$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa File: 3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa (raw, json) Hash identifier: 32PBUcAoflLE1MLiaVXDeEkEJoouYqxl+xwSOp6/IV0= Subject key identifier: FE:88:4F:9B:AE:F8:56:0B:10:0D:73:20:B7:3C:CD:09:16:89:47:17 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1701FEFA222B73FA7900B34E6115144BC9B0FC79 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa Signing time: Wed 11 Feb 2026 00:30:19 +0000 ROA not before: Wed 11 Feb 2026 00:30:19 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:01:fe:fa:22:2b:73:fa:79:00:b3:4e:61:15:14:4b:c9:b0:fc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:30:19 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=57f2eca2352a3ef49bd4701662ec0fbb89b96f0bc07174276c943f1454accf8f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:85:ed:fb:0b:83:b1:99:fb:e6:2a:0d:26:ff: f1:b6:fc:2d:eb:77:8c:d3:91:78:56:71:21:ce:44: ed:ec:ac:1b:a7:da:c4:c6:85:bf:ca:90:05:03:ca: ef:81:ba:2a:b5:9d:ea:a2:86:00:b8:8a:2e:a8:dc: 45:54:71:9f:6e:54:e2:e6:66:f2:3d:90:40:6f:90: 88:c5:48:c9:a0:d9:28:ad:3b:07:a5:84:37:cd:20: 22:ac:c5:38:e2:8f:8b:10:d9:fd:d1:d8:15:91:61: a1:09:fb:72:d5:7a:7e:a5:b2:ad:fb:4d:9a:4c:58: 99:64:2d:66:2f:cd:52:51:53:98:c4:9e:d2:97:3b: c6:ff:6c:0b:7e:ca:a5:11:8e:a3:28:c3:4b:72:04: f2:e0:39:44:37:22:b9:fd:85:86:fc:d1:65:01:20: 4f:3e:07:34:d0:bb:09:e0:af:38:02:a7:e7:21:5a: 7d:af:9f:f0:e6:ad:8c:2f:6f:60:11:bb:c5:06:3d: 39:09:ef:b5:30:bb:36:f7:e1:fd:9f:40:b9:45:c1: 17:e2:e2:ec:a4:6f:cf:11:fe:64:80:ad:b7:f9:fd: 29:c0:e9:8b:da:f8:d8:82:f5:d3:04:b3:2c:20:32: 44:e2:6b:ec:b1:3c:a4:84:6e:e1:7a:3e:71:b3:13: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:88:4F:9B:AE:F8:56:0B:10:0D:73:20:B7:3C:CD:09:16:89:47:17 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.224.0/24 Signature Algorithm: sha256WithRSAEncryption 01:eb:33:17:eb:3c:d8:fe:d6:1f:99:de:2e:a8:19:c6:0b:b7: a5:3c:c8:7c:91:1d:34:39:21:ff:90:7c:de:62:a3:60:62:4f: 7a:97:40:e3:04:40:22:0c:3c:f5:05:ea:b8:1e:69:80:79:af: 3a:d7:48:56:a4:62:04:d4:58:34:be:b8:6a:ee:d0:c8:7c:4e: 34:e7:8e:97:cc:80:48:f7:88:64:60:d4:ec:24:f7:96:f1:ed: 62:a9:0a:99:aa:16:b2:2e:39:79:95:9c:7e:21:17:c8:d0:42: 94:7e:61:f4:cb:e5:95:3e:f0:6a:62:e9:d9:f9:40:ea:dd:fa: c7:40:76:a0:0b:2f:e8:89:b7:66:25:a0:53:f9:0e:03:05:b8: 63:c2:1e:e4:e0:ec:11:62:e1:b9:d8:9a:5a:b3:e0:82:52:23: dd:07:f4:66:19:0f:c1:d5:1b:ba:a7:35:fe:3a:ab:d1:ec:42: ef:50:28:fa:2d:b2:04:70:61:fb:a0:d3:0e:ca:ae:74:15:c8: 55:6a:bf:75:8f:1d:6d:c8:41:47:21:e3:97:a5:f2:fc:33:d6: 12:24:a6:3e:4a:9b:4f:7f:e4:ce:57:90:05:89:04:ac:dc:37: e9:c1:fb:59:85:04:46:b6:ed:6d:a0:9c:98:94:95:95:d2:78: 61:94:f3:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFwH++iIrc/p5ALNOYRUUS8mw/HkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAzMDE5WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2YyZWNhMjM1MmEzZWY0OWJkNDcwMTY2MmVjMGZiYjg5 Yjk2ZjBiYzA3MTc0Mjc2Yzk0M2YxNDU0YWNjZjhmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDshe37C4OxmfvmKg0m//G2/C3rd4zTkXhWcSHORO3srBun 2sTGhb/KkAUDyu+Buiq1neqihgC4ii6o3EVUcZ9uVOLmZvI9kEBvkIjFSMmg2Sit OwelhDfNICKsxTjij4sQ2f3R2BWRYaEJ+3LVen6lsq37TZpMWJlkLWYvzVJRU5jE ntKXO8b/bAt+yqURjqMow0tyBPLgOUQ3Irn9hYb80WUBIE8+BzTQuwngrzgCp+ch Wn2vn/DmrYwvb2ARu8UGPTkJ77Uwuzb34f2fQLlFwRfi4uykb88R/mSArbf5/SnA 6Yva+NiC9dMEsywgMkTia+yxPKSEbuF6PnGzE4wvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/ohPm674VgsQDXMgtzzNCRaJRxcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNhZDJhZTljLWQ1MDUtNGI1My04YTAzLWMwMDM0NjAyZDQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++AwDQYJKoZIhvcNAQELBQADggEBAAHrMxfrPNj+1h+Z3i6oGcYLt6U8 yHyRHTQ5If+QfN5io2BiT3qXQOMEQCIMPPUF6rgeaYB5rzrXSFakYgTUWDS+uGru 0Mh8TjTnjpfMgEj3iGRg1Owk95bx7WKpCpmqFrIuOXmVnH4hF8jQQpR+YfTL5ZU+ 8Gpi6dn5QOrd+sdAdqALL+iJt2YloFP5DgMFuGPCHuTg7BFi4bnYmlqz4IJSI90H 9GYZD8HVG7qnNf46q9HsQu9QKPotsgRwYfug0w7KrnQVyFVqv3WPHW3IQUch45el 8vwz1hIkpj5Km09/5M5XkAWJBKzcN+nB+1mFBEa27W2gnJiUlZXSeGGU8+Q= -----END CERTIFICATE-----Generated at Sun Mar 1 21:51:19 2026 by rpki-client