:95:b3:fb:ce:f4:b3:fa:a7:e1:13: 87:2d:31:df:89:c0:98:95:85:cd:00:41:3d:54:45: 3e:81:55:99:9d:d2:8c:c1:d8:19:22:21:7d:ea:e6: 1c:41:ae:48:9e:95:65:72:d3:4f:e8:28:67:b4:84: c9:8a:cd:8c:86:cf:e1:a4:aa:87:80:3d:46:f4:5b: 11:4d:d1:16:36:9d:85:3a:e3:f1:d4:2b:c6:11:68: 2c:f5:ea:8f:3a:52:af:9e:a5:9d:99:3b:45:b5:52: 89:a8:03:ef:69:55:19:d6:35:00:9e:d5:08:9a:53: 8f:e0:6e:68:11:c3:39:ac:12:16:7d:5f:74:8c:d4: 82:99:06:c3:d0:bd:c5:62:da:f4:35:3f:ed:af:50: ca:2d:ea:ca:bb:c5:42:5b:a9:9c:1f:c8:4e:c0:55: d4:9c:27:cc:e7:ec:18:c4:23:f0:a9:37:e5:28:87: 9a:a9:6f:3d:42:e3:1c:58:8d:79:9b:a2:bb:28:75: 4f:c7:c6:97:49:d3:c9:c2:d8:c7:36:98:59:07:78: e3:68:7e:30:fe:df:51:d3:69:8e:1f:9e:5f:e3:3e: 1e:9a:73:34:35:25:bb:8c:0f:59:c2:a1:0c:69:aa: f4:5e:f6:5e:00:fe:2c:b3:9c:36:41:c1:8d:e7:f9: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BD:37:C3:DF:06:D8:E2:01:05:39:DC:4E:02:20:D5:D4:1D:AE:72 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.64.0/18 Signature Algorithm: sha256WithRSAEncryption 64:90:f9:cd:23:63:b2:c5:fb:35:ab:19:f9:89:2b:33:cb:b0: 41:a1:5c:bc:d9:97:5a:13:eb:8b:3d:3d:81:ff:2c:20:ea:d6: 25:7e:91:4b:0f:37:60:ab:43:77:e0:d0:78:e3:58:d0:c5:10: ed:24:e7:55:c6:72:ba:22:90:27:e9:37:b0:e8:dc:91:6f:c8: ba:33:fe:b3:17:13:f8:d7:06:4c:5a:87:b9:be:65:ac:74:37: d9:26:59:a6:72:ce:0e:29:87:81:15:94:b8:c2:96:50:62:3d: 6f:3b:e4:3a:16:5c:9f:d8:8d:0c:96:e9:29:be:68:95:02:dc: 14:86:0e:65:4a:5e:fd:2f:f6:c1:f8:ef:c9:33:93:7b:95:5e: 9c:50:84:13:d5:fd:ad:fb:a5:58:0e:3a:47:6a:3f:bb:b8:f0: 0a:25:8a:52:c4:bc:11:d7:af:76:ef:74:45:b3:7d:ea:de:d1: 80:13:7e:3b:69:6c:97:a8:b1:ec:62:52:77:09:dc:a1:89:27: b4:14:a7:ad:ce:35:f4:c9:2b:32:97:ed:ff:d5:46:62:ab:58: 75:00:1b:2f:c8:f2:35:8f:f3:df:85:27:78:2a:3e:ae:2b:19: 91:ee:ac:59:98:8c:62:bf:c4:5a:6f:74:a6:56:15:6b:80:60: 05:f7:48:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOJ1zBeH1fP1lncAcQTJGpivCA5MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYxMDI2MDA1MDE0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2E2NTg4MzgxNzgwMDg5YTkyNDM2MWEwZjMyZWY4ZGI5 ZWM3YWY0NjRjNDQyOWNiOGM1YjM1MzA4NTAwMWVkMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcyNxUlbP7zvSz+qfhE4ctMd+JwJiVhc0AQT1URT6BVZmd 0ozB2BkiIX3q5hxBrkielWVy00/oKGe0hMmKzYyGz+GkqoeAPUb0WxFN0RY2nYU6 4/HUK8YRaCz16o86Uq+epZ2ZO0W1UomoA+9pVRnWNQCe1QiaU4/gbmgRwzmsEhZ9 X3SM1IKZBsPQvcVi2vQ1P+2vUMot6sq7xUJbqZwfyE7AVdScJ8zn7BjEI/CpN+Uo h5qpbz1C4xxYjXmborsodU/HxpdJ08nC2Mc2mFkHeONofjD+31HTaY4fnl/jPh6a czQ1JbuMD1nCoQxpqvRe9l4A/iyznDZBwY3n+SE9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7703w98G2OIBBTncTgIg1dQdrnIwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L2NjYWE4OGM3LTA1NGItNGNlMS05MmU4LTYyZGQ5NDE3MThlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZgf0AwDQYJKoZIhvcNAQELBQADggEBAGSQ+c0jY7LF+zWrGfmJKzPLsEGh XLzZl1oT64s9PYH/LCDq1iV+kUsPN2CrQ3fg0HjjWNDFEO0k51XGcroikCfpN7Do 3JFvyLoz/rMXE/jXBkxah7m+Zax0N9kmWaZyzg4ph4EVlLjCllBiPW875DoWXJ/Y jQyW6Sm+aJUC3BSGDmVKXv0v9sH478kzk3uVXpxQhBPV/a37pVgOOkdqP7u48Aol ilLEvBHXr3bvdEWzfere0YATfjtpbJeosexiUncJ3KGJJ7QUp63ONfTJKzKX7f/V RmKrWHUAGy/I8jWP89+FJ3gqPq4rGZHurFmYjGK/xFpvdKZWFWuAYAX3SKE= -----END CERTIFICATE-----Generated at Tue Nov 10 04:08:32 2026 by rpki-client