$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa File: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (raw, json) Hash identifier: nNft6gH+hBfm2Sx+wvHSOGsYC0EGRzxIb+DdBz23QQM= Subject key identifier: 51:E7:3A:61:9D:58:CA:57:A2:6A:14:E4:7B:94:80:01:18:B0:4A:E8 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 4F3A80F0C6B3144DC098B383D13E269BD3F457F2 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa Signing time: Tue 23 Sep 2025 00:10:04 +0000 ROA not before: Tue 23 Sep 2025 00:10:04 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3a:80:f0:c6:b3:14:4d:c0:98:b3:83:d1:3e:26:9b:d3:f4:57:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Sep 23 00:10:04 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=9f7cb580af13cbad77c6d89fdf889476ce985160a1382b41b42f80bf56490d63, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0f:88:df:fb:f2:4a:1b:6b:b7:c2:5d:2a:fb: 26:1d:21:4e:2c:e3:fd:5d:ae:49:7e:27:eb:c5:59: a2:ad:6b:bd:4f:87:bb:42:7f:0f:50:91:29:83:42: 62:34:a6:00:90:03:4a:cc:34:f0:21:73:0e:fa:8c: 44:5f:53:9c:b5:55:c4:ee:9a:54:48:31:f9:e8:bf: ee:c4:cf:58:1e:cc:6a:0b:34:a0:dc:45:25:fc:58: 05:71:72:f5:2a:ff:f1:03:c2:0b:bb:02:fb:f8:41: 18:d6:3b:f3:a1:2a:c2:03:1b:95:3e:43:6a:0a:6b: e5:f1:de:c9:12:b9:ad:31:88:ef:e4:9b:94:47:6e: ca:68:5b:56:bf:c2:bb:96:86:d9:47:e1:5d:66:e4: 29:dd:98:d9:b7:c2:e9:90:72:cb:57:ac:37:3a:ea: 4e:96:b5:83:09:98:2c:05:07:78:bc:c4:15:f0:c9: 11:32:c6:dd:4c:68:51:21:6c:4a:ce:63:52:e6:aa: eb:1b:3c:0a:f7:7a:bb:52:48:95:ef:aa:c6:62:5f: 6e:92:88:d3:a9:0a:98:2c:d5:97:3e:cb:21:75:33: 6e:c8:87:17:60:9c:42:cc:03:8c:a0:33:28:8c:cf: 95:3e:63:c4:f6:7a:84:fb:12:1e:b1:a9:8c:eb:0e: 81:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E7:3A:61:9D:58:CA:57:A2:6A:14:E4:7B:94:80:01:18:B0:4A:E8 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.101.0/24 Signature Algorithm: sha256WithRSAEncryption 27:5e:bc:5f:91:52:03:c3:b1:f1:15:5d:e8:66:c2:69:56:72: 9d:8e:fb:21:2d:8b:35:1c:93:65:2a:b2:16:fc:a7:0e:74:e9: c1:73:23:70:37:16:80:7d:33:73:79:09:b7:b6:ae:c6:a1:94: 1c:b9:1e:98:bf:20:04:f2:37:69:eb:75:ee:c9:4f:51:2f:69: 85:a7:89:eb:d1:6c:37:8e:3b:3a:e9:b3:a4:7a:17:a3:b3:86: ba:a4:db:db:89:3f:78:35:67:7d:f3:ff:5d:e6:f3:fb:a5:28: d8:10:e9:72:9f:01:43:5b:d8:22:c0:44:9b:08:a8:4d:37:f5: b3:53:7a:bd:7d:6d:81:bc:c8:38:19:e7:b4:c9:d0:2a:e2:e3: 8d:bb:a9:0c:21:52:df:85:4f:e5:2b:62:db:6f:43:48:6e:e4: 55:fc:a0:28:45:37:65:24:33:d0:06:bf:46:bf:e9:86:d3:8a: 21:97:6e:70:99:a4:de:19:f8:2a:14:f4:66:21:2e:66:1d:35: a9:68:6e:29:2a:19:38:8d:7e:ad:4b:b9:a5:aa:31:6b:1a:df: 3a:6b:6e:6b:c1:de:6f:2f:d9:2b:60:c5:ef:b2:59:6b:6f:96: 51:13:50:4e:64:ef:8c:bf:a3:35:b2:97:b5:70:75:b5:63:fb: 51:c4:a6:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTzqA8MazFE3AmLOD0T4mm9P0V/IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwOTIzMDAxMDA0WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjdjYjU4MGFmMTNjYmFkNzdjNmQ4OWZkZjg4OTQ3NmNl OTg1MTYwYTEzODJiNDFiNDJmODBiZjU2NDkwZDYzMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeD4jf+/JKG2u3wl0q+yYdIU4s4/1drkl+J+vFWaKta71P h7tCfw9QkSmDQmI0pgCQA0rMNPAhcw76jERfU5y1VcTumlRIMfnov+7Ez1gezGoL NKDcRSX8WAVxcvUq//EDwgu7Avv4QRjWO/OhKsIDG5U+Q2oKa+Xx3skSua0xiO/k m5RHbspoW1a/wruWhtlH4V1m5CndmNm3wumQcstXrDc66k6WtYMJmCwFB3i8xBXw yREyxt1MaFEhbErOY1LmqusbPAr3ertSSJXvqsZiX26SiNOpCpgs1Zc+yyF1M27I hxdgnELMA4ygMyiMz5U+Y8T2eoT7Eh6xqYzrDoH9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUec6YZ1YyleiahTke5SAARiwSugwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2YwMmVmYjFmLThhMTctNGRjNy05YWI0LTljYzIzYmM2OWI5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWUwDQYJKoZIhvcNAQELBQADggEBACdevF+RUgPDsfEVXehmwmlWcp2O +yEtizUck2Uqshb8pw506cFzI3A3FoB9M3N5Cbe2rsahlBy5Hpi/IATyN2nrde7J T1EvaYWnievRbDeOOzrps6R6F6Ozhrqk29uJP3g1Z33z/13m8/ulKNgQ6XKfAUNb 2CLARJsIqE039bNTer19bYG8yDgZ57TJ0Cri4427qQwhUt+FT+UrYttvQ0hu5FX8 oChFN2UkM9AGv0a/6YbTiiGXbnCZpN4Z+CoU9GYhLmYdNalobikqGTiNfq1LuaWq MWsa3zprbmvB3m8v2Stgxe+yWWtvllETUE5k74y/ozWyl7VwdbVj+1HEpuU= -----END CERTIFICATE-----Generated at Wed Oct 8 23:10:28 2025 by rpki-client