$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa File: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (raw, json) Hash identifier: cPjxnSil6kbqMTzfHnzKG5htxeYWqzjCmbmlMkQ3Z6I= Subject key identifier: 66:18:9E:E2:69:82:9A:7A:8F:32:58:51:E2:AA:13:DF:A9:BB:BD:4E Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 5E52F2D912F0110ABB2AC90A14276F407336699D Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa Signing time: Fri 23 Oct 2026 00:10:22 +0000 ROA not before: Fri 23 Oct 2026 00:10:22 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:52:f2:d9:12:f0:11:0a:bb:2a:c9:0a:14:27:6f:40:73:36:69:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Oct 23 00:10:22 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=202cc6ce9e4d30c77a8a0e2ac9e0c8dbd668805fd3f5300519de9d02c5416f9e, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:c9:88:8f:72:93:15:49:7f:d8:24:79:05: df:56:06:d9:94:c0:63:4c:7a:a4:dd:c6:e2:d5:31: cc:ca:17:1f:b9:ea:6c:46:ee:c9:1e:9a:40:dc:4c: 70:d2:e0:6a:7b:5c:f2:87:57:a6:08:e8:91:f7:db: af:e1:97:b8:50:6e:c6:2b:ff:84:fc:df:a6:fc:ac: 91:5a:01:24:33:87:da:fb:8e:09:cf:65:83:bc:7b: 7a:7b:05:da:c2:15:a3:1b:28:84:12:69:d3:91:57: a4:47:6c:f3:6a:a6:4f:d1:7a:61:f4:fb:dd:ae:27: 37:90:31:39:be:fa:30:59:52:53:58:79:3d:4a:52: b0:cf:4e:45:a2:3a:ef:e8:46:e6:22:29:c7:b9:be: 8b:4f:c6:49:c0:88:60:25:05:51:fc:85:3c:8f:a9: ba:ef:03:62:87:af:28:89:af:fc:55:9e:f9:89:39: f6:df:d4:97:45:26:f2:b0:ad:95:a5:f8:4d:1b:c2: 63:31:49:73:3a:b2:1f:af:a9:4f:69:a2:88:5c:e0: 85:48:44:57:c4:78:53:38:a1:a9:0e:3a:3e:45:42: 29:ef:98:4f:03:cb:40:1c:0a:b1:be:68:cd:71:81: 33:dc:a2:57:6f:99:d6:15:6e:b9:7d:fe:77:23:d5: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:18:9E:E2:69:82:9A:7A:8F:32:58:51:E2:AA:13:DF:A9:BB:BD:4E X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.98.0/24 Signature Algorithm: sha256WithRSAEncryption 13:af:e1:42:9b:43:08:49:c9:69:5d:f7:6c:63:0e:a3:69:a6: 1a:63:44:cb:37:d7:52:83:c8:c6:79:1f:1a:a0:e9:c3:f6:ef: 86:47:a4:c4:95:a4:9d:3f:c5:c3:21:70:21:88:04:bb:1a:40: b0:60:d2:17:70:3b:70:1d:fb:60:ad:71:5a:97:bf:22:1f:6f: 60:8f:a3:cb:68:ba:16:8a:b0:ef:06:8d:0d:49:36:d9:5c:a0: 80:4b:67:06:25:1d:00:8d:8e:58:5c:e1:ac:15:70:d1:b0:e7: a1:ce:b2:f6:2c:81:5d:07:66:9d:42:58:6e:da:66:40:5f:5d: 88:9f:8a:b8:15:bf:d0:c7:10:d1:ab:3d:a7:85:f7:ac:6e:8b: 94:eb:6a:a7:fb:de:cc:66:02:51:75:1b:33:a1:28:c7:d7:3a: 11:aa:74:67:91:7c:21:f5:1c:fe:93:65:d9:4b:f5:60:ba:3b: 14:52:f0:0c:00:d5:c3:61:8c:e6:41:51:95:70:b1:0e:c7:d2: 45:6f:a4:9c:be:07:9c:e8:a5:2d:e7:3f:3d:37:d2:8c:1b:87: e4:ac:bf:49:ae:19:ea:ab:dd:05:62:4e:91:01:ba:89:33:9f: f9:a9:1b:48:1c:ba:85:72:47:c3:58:a5:2c:67:c1:dd:ab:cf: 79:26:72:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXlLy2RLwEQq7KskKFCdvQHM2aZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYxMDIzMDAxMDIyWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDJjYzZjZTllNGQzMGM3N2E4YTBlMmFjOWUwYzhkYmQ2 Njg4MDVmZDNmNTMwMDUxOWRlOWQwMmM1NDE2ZjllMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCismIj3KTFUl/2CR5Bd9WBtmUwGNMeqTdxuLVMczKFx+5 6mxG7skemkDcTHDS4Gp7XPKHV6YI6JH326/hl7hQbsYr/4T836b8rJFaASQzh9r7 jgnPZYO8e3p7BdrCFaMbKIQSadORV6RHbPNqpk/RemH0+92uJzeQMTm++jBZUlNY eT1KUrDPTkWiOu/oRuYiKce5votPxknAiGAlBVH8hTyPqbrvA2KHryiJr/xVnvmJ Ofbf1JdFJvKwrZWl+E0bwmMxSXM6sh+vqU9poohc4IVIRFfEeFM4oakOOj5FQinv mE8Dy0AcCrG+aM1xgTPcoldvmdYVbrl9/ncj1dgTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZhie4mmCmnqPMlhR4qoT36m7vU4wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2I0MjI1N2EwLTQ1MDMtNDE0Yy05ZWU2LWMyMGQ0YTNiZjFhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWIwDQYJKoZIhvcNAQELBQADggEBABOv4UKbQwhJyWld92xjDqNpphpj RMs311KDyMZ5Hxqg6cP274ZHpMSVpJ0/xcMhcCGIBLsaQLBg0hdwO3Ad+2CtcVqX vyIfb2CPo8touhaKsO8GjQ1JNtlcoIBLZwYlHQCNjlhc4awVcNGw56HOsvYsgV0H Zp1CWG7aZkBfXYifirgVv9DHENGrPaeF96xui5Traqf73sxmAlF1GzOhKMfXOhGq dGeRfCH1HP6TZdlL9WC6OxRS8AwA1cNhjOZBUZVwsQ7H0kVvpJy+B5zopS3nPz03 0owbh+Ssv0muGeqr3QViTpEBuokzn/mpG0gcuoVyR8NYpSxnwd2rz3kmcq4= -----END CERTIFICATE-----Generated at Sun Nov 8 02:53:11 2026 by rpki-client