$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa File: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (raw, json) Hash identifier: jAq9IHveuCorK7hgZiT7jHYmsvWnpdDGMdd2R+pirK8= Subject key identifier: 33:9F:DE:35:9C:19:ED:E9:9A:3B:8F:74:35:2A:BB:C6:35:AB:85:4D Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 496840EB53DD92AC4B33E8BA5D5023DF94D0C7D7 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa Signing time: Fri 23 Oct 2026 00:10:24 +0000 ROA not before: Fri 23 Oct 2026 00:10:24 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:68:40:eb:53:dd:92:ac:4b:33:e8:ba:5d:50:23:df:94:d0:c7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Oct 23 00:10:24 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=9b166b0c657ba9b0f2d4eabd611aa5292eb1c219272de281c36dbeb412f4dbc6, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:06:99:7a:e4:51:95:4c:6a:56:f3:0d:5e:64: 2d:d3:ea:5b:1e:68:7a:f1:22:22:5b:ea:33:6e:19: 47:d5:c9:37:fd:46:cf:b5:f9:3e:e2:93:c1:66:e8: c3:aa:b8:1f:08:0d:9b:48:56:dd:3d:5e:3c:d8:3f: b0:e9:b5:10:63:64:42:e2:eb:a6:71:5d:8a:4a:c2: 49:19:4a:db:92:bb:fa:59:e5:ba:77:fa:c7:dc:32: 7b:92:8d:63:91:29:6c:a3:b5:b5:38:e7:d3:58:2c: 89:41:77:02:55:ce:49:59:d6:be:f3:e8:b6:d7:eb: f3:cf:ea:2d:7f:11:56:e9:95:65:eb:b0:64:7b:ac: 65:55:05:ca:d2:72:69:78:de:20:e1:d5:1d:17:69: 1e:ab:df:be:84:c0:3e:1f:d1:46:80:ab:58:b0:d6: d4:72:5c:e8:24:2b:49:dc:91:4b:1d:24:a5:a8:8e: c0:43:30:4d:d5:56:e7:83:62:3e:c0:f7:c2:19:01: d8:6f:a2:83:9a:e3:7a:a9:a7:2e:18:11:53:51:98: b1:7c:31:c5:d1:e0:75:68:30:61:ec:36:23:a9:2a: 59:da:4e:7e:f4:3b:42:14:b0:e7:b1:f1:1b:32:48: 36:dc:18:ba:40:26:cf:c8:ba:1c:ed:e1:d2:58:17: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9F:DE:35:9C:19:ED:E9:9A:3B:8F:74:35:2A:BB:C6:35:AB:85:4D X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b19e5975-1e99-4224-8288-ed3afb4fc704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:9e:60:04:dd:ea:1f:3a:a7:36:c5:1f:96:f2:27:a2:a2:96: a2:98:cd:f1:c7:b4:99:94:ab:55:18:47:70:e6:92:ba:9b:59: f1:7a:31:8c:b5:7f:4c:82:90:34:33:03:b9:39:98:a3:3b:59: 6e:35:b1:98:a9:ef:18:3c:3f:ac:70:5d:9d:a5:29:f2:f2:63: 37:6c:f2:2b:3a:77:3a:37:25:0f:b1:b4:39:bb:06:76:68:2a: 78:63:28:21:d3:9d:82:cd:14:d3:28:34:bf:bc:7a:ca:d7:39: b4:33:3d:2a:12:54:71:d0:c8:f4:72:04:c0:a6:bc:98:05:0f: 83:e5:05:76:02:fb:9f:6c:90:87:9f:73:c2:15:1b:5c:4d:13: 63:58:23:77:a3:e0:3e:18:32:84:11:21:19:06:28:ac:11:4a: b5:70:df:67:32:e4:ca:b3:03:83:53:59:e4:d2:52:73:8e:53: 05:8c:ed:df:65:43:8e:e9:0c:37:0d:25:a2:a7:d7:2c:35:1c: 56:e1:a9:24:03:f3:4b:8d:4c:36:1f:bf:3a:c2:15:67:30:13: 14:47:00:1c:5c:09:2e:51:3d:f0:87:fe:71:a2:00:99:77:d9: 57:e2:58:70:23:7c:b9:df:94:45:51:04:10:04:1f:bf:c5:15: 41:fa:6e:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSWhA61PdkqxLM+i6XVAj35TQx9cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYxMDIzMDAxMDI0WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjE2NmIwYzY1N2JhOWIwZjJkNGVhYmQ2MTFhYTUyOTJl YjFjMjE5MjcyZGUyODFjMzZkYmViNDEyZjRkYmM2MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRBpl65FGVTGpW8w1eZC3T6lseaHrxIiJb6jNuGUfVyTf9 Rs+1+T7ik8Fm6MOquB8IDZtIVt09XjzYP7DptRBjZELi66ZxXYpKwkkZStuSu/pZ 5bp3+sfcMnuSjWORKWyjtbU459NYLIlBdwJVzklZ1r7z6LbX6/PP6i1/EVbplWXr sGR7rGVVBcrScml43iDh1R0XaR6r376EwD4f0UaAq1iw1tRyXOgkK0nckUsdJKWo jsBDME3VVueDYj7A98IZAdhvooOa43qppy4YEVNRmLF8McXR4HVoMGHsNiOpKlna Tn70O0IUsOex8RsySDbcGLpAJs/Iuhzt4dJYFzX/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM5/eNZwZ7emaO490NSq7xjWrhU0wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2IxOWU1OTc1LTFlOTktNDIyNC04Mjg4LWVkM2FmYjRmYzcwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWAwDQYJKoZIhvcNAQELBQADggEBAByeYATd6h86pzbFH5byJ6KilqKY zfHHtJmUq1UYR3DmkrqbWfF6MYy1f0yCkDQzA7k5mKM7WW41sZip7xg8P6xwXZ2l KfLyYzds8is6dzo3JQ+xtDm7BnZoKnhjKCHTnYLNFNMoNL+8esrXObQzPSoSVHHQ yPRyBMCmvJgFD4PlBXYC+59skIefc8IVG1xNE2NYI3ej4D4YMoQRIRkGKKwRSrVw 32cy5MqzA4NTWeTSUnOOUwWM7d9lQ47pDDcNJaKn1yw1HFbhqSQD80uNTDYfvzrC FWcwExRHABxcCS5RPfCH/nGiAJl32VfiWHAjfLnflEVRBBAEH7/FFUH6bnA= -----END CERTIFICATE-----Generated at Thu Nov 5 07:19:25 2026 by rpki-client