$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa File: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (raw, json) Hash identifier: 69XMwCuD2Q9WrWl02YXCXnspi4ISvPBSkm9GIIWuCTM= Subject key identifier: 93:54:C2:A2:F2:40:24:DE:C4:AD:2F:52:51:C2:1B:2D:95:06:17:72 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 3AED817023BDCAA0059B9C53080F8C75DFA2F8EA Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa Signing time: Tue 04 Aug 2026 00:10:06 +0000 ROA not before: Tue 04 Aug 2026 00:10:06 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ed:81:70:23:bd:ca:a0:05:9b:9c:53:08:0f:8c:75:df:a2:f8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 00:10:06 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=54d5e3a8d2b6500efe4800166f28519d3ccd7c76eaed02a203f5bf91bdc60344, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:ef:53:34:98:7e:b6:91:32:25:71:ce:46: 63:12:86:5d:b5:e0:62:7a:4b:7d:e4:f6:b6:1e:1e: ea:6e:9b:22:39:04:3a:19:28:04:14:72:74:98:8d: df:1e:2a:0d:f1:34:57:18:83:94:2e:38:55:db:cd: 48:74:70:62:f4:50:6f:6b:e3:9b:64:fb:34:55:cd: 66:52:60:39:20:34:90:a4:3e:c4:80:af:2c:8c:6b: 78:c4:20:f5:be:60:c4:ae:ec:2a:41:41:3a:cc:98: af:8c:9c:74:5c:a1:99:5b:ea:39:b6:c7:a8:b4:d6: 68:32:00:fb:ac:a6:55:1a:5e:47:7a:fb:9b:2c:91: 02:84:3a:d3:20:50:6b:e3:03:bf:39:8a:f8:d6:c7: 6f:41:a8:0d:62:b6:5b:42:8f:6d:da:88:f2:0c:7a: 66:61:5f:92:63:32:d2:7f:48:72:a9:f5:78:55:0a: 97:62:71:1a:cb:c3:57:a9:06:e6:26:f7:c2:c0:05: 60:9d:90:e8:53:10:f0:80:df:c9:01:1e:c7:9c:fa: d5:76:bd:2c:23:e9:68:1f:96:8a:b0:a9:88:9b:ea: 02:98:df:68:24:4c:8b:9e:fd:14:a0:c1:9e:19:0e: d2:82:75:c6:8f:fd:bc:dd:77:5a:17:cc:2e:cb:8e: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:54:C2:A2:F2:40:24:DE:C4:AD:2F:52:51:C2:1B:2D:95:06:17:72 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.101.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:f0:82:4e:01:87:0e:bf:5b:10:5c:aa:13:5f:0c:1a:52:72: 75:04:17:3d:27:ed:df:3d:db:55:6e:f0:13:f0:b1:bd:aa:04: a8:c4:1e:f1:78:57:dc:0c:28:00:fd:45:08:63:f8:92:f4:8b: 47:3c:68:24:db:52:97:5b:31:13:af:e1:42:be:22:eb:9b:44: 66:b2:25:a7:b4:79:f1:b1:bf:25:4b:96:de:35:7f:47:35:0b: 89:d9:41:4e:7d:78:85:4d:8c:4c:7e:fe:9e:c7:65:c9:72:fe: 40:f4:8e:de:de:7e:17:52:4c:8b:b5:25:31:ef:90:df:fd:a6: 63:98:53:df:d4:f0:97:59:e2:eb:08:5a:c9:44:aa:48:45:a5: cd:89:85:44:0c:49:18:02:be:60:35:31:23:32:92:1d:b5:58: 48:c6:12:7d:07:81:56:c3:a5:11:29:d9:5b:5d:a3:16:d8:29: 5b:41:98:73:65:71:40:f0:9b:40:d3:2d:14:4f:c8:21:d4:9d: 7a:93:98:23:8d:95:2a:f5:a1:5d:32:9a:64:21:50:37:49:47: ea:95:d6:27:99:20:10:f5:79:08:ce:bd:ea:0d:cc:0d:5b:47: 74:ff:1b:77:aa:f0:be:b6:c1:bd:6a:b2:44:a5:21:16:e1:10: ec:ac:70:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOu2BcCO9yqAFm5xTCA+Mdd+i+OowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODA0MDAxMDA2WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGQ1ZTNhOGQyYjY1MDBlZmU0ODAwMTY2ZjI4NTE5ZDNj Y2Q3Yzc2ZWFlZDAyYTIwM2Y1YmY5MWJkYzYwMzQ0MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkye9TNJh+tpEyJXHORmMShl214GJ6S33k9rYeHupumyI5 BDoZKAQUcnSYjd8eKg3xNFcYg5QuOFXbzUh0cGL0UG9r45tk+zRVzWZSYDkgNJCk PsSAryyMa3jEIPW+YMSu7CpBQTrMmK+MnHRcoZlb6jm2x6i01mgyAPusplUaXkd6 +5sskQKEOtMgUGvjA785ivjWx29BqA1itltCj23aiPIMemZhX5JjMtJ/SHKp9XhV CpdicRrLw1epBuYm98LABWCdkOhTEPCA38kBHsec+tV2vSwj6WgfloqwqYib6gKY 32gkTIue/RSgwZ4ZDtKCdcaP/bzdd1oXzC7LjoIZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk1TCovJAJN7ErS9SUcIbLZUGF3IwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2YwMmVmYjFmLThhMTctNGRjNy05YWI0LTljYzIzYmM2OWI5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWUwDQYJKoZIhvcNAQELBQADggEBAD7wgk4Bhw6/WxBcqhNfDBpScnUE Fz0n7d8921Vu8BPwsb2qBKjEHvF4V9wMKAD9RQhj+JL0i0c8aCTbUpdbMROv4UK+ IuubRGayJae0efGxvyVLlt41f0c1C4nZQU59eIVNjEx+/p7HZcly/kD0jt7efhdS TIu1JTHvkN/9pmOYU9/U8JdZ4usIWslEqkhFpc2JhUQMSRgCvmA1MSMykh21WEjG En0HgVbDpREp2VtdoxbYKVtBmHNlcUDwm0DTLRRPyCHUnXqTmCONlSr1oV0ymmQh UDdJR+qV1ieZIBD1eQjOveoNzA1bR3T/G3eq8L62wb1qskSlIRbhEOyscCo= -----END CERTIFICATE-----Generated at Thu Aug 20 23:31:54 2026 by rpki-client