$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa File: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (raw, json) Hash identifier: xYDdRlj7P1GADs3FgAZguZSdRbdKlLRMYrUQAprr9RA= Subject key identifier: 80:FA:68:B2:C5:7D:68:D2:00:E1:B5:2F:88:E7:FB:30:00:CF:6E:38 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 6B676891C07AD49A585C500E437EF5D49153274E Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa Signing time: Tue 23 Sep 2025 00:10:17 +0000 ROA not before: Tue 23 Sep 2025 00:10:17 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:67:68:91:c0:7a:d4:9a:58:5c:50:0e:43:7e:f5:d4:91:53:27:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Sep 23 00:10:17 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=b138b52cf868d5d97ebde988581a4221b3da0935b1cfba6d1305ed40a6531bfd, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d8:f6:fc:df:46:9a:3f:29:a0:d7:2a:e4:18: 7f:5a:13:20:ba:05:aa:2e:a3:a2:79:95:13:af:5b: 43:c2:b9:14:8d:73:60:3e:84:7b:55:11:06:d9:a2: 72:cb:8c:4c:9e:0d:01:31:33:da:69:0b:5f:e8:24: 1f:c5:30:3f:c2:5c:17:7e:95:7f:39:19:9d:14:aa: 24:9e:ef:6f:f8:e8:e8:ca:6c:b9:41:82:be:e4:eb: 1c:2f:9a:44:ff:2c:f1:d5:14:24:7f:a2:61:d4:b9: b1:db:75:a8:0f:07:5f:1b:b7:17:8d:08:d4:41:0e: c1:9d:f0:0d:7c:03:f2:34:53:53:a8:c1:3b:04:53: 61:02:2d:bf:5b:37:84:92:4d:c2:cc:3c:43:24:6f: 6b:99:dd:bd:7f:17:aa:94:91:59:da:8f:98:24:02: d6:eb:a8:15:81:d3:40:54:9f:1c:1d:88:46:61:c5: 33:1e:f2:fd:32:9d:28:2d:e3:d0:4c:bc:f3:64:cb: 4f:13:ca:92:7e:50:f9:92:c3:d0:db:52:f1:67:9d: 38:d2:ab:da:09:63:3c:99:75:9c:13:32:29:7a:72: b3:05:ae:19:e6:5a:d3:ae:1d:b5:0e:45:11:8b:d1: fc:3c:a6:2a:da:2a:24:52:30:1a:58:88:2e:b7:a0: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FA:68:B2:C5:7D:68:D2:00:E1:B5:2F:88:E7:FB:30:00:CF:6E:38 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/24 Signature Algorithm: sha256WithRSAEncryption 17:d0:6a:e2:a9:27:ac:ca:5b:f9:82:0b:30:13:54:f1:f4:12: 3f:68:a7:4e:97:67:14:a0:46:8f:8d:29:ae:6d:41:26:30:05: f5:f1:75:e4:db:47:16:4a:5c:40:35:3f:58:11:c7:2c:73:6d: c0:99:63:e2:24:ff:42:94:e8:bb:ac:9e:f8:69:75:59:03:e8: d5:50:e2:37:51:ba:06:d3:26:9d:71:0a:40:b9:9b:c3:7f:80: 23:13:fb:58:ac:90:37:9a:2a:c5:94:8c:1e:d2:41:1d:55:6b: 9a:dc:f0:df:51:6f:9e:28:34:5c:81:82:6d:4f:82:c7:fd:64: d4:a5:af:10:80:fb:be:f6:f7:06:66:b7:26:54:d2:f8:b3:c8: 33:78:d5:dc:2c:ac:0f:11:91:d6:32:22:93:6d:5d:a1:88:70: d4:de:05:f5:8c:60:9f:6d:59:ff:4f:83:5c:5f:92:f8:4d:7b: 6b:25:83:ce:c5:87:7a:ba:b5:c5:09:e0:b8:83:29:64:33:aa: eb:bc:bd:38:61:13:ae:a2:bd:d7:97:58:11:ea:60:4b:40:39: 51:24:de:29:ad:59:50:a2:b1:92:bb:1d:53:50:a2:34:d9:4c: 81:a8:64:46:7f:91:3c:16:59:8b:1a:44:7e:4f:25:f3:07:71: 46:cb:5c:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa2dokcB61JpYXFAOQ3711JFTJ04wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwOTIzMDAxMDE3WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTM4YjUyY2Y4NjhkNWQ5N2ViZGU5ODg1ODFhNDIyMWIz ZGEwOTM1YjFjZmJhNmQxMzA1ZWQ0MGE2NTMxYmZkMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf2Pb830aaPymg1yrkGH9aEyC6Baouo6J5lROvW0PCuRSN c2A+hHtVEQbZonLLjEyeDQExM9ppC1/oJB/FMD/CXBd+lX85GZ0UqiSe72/46OjK bLlBgr7k6xwvmkT/LPHVFCR/omHUubHbdagPB18btxeNCNRBDsGd8A18A/I0U1Oo wTsEU2ECLb9bN4SSTcLMPEMkb2uZ3b1/F6qUkVnaj5gkAtbrqBWB00BUnxwdiEZh xTMe8v0ynSgt49BMvPNky08TypJ+UPmSw9DbUvFnnTjSq9oJYzyZdZwTMil6crMF rhnmWtOuHbUORRGL0fw8piraKiRSMBpYiC63oPXXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgPpossV9aNIA4bUviOf7MADPbjgwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2IxOWU1OTc1LTFlOTktNDIyNC04Mjg4LWVkM2FmYjRmYzcwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWAwDQYJKoZIhvcNAQELBQADggEBABfQauKpJ6zKW/mCCzATVPH0Ej9o p06XZxSgRo+NKa5tQSYwBfXxdeTbRxZKXEA1P1gRxyxzbcCZY+Ik/0KU6Lusnvhp dVkD6NVQ4jdRugbTJp1xCkC5m8N/gCMT+1iskDeaKsWUjB7SQR1Va5rc8N9Rb54o NFyBgm1Pgsf9ZNSlrxCA+7729wZmtyZU0vizyDN41dwsrA8RkdYyIpNtXaGIcNTe BfWMYJ9tWf9Pg1xfkvhNe2slg87Fh3q6tcUJ4LiDKWQzquu8vThhE66ivdeXWBHq YEtAOVEk3imtWVCisZK7HVNQojTZTIGoZEZ/kTwWWYsaRH5PJfMHcUbLXIY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:34 2025 by rpki-client