$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa File: 3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa (raw, json) Hash identifier: p/JhAdDZLGaa+UgJuI7stECEje3nCkH6lTeuUY1uNNI= Subject key identifier: 04:18:A8:E1:66:AE:C5:27:D8:33:44:F5:63:95:AF:2B:A4:A5:4E:C0 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 701C30D8FFDF78DD151CC6BCCA5C08592D814974 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa Signing time: Fri 09 Oct 2026 00:30:19 +0000 ROA not before: Fri 09 Oct 2026 00:30:19 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1c:30:d8:ff:df:78:dd:15:1c:c6:bc:ca:5c:08:59:2d:81:49:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:19 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=f7d3b69de0dcd8db797cd25ba586346b1ffa980cb7f5c45de00a5b83868a8c18, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:a9:3a:d6:fa:49:dc:d5:33:2b:ec:d9:5f: 51:01:80:c6:c2:b5:a4:12:af:b1:1c:52:78:e7:3d: cd:52:cf:6e:59:16:37:83:f3:79:15:f8:7f:6b:00: fa:65:82:4a:0a:20:00:6a:e9:5e:64:ed:69:94:22: b5:b3:0c:42:63:ef:c1:38:49:73:37:f8:dc:20:0d: cb:17:97:57:ec:bc:ee:ba:96:ec:cf:a5:02:6b:c1: ca:6b:ef:4f:a2:d8:8e:04:fc:15:42:61:15:95:9d: ec:87:a2:68:a0:2c:53:e9:0c:53:1d:a7:2a:aa:e5: b0:ad:e3:f6:ff:80:44:a5:56:c6:57:48:b7:eb:3c: 02:8a:87:a6:ee:80:2e:11:ea:df:a4:4f:77:08:22: 48:a9:f0:cc:40:55:ba:0c:05:b8:ad:03:67:29:7d: 87:a5:ce:e4:81:19:74:a4:16:fe:4e:c0:ef:ac:61: 28:2a:28:50:af:1f:4d:66:e6:ce:7f:6f:5b:b6:f3: 63:5e:db:3d:29:7a:19:72:f6:c0:0c:7c:cb:b6:f3: 9a:2a:c9:76:c4:c9:a6:22:09:53:ee:d6:41:fd:d0: 76:24:15:fa:3d:bb:d4:c5:4f:8b:68:70:fb:06:17: 6f:3f:8e:86:f6:c8:20:92:91:4b:bf:c5:19:6c:c0: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:18:A8:E1:66:AE:C5:27:D8:33:44:F5:63:95:AF:2B:A4:A5:4E:C0 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.224.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c5:be:de:be:dc:9d:05:3c:7c:71:25:91:a5:45:4a:84:0d: b6:8e:42:24:21:a1:30:a3:e8:57:a6:7f:24:58:c5:4c:3a:55: 8a:0a:0e:c8:87:64:6a:0d:d6:66:3e:eb:62:f1:8b:72:a7:5a: 5a:84:f3:0b:67:b3:46:f9:61:22:18:17:e1:9e:ea:b5:ad:f0: a9:44:91:9b:b2:19:87:9f:1a:09:38:50:f5:b0:0e:1b:54:c9: 18:e7:80:a0:fa:03:4c:68:af:fd:de:60:b3:84:f9:dd:c9:3b: 70:80:ab:b7:69:61:35:29:89:3c:ce:78:93:6e:a1:da:59:28: ae:45:10:e6:a8:76:4d:95:9a:53:9c:bb:a4:e8:74:93:81:8e: ec:95:ad:16:12:27:70:b6:68:dc:0b:d8:4d:10:5c:04:66:9f: 26:b8:c8:cb:e9:76:21:0c:c2:c6:81:95:eb:ab:0c:1a:3f:8f: 73:8d:03:13:3b:dd:f0:f6:ef:23:b8:ed:1c:22:72:87:e0:56: 12:d5:73:63:ac:de:cf:86:c1:e3:a3:29:2e:85:54:05:2f:15: 26:8f:ef:fd:40:56:42:95:00:88:97:1a:b8:11:3a:68:50:03: 81:50:dc:68:94:8f:f4:4a:45:fe:60:7b:65:11:2b:d9:67:15: 95:42:0f:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcBww2P/feN0VHMa8ylwIWS2BSXQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDE5WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2QzYjY5ZGUwZGNkOGRiNzk3Y2QyNWJhNTg2MzQ2YjFm ZmE5ODBjYjdmNWM0NWRlMDBhNWI4Mzg2OGE4YzE4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLhKk61vpJ3NUzK+zZX1EBgMbCtaQSr7EcUnjnPc1Sz25Z FjeD83kV+H9rAPplgkoKIABq6V5k7WmUIrWzDEJj78E4SXM3+NwgDcsXl1fsvO66 luzPpQJrwcpr70+i2I4E/BVCYRWVneyHomigLFPpDFMdpyqq5bCt4/b/gESlVsZX SLfrPAKKh6bugC4R6t+kT3cIIkip8MxAVboMBbitA2cpfYelzuSBGXSkFv5OwO+s YSgqKFCvH01m5s5/b1u282Ne2z0pehly9sAMfMu285oqyXbEyaYiCVPu1kH90HYk Ffo9u9TFT4tocPsGF28/job2yCCSkUu/xRlswMRXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBBio4WauxSfYM0T1Y5WvK6SlTsAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNhZDJhZTljLWQ1MDUtNGI1My04YTAzLWMwMDM0NjAyZDQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++AwDQYJKoZIhvcNAQELBQADggEBAHrFvt6+3J0FPHxxJZGlRUqEDbaO QiQhoTCj6FemfyRYxUw6VYoKDsiHZGoN1mY+62Lxi3KnWlqE8wtns0b5YSIYF+Ge 6rWt8KlEkZuyGYefGgk4UPWwDhtUyRjngKD6A0xor/3eYLOE+d3JO3CAq7dpYTUp iTzOeJNuodpZKK5FEOaodk2VmlOcu6TodJOBjuyVrRYSJ3C2aNwL2E0QXARmnya4 yMvpdiEMwsaBleurDBo/j3ONAxM73fD27yO47RwicofgVhLVc2Os3s+GweOjKS6F VAUvFSaP7/1AVkKVAIiXGrgROmhQA4FQ3GiUj/RKRf5ge2URK9lnFZVCD6k= -----END CERTIFICATE-----Generated at Sun Nov 8 15:25:39 2026 by rpki-client