$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/8a0cac28-29b8-4996-b010-5eab278cc342.roa File: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (raw, json) Hash identifier: g/aFwRXuRzt0saqQmh+G5iba81bDlaucvSxSrIAjMds= Subject key identifier: C4:DD:04:5F:43:99:ED:0F:AC:1F:D6:CC:AD:46:89:A0:A7:C2:85:89 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 20FC768B9E433E45A92C6379C64BAB6C54B758DB Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/8a0cac28-29b8-4996-b010-5eab278cc342.roa Signing time: Fri 23 Oct 2026 00:10:23 +0000 ROA not before: Fri 23 Oct 2026 00:10:23 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fc:76:8b:9e:43:3e:45:a9:2c:63:79:c6:4b:ab:6c:54:b7:58:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Oct 23 00:10:23 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=cb84913ef554a1c53039711ce8810bd86f6cf9dc2b258a98626fc12c139a18a4, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7a:98:9e:76:c2:a2:a2:3a:23:2c:d6:c9:e7: f7:e1:35:b5:f0:74:82:42:34:a1:27:33:e7:72:72: 05:f7:5d:cc:b6:7b:a3:f2:5f:eb:16:a6:28:31:33: f0:66:6c:58:6d:6f:a2:6f:ae:2f:75:75:c7:9c:51: 4e:2c:0d:9c:8d:dd:fc:ac:ce:10:d7:47:9e:54:de: 37:6d:fc:79:1e:6b:69:06:78:b2:81:02:1d:7a:54: 3f:d0:35:57:b3:6e:7b:df:3c:88:ce:b7:dc:4d:1c: 27:ea:f2:77:e7:b7:85:ff:f4:09:03:2c:55:91:6a: c2:f1:94:fb:9e:9e:8d:80:65:2f:e3:41:cb:6b:7e: 99:c7:ed:d1:c5:b0:9d:f2:ac:c4:8d:11:51:fe:65: df:8e:d9:ca:b8:c0:79:ca:c1:42:16:16:97:71:fd: 99:8a:48:00:bb:ac:48:fc:c8:72:8d:d4:57:d7:41: 25:b3:66:54:fd:e7:66:d6:6c:b5:2f:a6:c2:22:76: fe:bd:bc:ad:c7:c1:e9:f8:9b:9c:8c:30:8c:82:ca: 27:ea:80:f5:c5:2b:39:91:bb:a4:08:94:bc:4e:05: 40:30:94:5e:72:77:7a:3c:34:e8:d6:78:4b:fc:55: 1c:f9:1f:4b:5f:59:5c:70:ba:7c:e8:15:33:c5:43: 6c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DD:04:5F:43:99:ED:0F:AC:1F:D6:CC:AD:46:89:A0:A7:C2:85:89 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/8a0cac28-29b8-4996-b010-5eab278cc342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.100.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:12:86:7a:b7:c0:a8:af:2e:9b:8f:6a:6f:86:ba:4a:03:a7: 8d:0a:c5:34:76:3e:76:0b:2b:65:54:0e:55:ef:ef:df:e8:98: ed:9a:8b:51:2b:5b:0d:e3:c9:64:61:4d:c7:55:bf:13:71:7b: 43:47:09:c8:10:d5:a7:17:39:14:9f:aa:40:94:5c:53:66:46: af:a9:37:a3:92:fa:3d:55:64:84:47:9e:71:d9:88:7e:a9:99: cb:ac:c0:b1:92:cf:39:2e:0b:73:d5:b7:36:ae:7c:0d:f8:c5: 21:d2:30:bd:cd:4b:9b:86:fe:a8:f9:58:52:82:37:5d:23:7e: dc:d5:73:d9:15:40:9b:ab:27:04:eb:31:d3:50:98:45:55:37: da:fa:a0:10:82:b1:58:e6:d1:f6:ae:87:bc:3c:85:16:b5:96: d7:ed:17:ac:d8:41:e8:71:5c:73:18:26:3f:94:5a:9c:b5:91: b2:1c:6f:bd:26:4c:89:38:b2:f1:b1:8a:cd:af:e5:c0:27:2b: 7b:49:c5:75:0b:42:51:b9:5f:85:cd:c3:e2:94:c0:21:59:74: 38:6c:72:6d:ac:08:52:a2:1d:94:f6:23:c4:59:ec:c8:02:95: bc:0d:8c:7b:b3:21:83:19:21:75:10:8e:82:5c:86:5d:87:c8: 39:f3:20:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIPx2i55DPkWpLGN5xkurbFS3WNswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYxMDIzMDAxMDIzWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjg0OTEzZWY1NTRhMWM1MzAzOTcxMWNlODgxMGJkODZm NmNmOWRjMmIyNThhOTg2MjZmYzEyYzEzOWExOGE0MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwepiedsKiojojLNbJ5/fhNbXwdIJCNKEnM+dycgX3Xcy2 e6PyX+sWpigxM/BmbFhtb6Jvri91dcecUU4sDZyN3fyszhDXR55U3jdt/Hkea2kG eLKBAh16VD/QNVezbnvfPIjOt9xNHCfq8nfnt4X/9AkDLFWRasLxlPueno2AZS/j QctrfpnH7dHFsJ3yrMSNEVH+Zd+O2cq4wHnKwUIWFpdx/ZmKSAC7rEj8yHKN1FfX QSWzZlT952bWbLUvpsIidv69vK3Hwen4m5yMMIyCyifqgPXFKzmRu6QIlLxOBUAw lF5yd3o8NOjWeEv8VRz5H0tfWVxwunzoFTPFQ2zBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxN0EX0OZ7Q+sH9bMrUaJoKfChYkwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwLzhhMGNhYzI4LTI5YjgtNDk5Ni1iMDEwLTVlYWIyNzhjYzM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWQwDQYJKoZIhvcNAQELBQADggEBADoShnq3wKivLpuPam+GukoDp40K xTR2PnYLK2VUDlXv79/omO2ai1ErWw3jyWRhTcdVvxNxe0NHCcgQ1acXORSfqkCU XFNmRq+pN6OS+j1VZIRHnnHZiH6pmcuswLGSzzkuC3PVtzaufA34xSHSML3NS5uG /qj5WFKCN10jftzVc9kVQJurJwTrMdNQmEVVN9r6oBCCsVjm0fauh7w8hRa1ltft F6zYQehxXHMYJj+UWpy1kbIcb70mTIk4svGxis2v5cAnK3tJxXULQlG5X4XNw+KU wCFZdDhscm2sCFKiHZT2I8RZ7MgClbwNjHuzIYMZIXUQjoJchl2HyDnzIDE= -----END CERTIFICATE-----Generated at Sun Nov 8 02:53:18 2026 by rpki-client