$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa File: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (raw, json) Hash identifier: sCY8uZmePYjGPpohsi018W/7uH/8rmauVECYBBJu+1o= Subject key identifier: 87:28:38:C2:3E:C7:F3:FB:B3:4E:83:81:C4:E3:84:D2:63:A1:79:93 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 09A46D59134C5CC77E5975E91214C1097AD8BE05 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa Signing time: Wed 25 Feb 2026 00:10:17 +0000 ROA not before: Wed 25 Feb 2026 00:10:17 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a4:6d:59:13:4c:5c:c7:7e:59:75:e9:12:14:c1:09:7a:d8:be:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Feb 25 00:10:17 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=90bbc6f214ba9666306561d5da6d5f809979fc5d44ced46e9251ced01bbf260f, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:e9:f3:26:21:ad:14:d6:f7:2d:0d:19:76: 17:ff:26:fe:98:23:72:40:e7:60:15:6a:4e:47:d3: 25:19:d9:24:7c:72:38:60:df:18:58:ee:57:8f:56: 25:eb:42:bf:8d:6e:c8:0f:ef:32:31:a2:5d:d6:fd: af:67:b4:aa:4b:c2:c2:8b:d5:f2:99:6b:0a:96:e6: e8:6a:a5:e1:28:66:e8:66:a3:3c:96:11:5c:d0:b5: 0e:94:d6:58:0a:80:2c:90:b0:18:32:3e:a3:47:11: 29:96:a3:91:c3:0c:47:d4:bb:4e:51:12:96:76:38: 98:8e:3b:b3:4b:e0:57:b2:9d:3e:a9:97:c7:a5:85: ba:f7:1e:2d:23:20:88:7b:96:0f:b9:0f:b1:c6:2f: 36:14:e8:bb:e5:5d:df:b1:8e:f2:a7:7d:75:5f:cd: dd:24:9e:86:f5:fc:7a:df:de:32:b5:4a:78:a0:98: 46:7d:f1:70:15:f3:15:85:a3:c7:88:aa:2f:c4:8a: da:49:bc:7c:3c:dd:0f:35:46:0b:34:0f:8f:1c:37: ac:a2:54:56:98:2d:ba:ce:a9:c8:8f:56:d4:34:e9: ff:9a:05:56:0c:0d:a9:7c:7f:bb:1a:45:a5:29:2f: d4:90:bc:37:44:b6:91:70:21:4b:86:ea:f4:ff:52: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:38:C2:3E:C7:F3:FB:B3:4E:83:81:C4:E3:84:D2:63:A1:79:93 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.100.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:95:15:e0:66:81:fa:05:d7:dc:22:3e:ec:6e:2d:4b:a6:e9: ca:23:50:08:e8:f0:8f:dc:53:25:8d:a8:10:d0:90:bd:47:b3: 63:c9:3c:38:af:66:75:8c:8a:d1:3d:ca:1c:79:95:b1:1d:83: 67:83:fe:10:55:ad:ed:e6:c6:52:df:ff:1f:f9:27:14:c8:d4: de:1c:14:bc:04:48:a1:b5:dc:c5:6b:bf:fe:6c:47:b0:94:5f: b7:e3:a1:84:cb:01:1a:01:38:c8:10:1a:15:d5:e5:2d:78:7f: 43:13:4d:1a:1d:38:39:16:a0:04:a9:7c:b2:7f:70:75:bb:5e: 0a:77:19:46:65:93:22:b0:82:70:62:ba:d4:54:4a:d9:25:30: 60:dc:9b:c4:ce:5e:c5:c1:93:6e:bd:6f:ab:b6:48:1b:4e:52: e3:63:c9:f1:3a:ee:b2:83:4b:bf:d9:ef:84:69:33:91:51:48: c6:36:1a:46:a1:49:ed:ea:eb:cc:de:19:65:ec:cc:18:6c:5f: ff:c8:80:d1:6c:69:fc:e8:59:79:bb:d9:66:55:a4:86:08:2f: b9:e3:57:09:4a:d2:73:6f:1e:a0:e0:8c:d1:6d:92:dc:07:0e: 60:73:17:35:ca:fa:94:59:a1:57:5f:fe:2d:e1:0d:b1:86:67: 75:64:39:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCaRtWRNMXMd+WXXpEhTBCXrYvgUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwMjI1MDAxMDE3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MGJiYzZmMjE0YmE5NjY2MzA2NTYxZDVkYTZkNWY4MDk5 NzlmYzVkNDRjZWQ0NmU5MjUxY2VkMDFiYmYyNjBmMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWBenzJiGtFNb3LQ0Zdhf/Jv6YI3JA52AVak5H0yUZ2SR8 cjhg3xhY7lePViXrQr+NbsgP7zIxol3W/a9ntKpLwsKL1fKZawqW5uhqpeEoZuhm ozyWEVzQtQ6U1lgKgCyQsBgyPqNHESmWo5HDDEfUu05REpZ2OJiOO7NL4FeynT6p l8elhbr3Hi0jIIh7lg+5D7HGLzYU6LvlXd+xjvKnfXVfzd0knob1/Hrf3jK1Snig mEZ98XAV8xWFo8eIqi/EitpJvHw83Q81Rgs0D48cN6yiVFaYLbrOqciPVtQ06f+a BVYMDal8f7saRaUpL9SQvDdEtpFwIUuG6vT/UrMrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhyg4wj7H8/uzToOBxOOE0mOheZMwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzA1YmE5Y2E1LWE5YTktNGRlZi05YzcxLTBjZjQ3ZDA2ZmUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWQwDQYJKoZIhvcNAQELBQADggEBAD2VFeBmgfoF19wiPuxuLUum6coj UAjo8I/cUyWNqBDQkL1Hs2PJPDivZnWMitE9yhx5lbEdg2eD/hBVre3mxlLf/x/5 JxTI1N4cFLwESKG13MVrv/5sR7CUX7fjoYTLARoBOMgQGhXV5S14f0MTTRodODkW oASpfLJ/cHW7Xgp3GUZlkyKwgnBiutRUStklMGDcm8TOXsXBk269b6u2SBtOUuNj yfE67rKDS7/Z74RpM5FRSMY2GkahSe3q68zeGWXszBhsX//IgNFsafzoWXm72WZV pIYIL7njVwlK0nNvHqDgjNFtktwHDmBzFzXK+pRZoVdf/i3hDbGGZ3VkOYs= -----END CERTIFICATE-----Generated at Mon Mar 2 02:49:29 2026 by rpki-client