$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa File: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (raw, json) Hash identifier: 8gyKoJwGGtrKDQDlIOeYwf0iLuyYHvSmNrCNQamRGVw= Subject key identifier: 78:BE:EA:3C:47:5A:67:01:01:FF:31:B2:3C:CC:59:FC:92:DD:2E:55 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 20F7B2BEBE3DC5465BDF3D5AE7561F7E4AA2A8F3 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa Signing time: Sat 16 May 2026 00:10:08 +0000 ROA not before: Sat 16 May 2026 00:10:08 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f7:b2:be:be:3d:c5:46:5b:df:3d:5a:e7:56:1f:7e:4a:a2:a8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: May 16 00:10:08 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=1e698862c3de849a4fa23758b5574e142ac91a5d5a9949dad982664babe9d74d, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:61:78:35:ee:a3:6e:e6:7a:a9:2e:9b:1e: 1a:4e:a5:13:e4:d1:5c:e8:d4:b1:0a:2f:22:3f:80: 2b:7f:18:f0:67:3c:37:f8:92:94:c9:7e:7a:c5:1a: b7:35:bc:1f:27:38:00:91:2d:14:bd:f2:63:c3:9c: 71:87:11:a7:75:53:ac:02:55:c0:13:24:52:01:13: 5d:27:45:a8:d9:e5:85:d4:56:2f:b5:84:e0:b7:1d: 71:47:23:63:8e:56:91:ef:7c:fe:01:d8:91:0f:0c: 79:09:8e:0a:83:38:65:c6:f5:66:d5:c0:16:ec:b4: a6:2f:29:1c:46:ba:ea:ab:60:e1:48:1d:57:1e:96: e4:98:e8:be:26:64:0f:f3:87:17:0b:72:6a:fb:65: 26:f3:6c:07:7e:fd:43:ac:bb:fe:59:77:f3:48:2d: 6c:55:8c:75:d0:cf:3b:6b:d4:ca:4a:7b:63:ba:d1: 25:fd:b6:93:3d:80:6a:08:e6:ce:96:78:11:b6:cf: 1e:75:52:ed:cd:05:6b:22:b1:df:d2:23:7d:a5:58: cc:da:31:12:e1:d0:fe:6f:fb:ac:21:e3:aa:f2:61: 27:29:8d:4b:c7:be:d9:1f:1f:6c:c0:07:66:58:1b: 3b:4b:59:3e:f6:4a:44:c2:a0:09:fa:d7:55:fd:b8: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BE:EA:3C:47:5A:67:01:01:FF:31:B2:3C:CC:59:FC:92:DD:2E:55 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.97.0/24 Signature Algorithm: sha256WithRSAEncryption 17:a9:70:34:91:d5:28:8b:57:22:c8:d5:16:f9:8f:a3:d3:4e: 09:53:a1:1d:f8:33:6d:f8:a1:54:c0:70:40:ae:07:8c:0b:41: 40:3e:38:10:fb:cf:bf:d1:34:fd:2c:b3:14:32:79:0a:64:40: 09:14:c4:1f:32:43:fc:1a:db:92:57:50:9b:1b:aa:40:a5:56: 78:34:83:7d:af:ab:48:2c:76:60:45:95:e6:48:41:76:10:7e: b4:0f:9f:cd:b4:ce:b4:7d:64:aa:d5:33:da:d0:2e:34:a3:9d: fd:43:88:6d:03:d8:95:56:1a:ef:ae:79:9b:50:ac:54:4d:63: c8:8e:b3:76:f5:7c:52:49:ed:92:3e:79:64:2c:1d:f8:a1:6a: c3:eb:ae:90:85:9c:20:84:72:d6:b1:a9:bc:54:1c:8b:7d:83: 37:00:29:f5:72:a7:ce:b8:e6:4a:89:61:9b:20:24:02:ff:8c: 89:30:0e:6d:24:23:c9:d3:bd:0c:f4:d2:22:30:04:f3:95:f1: 65:dd:08:b9:04:3d:97:1a:20:8a:c0:ac:ef:bb:55:75:a7:78: 4c:6b:17:61:8a:d1:6e:69:6a:0d:e4:73:d7:f6:d1:b1:64:b9: 39:2d:08:6b:d3:69:66:d5:8d:b2:d0:a8:7e:9a:cf:cd:c8:85: 95:35:eb:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIPeyvr49xUZb3z1a51YffkqiqPMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwNTE2MDAxMDA4WhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTY5ODg2MmMzZGU4NDlhNGZhMjM3NThiNTU3NGUxNDJh YzkxYTVkNWE5OTQ5ZGFkOTgyNjY0YmFiZTlkNzRkMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFEGF4Ne6jbuZ6qS6bHhpOpRPk0Vzo1LEKLyI/gCt/GPBn PDf4kpTJfnrFGrc1vB8nOACRLRS98mPDnHGHEad1U6wCVcATJFIBE10nRajZ5YXU Vi+1hOC3HXFHI2OOVpHvfP4B2JEPDHkJjgqDOGXG9WbVwBbstKYvKRxGuuqrYOFI HVceluSY6L4mZA/zhxcLcmr7ZSbzbAd+/UOsu/5Zd/NILWxVjHXQzztr1MpKe2O6 0SX9tpM9gGoI5s6WeBG2zx51Uu3NBWsisd/SI32lWMzaMRLh0P5v+6wh46ryYScp jUvHvtkfH2zAB2ZYGztLWT72SkTCoAn611X9uJXXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeL7qPEdaZwEB/zGyPMxZ/JLdLlUwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzk4YzNmOWY4LTllZTMtNDkwOS04ZDQxLTdhYzIxODFmNjM3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWEwDQYJKoZIhvcNAQELBQADggEBABepcDSR1SiLVyLI1Rb5j6PTTglT oR34M234oVTAcECuB4wLQUA+OBD7z7/RNP0ssxQyeQpkQAkUxB8yQ/wa25JXUJsb qkClVng0g32vq0gsdmBFleZIQXYQfrQPn820zrR9ZKrVM9rQLjSjnf1DiG0D2JVW Gu+ueZtQrFRNY8iOs3b1fFJJ7ZI+eWQsHfihasPrrpCFnCCEctaxqbxUHIt9gzcA KfVyp8645kqJYZsgJAL/jIkwDm0kI8nTvQz00iIwBPOV8WXdCLkEPZcaIIrArO+7 VXWneExrF2GK0W5pag3kc9f20bFkuTktCGvTaWbVjbLQqH6az83IhZU163Q= -----END CERTIFICATE-----Generated at Fri May 22 16:04:31 2026 by rpki-client