$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa File: 59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa (raw, json) Hash identifier: VWJr/DBEZFtis7NN9zRYZryZG8QyiOZXbjKvx6H+pbM= Subject key identifier: 23:D7:87:D6:5F:AD:0B:9C:6A:A7:5D:B5:B1:9D:A2:92:F4:BC:4E:12 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3C5AD564A329E66C62CE690BFBC3FF3B91D31027 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa Signing time: Wed 11 Feb 2026 00:30:46 +0000 ROA not before: Wed 11 Feb 2026 00:30:46 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5a:d5:64:a3:29:e6:6c:62:ce:69:0b:fb:c3:ff:3b:91:d3:10:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:30:46 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=399ba1866ff87892bb561bbf264abdc83a0ac3be32bc2f802163b37741eaf45c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:17:52:18:08:66:47:10:cc:5d:05:38:aa: bb:da:99:61:92:30:6f:08:7a:83:cf:38:e4:8a:8a: 4b:9a:3b:0e:13:63:48:46:20:1d:a9:4e:b1:57:58: 24:eb:a0:3e:9f:be:0f:a1:53:29:da:8a:9a:f9:50: 58:c1:61:45:34:1b:9c:bf:48:af:ff:47:eb:67:ba: b9:2a:fe:8e:72:ee:11:b8:74:53:63:6a:bb:6f:53: b5:34:5f:0d:6b:38:1f:15:ba:69:e8:e2:c6:5a:9d: 44:9f:06:f8:8d:9d:5d:77:d8:72:1c:47:e3:51:de: 3b:2b:17:07:c6:61:80:f1:83:37:2f:6f:18:90:82: ce:bf:b9:b3:13:d9:9f:33:52:2f:e3:12:9d:a7:7f: 45:1b:f0:42:ab:49:79:b1:8c:62:77:74:cc:f1:5a: 7e:9b:53:b8:9a:66:d1:51:15:fc:32:24:7f:c5:f1: 6c:fd:47:b1:1c:9d:e4:71:d8:ac:1b:e0:2f:3a:ee: e7:16:08:ea:2e:ab:47:9d:c0:5e:7f:d5:b7:39:a9: 3e:9c:da:53:c1:41:78:f3:20:cf:7f:89:bf:c2:11: de:a5:ad:27:b3:cd:48:61:4a:b3:20:4b:cf:3e:77: 9b:71:e3:b1:bb:ed:2f:ff:c0:7e:61:ff:76:1b:31: a6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D7:87:D6:5F:AD:0B:9C:6A:A7:5D:B5:B1:9D:A2:92:F4:BC:4E:12 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.220.0/24 Signature Algorithm: sha256WithRSAEncryption 90:74:ca:68:3e:d9:19:fb:e2:9a:22:bf:72:cf:7f:51:0b:a4: a4:72:54:8c:d3:02:4c:d7:fb:20:58:04:6d:f5:62:4e:6e:47: 2c:fd:c6:06:95:c3:b8:8d:76:c8:0c:4c:87:97:88:5d:72:8f: de:75:6f:70:74:46:69:7d:af:fd:4f:67:9c:0f:b8:f5:25:bb: 4e:92:4a:56:9d:cf:ae:c5:21:02:19:5f:5b:46:54:86:bb:ad: 16:a0:fd:4a:a8:6f:56:99:7f:73:16:02:10:26:fd:c9:b8:e2: 53:5c:e4:1b:d8:96:07:f0:f7:dd:1f:b2:2a:bd:bc:76:7c:72: ef:85:fa:56:65:79:5a:09:30:c7:fd:ab:82:8c:c7:95:d4:a7: 20:2e:ab:07:90:24:2e:f2:09:60:b6:b7:e2:2b:3e:62:3d:61: 66:18:80:b7:ec:d1:c7:4d:7f:03:16:79:77:30:d8:a8:82:db: fb:c6:a2:9b:71:2a:82:b4:cf:19:3f:63:f7:2e:d1:f9:95:63: 86:be:01:18:f5:25:6d:0c:3f:69:8a:f0:84:82:ce:86:2b:d2: 60:1c:83:5e:63:12:97:4a:a9:5a:5b:8c:1c:d2:12:e3:f6:5e: 82:04:f0:8c:e1:7c:63:49:85:9f:28:6f:c0:02:e9:a1:6a:1a: 9e:a3:e0:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPFrVZKMp5mxizmkL+8P/O5HTECcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAzMDQ2WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTliYTE4NjZmZjg3ODkyYmI1NjFiYmYyNjRhYmRjODNh MGFjM2JlMzJiYzJmODAyMTYzYjM3NzQxZWFmNDVjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5oxdSGAhmRxDMXQU4qrvamWGSMG8IeoPPOOSKikuaOw4T Y0hGIB2pTrFXWCTroD6fvg+hUynaipr5UFjBYUU0G5y/SK//R+tnurkq/o5y7hG4 dFNjartvU7U0Xw1rOB8Vumno4sZanUSfBviNnV132HIcR+NR3jsrFwfGYYDxgzcv bxiQgs6/ubMT2Z8zUi/jEp2nf0Ub8EKrSXmxjGJ3dMzxWn6bU7iaZtFRFfwyJH/F 8Wz9R7EcneRx2Kwb4C867ucWCOouq0edwF5/1bc5qT6c2lPBQXjzIM9/ib/CEd6l rSezzUhhSrMgS88+d5tx47G77S//wH5h/3YbMaapAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI9eH1l+tC5xqp121sZ2ikvS8ThIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzU5YWIyNjRlLTI4NGYtNGUzMC1iMmYwLWQ4NWZhNzNiNjJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dwwDQYJKoZIhvcNAQELBQADggEBAJB0ymg+2Rn74poiv3LPf1ELpKRy VIzTAkzX+yBYBG31Yk5uRyz9xgaVw7iNdsgMTIeXiF1yj951b3B0Rml9r/1PZ5wP uPUlu06SSladz67FIQIZX1tGVIa7rRag/Uqob1aZf3MWAhAm/cm44lNc5BvYlgfw 990fsiq9vHZ8cu+F+lZleVoJMMf9q4KMx5XUpyAuqweQJC7yCWC2t+IrPmI9YWYY gLfs0cdNfwMWeXcw2KiC2/vGoptxKoK0zxk/Y/cu0fmVY4a+ARj1JW0MP2mK8ISC zoYr0mAcg15jEpdKqVpbjBzSEuP2XoIE8IzhfGNJhZ8ob8AC6aFqGp6j4A4= -----END CERTIFICATE-----Generated at Mon Mar 2 02:48:37 2026 by rpki-client