$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa File: 59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa (raw, json) Hash identifier: L3deveCHUgx4NrKUZ4xZ5mPNMgPWTxi7nai3/J0xE+Q= Subject key identifier: A1:1E:C4:4F:DF:18:22:04:41:FB:5B:85:98:7D:68:9A:1C:0E:A0:26 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7D9E07F7BD7E0372515C453E14B45E4E7F464AF6 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa Signing time: Fri 09 Oct 2026 00:30:27 +0000 ROA not before: Fri 09 Oct 2026 00:30:27 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9e:07:f7:bd:7e:03:72:51:5c:45:3e:14:b4:5e:4e:7f:46:4a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:27 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=f3221c9e09d5391e6ab111b738efedf3d876e202da51bc799339ea094ceebba1, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:76:fc:ca:0e:71:06:8a:6b:a8:0a:87:fa: 09:6c:86:dc:91:5b:7b:c8:53:cb:71:ec:10:ca:fb: ff:96:50:09:07:ad:94:f3:33:94:c1:a4:a1:92:2d: 30:23:f9:73:d8:ef:7d:4d:e5:c6:a1:13:45:84:84: 88:10:db:8c:8c:aa:47:69:34:0c:b6:2b:c3:53:03: 99:74:bb:ec:2a:24:12:08:e7:f4:73:08:73:85:db: e2:7d:95:f3:1f:26:da:c8:2d:d8:56:58:6e:63:86: 29:3e:e7:bc:72:e5:1d:09:9b:df:04:01:0a:5f:e9: a6:b2:72:d2:b5:01:49:2e:54:38:b9:ed:d3:ea:ef: 41:5d:43:45:a4:50:48:d1:45:a5:31:6d:6f:88:23: 6c:14:53:f8:d8:9b:d6:35:e1:7e:19:6e:e9:ac:9b: 60:de:3b:38:39:d4:95:f2:e6:a6:bb:b5:26:78:9a: 47:72:31:a4:db:49:8f:c1:28:86:40:59:bb:60:ce: d4:ae:ac:b7:2e:4f:a2:7e:2b:73:e6:af:1a:f0:8a: 2f:20:67:65:ef:e6:4a:0a:42:4b:77:1b:3a:c8:3d: 4e:2c:c7:29:46:7b:8d:eb:ce:5e:b5:3a:bd:0d:44: c9:da:0c:9b:30:6a:c2:60:73:b2:d4:da:e0:87:a6: c7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1E:C4:4F:DF:18:22:04:41:FB:5B:85:98:7D:68:9A:1C:0E:A0:26 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.220.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:dc:32:17:67:4e:3e:06:4e:25:6b:8b:17:af:88:14:1c:d7: 2c:97:34:75:5c:d8:46:ad:ea:b9:93:f8:22:63:5c:a5:eb:4d: d6:00:8a:7d:b7:73:5f:b5:df:49:83:0f:b0:35:9e:df:85:b3: 16:03:33:bb:50:ff:c1:7f:3a:69:1b:d3:6a:26:50:f5:eb:98: 30:38:21:29:9a:5e:89:2f:6d:1f:fb:73:da:76:a0:08:75:ca: f3:0c:8b:8d:6d:fa:47:68:6d:ff:d7:87:6b:4a:6d:f6:8b:56: a0:ef:a1:45:76:18:48:01:f4:bd:b4:e6:5c:89:10:f4:49:fd: cb:db:4b:3e:52:42:8c:80:d2:31:64:45:8b:48:b7:4c:85:ef: d7:48:b0:51:cd:56:7e:46:88:57:75:ea:8b:7e:d8:f7:f5:1d: da:36:45:db:d0:e5:3c:50:ec:ab:f5:c8:57:7c:20:ae:76:8a: a1:e9:15:14:15:a4:c3:72:31:df:f7:b3:78:2c:b4:ae:90:51: 6f:3f:cd:a2:6c:ca:c1:a3:ed:76:72:20:d9:06:53:be:07:a5: e0:0f:f8:ee:ef:48:73:3d:ae:9c:8b:f6:d1:87:72:fe:e1:6f: ae:ba:0d:70:fc:d2:aa:05:ba:5f:84:32:4f:d7:78:54:08:9e: 86:bc:86:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfZ4H971+A3JRXEU+FLReTn9GSvYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDI3WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzIyMWM5ZTA5ZDUzOTFlNmFiMTExYjczOGVmZWRmM2Q4 NzZlMjAyZGE1MWJjNzk5MzM5ZWEwOTRjZWViYmExMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEkXb8yg5xBoprqAqH+glshtyRW3vIU8tx7BDK+/+WUAkH rZTzM5TBpKGSLTAj+XPY731N5cahE0WEhIgQ24yMqkdpNAy2K8NTA5l0u+wqJBII 5/RzCHOF2+J9lfMfJtrILdhWWG5jhik+57xy5R0Jm98EAQpf6aayctK1AUkuVDi5 7dPq70FdQ0WkUEjRRaUxbW+II2wUU/jYm9Y14X4Zbumsm2DeOzg51JXy5qa7tSZ4 mkdyMaTbSY/BKIZAWbtgztSurLcuT6J+K3Pmrxrwii8gZ2Xv5koKQkt3GzrIPU4s xylGe43rzl61Or0NRMnaDJswasJgc7LU2uCHpseLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoR7ET98YIgRB+1uFmH1omhwOoCYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzU5YWIyNjRlLTI4NGYtNGUzMC1iMmYwLWQ4NWZhNzNiNjJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dwwDQYJKoZIhvcNAQELBQADggEBAIzcMhdnTj4GTiVrixeviBQc1yyX NHVc2Eat6rmT+CJjXKXrTdYAin23c1+130mDD7A1nt+FsxYDM7tQ/8F/Omkb02om UPXrmDA4ISmaXokvbR/7c9p2oAh1yvMMi41t+kdobf/Xh2tKbfaLVqDvoUV2GEgB 9L205lyJEPRJ/cvbSz5SQoyA0jFkRYtIt0yF79dIsFHNVn5GiFd16ot+2Pf1Hdo2 RdvQ5TxQ7Kv1yFd8IK52iqHpFRQVpMNyMd/3s3gstK6QUW8/zaJsysGj7XZyINkG U74HpeAP+O7vSHM9rpyL9tGHcv7hb666DXD80qoFul+EMk/XeFQInoa8his= -----END CERTIFICATE-----Generated at Sun Nov 8 14:55:47 2026 by rpki-client