$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa File: 1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa (raw, json) Hash identifier: jT8eCz9ymLf/PY0le0F1tZBpmau7OAaRsmB0GUdDkn0= Subject key identifier: 47:A4:D8:F1:65:C7:B6:F7:F7:BB:34:A1:BF:61:50:22:C6:B8:B6:29 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1C9141C6706263C7AC6062F799F15F39BA585DA5 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa Signing time: Thu 22 Oct 2026 00:10:10 +0000 ROA not before: Thu 22 Oct 2026 00:10:10 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:91:41:c6:70:62:63:c7:ac:60:62:f7:99:f1:5f:39:ba:58:5d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 22 00:10:10 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=27624f9cd2844bfb852b3434f7e4ab27418731a1028beeeee1b26ac03309cb51, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:a0:06:a0:e0:8b:29:fa:56:97:f5:08:79: 26:ce:df:0c:91:71:4b:da:25:01:2a:d5:7b:5c:ab: c2:e5:42:b1:e5:c6:8b:5b:b1:0f:0f:a0:e4:58:06: 13:ae:92:2a:ee:31:b1:82:89:9e:b1:25:2d:c8:54: fc:23:80:39:d8:e8:05:2a:a1:5c:2f:f0:58:ff:86: 26:83:d2:69:b2:29:6c:fb:9f:9e:7f:16:66:27:ed: 78:94:89:48:4e:c1:2d:5a:3d:18:60:44:91:ff:b7: 4e:d4:c0:7b:c4:c6:0c:fd:48:ff:66:b9:82:f3:d0: d6:8f:e1:9d:f8:16:4a:65:91:ac:ce:a4:66:85:85: c1:16:82:89:3c:50:4a:2a:3a:48:49:12:16:cd:43: 34:69:c7:65:8d:3d:90:3d:7e:50:ce:4c:48:af:a7: a3:22:78:c3:f4:0c:2f:f6:64:80:43:83:f9:27:a2: 4b:c3:11:34:da:9e:7b:1c:04:e9:88:ff:b8:48:b3: df:fe:88:72:d4:b4:11:4c:8e:d1:9a:20:bf:de:0d: ec:fc:69:ca:ca:a3:ab:47:82:e9:53:c6:20:67:7d: 2c:2f:d9:e9:b9:66:05:26:59:86:9b:27:90:d7:fc: d8:04:a9:e6:cf:7e:ec:ef:90:f5:a3:90:69:38:b4: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A4:D8:F1:65:C7:B6:F7:F7:BB:34:A1:BF:61:50:22:C6:B8:B6:29 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/20 Signature Algorithm: sha256WithRSAEncryption 63:d3:3a:03:9d:e1:67:5a:ab:5c:96:e8:ab:89:e3:04:d5:1b: eb:7f:18:ff:16:47:53:5e:c7:79:68:01:77:90:d0:52:39:be: 34:4e:55:cd:a1:3e:97:b7:62:b6:70:c1:d5:18:6a:ef:44:23: 60:b0:4c:35:f9:52:5b:71:35:e4:00:f6:a3:91:c0:fb:3a:a0: 6f:4f:35:49:7d:36:70:eb:a7:83:f8:8e:83:5a:e7:12:13:5c: cc:1b:af:78:d4:c4:d8:04:2f:f1:7b:9f:d5:68:e1:c8:45:36: 48:a5:df:f1:f8:90:dc:eb:8d:49:f0:a5:fa:e2:55:a2:dd:6a: 48:f7:92:0f:b9:b1:db:16:43:26:26:49:3b:63:db:e7:a5:36: 63:3c:59:e7:ac:4c:3a:fc:0a:8a:a7:fb:22:a8:36:a2:c5:82: 98:6f:f8:57:db:96:cd:04:f6:22:fc:0c:7c:1c:59:ad:9d:cf: 0d:e8:db:33:28:d4:2a:35:75:8c:3a:23:63:7f:3b:f6:a0:29: ad:52:01:47:28:7f:27:19:0c:7a:88:b7:7a:74:4e:ed:3f:0e: 97:6b:12:09:1c:6f:85:b8:b9:db:10:6d:63:53:33:ad:47:45: 0f:dd:d8:97:a0:d8:d5:78:94:8b:61:59:58:ee:44:aa:16:b4: 5c:32:7e:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHJFBxnBiY8esYGL3mfFfObpYXaUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIyMDAxMDEwWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzYyNGY5Y2QyODQ0YmZiODUyYjM0MzRmN2U0YWIyNzQx ODczMWExMDI4YmVlZWVlMWIyNmFjMDMzMDljYjUxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS76AGoOCLKfpWl/UIeSbO3wyRcUvaJQEq1Xtcq8LlQrHl xotbsQ8PoORYBhOukiruMbGCiZ6xJS3IVPwjgDnY6AUqoVwv8Fj/hiaD0mmyKWz7 n55/FmYn7XiUiUhOwS1aPRhgRJH/t07UwHvExgz9SP9muYLz0NaP4Z34FkplkazO pGaFhcEWgok8UEoqOkhJEhbNQzRpx2WNPZA9flDOTEivp6MieMP0DC/2ZIBDg/kn okvDETTannscBOmI/7hIs9/+iHLUtBFMjtGaIL/eDez8acrKo6tHgulTxiBnfSwv 2em5ZgUmWYabJ5DX/NgEqebPfuzvkPWjkGk4tL87AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR6TY8WXHtvf3uzShv2FQIsa4tikwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzFjOTU5ZTY2LWY5NjctNDNkNi05M2JkLWNiZGNmMTYwY2JiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQX+dAwDQYJKoZIhvcNAQELBQADggEBAGPTOgOd4Wdaq1yW6KuJ4wTVG+t/ GP8WR1Nex3loAXeQ0FI5vjROVc2hPpe3YrZwwdUYau9EI2CwTDX5UltxNeQA9qOR wPs6oG9PNUl9NnDrp4P4joNa5xITXMwbr3jUxNgEL/F7n9Vo4chFNkil3/H4kNzr jUnwpfriVaLdakj3kg+5sdsWQyYmSTtj2+elNmM8WeesTDr8Coqn+yKoNqLFgphv +Ffbls0E9iL8DHwcWa2dzw3o2zMo1Co1dYw6I2N/O/agKa1SAUcofycZDHqIt3p0 Tu0/DpdrEgkcb4W4udsQbWNTM61HRQ/d2Jeg2NV4lIthWVjuRKoWtFwyfh0= -----END CERTIFICATE-----Generated at Tue Nov 10 06:09:09 2026 by rpki-client