$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4dec765a-fd07-492c-af7f-ec695090cc13.roa File: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (raw, json) Hash identifier: QBC2+bVWuRHjETKtlggAII5BgLdrbZurNtBn2W6dWWo= Subject key identifier: 26:2B:44:6C:18:F8:F0:53:DF:90:69:9A:73:63:B9:70:ED:58:48:B5 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 6137669CD43F4CC7E37DAFC3B816B51C5966E447 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4dec765a-fd07-492c-af7f-ec695090cc13.roa Signing time: Fri 23 Oct 2026 00:10:17 +0000 ROA not before: Fri 23 Oct 2026 00:10:17 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:37:66:9c:d4:3f:4c:c7:e3:7d:af:c3:b8:16:b5:1c:59:66:e4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Oct 23 00:10:17 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=688dd226991036b855de277a5aa11e1e0fcf56a931d6f4b3d417f56eef601337, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:69:2e:e0:81:a8:cb:63:1c:74:da:00:a3:35: 3b:89:43:92:cf:e7:d9:fc:28:1b:55:98:ea:e7:85: 06:79:be:8a:cd:5c:6c:25:af:d4:4d:c0:60:d3:03: 6f:b4:8c:1b:61:f8:3b:70:93:db:17:9c:e1:37:1c: b5:77:a5:d2:2f:93:d4:49:78:e9:6a:d8:8f:b3:23: cc:04:d6:ce:1b:cf:3a:a6:12:6f:23:ae:17:06:aa: 0e:01:f9:dd:2b:b0:4f:fb:05:28:73:1e:fc:5d:ae: f1:15:5e:f0:52:22:37:99:70:40:fa:ba:e3:d1:06: 79:b9:9b:dd:84:76:39:e1:9c:98:0e:5e:e1:75:2c: e4:c5:c1:4a:54:be:00:4d:67:07:0b:e9:e8:22:43: 04:a7:09:6d:a3:d2:7d:fd:5e:a4:0d:67:e4:00:d6: 33:a6:64:b6:47:36:c6:56:83:d9:65:9e:0d:63:0d: f7:59:b0:ac:68:6f:c2:ef:80:b3:cf:f7:1f:a2:42: 2b:05:26:11:5a:0f:c9:f8:c6:44:82:3b:60:89:88: 84:5e:b2:06:91:d7:b6:65:54:3d:78:ac:a5:e4:bc: 71:d8:2a:20:59:8a:19:f3:e8:99:e0:84:c6:ff:c0: 30:0c:da:ab:02:a0:10:6e:02:f7:8d:1e:f4:a2:22: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2B:44:6C:18:F8:F0:53:DF:90:69:9A:73:63:B9:70:ED:58:48:B5 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/4dec765a-fd07-492c-af7f-ec695090cc13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.99.0/24 Signature Algorithm: sha256WithRSAEncryption 57:e7:b0:f1:83:de:e6:e3:0e:3c:8e:7a:73:20:86:fd:45:d8: 04:de:eb:8e:c4:63:14:55:89:e0:c8:60:70:f0:2e:9c:f3:f2: 84:9e:79:3d:07:9f:45:e3:65:7f:c8:24:86:1d:c1:e0:d9:7f: d5:94:2a:48:49:66:36:44:13:be:97:6e:c4:2e:de:06:20:79: 6b:90:88:71:cb:e2:9b:e6:d6:cc:3a:7c:cf:76:a9:21:e2:32: 3a:39:58:25:ed:c3:fa:c7:82:6d:68:63:45:2e:18:77:a6:0e: 9e:0f:ed:a3:51:9c:63:3f:32:f8:d4:25:be:08:e6:8d:7b:7a: ac:af:be:3b:dd:19:81:39:64:a3:7a:7d:98:ed:56:e2:0c:1c: 96:3c:89:57:8a:a8:60:df:46:3e:1c:1d:47:51:5a:bb:b0:db: 09:fb:d0:b6:37:97:32:36:36:b4:63:cb:c6:9d:85:c9:09:17: 99:4b:3d:14:8f:39:2a:c2:00:92:ee:ff:93:df:35:fe:33:eb: 57:e5:c7:3f:91:5d:fc:12:c5:70:74:f2:fa:6c:8e:e1:c5:d5: 4f:ee:f2:77:7a:60:2a:e8:3e:ba:b1:bb:52:09:a7:3f:cf:da: 72:69:39:f8:f8:10:60:68:85:e8:9d:aa:6c:0e:4b:f6:17:ee: 74:3b:8e:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYTdmnNQ/TMfjfa/DuBa1HFlm5EcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYxMDIzMDAxMDE3WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODhkZDIyNjk5MTAzNmI4NTVkZTI3N2E1YWExMWUxZTBm Y2Y1NmE5MzFkNmY0YjNkNDE3ZjU2ZWVmNjAxMzM3MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbaS7ggajLYxx02gCjNTuJQ5LP59n8KBtVmOrnhQZ5vorN XGwlr9RNwGDTA2+0jBth+Dtwk9sXnOE3HLV3pdIvk9RJeOlq2I+zI8wE1s4bzzqm Em8jrhcGqg4B+d0rsE/7BShzHvxdrvEVXvBSIjeZcED6uuPRBnm5m92EdjnhnJgO XuF1LOTFwUpUvgBNZwcL6egiQwSnCW2j0n39XqQNZ+QA1jOmZLZHNsZWg9llng1j DfdZsKxob8LvgLPP9x+iQisFJhFaD8n4xkSCO2CJiIResgaR17ZlVD14rKXkvHHY KiBZihnz6JnghMb/wDAM2qsCoBBuAveNHvSiIrstAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJitEbBj48FPfkGmac2O5cO1YSLUwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzRkZWM3NjVhLWZkMDctNDkyYy1hZjdmLWVjNjk1MDkwY2MxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWMwDQYJKoZIhvcNAQELBQADggEBAFfnsPGD3ubjDjyOenMghv1F2ATe 647EYxRVieDIYHDwLpzz8oSeeT0Hn0XjZX/IJIYdweDZf9WUKkhJZjZEE76XbsQu 3gYgeWuQiHHL4pvm1sw6fM92qSHiMjo5WCXtw/rHgm1oY0UuGHemDp4P7aNRnGM/ MvjUJb4I5o17eqyvvjvdGYE5ZKN6fZjtVuIMHJY8iVeKqGDfRj4cHUdRWruw2wn7 0LY3lzI2NrRjy8adhckJF5lLPRSPOSrCAJLu/5PfNf4z61flxz+RXfwSxXB08vps juHF1U/u8nd6YCroPrqxu1IJpz/P2nJpOfj4EGBoheidqmwOS/YX7nQ7jh8= -----END CERTIFICATE-----Generated at Sun Nov 8 02:53:33 2026 by rpki-client