$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa File: 1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa (raw, json) Hash identifier: 9hTGOZn/twenfv74K7a5j7efq1qhAX3jJkbUi0hDlGc= Subject key identifier: 1F:9E:93:B2:CF:0F:E9:10:9C:5D:32:EF:C6:6E:88:3C:06:C3:19:47 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 454391BCED6056F5BBE7255D993E4D71DBD0E6DE Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa Signing time: Tue 24 Feb 2026 00:10:08 +0000 ROA not before: Tue 24 Feb 2026 00:10:08 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:43:91:bc:ed:60:56:f5:bb:e7:25:5d:99:3e:4d:71:db:d0:e6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 24 00:10:08 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=e36333ea3c33594514ff94b0ff7cc5bee5256990c8b23945bc1ae5586c8bbe0e, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:8d:fc:46:bc:b5:ec:b1:08:20:de:c2:50: 05:f2:3b:6b:49:98:16:86:12:9e:08:27:5a:a3:74: 22:aa:6b:e2:67:17:da:e4:c8:06:0b:00:1f:96:89: 94:0f:9b:d6:3c:25:47:f3:27:7a:5a:ea:cd:eb:e9: 4c:8f:21:d3:86:2b:87:a4:74:ec:a2:f7:14:2e:98: af:a7:1d:02:d0:6f:12:e2:7b:3f:9b:62:51:ce:6e: 73:7a:f8:2a:6c:da:a5:5d:f4:32:cb:49:42:0d:3b: 0f:0c:eb:00:5a:33:14:25:f4:14:21:b1:af:51:e5: 7a:54:ea:09:8b:cf:63:8c:c6:9d:98:d8:b7:5e:c5: 81:cb:dd:1d:3f:b4:7d:11:14:b4:88:e8:b4:d3:ca: 4a:4c:17:bf:46:f2:84:56:64:40:75:d6:1f:9a:06: eb:9a:52:e1:db:4b:00:ba:0b:db:3d:69:b2:ae:a5: 0c:77:89:aa:13:30:5f:d1:da:34:2e:1a:67:36:f8: da:16:fc:ed:e6:81:71:94:71:dc:14:e8:82:61:9b: 2e:e5:0c:55:bb:a2:bb:93:7b:37:d3:69:9c:da:b9: 31:9b:dd:51:cb:50:3f:28:56:19:5d:27:2a:c7:da: f7:bc:6e:7b:b9:eb:b9:d2:f2:e8:d2:28:14:90:72: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9E:93:B2:CF:0F:E9:10:9C:5D:32:EF:C6:6E:88:3C:06:C3:19:47 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/20 Signature Algorithm: sha256WithRSAEncryption 67:88:db:ab:ec:65:75:a7:e4:a7:2c:25:8a:c7:13:2d:a2:5a: 86:19:1a:e1:fe:75:1b:d7:3d:cd:db:cc:50:75:45:e6:15:0c: fd:f4:86:47:11:aa:ad:a1:17:7e:7d:16:0e:a3:c6:e9:df:59: 89:ac:37:d6:a1:2f:c6:93:22:2c:a7:3e:fe:8a:60:33:1c:1a: 50:ae:36:78:15:9e:6f:c2:61:31:f9:54:02:be:47:d5:e2:8b: 99:a9:e5:14:33:91:1d:28:0a:99:5a:4f:d2:da:2a:77:7f:17: ee:c7:07:db:50:c8:16:a7:5c:64:a0:ab:c0:38:af:73:e1:21: dc:67:fc:57:10:b9:d9:71:c7:3b:33:5c:48:ec:5e:fb:c8:61: 89:f5:91:b6:a2:7b:67:27:cb:b4:18:ec:ed:12:34:96:69:88: 9f:33:8b:e0:ca:94:b5:6c:1e:6d:9f:3a:6b:20:2c:ca:5e:11: 0b:b8:db:01:7e:8f:67:c8:dd:b5:f0:cc:8c:ec:3c:b5:dd:7b: 0d:f6:a1:d6:5f:6b:c1:c0:4d:ea:83:e9:df:53:78:2e:73:5b: 1e:01:fc:38:de:38:34:e1:d0:c5:06:11:d0:ad:c8:26:c7:80: 51:78:99:77:0d:23:65:f3:ee:5b:2c:3e:72:de:7e:c2:94:cb: cc:f6:13:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURUORvO1gVvW75yVdmT5NcdvQ5t4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjI0MDAxMDA4WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzYzMzNlYTNjMzM1OTQ1MTRmZjk0YjBmZjdjYzViZWU1 MjU2OTkwYzhiMjM5NDViYzFhZTU1ODZjOGJiZTBlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL9438Rry17LEIIN7CUAXyO2tJmBaGEp4IJ1qjdCKqa+Jn F9rkyAYLAB+WiZQPm9Y8JUfzJ3pa6s3r6UyPIdOGK4ekdOyi9xQumK+nHQLQbxLi ez+bYlHObnN6+Cps2qVd9DLLSUINOw8M6wBaMxQl9BQhsa9R5XpU6gmLz2OMxp2Y 2LdexYHL3R0/tH0RFLSI6LTTykpMF79G8oRWZEB11h+aBuuaUuHbSwC6C9s9abKu pQx3iaoTMF/R2jQuGmc2+NoW/O3mgXGUcdwU6IJhmy7lDFW7oruTezfTaZzauTGb 3VHLUD8oVhldJyrH2ve8bnu567nS8ujSKBSQcjbVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH56Tss8P6RCcXTLvxm6IPAbDGUcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzFjOTU5ZTY2LWY5NjctNDNkNi05M2JkLWNiZGNmMTYwY2JiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQX+dAwDQYJKoZIhvcNAQELBQADggEBAGeI26vsZXWn5KcsJYrHEy2iWoYZ GuH+dRvXPc3bzFB1ReYVDP30hkcRqq2hF359Fg6jxunfWYmsN9ahL8aTIiynPv6K YDMcGlCuNngVnm/CYTH5VAK+R9Xii5mp5RQzkR0oCplaT9LaKnd/F+7HB9tQyBan XGSgq8A4r3PhIdxn/FcQudlxxzszXEjsXvvIYYn1kbaie2cny7QY7O0SNJZpiJ8z i+DKlLVsHm2fOmsgLMpeEQu42wF+j2fI3bXwzIzsPLXdew32odZfa8HATeqD6d9T eC5zWx4B/DjeODTh0MUGEdCtyCbHgFF4mXcNI2Xz7lssPnLefsKUy8z2E0c= -----END CERTIFICATE-----Generated at Mon Mar 2 01:45:01 2026 by rpki-client