$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa File: 5e3c0e08-edb8-4079-81e3-f4c857efb338.roa (raw, json) Hash identifier: 2fA+Xo6D6UdlqZB1bD9ppExqSqKKHQotooW6/PQ8Xo0= Subject key identifier: 88:D2:46:86:EB:71:A8:23:24:99:A2:C1:07:3F:9E:31:36:B2:0D:D9 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 02DDEF9642ACF739EF76FD45973DBBC1BEAACE11 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa Signing time: Wed 11 Feb 2026 00:20:08 +0000 ROA not before: Wed 11 Feb 2026 00:20:08 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dd:ef:96:42:ac:f7:39:ef:76:fd:45:97:3d:bb:c1:be:aa:ce:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:20:08 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=fea89a4792ae3c6133801ba131962fbdb04063fe3d1ad7789104fafc9f630e76, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:cf:a2:58:9e:e0:c4:a2:34:2e:e3:d1:99: 3c:2d:51:11:b6:66:4f:ed:b8:00:30:2f:e7:62:24: 20:98:2e:58:43:51:1b:f1:18:dc:75:60:b2:d8:96: 13:6f:b3:7c:05:80:a9:ed:a6:4c:ad:6b:67:2f:91: b0:7f:a0:2a:bf:ca:8a:df:f3:9f:45:3e:d3:78:6a: 9f:9a:1b:6a:3c:6a:1c:fa:ac:92:1a:ba:ca:89:ae: 0d:77:fa:05:3d:d2:2b:35:2a:12:4e:28:c7:a8:af: c9:0b:a9:07:fa:ed:a6:3c:94:82:90:78:10:05:70: 34:c6:88:8d:0f:b4:7b:11:e9:25:3c:49:56:2c:b5: 0d:48:aa:85:47:10:6f:42:ce:ae:a1:ea:54:75:07: 06:26:ff:0e:e3:fb:dd:3e:12:70:75:c0:90:0c:cc: 1a:ff:65:e8:e6:44:e0:84:a9:96:ac:00:36:ca:b2: e1:f1:db:fa:c6:2c:57:cf:3a:3c:77:e2:2a:eb:1a: c4:e0:59:b7:a1:6a:f8:0f:75:a3:bb:af:b9:24:42: dd:e4:33:ab:da:1c:64:63:ef:13:a5:76:ab:29:55: 7e:00:7e:59:99:e7:0b:d5:be:0e:7f:02:c7:5a:e0: d7:e0:e7:b6:15:2f:60:2f:0b:63:2a:d5:4b:cb:2b: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D2:46:86:EB:71:A8:23:24:99:A2:C1:07:3F:9E:31:36:B2:0D:D9 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 60:59:a2:bd:c7:ca:0a:9c:8c:a7:f2:b3:eb:13:ad:26:0c:a0: 70:6d:80:c6:8e:47:b6:71:cc:41:c2:0d:d8:d1:1b:44:bf:ed: 9a:58:28:50:a8:0c:b4:b6:60:cb:6d:2f:9f:fe:26:f6:4a:c6: d8:ff:59:76:47:75:98:33:c4:34:f3:f4:4d:db:86:9f:48:b0: db:b9:01:f1:00:2e:d9:36:74:c8:b1:68:0d:11:8b:67:cf:19: af:3a:de:78:20:1b:ec:54:92:33:14:2b:db:60:bf:40:75:43: 85:16:51:9e:c2:09:82:0d:dd:00:28:55:2a:71:69:3c:e7:d1: 29:d5:63:4e:ef:ae:78:85:cb:60:e0:23:5f:7b:a5:cc:bb:88: 9b:86:d2:55:67:80:2c:98:81:7c:be:76:df:aa:b4:54:65:ec: 48:e9:99:29:c7:54:bb:e1:ca:0c:c5:6f:90:39:c2:dc:ba:cb: 42:01:2f:1c:13:63:48:9f:47:e6:a7:c3:60:c8:9c:09:64:ec: 65:aa:d6:83:45:a3:95:50:2b:67:9d:06:c4:5e:78:80:e7:2f: e3:b7:ef:b6:09:4f:d7:a5:51:a2:31:2d:49:01:34:37:16:e1: bd:ae:4f:4f:b6:f7:6a:2a:56:5c:2a:29:72:24:a8:e8:11:7f: 69:fb:07:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAt3vlkKs9znvdv1Flz27wb6qzhEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAyMDA4WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWE4OWE0NzkyYWUzYzYxMzM4MDFiYTEzMTk2MmZiZGIw NDA2M2ZlM2QxYWQ3Nzg5MTA0ZmFmYzlmNjMwZTc2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7s8+iWJ7gxKI0LuPRmTwtURG2Zk/tuAAwL+diJCCYLlhD URvxGNx1YLLYlhNvs3wFgKntpkyta2cvkbB/oCq/yorf859FPtN4ap+aG2o8ahz6 rJIausqJrg13+gU90is1KhJOKMeor8kLqQf67aY8lIKQeBAFcDTGiI0PtHsR6SU8 SVYstQ1IqoVHEG9Czq6h6lR1BwYm/w7j+90+EnB1wJAMzBr/ZejmROCEqZasADbK suHx2/rGLFfPOjx34irrGsTgWbehavgPdaO7r7kkQt3kM6vaHGRj7xOldqspVX4A flmZ5wvVvg5/Asda4Nfg57YVL2AvC2Mq1UvLK0j7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiNJGhutxqCMkmaLBBz+eMTayDdkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVlM2MwZTA4LWVkYjgtNDA3OS04MWUzLWY0Yzg1N2VmYjMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAGBZor3HygqcjKfys+sTrSYMoHBt gMaOR7ZxzEHCDdjRG0S/7ZpYKFCoDLS2YMttL5/+JvZKxtj/WXZHdZgzxDTz9E3b hp9IsNu5AfEALtk2dMixaA0Ri2fPGa863nggG+xUkjMUK9tgv0B1Q4UWUZ7CCYIN 3QAoVSpxaTzn0SnVY07vrniFy2DgI197pcy7iJuG0lVngCyYgXy+dt+qtFRl7Ejp mSnHVLvhygzFb5A5wty6y0IBLxwTY0ifR+anw2DInAlk7GWq1oNFo5VQK2edBsRe eIDnL+O377YJT9elUaIxLUkBNDcW4b2uT0+292oqVlwqKXIkqOgRf2n7B+k= -----END CERTIFICATE-----Generated at Sun Mar 1 23:50:59 2026 by rpki-client