$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa File: 271f0380-5b52-472a-bc37-cdbbdcd650e9.roa (raw, json) Hash identifier: kmJ3OY7bxbPEHB/1Pka2vQd2U2YCQ6SYjHbeYMtgT74= Subject key identifier: 7D:63:A8:72:B5:68:3A:DF:D9:49:45:1C:F2:32:9F:7E:12:16:54:A5 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5659FB4FD3F3D3C9F524D28EA358E47E96144E83 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa Signing time: Fri 09 Oct 2026 00:30:15 +0000 ROA not before: Fri 09 Oct 2026 00:30:15 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:59:fb:4f:d3:f3:d3:c9:f5:24:d2:8e:a3:58:e4:7e:96:14:4e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:15 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=1ed12626c7c31f82fac71568d149c54348997d9545c00ed5700c7af077e9b174, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:be:b6:1f:a5:de:6b:4e:d9:6c:0d:7a:d7: 31:92:92:a1:9a:e8:e3:1c:4d:4e:dc:c4:e2:8d:7a: 58:ed:64:6a:f2:42:d7:88:3f:14:19:94:e7:0b:0c: 38:e2:f6:d5:57:7e:f6:e5:58:31:92:76:b5:08:03: aa:a6:c7:1a:9f:23:52:91:23:62:d8:6a:0d:1c:6b: a7:45:7a:48:bd:9c:1e:a5:44:aa:aa:a1:08:55:25: 2b:14:09:9c:9a:cf:67:d4:2c:c2:7b:9a:2e:ae:7c: 22:07:cd:39:45:83:5c:6b:fa:86:36:d4:80:0e:28: 81:e5:66:ac:46:ed:d9:b7:67:95:3e:2d:12:d4:79: 60:bc:08:8b:51:a5:6c:78:07:7c:46:ba:7b:9d:df: a1:ad:a4:73:4f:00:65:c7:11:dc:70:92:3a:d0:8a: 0f:d6:e9:8f:f1:ac:a7:b1:de:04:c1:6d:3c:d3:01: 3e:76:b1:90:5e:65:9d:ef:86:ab:6d:3a:33:f1:fa: c2:0c:cb:ae:5b:ca:5b:2b:8b:05:ec:b0:43:30:99: b5:48:78:30:23:5b:fc:77:2f:f4:29:87:96:10:5b: 43:2a:15:a8:1f:16:7d:46:04:0e:ac:9d:f4:96:23: 6e:86:1c:3f:ea:8d:69:fe:88:83:95:08:c8:c4:89: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:63:A8:72:B5:68:3A:DF:D9:49:45:1C:F2:32:9F:7E:12:16:54:A5 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.217.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:7b:b3:d5:18:2b:f6:12:f4:5d:5a:85:86:5e:58:ca:4b:e5: 3d:79:5d:a2:2b:b0:ca:71:eb:a6:04:60:d0:ce:7a:ee:8e:ae: 5b:78:d7:15:3a:37:82:8b:79:75:25:b0:31:c5:4e:53:a1:ed: 6f:83:1c:3b:d1:c4:de:78:83:81:14:e9:24:b5:41:b4:cb:39: 1f:bb:df:77:bc:37:a6:fb:4b:1d:be:fa:c9:6c:0d:fb:1f:4a: 66:e6:8a:c6:44:54:bf:42:b8:82:88:4c:2d:30:fe:ce:08:f8: 2d:f3:12:04:d5:53:92:86:36:f7:f5:ad:4f:92:67:96:23:38: 06:fd:1d:77:b5:c3:33:19:8d:06:73:f1:20:e9:de:da:42:ad: a9:54:0a:21:93:de:32:06:5d:c9:2c:a6:f7:fe:7c:34:7c:a9: 9e:bd:24:62:aa:32:ca:e4:7a:78:07:10:44:1d:e5:78:b2:4f: af:cd:b1:8f:06:1b:4a:f2:cb:81:a7:42:b5:93:06:1d:ab:da: 43:2f:15:74:6f:0a:9b:e4:c6:ab:10:30:f7:e2:b2:66:44:3c: 04:65:28:18:1e:b9:ee:70:82:9b:3c:27:81:c4:41:1b:09:1b: ae:7a:19:6b:cb:78:ea:4e:ce:67:e6:10:9a:fb:d8:fd:e3:c4: ec:2b:6b:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVln7T9Pz08n1JNKOo1jkfpYUToMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDE1WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWQxMjYyNmM3YzMxZjgyZmFjNzE1NjhkMTQ5YzU0MzQ4 OTk3ZDk1NDVjMDBlZDU3MDBjN2FmMDc3ZTliMTc0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXQL62H6Xea07ZbA161zGSkqGa6OMcTU7cxOKNeljtZGry QteIPxQZlOcLDDji9tVXfvblWDGSdrUIA6qmxxqfI1KRI2LYag0ca6dFeki9nB6l RKqqoQhVJSsUCZyaz2fULMJ7mi6ufCIHzTlFg1xr+oY21IAOKIHlZqxG7dm3Z5U+ LRLUeWC8CItRpWx4B3xGunud36GtpHNPAGXHEdxwkjrQig/W6Y/xrKex3gTBbTzT AT52sZBeZZ3vhqttOjPx+sIMy65bylsriwXssEMwmbVIeDAjW/x3L/Qph5YQW0Mq FagfFn1GBA6snfSWI26GHD/qjWn+iIOVCMjEiTFJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfWOocrVoOt/ZSUUc8jKffhIWVKUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzI3MWYwMzgwLTViNTItNDcyYS1iYzM3LWNkYmJkY2Q2NTBlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dkwDQYJKoZIhvcNAQELBQADggEBAB17s9UYK/YS9F1ahYZeWMpL5T15 XaIrsMpx66YEYNDOeu6Orlt41xU6N4KLeXUlsDHFTlOh7W+DHDvRxN54g4EU6SS1 QbTLOR+733e8N6b7Sx2++slsDfsfSmbmisZEVL9CuIKITC0w/s4I+C3zEgTVU5KG Nvf1rU+SZ5YjOAb9HXe1wzMZjQZz8SDp3tpCralUCiGT3jIGXckspvf+fDR8qZ69 JGKqMsrkengHEEQd5XiyT6/NsY8GG0ryy4GnQrWTBh2r2kMvFXRvCpvkxqsQMPfi smZEPARlKBgeue5wgps8J4HEQRsJG656GWvLeOpOzmfmEJr72P3jxOwra3Y= -----END CERTIFICATE-----Generated at Sun Nov 8 14:57:29 2026 by rpki-client