$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa File: 3200cf8e-c64b-4110-8ccd-4128ae231d47.roa (raw, json) Hash identifier: 95gaMY7hKA3hPhx+n/CQzXz8M8XTF2MhMkhmcItt+78= Subject key identifier: A6:C9:26:B1:A2:93:E9:CE:92:CB:01:F9:83:DE:4E:AF:C7:14:80:A4 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 29C1B324B8E5721446F758871B7B52473729D048 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa Signing time: Mon 03 Aug 2026 00:10:09 +0000 ROA not before: Mon 03 Aug 2026 00:10:09 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c1:b3:24:b8:e5:72:14:46:f7:58:87:1b:7b:52:47:37:29:d0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 3 00:10:09 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=167bd81dd64c91c9e778568082648e50cf1c2b6ee3f0e20037c95a3dbb237415, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:5e:7d:e9:27:1a:17:63:4f:3a:e5:f7:2e: c3:48:cb:f3:32:91:9e:24:6a:df:8d:72:da:f9:d1: 45:24:a4:1f:13:30:3c:38:bb:57:99:e2:81:fb:f9: 85:13:1b:b5:56:16:3d:ab:58:11:14:4c:ee:8a:ad: bf:de:44:a1:fb:b2:cc:b5:e1:b2:3d:15:e0:43:e6: db:eb:f6:e8:d4:41:34:7b:39:c1:ac:e5:1d:0d:ca: 2b:81:d0:d5:bb:9b:1c:2d:ce:13:58:8f:a2:0e:97: 52:32:3a:da:9b:8a:2c:18:6c:fb:63:33:4f:d9:48: e8:8f:1b:e0:30:90:ea:42:d1:b8:d0:47:d9:2f:15: 46:12:7d:94:02:f3:62:52:63:86:e1:ed:85:19:c3: f0:39:96:d6:bf:fb:10:06:ad:10:f0:3b:d7:be:34: 21:0d:fb:a9:0a:7a:bd:c6:39:33:02:73:af:c0:48: b3:b1:f3:24:d4:ca:e7:aa:37:0a:5e:a0:55:01:1c: b9:4e:ea:f4:ce:fe:06:e7:9a:66:9d:e0:c7:fe:0b: 58:05:46:99:a4:10:be:91:15:1e:10:c1:f1:e1:fa: 1e:f7:98:37:35:2e:ba:54:92:60:83:fb:4c:11:79: ee:da:f1:85:c2:c8:27:47:72:d3:b2:d2:31:f8:21: 69:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C9:26:B1:A2:93:E9:CE:92:CB:01:F9:83:DE:4E:AF:C7:14:80:A4 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.224.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:1c:59:12:87:0c:f1:63:85:a3:75:f1:cf:bc:22:59:ed:b5: 53:7a:88:7f:54:0b:d5:a8:7b:b9:6f:aa:78:03:34:d7:a4:99: 5d:f2:45:0d:d3:0d:cb:f2:92:34:4e:be:37:08:07:ad:78:3f: 0e:6d:2a:58:cc:57:51:a6:08:83:f2:cf:26:aa:00:39:84:24: 0f:da:d4:b7:e1:cc:81:25:22:93:e8:e6:df:f1:57:6b:e6:8b: 62:d3:6f:34:16:df:c7:39:52:98:20:0f:2f:93:bb:73:36:e4: 3a:bb:b8:a1:35:ca:d1:5f:c6:52:18:a0:cc:d0:64:68:d8:f5: 4b:1c:ab:b5:c0:ed:57:62:61:13:cf:25:66:eb:61:af:63:19: 32:be:70:b0:91:eb:4f:a8:9c:d8:03:3f:af:9b:4e:4c:27:17: 52:cb:e7:fe:f6:25:ea:a0:6f:6f:7d:c8:dc:1c:b5:a4:22:80: 5c:dc:4e:8f:4b:a3:4e:b0:ed:9a:e2:23:74:ff:47:96:7b:5d: 3a:bd:c7:0a:95:1b:f4:75:e7:87:83:d7:58:b0:f9:87:40:9b: bf:ee:28:f6:67:ed:a6:8f:81:10:9a:05:bc:05:08:ab:89:a7: 25:04:e3:48:9e:2f:83:55:0a:05:dd:e8:4a:1b:93:9b:43:fa: 2c:0e:7f:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKcGzJLjlchRG91iHG3tSRzcp0EgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwODAzMDAxMDA5WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjdiZDgxZGQ2NGM5MWM5ZTc3ODU2ODA4MjY0OGU1MGNm MWMyYjZlZTNmMGUyMDAzN2M5NWEzZGJiMjM3NDE1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCejV596ScaF2NPOuX3LsNIy/MykZ4kat+Nctr50UUkpB8T MDw4u1eZ4oH7+YUTG7VWFj2rWBEUTO6Krb/eRKH7ssy14bI9FeBD5tvr9ujUQTR7 OcGs5R0NyiuB0NW7mxwtzhNYj6IOl1IyOtqbiiwYbPtjM0/ZSOiPG+AwkOpC0bjQ R9kvFUYSfZQC82JSY4bh7YUZw/A5lta/+xAGrRDwO9e+NCEN+6kKer3GOTMCc6/A SLOx8yTUyueqNwpeoFUBHLlO6vTO/gbnmmad4Mf+C1gFRpmkEL6RFR4QwfHh+h73 mDc1LrpUkmCD+0wRee7a8YXCyCdHctOy0jH4IWn5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpskmsaKT6c6SywH5g95Or8cUgKQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyMDBjZjhlLWM2NGItNDExMC04Y2NkLTQxMjhhZTIzMWQ0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqeAwDQYJKoZIhvcNAQELBQADggEBAH4cWRKHDPFjhaN18c+8IlnttVN6 iH9UC9Woe7lvqngDNNekmV3yRQ3TDcvykjROvjcIB614Pw5tKljMV1GmCIPyzyaq ADmEJA/a1LfhzIElIpPo5t/xV2vmi2LTbzQW38c5UpggDy+Tu3M25Dq7uKE1ytFf xlIYoMzQZGjY9Uscq7XA7VdiYRPPJWbrYa9jGTK+cLCR60+onNgDP6+bTkwnF1LL 5/72Jeqgb299yNwctaQigFzcTo9Lo06w7ZriI3T/R5Z7XTq9xwqVG/R154eD11iw +YdAm7/uKPZn7aaPgRCaBbwFCKuJpyUE40ieL4NVCgXd6Eobk5tD+iwOfxU= -----END CERTIFICATE-----Generated at Mon Sep 21 12:52:01 2026 by rpki-client