$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4714ad7b-a768-483a-bdb9-c35a68830b39.roa File: 4714ad7b-a768-483a-bdb9-c35a68830b39.roa (raw, json) Hash identifier: 2kZVwQ40UnRBMlRmvdvmdsxAopy6WtKh++hND1bPZfo= Subject key identifier: 06:EC:3F:0C:4A:59:7D:A2:D2:B0:46:9A:B8:93:C3:B7:72:7D:52:A7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 04AA14475F2FA2413D6D350EE647A91079FA6B45 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4714ad7b-a768-483a-bdb9-c35a68830b39.roa Signing time: Fri 09 Oct 2026 00:30:21 +0000 ROA not before: Fri 09 Oct 2026 00:30:21 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:aa:14:47:5f:2f:a2:41:3d:6d:35:0e:e6:47:a9:10:79:fa:6b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:21 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=87b3888e5f3c158425a44ac675267585cecd872483ab6009c2f00ae13aae7f5c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:eb:7d:99:c4:aa:3e:a2:a7:11:6c:8b:00: ec:ca:0a:56:22:a6:ad:be:3d:4a:d4:cd:aa:47:87: df:5a:6b:cd:c9:d9:95:8e:13:8e:11:ec:ea:aa:5b: db:fb:1a:f2:b5:f1:ed:f7:66:0a:f4:80:3d:4a:02: 66:b2:e2:22:eb:e2:70:be:cf:1e:5b:ab:46:c2:12: f2:3f:d7:74:09:83:18:8e:7c:dd:dc:1f:39:d9:f3: c1:ba:fc:78:2f:73:96:a3:b9:08:1b:3b:7c:dd:9d: ca:7b:5f:d5:ec:d4:f3:0b:08:a3:11:98:2d:e4:3a: a8:fd:17:bc:4e:db:6a:c7:a0:85:b2:96:12:f1:0a: 16:00:b9:83:fb:15:1b:c8:d0:8b:d0:f9:5b:e6:a7: 3f:71:19:3d:f7:2d:19:26:27:85:2f:ad:d0:b9:75: e6:02:2b:b4:0f:d7:8e:9f:c3:4f:90:00:72:2c:bc: a9:a6:78:94:a9:7c:d1:30:32:93:9a:d5:a2:5b:a0: 40:34:5e:0e:45:88:96:14:8e:4b:9d:56:5f:31:80: 97:ad:c4:d4:3a:c5:29:d4:6a:10:a8:0e:53:4a:24: c9:a8:24:48:ee:b7:d1:f3:0b:a2:fe:69:3d:f8:de: fb:24:69:8c:1f:62:d3:2c:78:39:c8:ae:ad:81:e5: 0c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EC:3F:0C:4A:59:7D:A2:D2:B0:46:9A:B8:93:C3:B7:72:7D:52:A7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4714ad7b-a768-483a-bdb9-c35a68830b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.216.0/24 Signature Algorithm: sha256WithRSAEncryption 05:28:c8:5f:11:5f:dc:17:4c:52:3e:50:86:ce:4e:2a:df:50: d5:38:7c:a6:60:df:eb:7f:da:c7:fc:bc:a2:b8:df:83:81:ad: 30:d3:d7:98:c8:b3:ab:0f:d5:2d:3e:b3:86:ca:2c:b2:48:42: 76:22:63:6e:4d:c2:a2:67:91:2a:8f:f2:13:d6:88:a2:60:1d: 46:16:7c:9a:90:bb:41:a8:62:82:13:62:3a:3f:00:da:ec:5b: 1f:f6:69:0b:b2:dd:f9:a0:b2:12:d1:48:62:1f:d6:7d:60:3f: 9b:b3:31:b1:1a:45:98:88:d5:47:6c:4a:da:bb:4f:9d:6d:e0: 5f:cc:43:79:d3:8b:43:11:3e:c3:2f:cc:c8:46:11:aa:70:3f: a7:c5:f1:3d:e3:f5:65:5a:2f:97:5b:71:2c:6d:e5:76:27:c6: cf:60:33:73:00:09:e9:8f:52:c8:f8:fd:a3:c9:91:47:ee:5a: 25:b5:41:1a:15:77:82:50:77:b5:9e:e5:ec:19:08:68:43:e5: 34:13:43:a3:b8:8e:53:36:e7:60:ea:4e:d6:68:26:6e:c1:06: 29:25:80:96:4f:b5:e1:cb:26:c5:31:31:b3:aa:1e:28:f8:07: 43:6d:02:86:c8:87:7b:b9:7a:94:84:a3:8b:61:db:30:4d:79: b1:38:eb:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBKoUR18vokE9bTUO5kepEHn6a0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDIxWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2IzODg4ZTVmM2MxNTg0MjVhNDRhYzY3NTI2NzU4NWNl Y2Q4NzI0ODNhYjYwMDljMmYwMGFlMTNhYWU3ZjVjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJEut9mcSqPqKnEWyLAOzKClYipq2+PUrUzapHh99aa83J 2ZWOE44R7OqqW9v7GvK18e33Zgr0gD1KAmay4iLr4nC+zx5bq0bCEvI/13QJgxiO fN3cHznZ88G6/Hgvc5ajuQgbO3zdncp7X9Xs1PMLCKMRmC3kOqj9F7xO22rHoIWy lhLxChYAuYP7FRvI0IvQ+Vvmpz9xGT33LRkmJ4UvrdC5deYCK7QP146fw0+QAHIs vKmmeJSpfNEwMpOa1aJboEA0Xg5FiJYUjkudVl8xgJetxNQ6xSnUahCoDlNKJMmo JEjut9HzC6L+aT343vskaYwfYtMseDnIrq2B5QwFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBuw/DEpZfaLSsEaauJPDt3J9UqcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzQ3MTRhZDdiLWE3NjgtNDgzYS1iZGI5LWMzNWE2ODgzMGIzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dgwDQYJKoZIhvcNAQELBQADggEBAAUoyF8RX9wXTFI+UIbOTirfUNU4 fKZg3+t/2sf8vKK434OBrTDT15jIs6sP1S0+s4bKLLJIQnYiY25NwqJnkSqP8hPW iKJgHUYWfJqQu0GoYoITYjo/ANrsWx/2aQuy3fmgshLRSGIf1n1gP5uzMbEaRZiI 1UdsStq7T51t4F/MQ3nTi0MRPsMvzMhGEapwP6fF8T3j9WVaL5dbcSxt5XYnxs9g M3MACemPUsj4/aPJkUfuWiW1QRoVd4JQd7We5ewZCGhD5TQTQ6O4jlM252DqTtZo Jm7BBiklgJZPteHLJsUxMbOqHij4B0NtAobIh3u5epSEo4th2zBNebE46xc= -----END CERTIFICATE-----Generated at Tue Nov 10 02:32:30 2026 by rpki-client