$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/82100f84-33b5-43a7-a078-7090448b8504.roa File: 82100f84-33b5-43a7-a078-7090448b8504.roa (raw, json) Hash identifier: zn2TA8P5peltm74NT+4quSR9db9MGNqAk/DhufZH0R4= Subject key identifier: E6:DB:F3:23:C3:96:A9:8B:3E:D0:00:1A:83:CB:C8:64:32:70:6F:EB Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 2B27855BECD9F91C3813F3E22C7DF44913FE740F Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/82100f84-33b5-43a7-a078-7090448b8504.roa Signing time: Tue 23 Sep 2025 00:10:18 +0000 ROA not before: Tue 23 Sep 2025 00:10:18 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:27:85:5b:ec:d9:f9:1c:38:13:f3:e2:2c:7d:f4:49:13:fe:74:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Sep 23 00:10:18 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=5b8eb47f3851df7b1b5c600a94c098e29bef72d64bbc3d82f6bc87b21fbf723e, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:e8:8e:a3:ec:b8:95:c2:d7:45:05:25:c7: 77:19:fb:b6:8f:05:34:3e:a5:dd:6e:92:2b:0f:2d: d2:be:ac:c6:2e:56:0a:bd:b0:e7:5e:c7:8d:c3:0f: b6:dd:23:53:4d:5b:d1:86:6a:c2:5c:8e:96:ab:37: 3c:b5:ed:e3:77:09:ca:c9:1b:94:61:b3:e9:fa:fc: 59:a7:0a:8e:f8:1c:20:47:ae:86:34:b4:f6:10:58: c4:2f:c0:24:8f:92:34:79:04:c5:33:41:c6:d0:b5: 7b:10:49:4e:11:fa:ae:12:5e:5a:88:b7:8b:0a:57: 1c:29:77:0d:9b:6a:6d:c5:e5:ab:df:1c:39:42:ef: e7:90:a3:6c:ad:2d:1c:0b:17:92:23:ad:78:79:8e: a6:e1:a3:52:de:c4:14:32:ca:54:79:cd:b8:93:e2: b3:e1:2f:fe:b6:bd:d7:9c:41:dc:f0:cd:88:a4:d6: 28:96:90:59:4f:f4:6b:5d:71:c8:60:0d:14:09:b7: d6:6d:75:b4:b5:4c:b4:52:2b:aa:94:d4:a3:c9:9d: cc:ca:c7:75:30:29:c7:a4:eb:52:e9:95:7c:c0:03: 1f:c7:c1:33:c1:54:89:12:a5:bf:88:9c:8d:27:f6: b4:a8:17:96:72:3a:79:5b:b6:d2:08:57:e6:d5:3b: a5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:F3:23:C3:96:A9:8B:3E:D0:00:1A:83:CB:C8:64:32:70:6F:EB X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/82100f84-33b5-43a7-a078-7090448b8504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:4c:4d:5a:84:e5:66:03:61:1a:d9:0c:8e:95:9e:74:54:ea: 98:58:36:ff:2b:d5:c4:19:53:cd:0f:fe:f1:96:e2:6f:4b:5a: d4:c8:66:dc:ce:df:e0:6d:e3:f8:3a:67:cb:5f:fa:aa:e1:55: 08:ea:85:a2:c5:c5:2d:93:df:48:7b:ef:78:69:53:21:51:26: ea:5a:d8:64:3e:cf:c9:ee:03:f5:2a:b9:e1:04:77:38:f7:dc: 1d:41:4f:d0:b3:0e:f9:23:2e:8f:72:69:e7:42:c4:f7:57:08: 67:1b:0a:08:21:62:14:1f:ef:08:5a:20:f2:e3:bc:58:fb:97: e2:9a:76:55:7a:43:c1:15:05:ce:63:78:24:02:ee:9d:67:79: a3:16:dc:d5:a9:37:bb:c6:3d:98:42:bc:b6:95:99:fe:ac:63: e8:0f:14:97:fa:43:2b:e3:d6:8d:8c:74:8f:89:52:50:2f:9b: 7e:0a:f4:2e:3c:94:1b:6e:59:8f:e8:01:14:cd:a5:1d:ea:b5: 40:48:dd:fa:68:9d:51:42:ec:ff:84:4c:8f:21:2c:37:17:60: 50:07:0b:89:30:b8:e0:0d:ac:c4:95:59:c7:3d:c6:ad:26:e1: 14:d4:1a:b2:45:be:22:d5:6c:81:8b:c8:9d:f6:56:93:7b:8b: 7d:91:b0:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKyeFW+zZ+Rw4E/PiLH30SRP+dA8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwOTIzMDAxMDE4WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjhlYjQ3ZjM4NTFkZjdiMWI1YzYwMGE5NGMwOThlMjli ZWY3MmQ2NGJiYzNkODJmNmJjODdiMjFmYmY3MjNlMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz3eiOo+y4lcLXRQUlx3cZ+7aPBTQ+pd1ukisPLdK+rMYu Vgq9sOdex43DD7bdI1NNW9GGasJcjparNzy17eN3CcrJG5Rhs+n6/FmnCo74HCBH roY0tPYQWMQvwCSPkjR5BMUzQcbQtXsQSU4R+q4SXlqIt4sKVxwpdw2bam3F5avf HDlC7+eQo2ytLRwLF5IjrXh5jqbho1LexBQyylR5zbiT4rPhL/62vdecQdzwzYik 1iiWkFlP9GtdcchgDRQJt9ZtdbS1TLRSK6qU1KPJnczKx3UwKcek61LplXzAAx/H wTPBVIkSpb+InI0n9rSoF5ZyOnlbttIIV+bVO6WZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5tvzI8OWqYs+0AAag8vIZDJwb+swHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzgyMTAwZjg0LTMzYjUtNDNhNy1hMDc4LTcwOTA0NDhiODUwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWAwDQYJKoZIhvcNAQELBQADggEBAJxMTVqE5WYDYRrZDI6VnnRU6phY Nv8r1cQZU80P/vGW4m9LWtTIZtzO3+Bt4/g6Z8tf+qrhVQjqhaLFxS2T30h773hp UyFRJupa2GQ+z8nuA/UqueEEdzj33B1BT9CzDvkjLo9yaedCxPdXCGcbCgghYhQf 7whaIPLjvFj7l+KadlV6Q8EVBc5jeCQC7p1neaMW3NWpN7vGPZhCvLaVmf6sY+gP FJf6Qyvj1o2MdI+JUlAvm34K9C48lBtuWY/oARTNpR3qtUBI3fponVFC7P+ETI8h LDcXYFAHC4kwuOANrMSVWcc9xq0m4RTUGrJFviLVbIGLyJ32VpN7i32RsLI= -----END CERTIFICATE-----Generated at Thu Oct 9 01:25:08 2025 by rpki-client