$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa File: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (raw, json) Hash identifier: +7xBR4O+qJIkYE93szGJluPPfyJ98Ba9oSmufUzFW6Q= Subject key identifier: CD:3B:49:9A:12:F7:A5:DE:6E:3E:6C:41:85:8E:94:95:A5:DE:7D:F9 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 31D84267AEB49EF4C04D0865E3C0BC7F2D13E9DE Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa Signing time: Tue 23 Sep 2025 00:10:20 +0000 ROA not before: Tue 23 Sep 2025 00:10:20 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d8:42:67:ae:b4:9e:f4:c0:4d:08:65:e3:c0:bc:7f:2d:13:e9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Sep 23 00:10:20 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=64f9785eed98968cf613eb62f4d1863826036fb27eb77f6875fdeb08fccd4814, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bb:12:a9:1c:d5:d2:d9:57:d2:81:5f:a5:1e: 94:5a:bc:4d:37:cd:a2:92:7c:d2:2d:51:73:d1:88: 89:6d:f3:02:2b:76:c9:9e:26:45:12:74:d8:6b:a4: 75:b4:87:41:5f:97:b1:e6:a5:e5:5b:a4:7b:2f:f9: d9:ba:26:d3:14:a3:b1:64:0a:f9:60:70:8e:13:63: f7:de:87:4d:3b:11:a7:10:3d:8d:95:11:3c:85:3e: b9:3e:53:6f:62:53:d6:be:20:f9:c5:a8:33:2c:08: 37:3b:a3:56:47:d2:56:57:64:f2:e3:96:8c:87:07: 36:90:b2:5a:75:ab:8d:ad:d5:50:f2:c3:6c:c5:c8: 1c:b8:52:db:5f:1e:3e:94:b1:25:e3:98:75:0f:87: 42:33:d0:2d:d2:be:fa:55:b1:3d:89:26:ed:1c:d7: 65:a1:76:b2:33:73:07:b4:e4:48:aa:f6:4c:8d:24: f6:a6:ea:f8:ad:8c:d7:c7:be:a3:e1:07:5d:1e:0a: ba:22:6e:4c:a4:c6:8e:53:b4:fd:40:80:9a:1a:61: af:64:db:fe:91:a7:00:94:0b:71:68:5e:22:ee:b7: a7:14:2d:3c:cb:1f:f1:c7:f3:fc:fa:fb:ac:a3:71: d8:1b:5e:56:f1:3d:f8:73:87:ee:44:1a:86:ef:38: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3B:49:9A:12:F7:A5:DE:6E:3E:6C:41:85:8E:94:95:A5:DE:7D:F9 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.102.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:06:d7:b9:53:d3:53:9e:bf:04:47:a8:2f:93:86:70:05:f4: 52:5d:be:18:c3:f7:f3:db:46:ea:09:4d:34:5e:10:4a:c2:70: 6a:e2:16:5a:15:99:0a:ed:c5:3f:42:53:00:04:52:a3:68:33: 87:e9:29:ef:ae:ea:3d:b9:b0:88:6c:96:d3:37:a2:21:37:cf: c5:a3:13:28:5d:85:c7:55:2c:22:fa:0f:68:4c:d2:b2:d0:b2: 3e:a1:4f:83:af:63:4f:b5:56:9f:4f:22:e7:d7:f0:b3:07:0e: 8e:5d:c4:00:a9:b5:e4:a1:5c:9a:73:df:d6:ab:d6:7a:de:28: 2b:f9:ce:1b:0a:af:e8:72:d9:da:16:80:c7:33:52:2f:c4:a6: be:0f:c5:91:b9:b1:e9:64:01:ce:ca:1a:11:05:4b:45:c1:ea: e0:4f:da:39:ef:73:8e:69:8a:36:7e:73:00:0d:f2:8a:0c:65: 8e:4e:39:25:3a:af:4f:e6:6b:52:17:93:d9:8f:73:75:e6:40: 09:61:07:f0:09:61:3b:49:54:fb:43:be:95:5c:df:66:65:14: fe:fd:fa:4c:7d:17:c9:db:c5:87:65:ca:ad:9a:bc:83:ea:1a: 24:ec:ef:9a:ed:db:4b:4c:65:ae:ce:e3:5d:65:c6:73:4a:a2: 3e:74:2c:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMdhCZ660nvTATQhl48C8fy0T6d4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwOTIzMDAxMDIwWhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGY5Nzg1ZWVkOTg5NjhjZjYxM2ViNjJmNGQxODYzODI2 MDM2ZmIyN2ViNzdmNjg3NWZkZWIwOGZjY2Q0ODE0MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkuxKpHNXS2VfSgV+lHpRavE03zaKSfNItUXPRiIlt8wIr dsmeJkUSdNhrpHW0h0Ffl7HmpeVbpHsv+dm6JtMUo7FkCvlgcI4TY/feh007EacQ PY2VETyFPrk+U29iU9a+IPnFqDMsCDc7o1ZH0lZXZPLjloyHBzaQslp1q42t1VDy w2zFyBy4UttfHj6UsSXjmHUPh0Iz0C3SvvpVsT2JJu0c12WhdrIzcwe05Eiq9kyN JPam6vitjNfHvqPhB10eCroibkykxo5TtP1AgJoaYa9k2/6RpwCUC3FoXiLut6cU LTzLH/HH8/z6+6yjcdgbXlbxPfhzh+5EGobvOP9BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzTtJmhL3pd5uPmxBhY6UlaXeffkwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzg0ZmEyMzYwLWI5YzYtNDdiZC04NWRjLWJlMzdjZjUyMDVjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWYwDQYJKoZIhvcNAQELBQADggEBAG4G17lT01OevwRHqC+ThnAF9FJd vhjD9/PbRuoJTTReEErCcGriFloVmQrtxT9CUwAEUqNoM4fpKe+u6j25sIhsltM3 oiE3z8WjEyhdhcdVLCL6D2hM0rLQsj6hT4OvY0+1Vp9PIufX8LMHDo5dxACpteSh XJpz39ar1nreKCv5zhsKr+hy2doWgMczUi/Epr4PxZG5selkAc7KGhEFS0XB6uBP 2jnvc45pijZ+cwAN8ooMZY5OOSU6r0/ma1IXk9mPc3XmQAlhB/AJYTtJVPtDvpVc 32ZlFP79+kx9F8nbxYdlyq2avIPqGiTs75rt20tMZa7O411lxnNKoj50LLQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:17 2025 by rpki-client