$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa File: 161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa (raw, json) Hash identifier: +fxHdmjeZswG2IiaxEiljEJEIlohg8spCaAFqNYjBgU= Subject key identifier: F2:4B:7F:F5:B7:60:E2:16:D7:E9:B8:7B:09:9C:9E:4C:96:9B:1A:3E Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4F21BAF321FCE58B9DC63BD17CFABD50F11B90C1 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa Signing time: Thu 22 Oct 2026 00:10:26 +0000 ROA not before: Thu 22 Oct 2026 00:10:26 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:21:ba:f3:21:fc:e5:8b:9d:c6:3b:d1:7c:fa:bd:50:f1:1b:90:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 22 00:10:26 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=0696e78f810470d7d3e04fe73a966179c72911b7dade620c3c08dbca63d0322b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:90:38:2f:8a:c6:7e:aa:dd:27:b4:a6:fc: 8e:ef:f7:59:ca:30:f0:8a:a9:8c:74:f8:bd:b3:f7: f2:f5:62:ce:fa:54:f3:9f:e6:12:f3:d4:93:11:1b: e8:9e:cc:9e:a1:f0:5e:a3:a4:28:af:15:ea:72:e6: 58:9c:df:d1:dd:a7:88:8b:63:1d:d9:c1:6b:9e:82: 49:d7:20:ee:07:0b:a2:35:c4:fc:26:4e:f4:ba:d3: d8:23:30:17:64:13:de:70:3d:0e:de:a4:eb:65:62: 58:75:a0:32:a7:db:11:b1:1c:f7:09:37:e9:16:14: fe:c9:77:2b:c1:44:dd:4d:57:0b:b1:af:c9:ed:17: 0a:67:e6:f1:41:7b:bd:9b:36:03:8e:2f:a3:f0:58: a9:97:1d:b9:7d:b1:f5:a1:86:cc:60:99:71:ae:10: 16:5b:f0:70:f7:8b:b6:cc:3a:bd:7b:05:de:18:61: 70:d7:98:ad:ec:1e:32:74:dc:fa:52:94:5d:73:fc: d1:7c:3c:9e:64:33:62:a0:4a:87:80:8b:8a:11:b7: 19:97:b2:01:58:2b:a3:59:65:73:0b:a0:35:4e:eb: 47:97:b9:a6:69:03:d0:3d:5c:02:95:c3:c1:0b:d4: 2f:d2:c1:85:50:15:08:1d:c2:50:d8:a5:4a:c1:04: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4B:7F:F5:B7:60:E2:16:D7:E9:B8:7B:09:9C:9E:4C:96:9B:1A:3E X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.244.0/23 Signature Algorithm: sha256WithRSAEncryption 31:34:66:8f:69:26:11:05:6b:02:5f:fb:ef:58:17:2d:35:c8: 70:3b:dd:1f:e8:31:ef:50:1c:75:2c:8e:27:ba:d9:c7:7b:b7: 52:0b:7a:1e:90:cd:b2:b6:43:8b:3e:21:bd:41:a5:12:8f:18: f7:b7:27:75:da:6a:84:0d:51:63:12:d1:f8:26:bb:2f:91:18: c2:50:e4:0d:de:bf:aa:e2:26:cf:3f:f2:9a:a8:6d:17:6b:a1: d1:bb:7c:ee:91:c2:3d:d8:e8:04:f5:6a:03:bf:3d:5c:4e:af: 76:01:d9:fc:49:e0:f4:a0:0e:c3:b8:de:68:5e:79:ea:0c:83: 8d:b3:e3:24:79:c8:5f:bf:5f:9b:d6:2b:99:27:52:20:14:89: d9:3a:5c:c9:d0:92:9e:46:99:eb:f7:03:1b:94:9e:e5:e3:0e: 78:7a:8f:0f:07:64:83:fe:01:9b:d7:b5:db:3e:0c:fb:9e:13: b1:c7:dd:5e:f3:eb:ea:75:75:8a:b9:a5:9d:11:db:71:7d:d3: ce:f1:06:d8:df:95:84:5f:dd:7b:5d:47:b2:d8:21:4b:9e:27: 34:d6:d3:65:5f:c8:e5:43:e3:d6:4a:b7:f3:22:92:99:d3:90: 05:79:91:c6:26:ee:94:2a:73:de:21:15:f6:37:c9:b4:6a:4a: b5:0b:b1:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTyG68yH85YudxjvRfPq9UPEbkMEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIyMDAxMDI2WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjk2ZTc4ZjgxMDQ3MGQ3ZDNlMDRmZTczYTk2NjE3OWM3 MjkxMWI3ZGFkZTYyMGMzYzA4ZGJjYTYzZDAzMjJiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqu5A4L4rGfqrdJ7Sm/I7v91nKMPCKqYx0+L2z9/L1Ys76 VPOf5hLz1JMRG+iezJ6h8F6jpCivFepy5lic39Hdp4iLYx3ZwWuegknXIO4HC6I1 xPwmTvS609gjMBdkE95wPQ7epOtlYlh1oDKn2xGxHPcJN+kWFP7JdyvBRN1NVwux r8ntFwpn5vFBe72bNgOOL6PwWKmXHbl9sfWhhsxgmXGuEBZb8HD3i7bMOr17Bd4Y YXDXmK3sHjJ03PpSlF1z/NF8PJ5kM2KgSoeAi4oRtxmXsgFYK6NZZXMLoDVO60eX uaZpA9A9XAKVw8EL1C/SwYVQFQgdwlDYpUrBBPHXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8kt/9bdg4hbX6bh7CZyeTJabGj4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzE2MWZjMWIzLTM1ZTYtNGUwYi05NzgxLTYyYzViNmY2YTViZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/QwDQYJKoZIhvcNAQELBQADggEBADE0Zo9pJhEFawJf++9YFy01yHA7 3R/oMe9QHHUsjie62cd7t1ILeh6QzbK2Q4s+Ib1BpRKPGPe3J3XaaoQNUWMS0fgm uy+RGMJQ5A3ev6riJs8/8pqobRdrodG7fO6Rwj3Y6AT1agO/PVxOr3YB2fxJ4PSg DsO43mheeeoMg42z4yR5yF+/X5vWK5knUiAUidk6XMnQkp5Gmev3AxuUnuXjDnh6 jw8HZIP+AZvXtds+DPueE7HH3V7z6+p1dYq5pZ0R23F9087xBtjflYRf3XtdR7LY IUueJzTW02VfyOVD49ZKt/MikpnTkAV5kcYm7pQqc94hFfY3ybRqSrULsa8= -----END CERTIFICATE-----Generated at Sun Nov 8 15:32:00 2026 by rpki-client