$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa File: 3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa (raw, json) Hash identifier: Gl4ZXZi2cUyA3TWK+VpgTD5s3OxRHGHmBB9rjPsC6Xg= Subject key identifier: 64:E7:3D:17:0B:FE:86:12:D0:C0:7E:C2:BC:97:AA:60:19:57:79:12 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4B6E9E5A21725ADC41800461500D413E7A12C372 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa Signing time: Mon 21 Sep 2026 00:00:06 +0000 ROA not before: Mon 21 Sep 2026 00:00:06 +0000 ROA not after: Sun 20 Dec 2026 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6e:9e:5a:21:72:5a:dc:41:80:04:61:50:0d:41:3e:7a:12:c3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Sep 21 00:00:06 2026 GMT Not After : Dec 20 23:59:59 2026 GMT Subject: serialNumber=e4ed4baf33e6a1fa8b0b5775934a46e02b3fd356b0fe6aaefd3107af966184ea, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:57:31:94:5e:6c:ea:0a:07:ca:3d:ab:88: 2a:14:18:98:3a:a6:04:0b:a0:b4:72:65:b3:42:b3: 8e:d0:72:ff:95:ee:98:3a:4e:f9:66:63:14:5c:44: 17:bb:e1:d8:13:f6:cb:97:56:8e:05:2c:d2:96:22: ee:67:7e:1a:91:e5:f7:e4:f2:fe:75:8a:7d:00:93: 14:ea:41:87:de:86:cd:7a:9f:38:70:65:e6:c5:47: b8:9f:cf:93:81:33:ac:bc:f4:41:b9:2a:ef:10:50: d8:15:dd:cb:91:a9:f8:9e:12:b6:9a:81:e1:54:5d: 6c:92:27:7c:ee:2f:01:36:8f:2b:0f:35:43:8f:45: 0e:d6:54:62:13:b7:ae:53:8c:96:1d:da:20:ce:1e: 75:16:00:bc:5d:26:71:93:7f:46:81:2c:78:f3:d5: 33:47:2c:a7:50:dd:4c:07:76:4c:10:0f:ed:70:aa: 04:d5:b9:52:99:41:af:ff:dc:2e:6f:72:43:0b:08: 0a:2b:b8:c3:0e:32:23:b3:c5:f0:6a:ec:12:73:3b: 11:e6:62:ba:31:4c:a5:28:83:f1:6c:5f:78:e3:64: 6f:fb:1e:8d:62:5b:fc:c9:8a:ad:cb:66:2f:a7:09: 6d:2b:f2:ef:4b:06:77:29:bc:ae:f0:66:ad:99:f4: 27:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E7:3D:17:0B:FE:86:12:D0:C0:7E:C2:BC:97:AA:60:19:57:79:12 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.188.0/24 Signature Algorithm: sha256WithRSAEncryption 63:b5:92:bc:8b:74:2a:58:6b:75:46:4a:b2:d4:bf:e8:8e:de: 82:3b:2b:10:00:b0:36:d7:77:e5:4c:c7:9f:90:11:68:3e:e7: 6a:96:3b:a0:04:c6:7b:27:f3:41:60:c8:3d:ef:07:84:7b:57: 92:16:50:7f:7e:23:c6:84:7e:a6:52:14:44:af:70:37:9c:9b: 43:67:a9:07:29:8a:28:7f:91:70:fc:fe:30:2d:89:7c:11:96: 10:af:f1:1c:51:68:06:ff:be:d3:58:69:42:f2:78:0d:48:0f: 82:e3:02:f9:86:40:0c:de:cf:c8:8e:74:9a:8d:3a:54:96:70: fa:23:2d:e1:2c:4d:f5:7c:98:3c:02:5f:ea:b0:72:0d:62:1f: fc:20:aa:2f:69:d0:72:29:39:a2:21:09:e0:d0:95:ef:01:df: 86:a6:da:a4:86:69:1d:a7:38:01:f7:51:e1:fa:d0:db:cc:40: 59:6f:19:e8:ad:6d:08:69:1a:d3:25:0d:05:4d:c9:9f:f6:39: b8:81:6c:73:72:e1:f7:7e:70:26:73:00:dc:6e:d1:3f:2c:9c: ba:75:b0:ad:02:fb:72:c3:69:48:41:19:69:dd:36:23:72:47: 4d:ac:af:37:01:51:2e:d0:a5:9f:bb:d1:60:1c:15:d3:0b:4a: 08:f5:e4:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS26eWiFyWtxBgARhUA1BPnoSw3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwOTIxMDAwMDA2WhcNMjYxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGVkNGJhZjMzZTZhMWZhOGIwYjU3NzU5MzRhNDZlMDJi M2ZkMzU2YjBmZTZhYWVmZDMxMDdhZjk2NjE4NGVhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+aFcxlF5s6goHyj2riCoUGJg6pgQLoLRyZbNCs47Qcv+V 7pg6TvlmYxRcRBe74dgT9suXVo4FLNKWIu5nfhqR5ffk8v51in0AkxTqQYfehs16 nzhwZebFR7ifz5OBM6y89EG5Ku8QUNgV3cuRqfieEraageFUXWySJ3zuLwE2jysP NUOPRQ7WVGITt65TjJYd2iDOHnUWALxdJnGTf0aBLHjz1TNHLKdQ3UwHdkwQD+1w qgTVuVKZQa//3C5vckMLCAoruMMOMiOzxfBq7BJzOxHmYroxTKUog/FsX3jjZG/7 Ho1iW/zJiq3LZi+nCW0r8u9LBncpvK7wZq2Z9CeTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZOc9Fwv+hhLQwH7CvJeqYBlXeRIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmZjkzMDliLTUxNjctNGFhMS04MzVmLTUzZmZmNTFlZjZmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3bwwDQYJKoZIhvcNAQELBQADggEBAGO1kryLdCpYa3VGSrLUv+iO3oI7 KxAAsDbXd+VMx5+QEWg+52qWO6AExnsn80FgyD3vB4R7V5IWUH9+I8aEfqZSFESv cDecm0NnqQcpiih/kXD8/jAtiXwRlhCv8RxRaAb/vtNYaULyeA1ID4LjAvmGQAze z8iOdJqNOlSWcPojLeEsTfV8mDwCX+qwcg1iH/wgqi9p0HIpOaIhCeDQle8B34am 2qSGaR2nOAH3UeH60NvMQFlvGeitbQhpGtMlDQVNyZ/2ObiBbHNy4fd+cCZzANxu 0T8snLp1sK0C+3LDaUhBGWndNiNyR02srzcBUS7QpZ+70WAcFdMLSgj15OM= -----END CERTIFICATE-----Generated at Mon Sep 21 10:20:05 2026 by rpki-client