$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32c53391-9c3f-4b16-925f-978e804a33ba.roa File: 32c53391-9c3f-4b16-925f-978e804a33ba.roa (raw, json) Hash identifier: 3YbnWIEZeksil+SV8UaDq0NZDttPGfEGPrTBjmTOyGw= Subject key identifier: 10:F1:75:99:53:A2:13:7B:E2:D5:DC:19:71:E5:64:0E:BB:49:28:3F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1A25BE37AF88D5FB924456219AA535B42145DE81 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32c53391-9c3f-4b16-925f-978e804a33ba.roa Signing time: Fri 13 Feb 2026 00:00:10 +0000 ROA not before: Fri 13 Feb 2026 00:00:10 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 24.110.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:25:be:37:af:88:d5:fb:92:44:56:21:9a:a5:35:b4:21:45:de:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 13 00:00:10 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=095980831e10ecdda939f844a0ea97c6d203fa511791818d0f58ef7f91de30f1, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:21:0c:0c:cf:0d:f6:e9:e0:99:38:57:94:51: 8f:b1:fc:27:bf:c3:b7:2f:3b:42:f8:fd:e5:ba:39: d5:6e:25:e5:9a:dd:e6:85:51:95:85:e8:f9:44:34: e3:c7:33:62:0f:92:86:ad:02:0d:3e:2d:09:a7:85: 3f:b0:1a:3d:28:fc:56:b6:82:7c:a1:4f:b7:5e:09: fc:56:80:64:a6:d0:f6:df:7c:73:a6:57:2e:2c:5d: eb:ef:61:b9:65:57:4c:0a:8b:13:31:a1:45:7f:c7: fb:d0:31:5e:4a:d9:42:e8:4f:2b:aa:ee:a6:cd:81: 98:7d:7e:64:8e:d1:83:2b:69:ff:71:6e:92:4e:76: c6:ff:42:1d:1c:c1:76:52:68:e3:1b:8e:94:d4:e1: 6a:2e:88:83:3d:10:56:3e:47:6c:e0:3c:a5:32:18: b2:06:4b:84:91:7a:76:0c:0a:18:f6:7b:29:3b:e4: 00:56:cf:1a:9e:c7:54:04:91:db:d7:f6:63:05:fe: 70:fd:b5:f2:eb:b0:42:d5:ec:ca:7b:fd:db:0b:8a: 16:ee:92:37:d6:3c:6d:57:5f:f8:71:66:b4:61:8b: b9:bb:95:77:c7:48:e1:84:0b:62:92:a1:a0:b9:b0: ee:f3:fa:5e:dd:97:5a:1f:2e:50:64:5a:c0:30:06: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F1:75:99:53:A2:13:7B:E2:D5:DC:19:71:E5:64:0E:BB:49:28:3F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32c53391-9c3f-4b16-925f-978e804a33ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.64.0/18 Signature Algorithm: sha256WithRSAEncryption 31:04:a2:4b:27:a0:c0:71:32:f1:dc:ce:37:08:70:5c:12:ef: 2b:71:cf:9e:b0:33:4e:5d:4e:45:90:9a:65:2f:40:0b:64:1e: e7:f5:20:70:68:d2:09:5c:8b:c5:8a:3b:9d:5c:da:8a:e4:52: 7f:f1:15:1f:8f:e9:6a:e5:89:17:bd:38:86:7d:ad:8d:20:35: cc:00:c0:74:3c:82:60:45:aa:0c:e8:fd:da:22:14:9d:cd:b2: 80:8e:70:14:4c:bb:ce:8e:1f:4e:71:b3:3f:e6:57:99:a1:84: 8b:b7:b2:b9:ef:aa:4d:9e:8e:d5:07:26:4f:da:4e:14:0a:ee: 9e:49:18:dd:c4:e1:82:2e:cf:bf:a4:dd:84:60:96:da:0e:74: 94:85:a5:0b:8e:64:6d:fc:0f:b7:16:ab:1f:7e:b5:f4:4d:9e: 93:82:d5:f0:12:93:7c:ad:ed:4e:8b:33:89:4d:27:87:2a:d7: 85:60:20:01:3c:15:c3:2a:14:13:d8:41:ec:68:f4:72:7b:a7: 41:62:3d:54:fb:22:ba:9c:85:e7:00:56:2c:66:c3:c7:92:3f: 45:05:e6:64:f2:09:38:ab:b5:d4:8f:12:41:13:06:76:c9:a2: ac:f5:81:59:ec:78:09:d1:a2:25:bb:51:06:c9:08:29:7f:27: f7:d9:0d:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGiW+N6+I1fuSRFYhmqU1tCFF3oEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjEzMDAwMDEwWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTU5ODA4MzFlMTBlY2RkYTkzOWY4NDRhMGVhOTdjNmQy MDNmYTUxMTc5MTgxOGQwZjU4ZWY3ZjkxZGUzMGYxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxIQwMzw326eCZOFeUUY+x/Ce/w7cvO0L4/eW6OdVuJeWa 3eaFUZWF6PlENOPHM2IPkoatAg0+LQmnhT+wGj0o/Fa2gnyhT7deCfxWgGSm0Pbf fHOmVy4sXevvYbllV0wKixMxoUV/x/vQMV5K2ULoTyuq7qbNgZh9fmSO0YMraf9x bpJOdsb/Qh0cwXZSaOMbjpTU4WouiIM9EFY+R2zgPKUyGLIGS4SRenYMChj2eyk7 5ABWzxqex1QEkdvX9mMF/nD9tfLrsELV7Mp7/dsLihbukjfWPG1XX/hxZrRhi7m7 lXfHSOGEC2KSoaC5sO7z+l7dl1ofLlBkWsAwBhgfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEPF1mVOiE3vi1dwZceVkDrtJKD8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyYzUzMzkxLTljM2YtNGIxNi05MjVmLTk3OGU4MDRhMzNiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYYbkAwDQYJKoZIhvcNAQELBQADggEBADEEoksnoMBxMvHczjcIcFwS7ytx z56wM05dTkWQmmUvQAtkHuf1IHBo0glci8WKO51c2orkUn/xFR+P6WrliRe9OIZ9 rY0gNcwAwHQ8gmBFqgzo/doiFJ3NsoCOcBRMu86OH05xsz/mV5mhhIu3srnvqk2e jtUHJk/aThQK7p5JGN3E4YIuz7+k3YRgltoOdJSFpQuOZG38D7cWqx9+tfRNnpOC 1fASk3yt7U6LM4lNJ4cq14VgIAE8FcMqFBPYQexo9HJ7p0FiPVT7IrqchecAVixm w8eSP0UF5mTyCTirtdSPEkETBnbJoqz1gVnseAnRoiW7UQbJCCl/J/fZDTM= -----END CERTIFICATE-----Generated at Mon Mar 2 01:35:02 2026 by rpki-client