$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/c3e00a18-aa42-44a5-bc72-2aa9e7030f6f.roa File: c3e00a18-aa42-44a5-bc72-2aa9e7030f6f.roa (raw, json) Hash identifier: H50MIvRub5y/VdRWFWS+MOda3LFTpJxTNi+w60g78c0= Subject key identifier: 84:B5:7F:CD:3D:57:5A:D0:8C:8C:18:C7:7D:66:21:FD:44:28:46:98 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 71CB7DADD691DDC290F3F5DB71FB2379E463B157 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/c3e00a18-aa42-44a5-bc72-2aa9e7030f6f.roa Signing time: Tue 25 Aug 2026 00:00:07 +0000 ROA not before: Tue 25 Aug 2026 00:00:07 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.27.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cb:7d:ad:d6:91:dd:c2:90:f3:f5:db:71:fb:23:79:e4:63:b1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 25 00:00:07 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=8ad0915da57fbf747ede67d388411c7dec53edd36aa283046c3f61687d36fb23, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:6e:fd:a0:15:28:10:5b:16:b3:ac:65:27: a1:24:25:1e:96:75:1a:b1:c7:90:c9:6a:91:30:19: 82:3d:98:0f:d1:ec:fe:61:ca:2c:61:6d:da:62:72: e4:55:4b:63:4d:c8:ca:58:12:9b:0a:23:e5:0f:cd: bc:e5:ad:8c:cc:84:f2:d9:e6:5a:a3:0b:f0:09:0f: 7c:c4:ff:6f:29:fe:f7:f9:3e:99:4c:43:2c:b7:9d: 2a:85:af:50:54:54:89:c0:15:4e:2e:28:62:b2:e6: e8:4a:5e:9a:86:0a:a8:21:34:a1:d7:2b:0e:be:8e: 19:02:9b:fe:35:27:86:4f:76:7e:8e:d4:99:ce:77: 8c:64:d0:ff:4b:74:c1:65:e5:2c:30:27:14:c4:5c: 8a:a0:90:3d:6b:b2:fb:79:dc:5d:0a:f3:5a:52:6c: 5e:c6:f8:1f:72:c3:d9:fc:ab:5a:0d:9c:a7:25:3e: 94:82:01:45:d8:84:00:68:a9:c9:2e:1a:ca:57:04: 34:2c:ea:d4:2b:f4:b9:45:ee:8c:78:9a:6f:d0:9d: ec:b1:06:a3:6f:fe:ae:50:58:ac:2b:ed:c9:02:31: f9:cb:9c:43:a5:64:88:7a:74:2f:49:c6:10:56:a0: 3c:3c:bb:17:0d:99:a1:ae:ac:5e:1b:a2:c2:e4:cd: b1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:7F:CD:3D:57:5A:D0:8C:8C:18:C7:7D:66:21:FD:44:28:46:98 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/c3e00a18-aa42-44a5-bc72-2aa9e7030f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.27.0.0/19 Signature Algorithm: sha256WithRSAEncryption 0b:8a:8a:52:b9:20:b9:64:01:dd:55:53:6e:06:97:d8:0c:b6: d9:f0:17:80:17:94:b0:42:47:ac:7d:e2:56:c2:93:83:21:2e: 1a:fa:e0:36:fd:b6:c5:b6:27:c2:89:d4:c8:d2:61:05:b4:8a: 3c:92:d7:da:5c:a7:9d:47:fe:98:1f:f7:5d:b2:9c:c9:d5:9c: fb:55:5d:09:3f:75:17:e1:52:a1:d2:76:dd:9b:2b:f0:d0:13: 56:35:e7:c6:81:09:27:5e:72:27:4d:b1:f8:14:9d:a6:2b:e4: da:de:d5:bd:10:0e:8c:27:cb:f6:f7:6e:05:bd:b0:b3:2c:4a: 67:59:55:d3:b3:32:c3:4f:99:e6:ae:26:0a:c4:05:8f:7a:b1: 6e:de:bf:38:33:56:01:d1:a1:47:d6:44:73:8d:6f:90:01:a7: 92:87:9d:11:8f:2c:91:36:82:b7:9f:a2:b4:f9:18:5b:b0:54: f6:68:cf:f3:a9:94:cc:21:55:2c:15:b2:56:65:a7:e8:ba:de: 12:ed:d9:d0:ef:51:75:78:2c:2f:db:f2:69:0c:20:67:fb:67: 33:42:e2:5e:05:21:0f:a4:3b:fd:56:38:39:1f:7c:e5:44:19: 13:8a:cf:54:c6:87:65:d5:7f:72:a0:a1:4f:87:1c:f3:a2:64: 9d:4f:63:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcct9rdaR3cKQ8/XbcfsjeeRjsVcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwODI1MDAwMDA3WhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWQwOTE1ZGE1N2ZiZjc0N2VkZTY3ZDM4ODQxMWM3ZGVj NTNlZGQzNmFhMjgzMDQ2YzNmNjE2ODdkMzZmYjIzMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClwm79oBUoEFsWs6xlJ6EkJR6WdRqxx5DJapEwGYI9mA/R 7P5hyixhbdpicuRVS2NNyMpYEpsKI+UPzbzlrYzMhPLZ5lqjC/AJD3zE/28p/vf5 PplMQyy3nSqFr1BUVInAFU4uKGKy5uhKXpqGCqghNKHXKw6+jhkCm/41J4ZPdn6O 1JnOd4xk0P9LdMFl5SwwJxTEXIqgkD1rsvt53F0K81pSbF7G+B9yw9n8q1oNnKcl PpSCAUXYhABoqckuGspXBDQs6tQr9LlF7ox4mm/QneyxBqNv/q5QWKwr7ckCMfnL nEOlZIh6dC9JxhBWoDw8uxcNmaGurF4bosLkzbFhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhLV/zT1XWtCMjBjHfWYh/UQoRpgwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2MzZTAwYTE4LWFhNDItNDRhNS1iYzcyLTJhYTllNzAzMGY2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAGwAwDQYJKoZIhvcNAQELBQADggEBAAuKilK5ILlkAd1VU24Gl9gMttnw F4AXlLBCR6x94lbCk4MhLhr64Db9tsW2J8KJ1MjSYQW0ijyS19pcp51H/pgf912y nMnVnPtVXQk/dRfhUqHSdt2bK/DQE1Y158aBCSdecidNsfgUnaYr5Nre1b0QDown y/b3bgW9sLMsSmdZVdOzMsNPmeauJgrEBY96sW7evzgzVgHRoUfWRHONb5ABp5KH nRGPLJE2greforT5GFuwVPZoz/OplMwhVSwVslZlp+i63hLt2dDvUXV4LC/b8mkM IGf7ZzNC4l4FIQ+kO/1WODkffOVEGROKz1TGh2XVf3KgoU+HHPOiZJ1PYzk= -----END CERTIFICATE-----Generated at Mon Sep 21 21:40:32 2026 by rpki-client