$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa File: 32fde2e1-3674-4a8c-9968-42521c781b0a.roa (raw, json) Hash identifier: deZ7rthlUFeLxVNBB3SyHb1i9IVxLIQrkJ8/XRxGe/k= Subject key identifier: C6:72:27:F8:8B:73:56:E4:72:7E:B8:D9:10:A5:E5:A6:0E:76:39:7A Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 322033972EB14BCDDA7936185643D0244C040CC2 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa Signing time: Wed 11 Feb 2026 00:30:18 +0000 ROA not before: Wed 11 Feb 2026 00:30:18 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:20:33:97:2e:b1:4b:cd:da:79:36:18:56:43:d0:24:4c:04:0c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:30:18 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=3c087595b9eb043ce89539f7c78e63dc752e4c9bf13392de7e9cb7e90091fc64, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:06:10:1e:46:15:e2:32:c1:ab:d2:ca:68: b0:e7:b3:33:73:d8:bb:78:7e:ac:ac:86:c6:c2:42: 57:62:39:84:56:ea:b8:8b:8b:48:23:8b:99:a5:e4: 35:f4:e9:89:cb:31:fc:f1:01:f7:eb:66:a2:e8:13: c2:14:cc:ec:38:9a:f8:c7:79:5c:eb:1e:a2:38:59: e1:ce:fa:de:f8:2d:b9:fc:13:c0:fe:55:c3:2d:d3: 74:65:d1:e0:29:1d:ba:53:ec:00:5a:d7:fd:b5:fb: a0:80:a9:a5:b7:57:6d:b0:11:67:99:72:35:3b:4d: 82:88:9b:c6:f9:3e:29:81:da:18:6f:bf:6b:77:67: 54:1f:5c:da:86:dd:10:81:55:0c:4e:b3:76:0d:6c: 35:82:66:0b:c0:ae:78:50:7e:0b:f8:68:9a:57:54: c6:63:66:bd:85:5f:2d:7a:62:c0:74:64:74:04:2a: 49:8f:b8:6c:dc:ff:50:d7:2d:f3:f7:1f:70:1d:70: 04:3b:43:ee:c2:c9:ea:ba:22:4e:3c:a0:6e:0f:ab: 20:14:b4:ee:57:94:6e:3a:73:54:9e:47:30:b7:98: c7:94:19:59:53:6c:e6:cb:92:37:2b:c7:f0:49:39: 0c:bc:cc:22:98:7c:51:58:58:3a:36:28:bb:10:6c: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:72:27:F8:8B:73:56:E4:72:7E:B8:D9:10:A5:E5:A6:0E:76:39:7A X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.238.0/23 Signature Algorithm: sha256WithRSAEncryption 60:c4:33:64:4a:dd:8d:38:ee:9b:0b:9d:6d:93:e9:d0:22:cc: 71:b0:20:2d:9f:fd:b5:ec:48:f5:82:a5:a0:34:b0:33:a7:3c: bd:64:77:fe:51:dc:c7:d8:a5:2d:bc:87:6f:fa:8c:cd:e1:4e: 75:22:b6:dd:79:58:19:3b:bd:bb:61:33:5a:d9:af:74:7c:4d: df:9a:38:bc:66:55:12:21:9e:c9:03:cf:96:f6:27:5f:a8:52: 7b:e8:cd:a1:16:8a:e9:49:87:b1:19:65:5f:96:fc:fc:9c:d6: 0c:e8:b5:8f:eb:f1:b9:b1:b6:7b:f6:11:03:0e:07:c8:0b:ab: de:65:9d:51:42:1b:2e:5a:d7:98:ce:08:61:b3:a1:c1:0e:f7: 7c:a9:1a:0c:0c:4a:52:82:b8:8e:30:61:26:15:1f:cc:18:e0: 49:2c:c5:d5:70:a4:39:7c:9c:4c:16:68:ac:07:bd:e7:d2:7d: 37:fd:65:9c:ea:fc:8d:88:bc:d7:b9:c3:dd:33:e6:8b:af:5e: f1:e3:c6:58:bd:1c:1e:3a:20:62:8d:c0:74:f6:12:ec:54:71: 8b:7c:12:0d:99:fb:a5:e8:4e:e7:ab:c0:85:c2:73:45:3d:e1: f5:50:93:06:d4:92:76:ba:f5:f7:09:47:82:d1:67:42:79:11: 5c:60:37:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMiAzly6xS83aeTYYVkPQJEwEDMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAzMDE4WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzA4NzU5NWI5ZWIwNDNjZTg5NTM5ZjdjNzhlNjNkYzc1 MmU0YzliZjEzMzkyZGU3ZTljYjdlOTAwOTFmYzY0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHggYQHkYV4jLBq9LKaLDnszNz2Lt4fqyshsbCQldiOYRW 6riLi0gji5ml5DX06YnLMfzxAffrZqLoE8IUzOw4mvjHeVzrHqI4WeHO+t74Lbn8 E8D+VcMt03Rl0eApHbpT7ABa1/21+6CAqaW3V22wEWeZcjU7TYKIm8b5PimB2hhv v2t3Z1QfXNqG3RCBVQxOs3YNbDWCZgvArnhQfgv4aJpXVMZjZr2FXy16YsB0ZHQE KkmPuGzc/1DXLfP3H3AdcAQ7Q+7Cyeq6Ik48oG4PqyAUtO5XlG46c1SeRzC3mMeU GVlTbObLkjcrx/BJOQy8zCKYfFFYWDo2KLsQbAGHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxnIn+ItzVuRyfrjZEKXlpg52OXowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyZmRlMmUxLTM2NzQtNGE4Yy05OTY4LTQyNTIxYzc4MWIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++4wDQYJKoZIhvcNAQELBQADggEBAGDEM2RK3Y047psLnW2T6dAizHGw IC2f/bXsSPWCpaA0sDOnPL1kd/5R3MfYpS28h2/6jM3hTnUitt15WBk7vbthM1rZ r3R8Td+aOLxmVRIhnskDz5b2J1+oUnvozaEWiulJh7EZZV+W/Pyc1gzotY/r8bmx tnv2EQMOB8gLq95lnVFCGy5a15jOCGGzocEO93ypGgwMSlKCuI4wYSYVH8wY4Eks xdVwpDl8nEwWaKwHvefSfTf9ZZzq/I2IvNe5w90z5ouvXvHjxli9HB46IGKNwHT2 EuxUcYt8Eg2Z+6XoTuerwIXCc0U94fVQkwbUkna69fcJR4LRZ0J5EVxgN6A= -----END CERTIFICATE-----Generated at Mon Mar 2 15:50:20 2026 by rpki-client