$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/ca3490d0-1e9e-400b-af5e-b8236be17139.roa File: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (raw, json) Hash identifier: m2CXIpl/JwXXRUK9PZdmvRswj5V6wOlJJYNXNaekaHk= Subject key identifier: 44:57:56:D2:74:61:E3:9F:A4:79:3A:AA:F7:60:85:D8:0D:13:74:41 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 26B2AA548257CF41DD616EC01E933188F161D374 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/ca3490d0-1e9e-400b-af5e-b8236be17139.roa Signing time: Tue 04 Aug 2026 00:10:09 +0000 ROA not before: Tue 04 Aug 2026 00:10:09 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b2:aa:54:82:57:cf:41:dd:61:6e:c0:1e:93:31:88:f1:61:d3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 00:10:09 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=4caa9e1409424f8daea4ca585fc3d1de79e06ec985a6fd3b5dfec384184f8277, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:f3:11:01:8d:ad:ef:bd:31:ba:e1:71:76: 68:8d:ae:5a:8b:49:3d:10:1c:88:0b:c2:48:ca:27: e1:78:a5:93:90:5b:7b:f6:82:7c:62:d4:c3:60:59: fb:29:5f:61:c3:30:32:00:c3:5a:4c:38:38:6d:fb: 9c:0f:3c:5a:64:a0:d0:35:f8:e6:a8:80:ac:de:e7: 0f:7a:89:2b:35:ee:2c:aa:ae:56:6b:07:bb:8b:c9: 76:c9:3b:2d:b2:0b:69:f0:c0:cd:29:79:0c:8e:ae: 9a:31:cb:f0:bf:bb:6e:bc:f3:bc:74:be:8b:33:0d: 49:6d:ec:12:bc:00:1d:96:1f:59:f7:e0:e3:f9:21: 61:62:ab:a3:40:9e:0e:60:64:82:ad:56:96:6d:56: aa:52:91:b1:f8:cc:a3:45:3a:b7:19:c9:9d:57:fc: bf:e1:9f:c4:f6:3d:87:5e:b9:f2:f3:8d:4d:47:c0: db:b5:b8:e7:07:38:4e:e2:2d:fb:50:d5:14:ff:aa: 53:63:ab:db:58:24:5a:c6:f6:70:3e:89:a1:04:8c: 3a:7a:53:9b:58:0e:53:a2:c0:28:b9:05:69:d8:4e: 0c:a5:6d:c7:53:50:ee:dc:21:18:3a:0b:7b:24:01: 4d:04:44:f3:54:4c:03:3b:3f:50:6f:d4:c9:ae:7d: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:57:56:D2:74:61:E3:9F:A4:79:3A:AA:F7:60:85:D8:0D:13:74:41 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/ca3490d0-1e9e-400b-af5e-b8236be17139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/19 Signature Algorithm: sha256WithRSAEncryption 35:d8:cc:85:bf:50:86:b9:b8:0c:85:3c:4c:2d:7e:e6:92:2b: 77:b8:0a:85:f1:2a:74:9c:b2:5d:41:ca:16:a0:70:f0:42:e2: 76:42:71:93:25:4b:a5:39:14:ad:7b:f1:de:61:96:c2:a5:67: c0:c6:27:c4:56:aa:d7:9c:33:99:02:44:25:2f:c4:14:9a:23: 6a:a3:e9:25:9b:af:2e:1d:9f:cf:d3:12:76:4d:db:e8:f2:6a: 86:cf:88:aa:20:d5:6f:9e:4e:0c:c2:06:68:8a:ea:2b:ae:ba: 37:9e:55:6c:db:0a:f4:c1:ab:57:4f:b2:4d:08:29:b9:18:51: ec:25:9b:ea:41:c8:df:9d:e4:22:ed:ea:6e:1a:7a:13:24:65: 12:74:90:b8:41:3b:26:00:b5:d3:9a:46:4a:09:eb:0e:d7:9d: 3d:00:aa:55:33:e8:8a:5c:14:44:76:03:8b:1a:92:66:7e:84: 76:70:ec:1b:ce:d7:da:4b:dd:ac:ed:8f:07:38:3c:df:9e:ee: 52:46:98:c6:cb:cf:b9:eb:66:ac:e2:1a:2a:09:f9:5c:6b:34: 40:a8:00:e5:f7:16:49:d1:05:9b:ac:8e:8d:d2:4c:3e:23:79: 83:2e:eb:09:67:30:55:de:a2:fa:f0:ef:62:5e:4e:ac:ad:43: 96:52:0f:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJrKqVIJXz0HdYW7AHpMxiPFh03QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODA0MDAxMDA5WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2FhOWUxNDA5NDI0ZjhkYWVhNGNhNTg1ZmMzZDFkZTc5 ZTA2ZWM5ODVhNmZkM2I1ZGZlYzM4NDE4NGY4Mjc3MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7qvMRAY2t770xuuFxdmiNrlqLST0QHIgLwkjKJ+F4pZOQ W3v2gnxi1MNgWfspX2HDMDIAw1pMODht+5wPPFpkoNA1+OaogKze5w96iSs17iyq rlZrB7uLyXbJOy2yC2nwwM0peQyOrpoxy/C/u26887x0voszDUlt7BK8AB2WH1n3 4OP5IWFiq6NAng5gZIKtVpZtVqpSkbH4zKNFOrcZyZ1X/L/hn8T2PYdeufLzjU1H wNu1uOcHOE7iLftQ1RT/qlNjq9tYJFrG9nA+iaEEjDp6U5tYDlOiwCi5BWnYTgyl bcdTUO7cIRg6C3skAU0ERPNUTAM7P1Bv1MmufR+LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURFdW0nRh45+keTqq92CF2A0TdEEwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2NhMzQ5MGQwLTFlOWUtNDAwYi1hZjVlLWI4MjM2YmUxNzEzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGKWAwDQYJKoZIhvcNAQELBQADggEBADXYzIW/UIa5uAyFPEwtfuaSK3e4 CoXxKnScsl1ByhagcPBC4nZCcZMlS6U5FK178d5hlsKlZ8DGJ8RWqtecM5kCRCUv xBSaI2qj6SWbry4dn8/TEnZN2+jyaobPiKog1W+eTgzCBmiK6iuuujeeVWzbCvTB q1dPsk0IKbkYUewlm+pByN+d5CLt6m4aehMkZRJ0kLhBOyYAtdOaRkoJ6w7XnT0A qlUz6IpcFER2A4sakmZ+hHZw7BvO19pL3aztjwc4PN+e7lJGmMbLz7nrZqziGioJ +VxrNECoAOX3FknRBZusjo3STD4jeYMu6wlnMFXeovrw72JeTqytQ5ZSDyk= -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:36 2026 by rpki-client