$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa File: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (raw, json) Hash identifier: /G0jkvvWftMA3meUQBpXH6+71ORwXgJXBM7AT+161/E= Subject key identifier: E2:89:21:63:75:DD:6D:63:58:E1:B8:02:5D:8C:08:BB:10:FE:B1:BA Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 786381F61774B66338BDAACF165AEFDD489622CC Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa Signing time: Fri 23 Oct 2026 00:10:17 +0000 ROA not before: Fri 23 Oct 2026 00:10:17 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 198.41.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:63:81:f6:17:74:b6:63:38:bd:aa:cf:16:5a:ef:dd:48:96:22:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Oct 23 00:10:17 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=e757ebd33c14b14e966e6af8259130184e19d03aed47aa15dfbf372b971e4964, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:ba:a8:c2:d4:b0:83:ee:db:ed:51:68:36: 8b:be:cf:6f:47:34:65:00:65:2e:85:62:1f:01:6b: 3c:91:4c:a1:dd:72:b1:62:61:06:be:3e:2a:2f:70: 3c:bf:d7:39:b1:7a:fb:1c:0b:86:4f:58:ef:69:e9: bf:41:af:ab:58:f6:b3:cb:00:b1:85:93:c3:25:e3: a1:bf:ae:aa:65:78:af:70:60:52:28:b0:2f:60:fa: 3d:20:0e:7e:60:52:2d:a4:98:8b:88:3b:2f:a0:3f: b3:ee:cc:52:83:db:61:50:54:63:ba:a4:89:4a:d7: 0e:5a:54:61:84:64:cf:e1:66:f3:56:a7:4c:00:41: 36:fa:e0:8f:57:24:f8:57:8f:24:6f:2d:64:97:58: 90:cd:a9:f4:6c:f0:99:bb:09:3c:a0:48:db:68:26: 25:9a:9e:36:c2:d0:8a:6a:c2:92:88:b8:5a:f8:3c: a6:31:4c:83:98:96:58:bc:a4:fb:22:f8:7a:39:8d: 51:2e:cb:ae:1e:aa:3a:85:66:f4:4d:4a:90:25:ff: 6f:d9:30:9c:18:90:98:e5:36:75:49:81:0d:3c:4c: 9e:61:e8:d2:12:07:8b:ef:2e:df:aa:eb:f4:91:d1: 41:1c:c0:4f:5e:34:81:2b:ee:d4:f4:ea:9f:d8:57: 01:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:89:21:63:75:DD:6D:63:58:E1:B8:02:5D:8C:08:BB:10:FE:B1:BA X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.101.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:42:27:7a:57:bc:2f:2d:5f:2b:89:05:f9:d5:33:8b:3c:60: 8a:0c:9f:98:87:2c:1a:6c:e6:fe:01:8f:58:d9:ac:64:8b:74: 1f:db:d9:b6:10:f4:70:93:93:cf:01:73:e3:d5:7f:32:26:c9: fc:8b:78:43:6a:4f:f2:c3:5e:1d:5c:15:7f:81:39:ad:05:2e: 2c:17:27:3f:01:8a:0d:05:42:3e:82:7d:20:e6:38:96:fc:c3: b1:5c:ef:ce:dd:9a:4a:ae:fe:02:4f:db:5a:e0:81:99:30:78: 3d:a0:4e:e8:c9:d3:ce:a9:66:22:fd:ff:30:2c:72:0f:c0:5a: 9f:08:3f:83:3b:aa:6b:2e:15:7e:9d:75:d5:60:4f:30:40:2d: e5:bb:1a:c7:f1:4e:bc:81:32:56:2d:f3:ae:3b:02:76:72:39: fb:d0:f2:52:3e:ed:93:6d:33:f7:b0:a3:20:bd:8f:19:3a:5c: b2:05:51:1e:e5:22:94:c6:7f:2d:07:53:25:76:84:01:0d:e3: a3:7b:1c:a6:2b:5b:47:42:bd:51:13:54:c4:7d:d3:cf:8f:aa: 38:de:aa:17:09:e0:3d:53:a1:67:eb:32:9a:07:95:d8:81:1a: fb:0e:dc:3c:99:c2:d8:ba:8d:c6:61:ab:a9:5d:38:ce:5f:c1: b7:21:d6:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeGOB9hd0tmM4varPFlrv3UiWIswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYxMDIzMDAxMDE3WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzU3ZWJkMzNjMTRiMTRlOTY2ZTZhZjgyNTkxMzAxODRl MTlkMDNhZWQ0N2FhMTVkZmJmMzcyYjk3MWU0OTY0MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWtbqowtSwg+7b7VFoNou+z29HNGUAZS6FYh8BazyRTKHd crFiYQa+PiovcDy/1zmxevscC4ZPWO9p6b9Br6tY9rPLALGFk8Ml46G/rqpleK9w YFIosC9g+j0gDn5gUi2kmIuIOy+gP7PuzFKD22FQVGO6pIlK1w5aVGGEZM/hZvNW p0wAQTb64I9XJPhXjyRvLWSXWJDNqfRs8Jm7CTygSNtoJiWanjbC0IpqwpKIuFr4 PKYxTIOYlli8pPsi+Ho5jVEuy64eqjqFZvRNSpAl/2/ZMJwYkJjlNnVJgQ08TJ5h 6NISB4vvLt+q6/SR0UEcwE9eNIEr7tT06p/YVwErAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4okhY3XdbWNY4bgCXYwIuxD+sbowHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2YwMmVmYjFmLThhMTctNGRjNy05YWI0LTljYzIzYmM2OWI5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWUwDQYJKoZIhvcNAQELBQADggEBAJ1CJ3pXvC8tXyuJBfnVM4s8YIoM n5iHLBps5v4Bj1jZrGSLdB/b2bYQ9HCTk88Bc+PVfzImyfyLeENqT/LDXh1cFX+B Oa0FLiwXJz8Big0FQj6CfSDmOJb8w7Fc787dmkqu/gJP21rggZkweD2gTujJ086p ZiL9/zAscg/AWp8IP4M7qmsuFX6dddVgTzBALeW7GsfxTryBMlYt8647AnZyOfvQ 8lI+7ZNtM/ewoyC9jxk6XLIFUR7lIpTGfy0HUyV2hAEN46N7HKYrW0dCvVETVMR9 08+PqjjeqhcJ4D1ToWfrMpoHldiBGvsO3DyZwti6jcZhq6ldOM5fwbch1jU= -----END CERTIFICATE-----Generated at Thu Nov 5 07:08:22 2026 by rpki-client