$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa File: 161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa (raw, json) Hash identifier: baUH8ldS4i0jVnmCNW8TybYL2Zq0d2GFWD+OSaMpXgs= Subject key identifier: E8:2B:82:7D:86:E3:01:2B:E8:05:1E:6B:6F:66:92:8B:EA:8C:7B:46 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7E24007276297D247712D3A09B1DE694A73B3680 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa Signing time: Tue 24 Feb 2026 00:10:29 +0000 ROA not before: Tue 24 Feb 2026 00:10:29 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:24:00:72:76:29:7d:24:77:12:d3:a0:9b:1d:e6:94:a7:3b:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 24 00:10:29 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=4e714fd252eafeaa1153d090e2ccb522127c02615d3ae6823eb4a2548227f56b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:cb:1e:06:fb:01:bb:0c:8d:26:12:7e:73: e4:e1:ea:1a:a1:d7:18:26:60:d0:e6:2e:ab:86:14: 0b:1e:f6:dc:a7:2a:6f:ab:69:c5:ce:23:8e:3e:2e: 17:d1:5f:11:ea:0e:25:67:8d:de:5f:a0:c1:ac:4b: 15:77:2d:44:71:ff:a6:82:17:7d:d9:5f:03:51:3d: b8:64:57:63:2b:e0:44:81:3d:4b:d9:6a:6c:a9:f7: e5:b1:1f:9f:70:36:f6:42:8a:22:48:52:24:ad:fc: 54:2e:34:cd:f2:da:d6:96:0c:6d:f2:cf:6b:e3:c0: 08:9d:66:5e:19:d6:60:be:96:1d:87:51:91:ae:a9: 79:a0:31:ac:d4:90:b9:22:86:53:c7:3b:a9:ee:28: 64:05:28:5e:5b:d5:6b:94:41:65:53:0d:43:ba:8e: 77:4f:99:f8:c9:db:23:25:8b:e2:92:1d:b4:52:ca: 0e:dd:67:5e:3f:2c:de:5f:e7:7a:ce:53:4d:cb:62: ff:34:2b:ee:51:0b:20:f2:56:fd:d9:93:3f:2a:df: 0b:c9:b8:01:69:c6:72:75:e4:f4:c2:3a:65:09:cc: 15:5a:d4:52:39:a4:a8:a7:91:21:29:3b:a2:dd:05: 1e:ba:34:c9:35:4e:c4:93:99:f0:0a:5f:76:f2:cf: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2B:82:7D:86:E3:01:2B:E8:05:1E:6B:6F:66:92:8B:EA:8C:7B:46 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.244.0/23 Signature Algorithm: sha256WithRSAEncryption 66:15:63:31:fe:44:95:7e:8a:ef:39:cc:30:22:ab:8c:fc:79: 74:7b:84:65:f6:95:18:ed:7b:35:f5:5a:c8:72:05:65:9b:6c: 3c:c9:0b:ac:7d:69:83:84:04:91:4c:52:0c:13:f4:32:14:d2: b2:d0:a3:36:d1:40:16:9b:50:39:df:1e:cb:a9:0a:64:57:6e: ff:02:af:de:bc:73:3f:b3:cd:0b:a0:1e:4f:6d:81:c1:27:3d: 02:1b:4b:04:17:be:25:97:dc:d2:bd:c6:d4:d4:9e:b9:92:92: 71:99:58:ba:a6:70:37:0c:70:30:ea:35:6c:a3:aa:f9:30:5e: c2:20:ad:88:02:91:52:65:a8:34:1e:5e:df:3f:4c:04:8b:3d: ec:9f:62:07:7c:1e:07:1f:0f:95:3a:bc:11:a9:2d:db:2d:63: 4d:d1:c4:e2:ba:2f:3e:ef:2a:e6:cb:7b:38:ca:25:52:9a:95: 7c:d9:15:18:c0:15:c9:e5:b1:30:85:9b:fa:ac:ed:6a:68:b7: 1c:a8:6e:d5:fd:57:4b:ef:b7:ae:f3:61:43:ba:c5:4e:52:51: fb:0a:e5:da:4b:4c:31:a2:9c:81:21:93:83:77:11:b9:08:9b: 31:a2:38:6b:a7:40:87:01:44:0e:c7:cb:44:cf:e1:d9:aa:90: af:b2:85:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfiQAcnYpfSR3EtOgmx3mlKc7NoAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjI0MDAxMDI5WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTcxNGZkMjUyZWFmZWFhMTE1M2QwOTBlMmNjYjUyMjEy N2MwMjYxNWQzYWU2ODIzZWI0YTI1NDgyMjdmNTZiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChPMseBvsBuwyNJhJ+c+Th6hqh1xgmYNDmLquGFAse9tyn Km+racXOI44+LhfRXxHqDiVnjd5foMGsSxV3LURx/6aCF33ZXwNRPbhkV2Mr4ESB PUvZamyp9+WxH59wNvZCiiJIUiSt/FQuNM3y2taWDG3yz2vjwAidZl4Z1mC+lh2H UZGuqXmgMazUkLkihlPHO6nuKGQFKF5b1WuUQWVTDUO6jndPmfjJ2yMli+KSHbRS yg7dZ14/LN5f53rOU03LYv80K+5RCyDyVv3Zkz8q3wvJuAFpxnJ15PTCOmUJzBVa 1FI5pKinkSEpO6LdBR66NMk1TsSTmfAKX3byz0oJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6CuCfYbjASvoBR5rb2aSi+qMe0YwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzE2MWZjMWIzLTM1ZTYtNGUwYi05NzgxLTYyYzViNmY2YTViZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/QwDQYJKoZIhvcNAQELBQADggEBAGYVYzH+RJV+iu85zDAiq4z8eXR7 hGX2lRjtezX1WshyBWWbbDzJC6x9aYOEBJFMUgwT9DIU0rLQozbRQBabUDnfHsup CmRXbv8Cr968cz+zzQugHk9tgcEnPQIbSwQXviWX3NK9xtTUnrmSknGZWLqmcDcM cDDqNWyjqvkwXsIgrYgCkVJlqDQeXt8/TASLPeyfYgd8HgcfD5U6vBGpLdstY03R xOK6Lz7vKubLezjKJVKalXzZFRjAFcnlsTCFm/qs7WpotxyobtX9V0vvt67zYUO6 xU5SUfsK5dpLTDGinIEhk4N3EbkImzGiOGunQIcBRA7Hy0TP4dmqkK+yheQ= -----END CERTIFICATE-----Generated at Sun Mar 1 21:51:01 2026 by rpki-client