$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/0f37c389-361f-4ed6-87b6-8ed5715101d0.roa File: 0f37c389-361f-4ed6-87b6-8ed5715101d0.roa (raw, json) Hash identifier: puf25+DUmPULV7cm2wvSPzJngz4HPF+6ALn+gKfP1QY= Subject key identifier: 2C:1D:67:64:82:35:3C:97:DB:7A:E8:91:A8:75:DB:0C:55:10:55:9F Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 7C2B9950C274825F45B84F0A66C3919EE95BB532 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/0f37c389-361f-4ed6-87b6-8ed5715101d0.roa Signing time: Tue 25 Aug 2026 00:00:07 +0000 ROA not before: Tue 25 Aug 2026 00:00:07 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 64.27.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2b:99:50:c2:74:82:5f:45:b8:4f:0a:66:c3:91:9e:e9:5b:b5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 25 00:00:07 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=32d73d1fe719a94f8f3d829c663796ac5c56e6968e1ad17170d1ee3b04efdcc6, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:46:f5:ff:b2:c2:c1:48:e8:89:92:11:27: 41:f1:93:99:6d:97:ca:79:82:fb:d8:40:d3:c1:cf: 0d:db:78:80:4f:87:52:ad:ae:b7:ad:5e:a1:88:ad: 29:ff:dc:82:e6:1c:51:a6:bd:15:8b:03:d3:73:2f: 75:c5:d4:e9:71:e8:9b:c2:19:2b:b4:27:33:ec:68: f5:84:2d:25:27:f0:8d:93:31:2d:8b:08:1c:c1:1b: 2a:f9:61:8a:80:4c:99:c8:95:50:a5:d9:56:b5:2b: e1:01:2a:65:28:41:bf:66:c0:22:ae:77:c7:5a:97: ea:8f:99:05:72:80:39:eb:e8:a9:82:0d:62:92:e9: d8:23:28:7c:bd:37:ee:32:77:61:41:e4:24:31:33: 22:c3:c5:3e:68:e9:be:b5:89:c2:4a:75:c5:ec:98: 37:3c:aa:04:46:5a:ef:9f:71:f9:32:ae:56:3f:b8: 37:d4:2e:81:03:cb:0b:25:5e:7c:00:31:71:ad:9d: bc:24:b7:7a:a0:73:cc:95:1c:14:c8:a7:31:64:f8: 55:98:f9:1b:8e:03:b7:47:de:5c:3d:2e:f3:82:2f: 3d:8b:76:80:d4:63:13:09:d3:36:36:1c:0e:57:8f: 4a:92:fd:69:15:6d:7e:27:54:11:1a:dd:9e:c8:48: d0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:67:64:82:35:3C:97:DB:7A:E8:91:A8:75:DB:0C:55:10:55:9F X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/0f37c389-361f-4ed6-87b6-8ed5715101d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.27.0.0/19 Signature Algorithm: sha256WithRSAEncryption 63:13:34:b7:6f:0c:6c:79:af:ed:ad:13:f3:95:25:dc:b4:46: a9:6c:fb:9b:60:b1:9a:fc:56:89:11:bf:cd:da:b8:a0:5e:37: e1:8e:5b:41:ed:dd:8e:a9:b3:ae:12:be:c5:f7:92:da:0c:13: d2:b8:69:23:7d:60:e2:a8:75:bb:0d:59:95:0b:aa:5e:fe:5e: 98:48:29:28:b5:b8:86:67:d2:54:18:a4:17:db:d7:b8:3a:e5: b0:3c:87:4f:af:ef:7e:c8:55:6c:85:a5:50:c3:9b:28:c5:58: 41:94:91:7d:71:30:83:84:c8:13:41:2f:62:27:de:35:d2:dd: 05:b7:27:3f:d2:d2:05:b4:36:e6:37:5f:d8:d2:25:c8:94:85: 34:a0:e4:76:e0:c5:9d:df:40:85:45:e3:bf:c6:10:28:6c:e9: 80:77:da:ae:33:ea:a9:41:79:b1:ca:df:93:25:2b:a0:65:e7: ae:6a:cd:70:1b:83:15:90:d9:6b:1f:f5:d5:38:39:7d:0b:0c: 59:9d:dd:e4:21:01:c7:ba:21:bf:82:7c:ff:28:02:58:ef:28: fd:c1:93:cf:85:a9:d3:ab:d9:8b:72:d1:12:be:e5:27:6b:2e: ad:22:e0:fe:82:39:b8:84:97:8a:89:72:a1:91:78:59:11:7d: c5:70:95:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfCuZUMJ0gl9FuE8KZsORnulbtTIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODI1MDAwMDA3WhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmQ3M2QxZmU3MTlhOTRmOGYzZDgyOWM2NjM3OTZhYzVj NTZlNjk2OGUxYWQxNzE3MGQxZWUzYjA0ZWZkY2M2MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnqEb1/7LCwUjoiZIRJ0Hxk5ltl8p5gvvYQNPBzw3beIBP h1KtrretXqGIrSn/3ILmHFGmvRWLA9NzL3XF1Olx6JvCGSu0JzPsaPWELSUn8I2T MS2LCBzBGyr5YYqATJnIlVCl2Va1K+EBKmUoQb9mwCKud8dal+qPmQVygDnr6KmC DWKS6dgjKHy9N+4yd2FB5CQxMyLDxT5o6b61icJKdcXsmDc8qgRGWu+fcfkyrlY/ uDfULoEDywslXnwAMXGtnbwkt3qgc8yVHBTIpzFk+FWY+RuOA7dH3lw9LvOCLz2L doDUYxMJ0zY2HA5Xj0qS/WkVbX4nVBEa3Z7ISNBHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULB1nZII1PJfbeuiRqHXbDFUQVZ8wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzBmMzdjMzg5LTM2MWYtNGVkNi04N2I2LThlZDU3MTUxMDFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAGwAwDQYJKoZIhvcNAQELBQADggEBAGMTNLdvDGx5r+2tE/OVJdy0Rqls +5tgsZr8VokRv83auKBeN+GOW0Ht3Y6ps64SvsX3ktoME9K4aSN9YOKodbsNWZUL ql7+XphIKSi1uIZn0lQYpBfb17g65bA8h0+v737IVWyFpVDDmyjFWEGUkX1xMIOE yBNBL2In3jXS3QW3Jz/S0gW0NuY3X9jSJciUhTSg5HbgxZ3fQIVF47/GEChs6YB3 2q4z6qlBebHK35MlK6Bl565qzXAbgxWQ2Wsf9dU4OX0LDFmd3eQhAce6Ib+CfP8o AljvKP3Bk8+FqdOr2Yty0RK+5SdrLq0i4P6CObiEl4qJcqGReFkRfcVwlYY= -----END CERTIFICATE-----Generated at Sun Sep 20 21:49:41 2026 by rpki-client