$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/14a2c378-9504-481e-9866-906c67b80678.roa File: 14a2c378-9504-481e-9866-906c67b80678.roa (raw, json) Hash identifier: SACR72HB6d04mUJ1ofXSu5a+9Iw6+KXMhVTcnheCYF4= Subject key identifier: 37:B8:60:D3:42:A1:22:07:00:F4:CF:6B:F9:FD:D3:EC:66:1D:0C:E9 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 31EA8188CE2F2ED21913F1530138F53C49D6980A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/14a2c378-9504-481e-9866-906c67b80678.roa Signing time: Tue 14 Apr 2026 12:51:37 +0000 ROA not before: Tue 14 Apr 2026 12:51:37 +0000 ROA not after: Mon 13 Jul 2026 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ea:81:88:ce:2f:2e:d2:19:13:f1:53:01:38:f5:3c:49:d6:98:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 14 12:51:37 2026 GMT Not After : Jul 13 23:59:59 2026 GMT Subject: serialNumber=b0711ec69332f7738306efa2703472fe104fc379dcefcabf531157922299ef98, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:40:9b:fc:03:34:71:b7:e5:ee:af:9f:15:eb: 4c:1b:9f:74:a5:cc:87:b2:7e:67:52:d4:69:b1:8b: 68:e1:de:e2:15:22:7d:a9:31:b2:a7:a2:a5:4c:78: 68:26:22:ab:80:46:32:63:27:86:3d:03:03:15:fc: 36:95:29:0e:56:20:39:5c:ec:c9:c4:d8:22:05:f0: 7c:bb:fe:e3:f4:ea:70:91:e8:d7:d5:80:09:9f:41: 28:39:ff:13:f6:69:86:21:40:ce:4a:34:39:a2:5f: ff:f3:48:3c:25:42:64:c2:8d:f9:0a:c4:c6:94:9c: 68:b3:7b:65:f2:33:7f:18:55:5a:f7:29:6e:fb:5f: 0a:6e:4a:f4:c3:c2:a0:26:0a:ba:14:4c:b5:ce:df: 38:b8:e2:89:3b:24:25:7c:00:c1:e0:d5:05:43:fc: fc:d3:c6:45:08:30:78:b6:25:af:42:d0:48:21:ad: 50:4a:24:5b:09:df:d0:44:97:37:c5:e8:b5:f9:4a: cc:79:e0:e7:24:80:65:b7:73:e4:57:9c:7f:82:77: c9:39:d2:64:11:10:32:b2:d1:34:da:74:16:0a:fb: 25:de:fe:da:40:d2:dd:aa:0e:f8:87:ac:db:08:86: 12:3c:43:87:b7:41:e7:5d:20:0c:37:91:0f:e6:35: 78:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:60:D3:42:A1:22:07:00:F4:CF:6B:F9:FD:D3:EC:66:1D:0C:E9 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/14a2c378-9504-481e-9866-906c67b80678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.187.0/24 Signature Algorithm: sha256WithRSAEncryption 07:d0:c1:ca:49:3f:5b:a8:d8:d8:4d:01:39:37:85:d5:ca:75: 69:8c:73:39:c8:92:ef:8b:aa:ff:20:1d:50:7c:82:12:96:ad: 05:fd:bd:73:51:7d:6c:e0:12:b4:99:5c:54:8e:d3:11:fd:d7: db:88:99:5f:94:d2:9f:c9:99:c7:51:25:52:32:65:9b:92:b4: ac:78:e2:cb:29:26:78:81:5f:46:56:26:50:62:12:dc:2b:ba: 44:d0:1d:c4:17:4c:5b:d9:d0:f4:d6:aa:b2:d0:be:89:51:58: 97:b6:0d:3f:4b:c9:ce:cd:a3:f9:8c:1c:99:99:79:e2:ca:a5: 7f:8e:34:46:ce:89:13:fd:a7:f0:d1:1a:dc:18:10:13:59:3f: 36:6a:45:40:c9:34:07:b7:d9:b7:c2:b7:17:84:52:da:3f:a2: a0:6c:84:2b:84:26:21:ae:b5:a5:71:b9:97:ad:95:28:23:6c: b6:13:c3:48:f6:1a:a4:4e:98:44:ac:67:60:65:3f:9f:c2:02: b1:fd:c9:e9:f2:ff:6f:44:22:a4:8f:88:00:9f:06:64:b4:52: 35:d9:a2:7d:d7:b9:a5:e9:8e:76:5b:35:ae:cd:f1:b9:12:c3: 93:64:2d:3b:cb:50:96:60:f2:03:46:c4:7d:a3:17:11:a8:1e: 29:ef:1e:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMeqBiM4vLtIZE/FTATj1PEnWmAowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNDE0MTI1MTM3WhcNMjYwNzEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDcxMWVjNjkzMzJmNzczODMwNmVmYTI3MDM0NzJmZTEw NGZjMzc5ZGNlZmNhYmY1MzExNTc5MjIyOTllZjk4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJQJv8AzRxt+Xur58V60wbn3SlzIeyfmdS1Gmxi2jh3uIV In2pMbKnoqVMeGgmIquARjJjJ4Y9AwMV/DaVKQ5WIDlc7MnE2CIF8Hy7/uP06nCR 6NfVgAmfQSg5/xP2aYYhQM5KNDmiX//zSDwlQmTCjfkKxMaUnGize2XyM38YVVr3 KW77XwpuSvTDwqAmCroUTLXO3zi44ok7JCV8AMHg1QVD/PzTxkUIMHi2Ja9C0Egh rVBKJFsJ39BElzfF6LX5Ssx54OckgGW3c+RXnH+Cd8k50mQREDKy0TTadBYK+yXe /tpA0t2qDviHrNsIhhI8Q4e3QeddIAw3kQ/mNXidAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUN7hg00KhIgcA9M9r+f3T7GYdDOkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzE0YTJjMzc4LTk1MDQtNDgxZS05ODY2LTkwNmM2N2I4MDY3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3bswDQYJKoZIhvcNAQELBQADggEBAAfQwcpJP1uo2NhNATk3hdXKdWmM cznIku+Lqv8gHVB8ghKWrQX9vXNRfWzgErSZXFSO0xH919uImV+U0p/JmcdRJVIy ZZuStKx44sspJniBX0ZWJlBiEtwrukTQHcQXTFvZ0PTWqrLQvolRWJe2DT9Lyc7N o/mMHJmZeeLKpX+ONEbOiRP9p/DRGtwYEBNZPzZqRUDJNAe32bfCtxeEUto/oqBs hCuEJiGutaVxuZetlSgjbLYTw0j2GqROmESsZ2BlP5/CArH9yeny/29EIqSPiACf BmS0UjXZon3XuaXpjnZbNa7N8bkSw5NkLTvLUJZg8gNGxH2jFxGoHinvHg8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:12:19 2026 by rpki-client