$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/490da442-9a78-4422-8ee9-ded4482ab131.roa File: 490da442-9a78-4422-8ee9-ded4482ab131.roa (raw, json) Hash identifier: Lb8dgo65X0cxuPhJsmau2QH6lsrlGeizcQX6ggZiFU8= Subject key identifier: E7:2C:1E:09:96:7C:49:BD:B6:07:38:C6:AB:AA:FE:AE:52:DC:A8:FF Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 77E4470BBF286934F45FCAD663DFCD87CAF52052 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/490da442-9a78-4422-8ee9-ded4482ab131.roa Signing time: Sat 16 May 2026 00:10:11 +0000 ROA not before: Sat 16 May 2026 00:10:11 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e4:47:0b:bf:28:69:34:f4:5f:ca:d6:63:df:cd:87:ca:f5:20:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: May 16 00:10:11 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=4365e77c474d54ec0b7465bc15ef24a8caf07b86be3f29824c6d94872adf7843, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:3b:af:45:2c:18:32:4c:1e:c7:bc:2a:fd: e8:de:07:e0:84:36:64:b6:0b:8c:ff:d3:48:37:c6: 38:61:e2:d0:63:09:13:eb:e9:73:df:cd:c0:55:96: 96:4f:1d:bb:a7:d7:ee:54:ce:e6:db:2d:9b:e9:b0: 99:0a:42:48:12:fa:37:3e:5a:d5:05:7d:83:36:ef: e7:0e:a6:80:66:62:66:1e:66:14:17:c9:33:0f:76: 18:fc:6c:dc:ed:be:3d:eb:10:95:0e:ac:7b:9e:3e: d6:7f:4f:e2:b0:a3:5f:1e:e4:5c:11:a7:71:05:dd: c5:4c:71:c9:a5:ff:8f:74:b4:8e:e0:8c:d7:93:e0: e0:a8:e5:d3:7b:a8:6f:8d:bd:03:7b:41:65:19:a6: 27:85:66:19:89:52:80:a6:41:ca:33:2f:5f:4e:51: 45:c7:d7:e8:87:0f:6a:e5:3c:82:9e:82:3f:d1:43: 26:e2:f4:f1:f5:81:97:6c:3f:a8:bb:96:55:3c:b3: 91:68:d6:26:8a:be:69:52:bf:c4:48:f7:1c:df:ed: 9a:37:c4:e0:53:20:a3:9a:32:77:c2:e9:32:e2:0b: c4:2e:3a:25:71:5a:f6:ab:a0:7a:cb:b6:0d:6d:bd: 22:28:b8:ce:0d:5f:af:2c:a4:e3:57:23:24:fa:60: 09:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2C:1E:09:96:7C:49:BD:B6:07:38:C6:AB:AA:FE:AE:52:DC:A8:FF X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/490da442-9a78-4422-8ee9-ded4482ab131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/19 Signature Algorithm: sha256WithRSAEncryption ac:1d:c3:07:da:63:52:8c:01:b3:90:40:2b:e1:cf:af:ab:2d: dd:bc:97:73:cf:b7:ce:95:47:7c:f4:85:dd:82:d2:43:53:f8: 91:24:6d:ba:53:66:78:63:29:4d:d5:c5:be:e3:c2:31:cf:b2: a1:d6:d9:54:d0:aa:46:be:c1:15:d2:8a:ff:ea:ec:f3:e6:3d: e8:27:c7:bf:1f:60:f5:ee:b5:05:4f:cf:32:cd:e2:cf:03:6c: 7f:dd:71:60:ae:a6:93:ab:b8:89:ef:32:f6:2a:4b:b0:4f:28: f8:d3:c0:3c:59:2b:db:67:bb:9f:23:b1:09:12:bb:45:a3:4d: 2e:70:d8:f3:fa:b1:be:62:ed:cd:ed:b4:7e:db:58:4d:1c:49: f6:e4:ec:f0:86:c8:55:36:76:67:b9:01:88:9a:d0:4a:87:aa: 4c:29:e2:e0:0f:9f:e2:27:04:cb:f0:e3:29:ed:a2:9d:c8:81: 3d:06:2c:4d:35:86:2e:7d:01:05:2b:99:ff:43:31:be:2c:5f: ed:64:ad:96:55:4a:9c:03:a1:d6:22:7a:55:f5:25:3b:6b:96: 69:c7:b7:de:0f:ba:b2:48:e1:50:f1:32:b8:65:a5:62:46:61: dd:af:f4:8a:d4:a2:03:35:19:0f:7c:b2:5b:d9:e4:5a:7f:b6: 8f:53:80:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd+RHC78oaTT0X8rWY9/Nh8r1IFIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwNTE2MDAxMDExWhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzY1ZTc3YzQ3NGQ1NGVjMGI3NDY1YmMxNWVmMjRhOGNh ZjA3Yjg2YmUzZjI5ODI0YzZkOTQ4NzJhZGY3ODQzMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOcTuvRSwYMkwex7wq/ejeB+CENmS2C4z/00g3xjhh4tBj CRPr6XPfzcBVlpZPHbun1+5UzubbLZvpsJkKQkgS+jc+WtUFfYM27+cOpoBmYmYe ZhQXyTMPdhj8bNztvj3rEJUOrHuePtZ/T+Kwo18e5FwRp3EF3cVMccml/490tI7g jNeT4OCo5dN7qG+NvQN7QWUZpieFZhmJUoCmQcozL19OUUXH1+iHD2rlPIKegj/R Qybi9PH1gZdsP6i7llU8s5Fo1iaKvmlSv8RI9xzf7Zo3xOBTIKOaMnfC6TLiC8Qu OiVxWvaroHrLtg1tvSIouM4NX68spONXIyT6YAmDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5yweCZZ8Sb22BzjGq6r+rlLcqP8wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzQ5MGRhNDQyLTlhNzgtNDQyMi04ZWU5LWRlZDQ0ODJhYjEzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGKWAwDQYJKoZIhvcNAQELBQADggEBAKwdwwfaY1KMAbOQQCvhz6+rLd28 l3PPt86VR3z0hd2C0kNT+JEkbbpTZnhjKU3Vxb7jwjHPsqHW2VTQqka+wRXSiv/q 7PPmPegnx78fYPXutQVPzzLN4s8DbH/dcWCuppOruInvMvYqS7BPKPjTwDxZK9tn u58jsQkSu0WjTS5w2PP6sb5i7c3ttH7bWE0cSfbk7PCGyFU2dme5AYia0EqHqkwp 4uAPn+InBMvw4yntop3IgT0GLE01hi59AQUrmf9DMb4sX+1krZZVSpwDodYielX1 JTtrlmnHt94PurJI4VDxMrhlpWJGYd2v9IrUogM1GQ98slvZ5Fp/to9TgPg= -----END CERTIFICATE-----Generated at Fri May 22 14:19:04 2026 by rpki-client