$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa File: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (raw, json) Hash identifier: 1vJf87Sj6j/cecgOVJkhykbGs7KRiPZ2+yAVY+defkM= Subject key identifier: 08:BA:A5:2E:47:3D:46:F9:C7:8A:51:C8:78:93:1A:11:B9:49:B7:70 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 3B4367246DFB44C79076E8F8D475BBD58CF0C10A Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa Signing time: Wed 25 Feb 2026 00:10:05 +0000 ROA not before: Wed 25 Feb 2026 00:10:05 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:43:67:24:6d:fb:44:c7:90:76:e8:f8:d4:75:bb:d5:8c:f0:c1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Feb 25 00:10:05 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=c906cecc0755339da24cb8cbc6fa4969a688f8f1aca5874b962f254053edb13f, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:80:79:b2:75:f7:23:16:50:d2:49:77:f8: 48:b7:c4:6d:a4:1b:1c:65:04:8f:20:07:5c:82:90: d1:7b:fb:08:2f:2e:c8:0e:c9:b6:75:f1:be:fa:2e: 49:89:ce:9f:98:e2:1b:9c:56:c0:bc:13:e3:92:39: ba:21:66:69:5b:3d:96:aa:e8:ba:c9:d9:65:1f:75: 20:67:02:9d:f0:49:24:0f:f8:e6:8b:17:04:e8:37: b7:b3:7c:cb:20:23:d5:a5:06:88:66:c3:27:0a:8a: 1b:8b:36:9f:72:20:06:53:a6:79:3c:84:f7:d4:e3: a9:35:0b:16:e3:b1:1b:a6:54:65:e5:71:31:bc:f5: 42:46:78:70:0b:98:4e:b6:f5:65:8d:b6:92:78:ea: fe:82:a6:ee:58:ca:6d:bf:44:15:4f:af:28:11:8d: c7:70:18:e5:b3:72:b9:1c:94:2c:e9:c5:64:bf:da: ae:85:b5:1c:3e:e1:10:83:12:a5:e4:d7:4a:ef:5d: 84:b2:77:aa:d1:0a:9c:86:68:67:35:89:96:cd:89: 85:ba:1f:a2:26:ae:3b:d0:93:6d:35:4c:98:66:aa: 22:e2:ee:f2:68:59:12:76:4f:37:f2:0c:3e:d3:2a: c5:64:64:3f:3d:c3:6e:1c:22:9c:f0:79:a3:8d:03: 3f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BA:A5:2E:47:3D:46:F9:C7:8A:51:C8:78:93:1A:11:B9:49:B7:70 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.102.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:ec:13:8a:37:98:7d:aa:77:65:f6:27:6c:75:03:b4:f9:27: a9:b2:4b:de:23:c5:e9:03:7b:fb:d4:67:4f:18:bc:88:8f:03: a7:3e:b9:fe:4b:48:8b:dc:92:a2:6d:62:24:1f:17:56:6a:c9: 06:29:6a:9b:81:5d:41:a0:5a:26:8b:32:a5:a3:f1:f7:b5:08: 38:42:56:85:07:69:46:53:95:38:55:e9:f5:f3:a4:66:98:ec: 27:fe:03:24:41:e2:dc:c0:03:67:1e:bd:15:ec:5b:87:e4:a7: 75:9c:bb:1c:24:2f:df:74:0f:90:7c:3e:8b:6e:6b:78:33:59: ce:f5:59:98:03:eb:58:a0:d9:46:9b:f3:8c:c3:43:64:70:23: e4:05:81:93:50:cc:38:f1:9b:09:bb:94:e3:92:a2:02:aa:ae: 54:86:7b:67:66:09:22:ba:d4:8c:20:59:85:f3:3b:01:54:7f: c8:f7:11:78:a2:ec:b7:69:ed:ed:5f:31:01:af:30:74:75:72: 9a:a6:d2:48:d2:b0:56:4b:71:37:fa:80:69:97:3e:d5:90:97: 14:ca:c4:b6:54:28:5a:7c:81:f2:e8:18:16:0b:05:6f:11:81: 3c:62:3c:61:85:08:f3:5a:b9:d5:58:1c:b1:3c:12:30:f5:59: 4e:dd:c9:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO0NnJG37RMeQduj41HW71YzwwQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwMjI1MDAxMDA1WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTA2Y2VjYzA3NTUzMzlkYTI0Y2I4Y2JjNmZhNDk2OWE2 ODhmOGYxYWNhNTg3NGI5NjJmMjU0MDUzZWRiMTNmMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIlIB5snX3IxZQ0kl3+Ei3xG2kGxxlBI8gB1yCkNF7+wgv LsgOybZ18b76LkmJzp+Y4hucVsC8E+OSObohZmlbPZaq6LrJ2WUfdSBnAp3wSSQP +OaLFwToN7ezfMsgI9WlBohmwycKihuLNp9yIAZTpnk8hPfU46k1CxbjsRumVGXl cTG89UJGeHALmE629WWNtpJ46v6Cpu5Yym2/RBVPrygRjcdwGOWzcrkclCzpxWS/ 2q6FtRw+4RCDEqXk10rvXYSyd6rRCpyGaGc1iZbNiYW6H6ImrjvQk201TJhmqiLi 7vJoWRJ2TzfyDD7TKsVkZD89w24cIpzweaONAz9zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCLqlLkc9RvnHilHIeJMaEblJt3AwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzg0ZmEyMzYwLWI5YzYtNDdiZC04NWRjLWJlMzdjZjUyMDVjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWYwDQYJKoZIhvcNAQELBQADggEBAD/sE4o3mH2qd2X2J2x1A7T5J6my S94jxekDe/vUZ08YvIiPA6c+uf5LSIvckqJtYiQfF1ZqyQYpapuBXUGgWiaLMqWj 8fe1CDhCVoUHaUZTlThV6fXzpGaY7Cf+AyRB4tzAA2cevRXsW4fkp3WcuxwkL990 D5B8Potua3gzWc71WZgD61ig2Uab84zDQ2RwI+QFgZNQzDjxmwm7lOOSogKqrlSG e2dmCSK61IwgWYXzOwFUf8j3EXii7Ldp7e1fMQGvMHR1cpqm0kjSsFZLcTf6gGmX PtWQlxTKxLZUKFp8gfLoGBYLBW8RgTxiPGGFCPNaudVYHLE8EjD1WU7dybA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:21:32 2026 by rpki-client