$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/ca3490d0-1e9e-400b-af5e-b8236be17139.roa File: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (raw, json) Hash identifier: ikIm4DbZ412foM2HZXV08cC4udjJ498t1B4ANGaa3UM= Subject key identifier: 85:37:6D:5A:00:A7:B1:91:D6:3D:A0:E2:CE:FC:BB:86:68:60:7A:B9 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 2310366C1FD9ECF9B7D24B94ED723A7A75269C9A Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/ca3490d0-1e9e-400b-af5e-b8236be17139.roa Signing time: Tue 23 Sep 2025 00:10:07 +0000 ROA not before: Tue 23 Sep 2025 00:10:07 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:10:36:6c:1f:d9:ec:f9:b7:d2:4b:94:ed:72:3a:7a:75:26:9c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Sep 23 00:10:07 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=e30651dcb08827051b19d17ed7f25e5a5104e4ec9ad91544dddce61c57c0b5cd, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:25:ba:e6:6e:80:37:21:11:c8:2b:96:eb: 44:08:c4:2e:95:0b:12:3c:47:5f:33:75:81:8c:4c: d6:e9:15:ed:31:29:af:be:71:8f:d6:c0:18:f0:0c: 03:ed:05:a8:e1:14:16:ce:72:6c:d3:20:19:58:77: 32:36:72:fd:3e:9c:02:5c:f8:b5:df:34:51:3c:f1: c6:f2:b2:d9:e8:a9:18:52:c1:ce:d7:2b:f3:f5:d8: 02:17:17:93:bb:5a:70:a0:ce:15:ea:ad:d9:40:b7: 32:f5:76:39:1c:b0:44:f4:83:da:20:25:76:3f:95: 31:47:49:a8:3f:22:18:ea:c3:fa:e4:cc:62:ad:50: ef:73:09:2b:e1:8f:3b:d8:d8:fa:e3:40:5b:30:91: d3:5d:33:67:d0:49:08:53:32:3f:7f:57:d9:1a:ab: 6b:8b:b5:ab:01:55:57:bb:e3:e0:ec:8e:a3:5f:df: 15:cd:7e:c9:a4:7e:f5:91:37:42:a7:5f:ed:20:ea: 3c:12:e7:40:d9:c4:aa:fb:6c:13:a8:ae:26:d8:c9: b5:04:c8:8e:36:88:3b:c3:13:72:ba:8b:a4:31:47: 8e:f6:b7:5e:59:23:76:81:07:ee:2c:b2:b8:0a:b7: 4a:45:86:3c:5a:a2:3c:b2:0c:17:83:db:7c:9a:3f: e9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:37:6D:5A:00:A7:B1:91:D6:3D:A0:E2:CE:FC:BB:86:68:60:7A:B9 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/ca3490d0-1e9e-400b-af5e-b8236be17139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/19 Signature Algorithm: sha256WithRSAEncryption a3:e3:1a:e2:9a:35:e7:c0:a3:28:b7:7a:8e:6c:fc:46:c4:5d: f0:a2:ec:86:8a:95:5a:60:75:88:9c:d2:82:df:45:f0:a1:a4: a4:57:eb:0a:51:e6:84:55:8b:8f:d4:7c:c0:d1:42:13:be:bf: f1:ce:b7:4a:e4:40:f2:ce:ad:4b:15:e4:aa:c1:3e:83:3b:f1: 8b:d8:6a:c1:21:ac:5a:f8:c5:6d:ff:6b:ce:74:29:de:f8:6d: e7:70:ad:24:13:24:df:51:98:ec:e1:17:15:94:ed:0a:34:6d: b2:4d:d3:1c:06:cc:91:b4:a8:c5:2c:d8:9b:49:20:1f:1c:ef: 8a:08:35:b2:1c:6c:5f:b9:a8:6e:21:e0:0a:a6:d9:04:0b:59: 2f:21:fe:f9:6a:c3:7f:01:fc:87:d0:25:1d:18:28:60:69:08: ed:a2:39:01:ea:27:25:50:f5:0b:71:8f:f6:ba:04:9d:ea:8e: 0c:ff:0f:fc:66:b7:5e:f7:d2:4f:46:9e:76:ab:70:88:93:37: 6f:dc:86:46:47:4b:5b:05:4b:19:51:dc:58:6e:ea:32:33:6b: 32:b8:12:ec:5a:d1:37:45:1e:d4:03:c1:5d:54:99:f8:66:68: 19:8f:8b:c9:bb:be:aa:29:31:33:62:29:56:18:63:f1:c9:cb: 5d:5a:79:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIxA2bB/Z7Pm30kuU7XI6enUmnJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwOTIzMDAxMDA3WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzA2NTFkY2IwODgyNzA1MWIxOWQxN2VkN2YyNWU1YTUx MDRlNGVjOWFkOTE1NDRkZGRjZTYxYzU3YzBiNWNkMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoLiW65m6ANyERyCuW60QIxC6VCxI8R18zdYGMTNbpFe0x Ka++cY/WwBjwDAPtBajhFBbOcmzTIBlYdzI2cv0+nAJc+LXfNFE88cbystnoqRhS wc7XK/P12AIXF5O7WnCgzhXqrdlAtzL1djkcsET0g9ogJXY/lTFHSag/Ihjqw/rk zGKtUO9zCSvhjzvY2PrjQFswkdNdM2fQSQhTMj9/V9kaq2uLtasBVVe74+DsjqNf 3xXNfsmkfvWRN0KnX+0g6jwS50DZxKr7bBOoribYybUEyI42iDvDE3K6i6QxR472 t15ZI3aBB+4ssrgKt0pFhjxaojyyDBeD23yaP+l3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhTdtWgCnsZHWPaDizvy7hmhgerkwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2NhMzQ5MGQwLTFlOWUtNDAwYi1hZjVlLWI4MjM2YmUxNzEzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGKWAwDQYJKoZIhvcNAQELBQADggEBAKPjGuKaNefAoyi3eo5s/EbEXfCi 7IaKlVpgdYic0oLfRfChpKRX6wpR5oRVi4/UfMDRQhO+v/HOt0rkQPLOrUsV5KrB PoM78YvYasEhrFr4xW3/a850Kd74bedwrSQTJN9RmOzhFxWU7Qo0bbJN0xwGzJG0 qMUs2JtJIB8c74oINbIcbF+5qG4h4Aqm2QQLWS8h/vlqw38B/IfQJR0YKGBpCO2i OQHqJyVQ9Qtxj/a6BJ3qjgz/D/xmt1730k9GnnarcIiTN2/chkZHS1sFSxlR3Fhu 6jIzazK4Euxa0TdFHtQDwV1UmfhmaBmPi8m7vqopMTNiKVYYY/HJy11aeYM= -----END CERTIFICATE-----Generated at Thu Oct 9 01:16:55 2025 by rpki-client