$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa File: 5d99a456-6c99-48ae-bf3a-149585d61d61.roa (raw, json) Hash identifier: acB6oKgGTjvwHsYNcdZ9BTxKZdZjc7yN3Hg95romEJY= Subject key identifier: 13:12:6D:D3:ED:63:2B:2E:0F:1F:6E:45:56:3A:ED:8E:DD:02:D6:53 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 47C65283F04D60F9A4CC16E267473507FC5B4E9D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa Signing time: Thu 22 Oct 2026 00:10:26 +0000 ROA not before: Thu 22 Oct 2026 00:10:26 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c6:52:83:f0:4d:60:f9:a4:cc:16:e2:67:47:35:07:fc:5b:4e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 22 00:10:26 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=2ec08f87cd19e982796c69d22114e67cdb987c3073736df848cd6655bc37fb67, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:d0:38:b0:d7:89:1c:0c:69:f2:63:6d:12: 4e:46:72:b9:ab:cd:6f:8b:85:d7:72:4f:c1:12:60: 25:bc:6c:6f:02:10:09:13:72:77:36:a3:f3:ae:54: f1:6a:27:97:0a:62:b6:c5:e2:68:85:5d:47:ea:7f: a8:4c:a5:2e:f0:64:47:56:8a:dc:0b:35:02:85:78: da:9e:34:54:6c:d8:25:3e:78:06:1d:aa:10:8e:cb: 1f:ae:17:32:55:17:7f:94:ff:b2:c9:4d:a6:b5:d2: 62:3c:d6:95:0f:89:c9:14:f1:aa:bc:2f:bf:6e:15: ba:71:e8:66:5d:89:71:3b:7b:0b:69:8e:08:79:80: 6e:b1:8b:4b:f6:50:72:8e:76:03:20:e3:88:df:11: 4f:b0:de:78:3e:69:2a:4e:1b:fb:30:6d:21:b1:28: f1:77:cb:99:a4:46:31:83:4d:b5:d6:aa:9a:de:96: 31:52:8a:5e:fc:c9:8f:fc:0e:26:bc:9d:bd:01:d0: 7b:4e:d8:4f:a8:62:b3:d5:44:a5:bc:a5:74:69:ee: ad:18:29:b3:4b:7b:84:11:5a:b1:1f:3f:bd:41:bc: 13:6c:49:f5:95:b4:48:79:58:ec:c5:a6:ec:0a:95: 39:e2:98:fa:bc:9d:4d:4d:da:8b:9d:01:b8:56:2f: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:12:6D:D3:ED:63:2B:2E:0F:1F:6E:45:56:3A:ED:8E:DD:02:D6:53 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.232.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:11:ec:a1:90:22:63:7b:1c:ef:c8:b1:22:65:a2:97:a6:df: fb:ed:0d:bf:1e:04:a3:f1:6f:d0:78:ef:b7:d5:be:6f:62:a2: 89:34:5f:fc:72:24:7f:cc:d3:1e:f2:0c:aa:d8:92:26:c3:3b: 24:8c:b4:79:ac:08:61:53:72:38:95:ed:91:f1:1c:da:36:33: 55:61:1c:ba:3e:7d:c9:f1:5e:5a:c3:be:df:5e:c8:33:2b:e3: 29:ab:f0:9e:f3:a2:44:8d:73:2e:10:a5:d3:08:a1:dc:7b:49: a6:02:f1:c5:b7:bb:ca:e9:d8:f7:2c:91:3e:e5:75:78:11:7f: f2:e6:24:f1:5a:28:d3:44:4a:0d:4c:5c:ab:6e:e7:4d:17:cb: 37:40:31:54:46:0a:a3:d3:0d:90:c2:e1:b6:40:9b:a2:be:7e: 93:12:5b:8f:6f:4d:05:60:bc:bf:52:7f:e3:58:bf:2a:63:be: c1:cd:51:01:d8:75:ad:c8:c4:ce:49:86:c3:fe:53:50:4e:69: 23:60:40:1b:cf:97:cf:90:25:ce:cc:77:95:a6:0e:a3:2a:7d: 02:98:a6:e2:ae:85:7f:d7:d7:16:27:79:ab:6e:88:b7:24:ed: 15:fa:20:53:40:bd:ad:1f:e9:a3:36:5d:7b:33:ab:0c:51:52: 56:55:d6:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR8ZSg/BNYPmkzBbiZ0c1B/xbTp0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIyMDAxMDI2WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWMwOGY4N2NkMTllOTgyNzk2YzY5ZDIyMTE0ZTY3Y2Ri OTg3YzMwNzM3MzZkZjg0OGNkNjY1NWJjMzdmYjY3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRtNA4sNeJHAxp8mNtEk5GcrmrzW+LhddyT8ESYCW8bG8C EAkTcnc2o/OuVPFqJ5cKYrbF4miFXUfqf6hMpS7wZEdWitwLNQKFeNqeNFRs2CU+ eAYdqhCOyx+uFzJVF3+U/7LJTaa10mI81pUPickU8aq8L79uFbpx6GZdiXE7ewtp jgh5gG6xi0v2UHKOdgMg44jfEU+w3ng+aSpOG/swbSGxKPF3y5mkRjGDTbXWqpre ljFSil78yY/8Dia8nb0B0HtO2E+oYrPVRKW8pXRp7q0YKbNLe4QRWrEfP71BvBNs SfWVtEh5WOzFpuwKlTnimPq8nU1N2oudAbhWL2BhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUExJt0+1jKy4PH25FVjrtjt0C1lMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVkOTlhNDU2LTZjOTktNDhhZS1iZjNhLTE0OTU4NWQ2MWQ2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJFqegwDQYJKoZIhvcNAQELBQADggEBAHoR7KGQImN7HO/IsSJlopem3/vt Db8eBKPxb9B477fVvm9iook0X/xyJH/M0x7yDKrYkibDOySMtHmsCGFTcjiV7ZHx HNo2M1VhHLo+fcnxXlrDvt9eyDMr4ymr8J7zokSNcy4QpdMIodx7SaYC8cW3u8rp 2PcskT7ldXgRf/LmJPFaKNNESg1MXKtu500XyzdAMVRGCqPTDZDC4bZAm6K+fpMS W49vTQVgvL9Sf+NYvypjvsHNUQHYda3IxM5JhsP+U1BOaSNgQBvPl8+QJc7Md5Wm DqMqfQKYpuKuhX/X1xYneatuiLck7RX6IFNAva0f6aM2XXszqwxRUlZV1go= -----END CERTIFICATE-----Generated at Mon Nov 9 17:25:00 2026 by rpki-client