$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa File: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (raw, json) Hash identifier: 9EiRdGFr11wY0DaKEQrm7vzmoEwwXp0MyY0EXHEYjUY= Subject key identifier: 7B:4B:84:29:A3:5A:C0:D4:FF:86:ED:59:51:60:CD:99:2D:EF:E6:A4 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 529E2F48F24D1D28AE84A055010C5986314DDF3A Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa Signing time: Fri 23 Oct 2026 00:10:23 +0000 ROA not before: Fri 23 Oct 2026 00:10:23 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9e:2f:48:f2:4d:1d:28:ae:84:a0:55:01:0c:59:86:31:4d:df:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Oct 23 00:10:23 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=31d824f871b31f3d885e4f31b3f8263d4cac00c787f656735dfbfcc8cde7e07a, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:de:42:77:19:f7:72:8e:0b:6d:50:ae:52: fe:78:c7:8a:84:c3:99:52:26:25:bb:db:9d:41:f0: 87:d2:7a:e6:6f:21:e6:1c:b4:e4:ef:17:e6:07:85: 18:dc:2a:64:c4:29:b8:89:73:bb:0e:b9:1c:bb:fc: 26:ee:ec:95:57:e2:b0:3b:c7:b4:2e:2f:06:4c:94: c0:60:34:fd:84:a6:dd:8a:52:6b:ed:bd:fe:33:1e: d6:68:c2:f3:32:69:7b:a0:72:75:6b:70:71:7a:6b: f6:66:6d:3e:f9:60:a1:42:bd:6b:00:bb:50:d3:7e: f5:25:6a:7d:5a:ed:9a:6e:f3:70:f6:a4:3a:87:4f: 65:15:86:71:0a:96:cd:9d:89:da:38:5e:ed:98:2d: b4:98:52:56:ea:1e:b8:9b:f8:b5:1c:54:f9:f7:d6: 30:77:b5:34:05:71:cf:12:8f:24:df:46:21:01:aa: 4f:ca:49:10:b2:d3:91:83:0a:e9:bd:43:71:1f:ae: 7c:4a:e4:22:8d:17:90:04:a4:15:c7:af:3c:61:70: 34:e0:9a:92:e9:8b:1c:fe:e9:76:9f:d4:a4:07:72: 8f:51:67:dc:be:77:23:de:ab:df:1c:2f:a8:11:67: f6:fa:5d:22:53:43:fe:c7:6d:98:1e:a9:9a:12:15: cd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4B:84:29:A3:5A:C0:D4:FF:86:ED:59:51:60:CD:99:2D:EF:E6:A4 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.100.0/24 Signature Algorithm: sha256WithRSAEncryption bc:e2:15:5c:61:91:83:96:cc:0d:a2:51:7b:d5:c2:8d:0f:df: cb:82:00:e8:a0:c5:a3:b0:63:0a:bf:c0:4d:21:04:69:29:1b: be:6b:d4:a9:35:db:b8:07:8e:91:89:77:0f:d0:ad:84:62:33: 71:5e:bc:b1:8e:df:96:5d:7b:a6:b7:a3:0c:19:b1:89:93:df: f9:55:dd:48:33:ce:37:54:1c:e9:60:f5:b1:25:64:94:b1:1b: fb:66:ae:b8:c2:86:7a:cd:b1:84:13:90:45:5a:13:61:4e:b6: ed:f8:c0:a7:34:26:9e:5a:25:0a:63:5f:2d:73:fe:73:5f:bf: 32:a8:75:a7:b6:c1:57:2c:a2:d4:66:b8:3a:08:29:df:c2:88: da:fa:a2:82:96:5a:92:dd:22:03:ec:0f:2c:88:aa:fc:7e:ee: 37:8f:14:2e:0e:71:8d:51:87:d3:17:2b:23:8f:1a:d6:42:54: d5:49:f5:5b:c0:90:f5:38:81:f2:35:2e:a0:3c:94:e6:89:9b: 60:92:3f:8c:11:75:5e:93:fc:a8:a0:b2:fb:a7:50:d1:ab:97: af:04:a0:01:bb:ed:ab:d5:00:f5:db:b3:cb:bc:97:86:38:4c: 54:90:99:c3:da:79:22:97:d8:d3:19:10:53:14:cb:50:78:e4: c5:4c:8a:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUp4vSPJNHSiuhKBVAQxZhjFN3zowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYxMDIzMDAxMDIzWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMWQ4MjRmODcxYjMxZjNkODg1ZTRmMzFiM2Y4MjYzZDRj YWMwMGM3ODdmNjU2NzM1ZGZiZmNjOGNkZTdlMDdhMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6y95Cdxn3co4LbVCuUv54x4qEw5lSJiW7251B8IfSeuZv IeYctOTvF+YHhRjcKmTEKbiJc7sOuRy7/Cbu7JVX4rA7x7QuLwZMlMBgNP2Ept2K Umvtvf4zHtZowvMyaXugcnVrcHF6a/ZmbT75YKFCvWsAu1DTfvUlan1a7Zpu83D2 pDqHT2UVhnEKls2dido4Xu2YLbSYUlbqHrib+LUcVPn31jB3tTQFcc8SjyTfRiEB qk/KSRCy05GDCum9Q3EfrnxK5CKNF5AEpBXHrzxhcDTgmpLpixz+6Xaf1KQHco9R Z9y+dyPeq98cL6gRZ/b6XSJTQ/7HbZgeqZoSFc1LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe0uEKaNawNT/hu1ZUWDNmS3v5qQwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzA1YmE5Y2E1LWE5YTktNGRlZi05YzcxLTBjZjQ3ZDA2ZmUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWQwDQYJKoZIhvcNAQELBQADggEBALziFVxhkYOWzA2iUXvVwo0P38uC AOigxaOwYwq/wE0hBGkpG75r1Kk127gHjpGJdw/QrYRiM3FevLGO35Zde6a3owwZ sYmT3/lV3UgzzjdUHOlg9bElZJSxG/tmrrjChnrNsYQTkEVaE2FOtu34wKc0Jp5a JQpjXy1z/nNfvzKodae2wVcsotRmuDoIKd/CiNr6ooKWWpLdIgPsDyyIqvx+7jeP FC4OcY1Rh9MXKyOPGtZCVNVJ9VvAkPU4gfI1LqA8lOaJm2CSP4wRdV6T/Kigsvun UNGrl68EoAG77avVAPXbs8u8l4Y4TFSQmcPaeSKX2NMZEFMUy1B45MVMivA= -----END CERTIFICATE-----Generated at Sun Nov 8 02:52:55 2026 by rpki-client