$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/9410b7d2-baa7-4841-a665-55298df4e7b6.roa File: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (raw, json) Hash identifier: OGUVhSL8ARS/nKW5gzxZR3HvTFdfQEU+2wPXexeJgY8= Subject key identifier: A5:6D:E0:85:E2:8B:BC:13:1D:04:14:1B:DA:59:7E:D6:0D:4D:3B:52 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 6DD6155C5C04AE9E5C3FCE27C1760BDD62F39C36 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/9410b7d2-baa7-4841-a665-55298df4e7b6.roa Signing time: Tue 04 Aug 2026 00:10:09 +0000 ROA not before: Tue 04 Aug 2026 00:10:09 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d6:15:5c:5c:04:ae:9e:5c:3f:ce:27:c1:76:0b:dd:62:f3:9c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 00:10:09 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=6ed3697e9d2d0c752421d313b2b565038880aba4e9ffa741dbb05c820949e12a, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:44:a8:29:02:d1:06:6a:d5:5e:cc:ff:20: c3:8f:76:33:9f:40:de:a1:8e:51:f2:55:fb:76:ff: a4:ee:a1:ff:b8:78:28:05:9d:9a:96:c3:f7:be:3a: 21:94:de:c5:28:4b:c7:57:9f:b6:80:b2:fd:6e:b6: 6c:ea:e7:70:08:d7:87:96:13:45:40:8a:ef:83:3a: 51:5e:a0:62:a4:b3:64:8d:25:f7:c1:25:cc:75:6d: ff:59:8c:ba:a3:7f:ee:06:2a:c9:a8:f0:46:4d:b8: 8f:c7:0d:cf:88:a8:b0:cc:b4:aa:3f:c2:66:c0:48: 65:7b:94:3e:34:89:1a:f5:34:75:bc:55:4b:1c:ec: 58:a7:db:a6:fc:9b:53:12:93:f1:09:25:5d:32:5f: 4e:27:62:29:6b:70:0e:94:91:c6:f7:77:26:f1:f2: 34:bd:52:5b:a2:f8:79:9f:f1:75:de:e6:fb:54:b4: 52:dc:71:f7:2d:dc:3f:9c:6d:ae:7c:96:5a:e3:a2: 19:82:f9:8b:fe:4c:22:0c:e5:e9:8b:4d:bc:fd:e7: ef:13:dd:33:e3:2f:35:a6:8e:76:f2:9f:85:24:6e: 30:30:1a:8b:02:e1:f7:84:5a:86:61:a0:3b:37:11: a6:34:98:8d:e3:fd:6c:5a:a5:47:8e:fc:e9:10:fc: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6D:E0:85:E2:8B:BC:13:1D:04:14:1B:DA:59:7E:D6:0D:4D:3B:52 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/9410b7d2-baa7-4841-a665-55298df4e7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.97.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:38:87:20:12:52:a6:d2:5e:3b:bb:fe:ec:c2:9c:59:c2:0f: 71:ec:87:d9:b6:62:66:f8:01:3c:56:70:c7:9f:7c:4b:49:98: 7c:80:41:43:f4:01:65:cc:6b:01:15:cf:6e:7c:3d:3d:59:c4: 44:3b:cd:aa:51:f0:ea:4f:51:4c:a0:51:52:1b:ef:51:ce:f0: 58:6c:37:ce:91:08:2a:8b:f6:73:82:47:2b:c0:2e:8d:21:5d: 57:57:7a:23:c6:76:e2:d3:b3:e1:fd:ec:3b:19:df:48:2a:c8: a0:aa:df:06:b6:76:d3:b4:d8:a1:7d:d9:af:e5:4d:ed:12:a0: c3:5e:d1:22:49:a5:fd:9b:62:77:ea:0e:d1:a9:6e:97:e7:6f: 69:81:66:da:54:c1:04:8d:2e:1b:b7:eb:ef:e0:6f:19:9a:f4: 9a:68:47:88:c5:55:0c:e7:59:88:ba:13:0f:56:a4:df:7f:e1: f5:08:6a:50:ad:ca:68:c6:7c:79:06:c2:1b:f8:81:00:f7:90: 5e:94:14:3e:70:cc:93:c4:e0:bf:0c:50:e1:03:98:73:87:c1: 12:48:49:00:fa:b5:66:40:aa:02:01:d5:7c:a0:de:6a:ad:60: e3:60:63:31:36:f4:13:22:4b:8e:d9:99:22:85:86:3c:4c:33: c9:f6:f1:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbdYVXFwErp5cP84nwXYL3WLznDYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODA0MDAxMDA5WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZWQzNjk3ZTlkMmQwYzc1MjQyMWQzMTNiMmI1NjUwMzg4 ODBhYmE0ZTlmZmE3NDFkYmIwNWM4MjA5NDllMTJhMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdpUSoKQLRBmrVXsz/IMOPdjOfQN6hjlHyVft2/6Tuof+4 eCgFnZqWw/e+OiGU3sUoS8dXn7aAsv1utmzq53AI14eWE0VAiu+DOlFeoGKks2SN JffBJcx1bf9ZjLqjf+4GKsmo8EZNuI/HDc+IqLDMtKo/wmbASGV7lD40iRr1NHW8 VUsc7Fin26b8m1MSk/EJJV0yX04nYilrcA6Ukcb3dybx8jS9Ului+Hmf8XXe5vtU tFLccfct3D+cba58llrjohmC+Yv+TCIM5emLTbz95+8T3TPjLzWmjnbyn4UkbjAw GosC4feEWoZhoDs3EaY0mI3j/WxapUeO/OkQ/DLtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpW3gheKLvBMdBBQb2ll+1g1NO1IwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzk0MTBiN2QyLWJhYTctNDg0MS1hNjY1LTU1Mjk4ZGY0ZTdiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWEwDQYJKoZIhvcNAQELBQADggEBAFw4hyASUqbSXju7/uzCnFnCD3Hs h9m2Ymb4ATxWcMeffEtJmHyAQUP0AWXMawEVz258PT1ZxEQ7zapR8OpPUUygUVIb 71HO8FhsN86RCCqL9nOCRyvALo0hXVdXeiPGduLTs+H97DsZ30gqyKCq3wa2dtO0 2KF92a/lTe0SoMNe0SJJpf2bYnfqDtGpbpfnb2mBZtpUwQSNLhu36+/gbxma9Jpo R4jFVQznWYi6Ew9WpN9/4fUIalCtymjGfHkGwhv4gQD3kF6UFD5wzJPE4L8MUOED mHOHwRJISQD6tWZAqgIB1Xyg3mqtYONgYzE29BMiS47ZmSKFhjxMM8n28Uk= -----END CERTIFICATE-----Generated at Thu Aug 20 23:31:53 2026 by rpki-client