$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/10196782-1a70-44e1-b387-1f5ab43817e8.roa File: 10196782-1a70-44e1-b387-1f5ab43817e8.roa (raw, json) Hash identifier: sJyV0KzObmVvN/uUYmpFWigFH96NHPbXEJhnsB8itx4= Subject key identifier: 09:25:5F:6D:05:44:63:51:5A:8F:00:15:B0:AB:B5:08:A5:6D:94:74 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 295E8E924A1E4ED67D1FAB60505E9CFB0198360B Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/10196782-1a70-44e1-b387-1f5ab43817e8.roa Signing time: Wed 14 Oct 2026 00:06:22 +0000 ROA not before: Wed 14 Oct 2026 00:06:22 +0000 ROA not after: Tue 12 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 98.77.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5e:8e:92:4a:1e:4e:d6:7d:1f:ab:60:50:5e:9c:fb:01:98:36:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 14 00:06:22 2026 GMT Not After : Jan 12 23:59:59 2027 GMT Subject: serialNumber=821f5911d08fead576bbe615934181c464d5e088c8d7391a54398ee883820222, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:c0:53:b9:11:58:dc:26:cc:f9:ec:e6:a2: fb:5f:fb:8e:0a:d1:84:da:32:58:7e:c0:50:cb:e4: 3c:95:7f:78:c2:ca:bd:7e:01:3e:5c:26:78:a8:e1: f3:f9:82:e3:3a:06:0e:69:3c:ea:f1:39:67:2b:06: 53:f8:c0:7a:51:f6:3f:dc:27:d1:54:3b:04:b8:79: 01:03:ba:d2:10:6e:79:75:f9:65:46:4b:4f:be:6d: 28:2d:b4:57:2d:eb:56:56:cb:98:28:7b:fa:17:2a: aa:16:bf:ba:e1:94:88:d7:2a:ff:c4:32:99:1f:3c: 56:23:21:13:a2:7d:87:d5:a1:77:70:ac:f8:10:48: 77:a4:fd:eb:5e:3d:f8:bc:59:89:29:27:3a:f3:e8: e9:22:0a:a0:6f:02:31:83:74:05:d1:d2:68:3f:de: 83:4d:94:e9:61:17:c2:b9:e5:0a:d4:25:56:de:11: 0e:c9:11:29:1c:38:29:4b:44:8a:43:cd:d5:c6:32: 62:43:9a:7d:b2:1a:c3:7f:89:e5:b7:ef:67:f5:b1: 93:20:13:05:57:c4:e5:95:67:35:af:e2:d6:f5:3f: ae:1d:68:36:56:76:01:1d:f6:69:08:8f:a5:29:23: e5:bd:44:b1:b7:2f:83:55:26:f8:3b:43:cb:a1:80: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:25:5F:6D:05:44:63:51:5A:8F:00:15:B0:AB:B5:08:A5:6D:94:74 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/10196782-1a70-44e1-b387-1f5ab43817e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.77.0.0/16 Signature Algorithm: sha256WithRSAEncryption 83:9e:d4:bb:07:ff:4a:73:b0:c6:1c:ea:6b:2c:1b:f5:61:06: 46:59:b9:b0:94:07:ec:2d:50:7e:aa:8d:03:d9:6f:88:a8:17: 40:2e:97:b5:42:60:f5:db:98:fe:04:e1:55:51:cb:27:f7:4e: a7:53:a0:55:c9:ae:3d:e0:ff:a5:f6:58:5c:3f:44:cc:d1:2c: 00:2c:dc:dc:7f:50:94:fd:aa:90:67:c3:4a:8f:86:47:9b:f6: 36:37:73:70:5c:33:c3:50:51:10:71:9e:67:2a:c9:0a:3c:3a: 84:0f:3c:62:e2:61:aa:ae:28:a1:9a:c9:fc:54:fd:75:72:4f: 77:9b:dc:23:fe:84:6f:b6:41:5d:68:86:3e:bc:2b:64:b9:6d: 9b:82:af:97:11:40:4d:3c:6b:66:f1:11:e2:88:72:8c:a4:7e: b6:35:99:17:66:9e:ef:55:36:f5:03:31:ac:c0:a4:ed:98:5a: 56:45:72:7e:74:2a:8a:cc:39:05:07:d7:0d:1c:f5:ad:cc:4e: e4:c1:6a:59:0c:1d:28:aa:66:0d:70:00:f4:14:b0:c7:b0:5d: 5d:91:a0:a9:c6:d0:47:99:e5:3c:f3:58:a4:db:e7:3c:56:47: 46:02:8d:b2:ec:61:d9:cc:1c:32:de:64:2c:ef:77:74:2e:1f: be:e4:85:aa -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKV6OkkoeTtZ9H6tgUF6c+wGYNgswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDE0MDAwNjIyWhcNMjcwMTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjFmNTkxMWQwOGZlYWQ1NzZiYmU2MTU5MzQxODFjNDY0 ZDVlMDg4YzhkNzM5MWE1NDM5OGVlODgzODIwMjIyMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIdcBTuRFY3CbM+ezmovtf+44K0YTaMlh+wFDL5DyVf3jC yr1+AT5cJnio4fP5guM6Bg5pPOrxOWcrBlP4wHpR9j/cJ9FUOwS4eQEDutIQbnl1 +WVGS0++bSgttFct61ZWy5goe/oXKqoWv7rhlIjXKv/EMpkfPFYjIROifYfVoXdw rPgQSHek/etePfi8WYkpJzrz6OkiCqBvAjGDdAXR0mg/3oNNlOlhF8K55QrUJVbe EQ7JESkcOClLRIpDzdXGMmJDmn2yGsN/ieW372f1sZMgEwVXxOWVZzWv4tb1P64d aDZWdgEd9mkIj6UpI+W9RLG3L4NVJvg7Q8uhgG9NAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCSVfbQVEY1FajwAVsKu1CKVtlHQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzEwMTk2NzgyLTFhNzAtNDRlMS1iMzg3LTFmNWFiNDM4MTdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBiTTANBgkqhkiG9w0BAQsFAAOCAQEAg57Uuwf/SnOwxhzqaywb9WEGRlm5 sJQH7C1QfqqNA9lviKgXQC6XtUJg9duY/gThVVHLJ/dOp1OgVcmuPeD/pfZYXD9E zNEsACzc3H9QlP2qkGfDSo+GR5v2NjdzcFwzw1BREHGeZyrJCjw6hA88YuJhqq4o oZrJ/FT9dXJPd5vcI/6Eb7ZBXWiGPrwrZLltm4KvlxFATTxrZvER4ohyjKR+tjWZ F2ae71U29QMxrMCk7ZhaVkVyfnQqisw5BQfXDRz1rcxO5MFqWQwdKKpmDXAA9BSw x7BdXZGgqcbQR5nlPPNYpNvnPFZHRgKNsuxh2cwcMt5kLO93dC4fvuSFqg== -----END CERTIFICATE-----Generated at Tue Nov 10 10:29:49 2026 by rpki-client