$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/0f37c389-361f-4ed6-87b6-8ed5715101d0.roa File: 0f37c389-361f-4ed6-87b6-8ed5715101d0.roa (raw, json) Hash identifier: 3JUxKiZX+03PqHR2wMl7NUNabuVZN02zK7n6mbXslrc= Subject key identifier: 50:33:FB:D9:03:FD:F6:50:72:D8:EF:CA:58:CB:66:48:FF:F0:3A:7E Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 79D8B8B17155F7EFAE7E612A5B8D39E7BE33789B Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/0f37c389-361f-4ed6-87b6-8ed5715101d0.roa Signing time: Wed 01 Apr 2026 18:36:52 +0000 ROA not before: Wed 01 Apr 2026 18:36:52 +0000 ROA not after: Tue 30 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 64.27.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d8:b8:b1:71:55:f7:ef:ae:7e:61:2a:5b:8d:39:e7:be:33:78:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Apr 1 18:36:52 2026 GMT Not After : Jun 30 23:59:59 2026 GMT Subject: serialNumber=b84a058987c9a09df8ae699f29fe592654b0a1836a9723db3a96ca44c38a293f, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:22:cb:92:12:25:ea:6c:46:be:b5:f7:ac: 08:79:4a:d9:ae:6e:96:de:cb:6a:f0:74:e2:b4:c3: 47:3e:0b:82:ad:bb:68:0e:69:4a:aa:cc:8f:5b:c9: dc:77:d3:c8:f3:97:46:89:b0:0e:1b:be:be:58:66: b2:64:63:65:c2:61:52:8f:57:7c:21:1f:5b:00:d7: 28:99:09:52:6c:52:cd:9a:8e:37:11:92:d9:11:00: c9:bc:71:56:04:a1:f3:db:d6:50:3e:27:15:24:1e: d7:a5:e6:6f:0e:0f:41:4c:60:c9:44:57:3f:14:4a: ce:40:db:fd:fb:f3:19:ac:2a:0f:2f:f0:5c:53:72: 6a:13:6e:f9:82:10:d3:f4:87:96:76:e4:f4:22:c0: a2:fe:fa:c8:e9:7a:7d:8f:c6:36:75:91:42:f5:6a: 85:9d:f4:66:0d:b7:b2:3a:63:f9:25:03:ef:7f:51: 1a:84:01:0d:ee:44:a2:5f:8a:cb:d3:3b:a0:0a:67: c9:be:81:c6:4d:76:f3:d5:d8:85:89:59:0e:ec:09: 6e:32:c2:da:eb:f2:ff:41:4c:46:5a:d2:bd:59:ee: ad:17:43:82:67:7d:df:3e:05:c5:25:92:f2:2e:4c: 42:51:c5:aa:dc:60:af:76:21:6e:cb:c5:93:e0:ef: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:33:FB:D9:03:FD:F6:50:72:D8:EF:CA:58:CB:66:48:FF:F0:3A:7E X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/0f37c389-361f-4ed6-87b6-8ed5715101d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.27.0.0/19 Signature Algorithm: sha256WithRSAEncryption bd:7a:45:75:dd:57:10:bf:c1:06:b3:0f:0b:ad:8b:b8:de:7c: 92:d5:24:c2:6b:fe:57:fc:a8:53:8f:e3:b4:52:58:69:c1:45: 8c:5e:b4:5a:96:4d:c8:19:0c:cb:e8:44:7a:4b:e4:4f:6e:5a: 7e:59:88:15:dd:4d:9f:f0:4c:32:b4:89:58:ad:27:f2:44:1d: 6d:ea:ba:b5:fc:0b:6d:2c:0f:fc:5b:23:47:66:1d:aa:df:70: 83:d5:fd:90:5a:a1:be:7a:01:bd:66:04:9b:96:98:e3:38:bb: 49:f7:9d:ee:31:88:19:3e:6d:fd:29:68:8e:bd:c7:ad:e5:9e: ec:57:48:b0:c4:a1:08:8d:c3:ac:d4:54:c6:6b:09:ee:c3:b5: 94:f9:e7:08:4b:c7:7c:ee:bf:b9:76:7e:a1:59:1f:ce:e5:d4: e8:31:99:40:63:09:c3:81:6a:2a:9e:c9:bc:94:96:6b:6a:65: 8e:b3:f1:17:94:7a:9a:5f:89:09:4a:d7:8e:03:76:e3:c6:79: c4:4d:3f:c3:e5:4a:1f:e9:93:aa:09:68:3d:84:76:88:34:1b: 3d:41:ce:e6:f4:1c:32:9d:86:55:88:58:05:ce:b5:bf:83:d5: 13:2f:7e:cb:7d:f0:d4:f5:37:f8:73:9a:50:dc:fd:30:3d:fe: dc:d2:52:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUedi4sXFV9++ufmEqW405574zeJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwNDAxMTgzNjUyWhcNMjYwNjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiODRhMDU4OTg3YzlhMDlkZjhhZTY5OWYyOWZlNTkyNjU0 YjBhMTgzNmE5NzIzZGIzYTk2Y2E0NGMzOGEyOTNmMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkPSLLkhIl6mxGvrX3rAh5Stmubpbey2rwdOK0w0c+C4Kt u2gOaUqqzI9bydx308jzl0aJsA4bvr5YZrJkY2XCYVKPV3whH1sA1yiZCVJsUs2a jjcRktkRAMm8cVYEofPb1lA+JxUkHtel5m8OD0FMYMlEVz8USs5A2/378xmsKg8v 8FxTcmoTbvmCENP0h5Z25PQiwKL++sjpen2PxjZ1kUL1aoWd9GYNt7I6Y/klA+9/ URqEAQ3uRKJfisvTO6AKZ8m+gcZNdvPV2IWJWQ7sCW4ywtrr8v9BTEZa0r1Z7q0X Q4Jnfd8+BcUlkvIuTEJRxarcYK92IW7LxZPg77tRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUDP72QP99lBy2O/KWMtmSP/wOn4wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzBmMzdjMzg5LTM2MWYtNGVkNi04N2I2LThlZDU3MTUxMDFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAGwAwDQYJKoZIhvcNAQELBQADggEBAL16RXXdVxC/wQazDwuti7jefJLV JMJr/lf8qFOP47RSWGnBRYxetFqWTcgZDMvoRHpL5E9uWn5ZiBXdTZ/wTDK0iVit J/JEHW3qurX8C20sD/xbI0dmHarfcIPV/ZBaob56Ab1mBJuWmOM4u0n3ne4xiBk+ bf0paI69x63lnuxXSLDEoQiNw6zUVMZrCe7DtZT55whLx3zuv7l2fqFZH87l1Ogx mUBjCcOBaiqeybyUlmtqZY6z8ReUeppfiQlK144DduPGecRNP8PlSh/pk6oJaD2E dog0Gz1Bzub0HDKdhlWIWAXOtb+D1RMvfst98NT1N/hzmlDc/TA9/tzSUus= -----END CERTIFICATE-----Generated at Tue Apr 7 10:31:11 2026 by rpki-client