$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/82100f84-33b5-43a7-a078-7090448b8504.roa File: 82100f84-33b5-43a7-a078-7090448b8504.roa (raw, json) Hash identifier: 0XgyNkzPgSZc+c6i+KVxYK1WmbqCynqQuEaBCfqn0z4= Subject key identifier: A0:02:0A:05:75:3B:D7:7B:74:6F:BA:74:B5:BF:B8:BE:75:BA:22:49 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 54821C5349440EBFD6D75D5B397074D92B0F67FF Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/82100f84-33b5-43a7-a078-7090448b8504.roa Signing time: Sat 16 May 2026 00:10:13 +0000 ROA not before: Sat 16 May 2026 00:10:13 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:82:1c:53:49:44:0e:bf:d6:d7:5d:5b:39:70:74:d9:2b:0f:67:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: May 16 00:10:13 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=fee194eb60f026ed0a672295bfad82ae0efdcef98e8dceb170a62c81549eabcc, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:3c:02:6e:76:9c:15:c6:14:13:44:68:c5: 82:b0:3c:a8:fa:0d:5e:be:d1:3d:a3:28:87:e8:8b: d2:cc:dd:da:c4:2d:1c:a8:99:3b:d7:6f:fa:61:0a: 47:d9:18:67:6f:29:b2:52:a3:6b:9f:c3:42:e1:0f: 28:8d:15:87:f2:bc:b4:93:33:64:e0:17:65:71:1a: 91:31:a5:b3:81:c0:22:8a:30:a9:e0:19:86:bf:62: 63:11:e6:5a:40:e3:db:5f:11:ad:5e:84:0b:77:83: 87:b8:cf:52:ae:93:dd:e6:27:e3:70:e8:dd:61:9e: a3:73:04:fe:f9:68:0c:47:f9:1d:d8:11:dc:f0:aa: 41:ab:32:39:58:b3:8a:85:77:68:eb:00:7d:4f:99: 2c:d4:21:ab:54:1c:30:c1:a9:f0:71:f3:22:3f:9b: 05:63:2f:23:8a:0a:d1:c4:bc:dc:99:bd:f9:ea:d4: ae:db:b6:ff:39:ec:33:c6:cf:cd:56:0b:41:ec:21: ef:a6:d9:2f:3b:a5:0e:a8:15:ba:bc:08:8f:47:1f: 09:10:19:de:50:8b:9f:ac:40:c5:e8:ea:3a:59:c4: cc:6f:40:31:9e:85:22:85:03:77:42:19:7e:41:f2: 8a:e3:9e:9b:ff:ec:09:7c:72:61:5c:98:a9:9a:0e: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:02:0A:05:75:3B:D7:7B:74:6F:BA:74:B5:BF:B8:BE:75:BA:22:49 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/82100f84-33b5-43a7-a078-7090448b8504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/24 Signature Algorithm: sha256WithRSAEncryption 20:bd:f0:3f:36:87:6a:45:78:ef:84:3f:fd:61:c1:5e:50:ca: 74:09:44:04:4b:9b:4f:77:43:06:82:c4:3a:13:26:c2:b3:10: 0c:dc:c2:6a:dd:01:21:9f:fb:0f:b9:20:10:1b:0e:70:5c:80: c0:6f:38:d3:bf:0b:2a:12:0b:52:29:98:84:dd:f3:51:2c:88: ed:d7:09:90:9a:ab:92:d9:64:50:02:57:e6:a2:42:fc:e2:1d: 9e:79:42:39:ad:8c:a2:f2:dd:d8:d2:4a:d4:cc:51:6b:94:fb: 0d:37:7a:72:ad:45:53:b9:82:f0:69:b3:b5:35:73:e3:08:5d: de:cf:4f:ca:4c:91:0d:ac:5a:bc:62:a3:67:b8:0d:22:61:cb: a4:ba:4a:af:f5:37:a8:97:41:a6:f4:a9:11:72:a5:78:e2:5b: 5a:c9:9d:59:bc:5d:82:a0:c5:e5:c9:23:2a:44:1e:5b:71:78: b1:bc:17:68:22:34:98:e5:5d:b6:c8:d2:cb:4c:82:34:f6:08: ce:c9:f2:8c:28:dc:5a:4b:1c:f2:04:a0:31:91:82:08:7b:99: f2:88:ca:71:20:9b:3a:07:ee:fa:cb:52:9b:fa:65:28:ed:fe: a2:1e:24:c7:73:0f:19:cc:e8:fc:a8:98:e7:5a:23:39:d3:c5: 90:df:c1:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVIIcU0lEDr/W111bOXB02SsPZ/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwNTE2MDAxMDEzWhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWUxOTRlYjYwZjAyNmVkMGE2NzIyOTViZmFkODJhZTBl ZmRjZWY5OGU4ZGNlYjE3MGE2MmM4MTU0OWVhYmNjMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCujTwCbnacFcYUE0RoxYKwPKj6DV6+0T2jKIfoi9LM3drE LRyomTvXb/phCkfZGGdvKbJSo2ufw0LhDyiNFYfyvLSTM2TgF2VxGpExpbOBwCKK MKngGYa/YmMR5lpA49tfEa1ehAt3g4e4z1Kuk93mJ+Nw6N1hnqNzBP75aAxH+R3Y EdzwqkGrMjlYs4qFd2jrAH1PmSzUIatUHDDBqfBx8yI/mwVjLyOKCtHEvNyZvfnq 1K7btv857DPGz81WC0HsIe+m2S87pQ6oFbq8CI9HHwkQGd5Qi5+sQMXo6jpZxMxv QDGehSKFA3dCGX5B8orjnpv/7Al8cmFcmKmaDsiPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoAIKBXU713t0b7p0tb+4vnW6IkkwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzgyMTAwZjg0LTMzYjUtNDNhNy1hMDc4LTcwOTA0NDhiODUwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWAwDQYJKoZIhvcNAQELBQADggEBACC98D82h2pFeO+EP/1hwV5QynQJ RARLm093QwaCxDoTJsKzEAzcwmrdASGf+w+5IBAbDnBcgMBvONO/CyoSC1IpmITd 81EsiO3XCZCaq5LZZFACV+aiQvziHZ55QjmtjKLy3djSStTMUWuU+w03enKtRVO5 gvBps7U1c+MIXd7PT8pMkQ2sWrxio2e4DSJhy6S6Sq/1N6iXQab0qRFypXjiW1rJ nVm8XYKgxeXJIypEHltxeLG8F2giNJjlXbbI0stMgjT2CM7J8owo3FpLHPIEoDGR ggh7mfKIynEgmzoH7vrLUpv6ZSjt/qIeJMdzDxnM6PyomOdaIznTxZDfwS0= -----END CERTIFICATE-----Generated at Fri May 22 16:04:24 2026 by rpki-client