$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa File: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (raw, json) Hash identifier: tlNSXVQ2U6BWl4iSH2riKKq1BdlOQyLySNLscYcx3os= Subject key identifier: 45:27:39:0E:FC:C9:01:D1:41:99:17:6B:84:ED:02:B4:9A:41:66:39 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 20E554F28B01DD149C46EFA5655B49566E77D067 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa Signing time: Tue 04 Aug 2026 00:10:10 +0000 ROA not before: Tue 04 Aug 2026 00:10:10 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e5:54:f2:8b:01:dd:14:9c:46:ef:a5:65:5b:49:56:6e:77:d0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 00:10:10 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=24a138476f0164886f873f3db7b521427e2660f1174a2d931db0c86211400582, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:66:3a:8f:32:5e:00:cd:26:de:79:fc:2d:86: 5f:15:ee:a8:d7:2d:e0:3f:b2:b3:a2:11:c5:1d:b0: f1:6d:f9:37:2e:67:bc:f0:20:22:f4:f9:55:2d:10: b7:95:7f:6a:9c:a3:8e:3c:f5:b8:fd:db:b3:3c:9c: 16:80:b2:d9:9f:82:e7:fb:8f:0f:2d:f6:ea:a7:96: 4c:f7:9c:a8:b1:be:70:4f:48:ee:ea:95:07:09:aa: 6c:45:97:4a:98:25:51:8c:8f:f8:2b:18:83:44:3b: a4:d5:63:32:d3:16:41:b7:ae:71:20:11:a0:45:51: d2:90:ea:1b:26:5a:b4:d6:e1:3e:9c:32:73:de:ea: df:7a:ba:42:35:8c:71:65:d5:97:ee:79:35:96:c0: 5b:fe:f8:99:3e:1c:9a:42:c8:16:dc:41:0b:c3:af: df:c8:3c:86:87:ae:00:ea:0c:56:7d:00:b8:54:95: 71:67:25:3d:5e:f5:aa:6f:f2:52:8e:2c:10:14:d2: dc:a5:52:20:a9:78:f5:d9:e3:f4:ce:8f:77:d5:07: 97:f8:9d:33:e1:b4:8a:1e:2f:9d:ef:c1:b2:87:44: 12:69:43:33:3b:b4:8b:47:57:28:7f:d9:77:53:f3: 4d:3d:fd:f0:72:a8:f1:3a:d1:19:25:46:d0:6a:a7: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:27:39:0E:FC:C9:01:D1:41:99:17:6B:84:ED:02:B4:9A:41:66:39 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.98.0/24 Signature Algorithm: sha256WithRSAEncryption 97:29:08:1c:cc:e4:e4:20:08:57:6a:54:5e:0f:01:23:5e:a5: a8:b2:33:36:81:93:54:43:36:a5:0f:17:da:54:06:91:7b:e5: 2c:f9:94:7f:d5:99:76:24:73:fb:ef:e0:8c:05:f5:fe:79:84: 13:7b:4f:8c:dd:6b:b6:8f:90:92:98:49:3a:2f:63:be:07:40: 9f:b9:35:b7:9f:59:19:c6:cb:95:19:7d:d2:ca:9b:31:e4:8c: a3:e3:f7:9f:64:e9:15:db:c3:3e:6b:99:b6:68:1a:c2:4f:19: 46:bb:87:09:af:10:67:50:cf:4d:e8:e5:e8:38:f0:c0:bc:c6: 98:2c:1c:b3:02:bb:4b:1e:78:34:ef:6d:a6:74:56:cd:e8:d5: 8b:9d:b7:e4:b0:2e:57:93:15:7e:bc:93:18:40:a5:44:43:90: 18:bc:c3:90:e7:d4:da:a5:8b:1f:49:89:5d:f6:03:2d:b5:03: 2f:83:0d:b7:35:eb:6d:03:04:77:16:ca:21:26:3b:0a:1b:c8: a7:11:dd:4d:30:7c:43:15:77:7b:64:af:7c:ef:8c:33:99:c5: 69:68:b3:e0:6b:4d:cf:d3:d5:14:14:82:74:8e:eb:6d:3f:25: b1:32:69:45:af:26:1d:da:79:2f:4f:19:52:17:7e:02:00:8f: 31:9b:c4:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIOVU8osB3RScRu+lZVtJVm530GcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODA0MDAxMDEwWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGExMzg0NzZmMDE2NDg4NmY4NzNmM2RiN2I1MjE0Mjdl MjY2MGYxMTc0YTJkOTMxZGIwYzg2MjExNDAwNTgyMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOZjqPMl4AzSbeefwthl8V7qjXLeA/srOiEcUdsPFt+Tcu Z7zwICL0+VUtELeVf2qco4489bj927M8nBaAstmfguf7jw8t9uqnlkz3nKixvnBP SO7qlQcJqmxFl0qYJVGMj/grGINEO6TVYzLTFkG3rnEgEaBFUdKQ6hsmWrTW4T6c MnPe6t96ukI1jHFl1ZfueTWWwFv++Jk+HJpCyBbcQQvDr9/IPIaHrgDqDFZ9ALhU lXFnJT1e9apv8lKOLBAU0tylUiCpePXZ4/TOj3fVB5f4nTPhtIoeL53vwbKHRBJp QzM7tItHVyh/2XdT8009/fByqPE60RklRtBqp7QDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURSc5DvzJAdFBmRdrhO0CtJpBZjkwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2I0MjI1N2EwLTQ1MDMtNDE0Yy05ZWU2LWMyMGQ0YTNiZjFhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWIwDQYJKoZIhvcNAQELBQADggEBAJcpCBzM5OQgCFdqVF4PASNepaiy MzaBk1RDNqUPF9pUBpF75Sz5lH/VmXYkc/vv4IwF9f55hBN7T4zda7aPkJKYSTov Y74HQJ+5NbefWRnGy5UZfdLKmzHkjKPj959k6RXbwz5rmbZoGsJPGUa7hwmvEGdQ z03o5eg48MC8xpgsHLMCu0seeDTvbaZ0Vs3o1Yudt+SwLleTFX68kxhApURDkBi8 w5Dn1Nqlix9JiV32Ay21Ay+DDbc1620DBHcWyiEmOwobyKcR3U0wfEMVd3tkr3zv jDOZxWlos+BrTc/T1RQUgnSO620/JbEyaUWvJh3aeS9PGVIXfgIAjzGbxKk= -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:38 2026 by rpki-client