$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa File: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (raw, json) Hash identifier: U7rtiU+QBqJ2+m+Eg+zn1xeVw5XyYTFSBrBwrrki3og= Subject key identifier: 89:F3:57:DB:C6:A6:24:02:D1:FB:68:B9:D4:B0:33:78:28:CB:83:A2 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 5C352A480334641C46EEB99DAA83A929DE3BFE79 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa Signing time: Fri 23 Oct 2026 00:10:17 +0000 ROA not before: Fri 23 Oct 2026 00:10:17 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:35:2a:48:03:34:64:1c:46:ee:b9:9d:aa:83:a9:29:de:3b:fe:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Oct 23 00:10:17 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=c71097a246113a12004fa73f3e3d24c0b63dd5c15137b9139b50cef6017667bb, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:bd:75:05:5e:fb:be:b5:5d:1f:72:67:4f: 4b:c1:b1:64:56:0f:cd:45:dc:dc:38:2e:c2:9f:ad: 90:94:8a:4b:8e:1d:a4:7d:8f:14:74:6d:7b:37:e1: 0b:a7:bd:f8:1f:e5:f1:0f:ab:36:93:05:c2:df:e7: 75:9d:54:e3:e9:e0:89:1b:9a:39:73:f8:4d:d3:27: 73:51:de:29:6b:71:4f:0a:1c:d5:16:c2:56:a6:9c: 4c:57:45:d8:18:bb:6a:ca:cf:0d:9b:95:44:f7:11: 89:3b:17:ca:20:8c:5e:2d:ca:44:ca:70:9d:65:81: 6f:43:b1:b7:bb:60:d4:60:2a:2f:0d:56:11:84:27: 62:db:34:9a:c9:9b:7c:48:8a:e7:f3:19:4f:c9:f6: 03:ba:c5:45:4d:0c:b9:f5:c4:b6:df:7b:d5:cf:4c: 2d:19:15:47:5e:91:7a:ff:e9:e5:77:3a:a6:1f:99: 50:9f:f4:0f:7d:32:2c:24:f0:17:88:3e:fd:60:4d: 12:a9:79:ab:62:97:ba:82:2f:e5:67:98:ad:e6:13: e8:1b:c0:99:8b:17:d7:19:03:13:fd:fb:72:c2:03: dc:b3:64:9e:45:81:d5:04:e7:37:f5:6a:48:1f:b2: 52:67:3a:68:5c:d6:f0:93:ee:25:e9:a3:11:7a:1f: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F3:57:DB:C6:A6:24:02:D1:FB:68:B9:D4:B0:33:78:28:CB:83:A2 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.101.0/24 Signature Algorithm: sha256WithRSAEncryption 78:0e:2c:40:6e:1f:9a:c3:7a:2f:95:4f:13:31:7a:fd:26:d1: 09:e7:c8:5c:8f:33:27:5c:2e:aa:97:99:c8:cc:55:97:37:96: f0:ad:76:3c:ca:57:33:dd:f1:67:2c:36:08:cf:27:c0:7b:49: 46:79:1f:bc:0d:dc:c7:41:e3:fb:66:1e:40:ca:92:80:9f:67: 97:9f:c7:ca:0f:0e:3a:5e:83:5f:cc:c4:7b:5b:aa:a1:46:62: f5:0b:cb:71:79:c0:5c:45:41:89:90:3b:2f:7c:5f:8c:ee:a1: a8:05:7c:50:c4:8d:6b:7f:8d:d8:54:17:a4:67:7f:57:3a:38: 83:31:30:e8:94:da:4d:02:bf:0e:a6:71:50:21:6c:81:1d:8b: ce:13:48:58:16:ae:41:24:ee:c4:b9:72:a2:a0:70:fa:c9:b1: 9d:32:c8:96:e1:44:cc:bc:d2:25:50:63:56:01:f3:ce:df:d7: 2b:5b:26:db:2f:79:6c:c2:b7:c8:34:2e:66:4b:36:6d:32:35: 4b:07:f5:ef:d3:6a:92:58:f1:4a:83:f3:fa:fb:5d:e2:2e:f6: 3e:ae:89:e4:ba:12:0d:a3:30:98:bf:33:80:9d:36:92:de:46: 84:e2:c0:f8:a5:36:2b:c8:87:f6:76:b7:71:a3:d1:34:70:f9: 81:5b:7b:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXDUqSAM0ZBxG7rmdqoOpKd47/nkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYxMDIzMDAxMDE3WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzEwOTdhMjQ2MTEzYTEyMDA0ZmE3M2YzZTNkMjRjMGI2 M2RkNWMxNTEzN2I5MTM5YjUwY2VmNjAxNzY2N2JiMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwHL11BV77vrVdH3JnT0vBsWRWD81F3Nw4LsKfrZCUikuO HaR9jxR0bXs34Qunvfgf5fEPqzaTBcLf53WdVOPp4Ikbmjlz+E3TJ3NR3ilrcU8K HNUWwlamnExXRdgYu2rKzw2blUT3EYk7F8ogjF4tykTKcJ1lgW9Dsbe7YNRgKi8N VhGEJ2LbNJrJm3xIiufzGU/J9gO6xUVNDLn1xLbfe9XPTC0ZFUdekXr/6eV3OqYf mVCf9A99Miwk8BeIPv1gTRKpeatil7qCL+VnmK3mE+gbwJmLF9cZAxP9+3LCA9yz ZJ5FgdUE5zf1akgfslJnOmhc1vCT7iXpoxF6H4DtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUifNX28amJALR+2i51LAzeCjLg6IwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2FlZDc2ZjE3LTViNDctNGU1Yy1hOWZiLWIwMWM2MWQyM2M4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWUwDQYJKoZIhvcNAQELBQADggEBAHgOLEBuH5rDei+VTxMxev0m0Qnn yFyPMydcLqqXmcjMVZc3lvCtdjzKVzPd8WcsNgjPJ8B7SUZ5H7wN3MdB4/tmHkDK koCfZ5efx8oPDjpeg1/MxHtbqqFGYvULy3F5wFxFQYmQOy98X4zuoagFfFDEjWt/ jdhUF6Rnf1c6OIMxMOiU2k0Cvw6mcVAhbIEdi84TSFgWrkEk7sS5cqKgcPrJsZ0y yJbhRMy80iVQY1YB887f1ytbJtsveWzCt8g0LmZLNm0yNUsH9e/TapJY8UqD8/r7 XeIu9j6uieS6Eg2jMJi/M4CdNpLeRoTiwPilNivIh/Z2t3Gj0TRw+YFbeyU= -----END CERTIFICATE-----Generated at Sun Nov 8 02:52:17 2026 by rpki-client