$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4dec765a-fd07-492c-af7f-ec695090cc13.roa File: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (raw, json) Hash identifier: X/0ewbDucCicj6riaGYefpsjdlBMCgUSYzR3Fz5p4jA= Subject key identifier: 9A:7B:BB:E5:BF:07:74:7D:26:73:F1:1C:4C:0E:31:14:0A:87:DA:81 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 6302A314CC870B587107D19A2DC90444A0B9A7C3 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4dec765a-fd07-492c-af7f-ec695090cc13.roa Signing time: Tue 04 Aug 2026 00:10:07 +0000 ROA not before: Tue 04 Aug 2026 00:10:07 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:02:a3:14:cc:87:0b:58:71:07:d1:9a:2d:c9:04:44:a0:b9:a7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 00:10:07 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=ddb4a98d7d37073c83e932b5f419651769bdfbed7c7be4d358bd6e4765b727c1, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:db:78:b5:6d:5b:1e:b4:c6:69:bb:8c:ae: a9:fe:99:fc:f3:77:f6:42:ae:b4:84:bd:fd:de:94: 6e:0b:d5:61:16:55:23:d0:3c:2a:cf:d0:c6:b5:1b: 0c:ed:dd:af:6f:c6:31:36:95:7f:19:06:9c:45:4b: da:72:93:fe:3a:95:ba:cb:a5:dc:a1:d8:da:3e:d2: 53:13:b0:33:af:85:45:44:7c:a5:b2:9c:b7:da:a7: cd:1c:e3:4b:65:3f:3a:b9:2c:da:98:ef:88:fb:93: c8:21:1b:77:ba:71:14:8c:f8:a0:34:dd:d8:43:33: e8:85:0d:08:3e:42:01:02:90:19:bf:fb:cf:72:56: 38:c5:d0:e4:91:ec:32:cc:49:fa:7b:97:75:25:72: a5:12:32:74:6d:29:8b:0a:2c:83:dd:2e:3c:6a:c5: 80:65:c3:b6:f5:03:6a:06:e6:29:40:60:4f:f8:08: aa:2b:ad:30:bd:25:15:f8:99:60:55:73:57:38:ba: d9:15:b4:ee:36:27:a0:e6:47:f1:89:39:bf:ed:43: 60:87:2b:22:57:2d:39:fd:3e:06:2a:ef:7e:43:2b: c3:4e:f5:7b:71:ba:04:79:93:fb:c6:54:5c:82:b0: 7a:8f:50:e9:34:32:d8:dd:7f:1d:4a:74:01:b3:7d: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:BB:E5:BF:07:74:7D:26:73:F1:1C:4C:0E:31:14:0A:87:DA:81 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4dec765a-fd07-492c-af7f-ec695090cc13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.99.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:8e:fc:90:fb:f8:98:60:64:ea:db:f3:46:8a:42:3e:09:cd: 54:1f:b2:e6:60:33:cf:b7:1c:7a:c6:af:11:49:6a:c3:cf:6a: 89:17:4b:9a:07:6e:38:22:69:f3:90:82:39:c0:21:e2:cc:54: e5:ae:b6:eb:f0:a0:d7:01:75:40:91:39:af:5c:62:1f:e7:bc: 77:c9:99:b1:48:51:76:e3:3e:2c:75:bd:48:f7:51:6f:fc:c4: 72:e2:8b:b8:fe:53:63:fa:22:5b:83:1c:45:25:a5:df:62:f1: ec:43:44:4c:5a:e4:ee:27:18:b0:01:77:81:6c:51:98:d1:47: fa:a0:4b:a6:81:86:5d:65:58:21:7e:9c:9f:92:03:49:0b:13: a8:35:d4:a1:24:20:5c:87:be:a4:2d:5b:58:cf:bc:79:4e:06: 6b:ed:06:df:20:45:a6:02:87:3e:0c:64:40:d8:4c:73:84:b3: d0:f1:ad:0a:e6:5c:1f:d0:75:b8:fd:52:48:eb:e2:11:c4:54: fe:dd:cb:29:01:4e:0e:0c:66:2d:56:2d:ac:01:86:9a:f1:a3: 99:e2:8d:ec:a7:33:ee:3e:a4:cf:e9:f4:4d:f9:ed:62:41:2f: bf:35:9e:0d:df:1c:38:1e:95:85:6d:89:3f:00:c6:eb:10:a0: fe:6c:61:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYwKjFMyHC1hxB9GaLckERKC5p8MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODA0MDAxMDA3WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGI0YTk4ZDdkMzcwNzNjODNlOTMyYjVmNDE5NjUxNzY5 YmRmYmVkN2M3YmU0ZDM1OGJkNmU0NzY1YjcyN2MxMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMV9t4tW1bHrTGabuMrqn+mfzzd/ZCrrSEvf3elG4L1WEW VSPQPCrP0Ma1Gwzt3a9vxjE2lX8ZBpxFS9pyk/46lbrLpdyh2No+0lMTsDOvhUVE fKWynLfap80c40tlPzq5LNqY74j7k8ghG3e6cRSM+KA03dhDM+iFDQg+QgECkBm/ +89yVjjF0OSR7DLMSfp7l3UlcqUSMnRtKYsKLIPdLjxqxYBlw7b1A2oG5ilAYE/4 CKorrTC9JRX4mWBVc1c4utkVtO42J6DmR/GJOb/tQ2CHKyJXLTn9PgYq735DK8NO 9XtxugR5k/vGVFyCsHqPUOk0Mtjdfx1KdAGzfWDjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmnu75b8HdH0mc/EcTA4xFAqH2oEwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzRkZWM3NjVhLWZkMDctNDkyYy1hZjdmLWVjNjk1MDkwY2MxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWMwDQYJKoZIhvcNAQELBQADggEBAF+O/JD7+JhgZOrb80aKQj4JzVQf suZgM8+3HHrGrxFJasPPaokXS5oHbjgiafOQgjnAIeLMVOWutuvwoNcBdUCROa9c Yh/nvHfJmbFIUXbjPix1vUj3UW/8xHLii7j+U2P6IluDHEUlpd9i8exDRExa5O4n GLABd4FsUZjRR/qgS6aBhl1lWCF+nJ+SA0kLE6g11KEkIFyHvqQtW1jPvHlOBmvt Bt8gRaYChz4MZEDYTHOEs9DxrQrmXB/Qdbj9Ukjr4hHEVP7dyykBTg4MZi1WLawB hprxo5nijeynM+4+pM/p9E357WJBL781ng3fHDgelYVtiT8AxusQoP5sYTw= -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:37 2026 by rpki-client