$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/8a0cac28-29b8-4996-b010-5eab278cc342.roa File: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (raw, json) Hash identifier: YZnOYv3KCfMLBGwxq/hN97/n+4qoU0T5UOWxKA/Pg24= Subject key identifier: C8:AC:0C:6F:92:3E:9F:7C:C5:7F:F5:09:A9:61:5D:A0:F5:19:7E:BF Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 4F65CAD51A68E0C89B964FEF3A80A4F422B45B08 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/8a0cac28-29b8-4996-b010-5eab278cc342.roa Signing time: Tue 04 Aug 2026 00:10:12 +0000 ROA not before: Tue 04 Aug 2026 00:10:12 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:65:ca:d5:1a:68:e0:c8:9b:96:4f:ef:3a:80:a4:f4:22:b4:5b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 00:10:12 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=87dba9aa1ea018355c1191fecf4d1d69e32eaeae36bb41bd5c136cb3a1676189, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:1a:ba:5b:4c:54:f6:a4:00:99:3a:f7:9c: 8a:7c:57:7b:38:31:aa:5c:6b:55:15:11:58:66:b9: a3:e4:4f:bf:a4:f7:21:a6:3f:4c:4a:07:21:cf:cf: ca:4e:3d:c5:f0:c7:ba:f1:7b:ba:c8:58:7e:be:01: 2e:e4:95:31:e6:d2:9b:8c:84:3a:93:f0:3f:08:5b: f5:6f:dc:10:96:ce:71:70:29:c6:57:f8:e5:7d:13: 2d:2c:45:15:8e:17:78:b5:c2:f1:66:7e:03:ca:65: 92:73:00:43:b1:a3:fb:ca:7f:1c:71:90:ec:20:43: 72:d9:0a:7f:21:d6:2d:3d:e5:22:ea:2e:94:5e:c1: 61:bd:0d:57:be:46:bf:34:24:dc:08:67:f0:11:a3: 43:ab:17:46:71:32:2f:82:13:b5:bd:2e:95:89:83: 7c:d0:28:c5:47:63:18:6d:73:4a:6a:b2:e3:f7:0a: 22:24:e7:82:1e:d3:de:41:e4:c1:db:b9:7b:89:2e: c7:1e:f2:89:5c:b4:c0:3a:13:fe:6b:63:86:1f:55: 99:ae:f4:7e:e3:d6:4e:e0:74:ff:85:cd:91:66:6d: 1f:5a:04:60:c4:ac:b2:bc:d7:18:f4:fb:a8:1d:70: d7:f5:e9:28:62:2d:b5:5d:08:ae:bb:e3:c2:60:28: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AC:0C:6F:92:3E:9F:7C:C5:7F:F5:09:A9:61:5D:A0:F5:19:7E:BF X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/8a0cac28-29b8-4996-b010-5eab278cc342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.100.0/24 Signature Algorithm: sha256WithRSAEncryption 30:64:6e:1c:de:e9:09:79:29:ed:26:d5:d7:0b:1d:a0:13:d0: 91:75:d4:4e:cd:c5:ef:35:cb:38:a8:fd:42:84:ec:15:3d:07: c4:3e:77:ab:c3:90:b4:ce:b1:58:b5:75:e0:9e:30:1a:92:21: 02:85:1c:71:1b:21:26:77:f5:dc:d2:72:b4:42:b0:b4:bf:fe: bc:ad:67:4a:48:b6:de:73:56:9d:2e:09:04:8f:b3:9c:d7:fa: ba:67:5f:72:51:a6:d5:cb:87:cc:c6:01:09:e5:e8:b4:d4:b8: 15:2b:51:06:1d:36:e5:69:20:f0:91:f8:b5:65:c1:27:6d:9f: 4a:5f:72:50:df:ae:02:c5:b6:79:69:ff:5f:1b:c5:c7:3d:4a: 12:55:35:90:94:6e:61:3e:26:40:b2:9d:e1:2f:3b:40:3e:f9: 3a:c7:4f:bd:8b:91:76:c3:0a:2c:e5:66:73:81:2b:b5:a4:2e: 08:3a:5c:e4:fb:88:97:03:8e:87:19:6d:47:0b:1f:4d:59:ef: 55:95:67:dc:4a:2a:a4:ce:f6:2e:c9:ec:03:70:40:9a:6b:1b: 76:04:37:e6:fc:84:19:1d:2c:39:46:cb:8e:88:43:45:e4:04: 4e:13:65:7e:e4:aa:cf:60:98:ee:7e:c7:b7:b5:23:d9:06:87: 38:43:0b:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT2XK1Rpo4Miblk/vOoCk9CK0WwgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODA0MDAxMDEyWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2RiYTlhYTFlYTAxODM1NWMxMTkxZmVjZjRkMWQ2OWUz MmVhZWFlMzZiYjQxYmQ1YzEzNmNiM2ExNjc2MTg5MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyPBq6W0xU9qQAmTr3nIp8V3s4Mapca1UVEVhmuaPkT7+k 9yGmP0xKByHPz8pOPcXwx7rxe7rIWH6+AS7klTHm0puMhDqT8D8IW/Vv3BCWznFw KcZX+OV9Ey0sRRWOF3i1wvFmfgPKZZJzAEOxo/vKfxxxkOwgQ3LZCn8h1i095SLq LpRewWG9DVe+Rr80JNwIZ/ARo0OrF0ZxMi+CE7W9LpWJg3zQKMVHYxhtc0pqsuP3 CiIk54Ie095B5MHbuXuJLsce8olctMA6E/5rY4YfVZmu9H7j1k7gdP+FzZFmbR9a BGDErLK81xj0+6gdcNf16ShiLbVdCK6748JgKKOZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyKwMb5I+n3zFf/UJqWFdoPUZfr8wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzhhMGNhYzI4LTI5YjgtNDk5Ni1iMDEwLTVlYWIyNzhjYzM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWQwDQYJKoZIhvcNAQELBQADggEBADBkbhze6Ql5Ke0m1dcLHaAT0JF1 1E7Nxe81yzio/UKE7BU9B8Q+d6vDkLTOsVi1deCeMBqSIQKFHHEbISZ39dzScrRC sLS//rytZ0pItt5zVp0uCQSPs5zX+rpnX3JRptXLh8zGAQnl6LTUuBUrUQYdNuVp IPCR+LVlwSdtn0pfclDfrgLFtnlp/18bxcc9ShJVNZCUbmE+JkCyneEvO0A++TrH T72LkXbDCizlZnOBK7WkLgg6XOT7iJcDjocZbUcLH01Z71WVZ9xKKqTO9i7J7ANw QJprG3YEN+b8hBkdLDlGy46IQ0XkBE4TZX7kqs9gmO5+x7e1I9kGhzhDCww= -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:36 2026 by rpki-client