$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa File: 3754532b-2417-490e-8cb4-26b8fc034925.roa (raw, json) Hash identifier: A8wJcMt9TkIdlAM44OQY95q30U5OjVQrS8iUxo/Uwa4= Subject key identifier: 49:40:02:C1:3B:3C:C8:52:E0:9F:4F:2C:5C:0C:D1:CB:09:7A:B5:5F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 273AB418CAABD1929DCA747E8379D3C76C28092E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa Signing time: Wed 11 Feb 2026 00:20:11 +0000 ROA not before: Wed 11 Feb 2026 00:20:11 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3a:b4:18:ca:ab:d1:92:9d:ca:74:7e:83:79:d3:c7:6c:28:09:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:20:11 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=a2ffe80ffda762214d26d2cc478b5d94a8c657b12e2b3a5d42a9f9cf6578f6a6, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:1a:27:ac:d1:90:42:39:bd:f6:42:81:a1: ba:4c:b5:0c:00:c4:59:a3:f2:d3:46:ef:f5:0d:e0: 0a:79:12:fc:10:31:37:90:5b:27:36:f2:89:08:0d: 90:32:ce:ba:f9:bd:70:88:34:95:3a:be:91:8a:5b: b7:1b:c3:53:8a:3c:6c:04:ea:2d:48:e9:97:3f:0e: c3:c3:81:3e:91:80:5e:f4:69:64:4e:67:8e:ac:f9: 40:30:59:19:3b:50:62:39:9d:ff:db:f1:38:57:84: 05:37:57:38:96:70:20:07:a5:a1:e2:da:dd:7c:8b: cd:81:07:7c:2d:58:ea:e5:00:36:3e:9d:33:b0:de: 44:55:0a:8e:69:a8:97:6d:9f:b5:d3:d4:e9:00:ef: f4:1f:f6:b5:34:25:77:4e:2c:4d:ac:36:88:96:11: 2d:dd:ef:7b:6c:2b:c2:1d:82:f3:98:54:56:43:77: 64:93:7e:0d:62:29:f1:ba:fe:da:85:fa:31:5b:98: 5d:95:3c:a5:ac:b2:d3:6a:d9:39:58:a8:55:e3:a0: 1d:db:0c:05:ab:b7:1d:1f:0a:62:71:74:b7:79:9b: e0:c1:89:61:2f:55:be:25:1b:56:1e:77:be:c6:02: d2:b9:46:05:70:2c:ee:8e:d0:bf:3b:0b:36:07:1c: 53:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:40:02:C1:3B:3C:C8:52:E0:9F:4F:2C:5C:0C:D1:CB:09:7A:B5:5F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.212.0/24 Signature Algorithm: sha256WithRSAEncryption 10:fd:a0:38:16:84:b2:d1:37:bb:b2:62:01:ae:a6:6d:36:62: 18:fb:70:8b:e8:bc:10:fe:e3:56:19:c5:d9:b7:44:36:ec:ba: 47:b1:8c:43:8b:5f:a1:39:be:d5:f4:be:87:6d:48:26:79:2e: 54:3d:2a:1d:eb:dc:72:c3:50:ef:66:e2:60:85:ec:e4:ee:42: cf:03:dd:d3:56:a0:a9:42:ee:d7:b4:7a:b9:a4:df:62:08:f6: 33:c9:cb:8a:dd:f1:80:19:ca:5e:40:ea:e4:09:6e:a9:f8:5a: f3:c9:6e:49:de:e9:d8:e5:88:dc:48:a4:b2:64:6c:01:1a:a0: 64:6f:fe:89:5c:31:03:c7:45:a0:a1:20:07:3b:cd:42:94:49: eb:a5:dd:d6:68:e2:66:01:78:56:ee:80:8a:d9:65:3b:c1:9f: f7:61:9d:2e:ef:97:19:14:f1:f9:15:d2:e7:55:c2:2c:d6:31: 2a:b3:73:e8:50:56:9a:01:55:c1:06:1e:83:a6:20:43:41:d8: 57:e3:ee:96:76:e3:a8:d3:24:b3:e0:0b:07:08:7d:2d:1c:55: 6b:ad:4f:ce:ae:cd:a9:3a:52:d5:db:68:cc:6c:ec:b3:10:bc: 8f:d6:66:2b:46:b2:a0:5a:8b:ed:0e:5d:2b:ba:17:4b:3b:ea: 4d:16:d2:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJzq0GMqr0ZKdynR+g3nTx2woCS4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAyMDExWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmZmZTgwZmZkYTc2MjIxNGQyNmQyY2M0NzhiNWQ5NGE4 YzY1N2IxMmUyYjNhNWQ0MmE5ZjljZjY1NzhmNmE2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkuBonrNGQQjm99kKBobpMtQwAxFmj8tNG7/UN4Ap5EvwQ MTeQWyc28okIDZAyzrr5vXCINJU6vpGKW7cbw1OKPGwE6i1I6Zc/DsPDgT6RgF70 aWROZ46s+UAwWRk7UGI5nf/b8ThXhAU3VziWcCAHpaHi2t18i82BB3wtWOrlADY+ nTOw3kRVCo5pqJdtn7XT1OkA7/Qf9rU0JXdOLE2sNoiWES3d73tsK8IdgvOYVFZD d2STfg1iKfG6/tqF+jFbmF2VPKWsstNq2TlYqFXjoB3bDAWrtx0fCmJxdLd5m+DB iWEvVb4lG1Yed77GAtK5RgVwLO6O0L87CzYHHFMNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSUACwTs8yFLgn08sXAzRywl6tV8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzM3NTQ1MzJiLTI0MTctNDkwZS04Y2I0LTI2YjhmYzAzNDkyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBABD9oDgWhLLRN7uyYgGupm02Yhj7 cIvovBD+41YZxdm3RDbsukexjEOLX6E5vtX0vodtSCZ5LlQ9Kh3r3HLDUO9m4mCF 7OTuQs8D3dNWoKlC7te0ermk32II9jPJy4rd8YAZyl5A6uQJbqn4WvPJbkne6djl iNxIpLJkbAEaoGRv/olcMQPHRaChIAc7zUKUSeul3dZo4mYBeFbugIrZZTvBn/dh nS7vlxkU8fkV0udVwizWMSqzc+hQVpoBVcEGHoOmIENB2Ffj7pZ246jTJLPgCwcI fS0cVWutT86uzak6UtXbaMxs7LMQvI/WZitGsqBai+0OXSu6F0s76k0W0h0= -----END CERTIFICATE-----Generated at Mon Mar 2 07:07:40 2026 by rpki-client