$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa File: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (raw, json) Hash identifier: RDY0ZqnhFEHCnlQ/NydxZCSNM3GMUGcsfMkQVVOPYQw= Subject key identifier: 2A:50:61:40:17:98:A0:09:AA:8B:DF:C9:51:1F:42:44:10:D4:68:64 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 56C6E9C83E25DCB3A806DE53A05536E26E5CA386 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa Signing time: Tue 04 Aug 2026 00:10:11 +0000 ROA not before: Tue 04 Aug 2026 00:10:11 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c6:e9:c8:3e:25:dc:b3:a8:06:de:53:a0:55:36:e2:6e:5c:a3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 00:10:11 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=042d0c43d7fa8f7d25cec605ea8218931f8074a5b80650d74a4641c89aadd30e, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:15:3f:39:90:02:0d:26:d9:a4:c0:56:5b:8b: af:34:ea:04:92:19:15:09:d6:1a:89:da:ea:7d:b9: 27:ef:6f:11:d2:07:6f:22:58:08:eb:18:f1:15:76: ec:1e:30:60:68:f0:fa:b3:a8:7f:c3:b5:18:91:f8: 5f:4a:4c:41:4b:b6:d0:c5:59:08:e0:72:78:dc:b9: 95:ce:8e:c9:95:8c:24:8f:ca:a2:b9:c8:70:1b:24: cb:3a:34:01:29:ca:1d:c3:cb:2e:01:59:63:a4:05: 35:f2:77:da:c8:ff:11:f8:f6:da:ca:cd:9b:55:0e: d3:83:85:8c:e1:74:93:65:e4:8c:53:e5:28:f9:6c: 6c:c0:10:e8:03:2d:79:13:2e:91:23:0a:4a:2d:41: 71:dd:41:ce:1d:8d:b5:87:ff:38:50:39:1a:78:f8: 3a:d1:3a:bb:fd:55:3b:bd:48:2e:86:c8:ea:e9:29: 2f:2b:b7:21:8e:24:fc:51:ce:a8:96:6b:34:a2:67: a9:95:d0:20:72:0e:c2:d5:a9:7d:94:51:7a:5b:51: 76:63:07:1e:30:ea:f8:d6:f8:99:3b:fb:54:70:99: 99:bc:b8:75:f8:22:e8:50:71:fa:83:92:a4:36:0e: df:47:ec:a6:84:1b:c6:95:22:07:2d:9a:b0:6f:2f: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:50:61:40:17:98:A0:09:AA:8B:DF:C9:51:1F:42:44:10:D4:68:64 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.100.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:64:ee:f5:41:b5:76:78:22:1e:6e:df:05:49:06:ed:b1:52: 8d:18:8a:46:9e:a5:ab:e9:f7:2b:37:11:da:2e:c5:40:50:df: 27:59:ea:ee:ad:02:b2:2a:d6:47:ff:da:fd:76:77:67:c8:d1: 8f:32:b8:1e:63:91:c5:01:65:7c:ae:f2:36:4d:a5:ac:24:a6: 72:d1:e9:eb:22:ed:73:40:07:62:53:99:18:22:58:e1:5c:bf: 51:89:37:0f:b9:7f:5c:4b:77:c1:48:56:6d:e5:eb:59:34:9b: d4:d5:0b:52:b7:55:4e:68:b2:b9:8b:e2:db:6d:a3:06:2c:75: 9d:dc:88:98:dd:8a:6c:a4:3b:80:30:fc:d2:3d:eb:05:1f:f7: fa:ae:ae:b9:24:01:76:8f:2e:81:0d:bd:7c:6b:a7:bd:82:06: a9:f7:d2:1d:a6:df:0c:ee:b8:2c:89:9d:d5:9b:c5:1f:b0:b1: fc:07:25:1e:c1:94:fb:c4:3a:7f:62:ac:b4:d3:6b:1f:59:81: 18:33:78:1a:a9:c7:e9:b5:3e:f7:a8:d9:4f:69:34:cf:3e:19: 37:32:c4:6d:21:e3:e6:0b:13:d3:75:cf:0f:f6:00:f8:5c:28: d5:88:ef:0b:00:3b:a9:ed:96:ae:0d:83:79:0e:40:99:0c:ae: 17:da:8f:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVsbpyD4l3LOoBt5ToFU24m5co4YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODA0MDAxMDExWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDJkMGM0M2Q3ZmE4ZjdkMjVjZWM2MDVlYTgyMTg5MzFm ODA3NGE1YjgwNjUwZDc0YTQ2NDFjODlhYWRkMzBlMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxFT85kAINJtmkwFZbi6806gSSGRUJ1hqJ2up9uSfvbxHS B28iWAjrGPEVduweMGBo8PqzqH/DtRiR+F9KTEFLttDFWQjgcnjcuZXOjsmVjCSP yqK5yHAbJMs6NAEpyh3Dyy4BWWOkBTXyd9rI/xH49trKzZtVDtODhYzhdJNl5IxT 5Sj5bGzAEOgDLXkTLpEjCkotQXHdQc4djbWH/zhQORp4+DrROrv9VTu9SC6GyOrp KS8rtyGOJPxRzqiWazSiZ6mV0CByDsLVqX2UUXpbUXZjBx4w6vjW+Jk7+1RwmZm8 uHX4IuhQcfqDkqQ2Dt9H7KaEG8aVIgctmrBvLyY5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKlBhQBeYoAmqi9/JUR9CRBDUaGQwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzA1YmE5Y2E1LWE5YTktNGRlZi05YzcxLTBjZjQ3ZDA2ZmUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWQwDQYJKoZIhvcNAQELBQADggEBAH9k7vVBtXZ4Ih5u3wVJBu2xUo0Y ikaepavp9ys3EdouxUBQ3ydZ6u6tArIq1kf/2v12d2fI0Y8yuB5jkcUBZXyu8jZN pawkpnLR6esi7XNAB2JTmRgiWOFcv1GJNw+5f1xLd8FIVm3l61k0m9TVC1K3VU5o srmL4tttowYsdZ3ciJjdimykO4Aw/NI96wUf9/qurrkkAXaPLoENvXxrp72CBqn3 0h2m3wzuuCyJndWbxR+wsfwHJR7BlPvEOn9irLTTax9ZgRgzeBqpx+m1Pveo2U9p NM8+GTcyxG0h4+YLE9N1zw/2APhcKNWI7wsAO6ntlq4Ng3kOQJkMrhfaj0k= -----END CERTIFICATE-----Generated at Thu Aug 20 23:31:59 2026 by rpki-client