$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa File: 60789a29-f516-47ec-9154-b2b610f7282e.roa (raw, json) Hash identifier: g+vd+b3mWcVtmI3PemdAb9ApNAQyB+ljiQEQMHZ35pc= Subject key identifier: EC:74:AF:75:2A:4E:71:77:E3:26:02:5D:3A:1F:B1:A2:41:9D:42:3B Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 212CD9ABC2C9345A5F3FB4346B53F1FCD7183110 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa Signing time: Tue 10 Feb 2026 00:00:37 +0000 ROA not before: Tue 10 Feb 2026 00:00:37 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 216.221.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2c:d9:ab:c2:c9:34:5a:5f:3f:b4:34:6b:53:f1:fc:d7:18:31:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 10 00:00:37 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=6790f44ad41033ba80361029f09d523663ba883591960cc03eb1123cfad5df8e, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:71:9c:62:98:bd:7b:1a:a9:27:bf:3a:db: f5:b0:92:4f:70:07:f5:10:ec:28:5c:de:19:73:64: 8e:06:19:e3:2f:c8:30:70:29:cc:13:21:7e:91:41: 3e:ad:54:77:b6:1a:ca:66:38:96:0c:95:ff:79:d3: a1:21:59:e3:1c:fa:67:c5:01:a3:62:59:c1:f2:f7: cf:ad:78:95:73:3c:c0:ee:8d:ec:90:02:32:7a:13: 6f:52:b9:e0:a4:fa:65:dd:ae:55:72:9b:15:96:8e: d5:80:9a:4d:74:79:f2:8f:01:4b:6e:4f:79:d0:dc: ca:a1:16:21:59:fc:16:53:ea:6c:6a:fc:b3:3b:2f: 0e:65:71:d7:e6:cf:d1:d4:f3:ca:a9:18:a4:d8:bb: e4:16:6e:dc:d7:0a:1d:0e:c8:93:66:6f:69:55:c9: 97:02:ae:7c:da:43:26:33:d8:b6:8f:75:34:61:09: 5c:c0:31:9d:58:e1:4d:76:22:80:b6:89:e8:76:d6: db:06:b6:ef:ee:67:0d:fb:5e:fd:af:03:89:f3:6c: 23:e3:ef:51:ad:5f:8e:1b:b4:0e:75:b0:89:ec:91: 72:07:1e:10:1e:d7:d5:c7:d9:f6:0e:88:fc:f0:c9: dd:6a:a0:87:9d:cc:87:56:68:5b:bf:a4:b6:9b:e8: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:74:AF:75:2A:4E:71:77:E3:26:02:5D:3A:1F:B1:A2:41:9D:42:3B X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.168.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:2b:62:75:18:3f:c5:ee:6a:4d:80:7c:3e:81:00:cb:f8:6e: 4a:22:53:42:2f:d8:bf:c3:fc:ac:0d:9d:69:ee:1c:7d:fb:92: 8d:b7:39:9d:16:c4:f2:9a:2b:7d:56:31:88:2d:07:2c:6d:48: 7b:6a:8c:8b:fb:98:9d:d7:f8:9e:47:ce:be:76:ce:37:83:f8: f6:96:f5:53:6d:53:7c:a2:a8:ba:72:a0:81:cd:73:33:c5:a8: 0b:67:cb:1c:e9:85:5c:86:b9:c3:95:f4:18:2b:76:79:2d:91: 52:1d:57:3f:db:f8:36:0d:6b:82:91:8c:0c:c2:1c:33:ac:ad: 14:15:d1:fb:e9:e5:a9:e7:ae:35:3d:61:d1:fa:1d:3c:94:38: b6:f9:08:cf:86:d4:c5:9f:20:a3:38:b5:bd:c3:8f:49:7f:ec: 0d:6f:5b:e6:a9:f8:d4:e4:21:86:8d:b3:c9:92:f3:d0:3e:6a: 01:39:01:f6:17:22:3b:af:14:10:6f:f3:0c:5a:75:94:fb:77: d4:dc:37:04:91:98:62:c8:70:d2:9d:e4:4e:63:1b:92:17:1f: 72:1f:f1:da:fc:25:d2:b5:bc:92:2f:50:ca:94:32:da:08:9f: c9:44:7c:f5:cb:e8:4c:d0:14:6b:6e:4b:3e:9b:24:0a:e0:16: f7:92:c3:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUISzZq8LJNFpfP7Q0a1Px/NcYMRAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjEwMDAwMDM3WhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzkwZjQ0YWQ0MTAzM2JhODAzNjEwMjlmMDlkNTIzNjYz YmE4ODM1OTE5NjBjYzAzZWIxMTIzY2ZhZDVkZjhlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpIXGcYpi9exqpJ7862/Wwkk9wB/UQ7Chc3hlzZI4GGeMv yDBwKcwTIX6RQT6tVHe2GspmOJYMlf9506EhWeMc+mfFAaNiWcHy98+teJVzPMDu jeyQAjJ6E29SueCk+mXdrlVymxWWjtWAmk10efKPAUtuT3nQ3MqhFiFZ/BZT6mxq /LM7Lw5lcdfmz9HU88qpGKTYu+QWbtzXCh0OyJNmb2lVyZcCrnzaQyYz2LaPdTRh CVzAMZ1Y4U12IoC2ieh21tsGtu/uZw37Xv2vA4nzbCPj71GtX44btA51sInskXIH HhAe19XH2fYOiPzwyd1qoIedzIdWaFu/pLab6G9LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7HSvdSpOcXfjJgJdOh+xokGdQjswHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzYwNzg5YTI5LWY1MTYtNDdlYy05MTU0LWIyYjYxMGY3MjgyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPY3agwDQYJKoZIhvcNAQELBQADggEBAEsrYnUYP8Xuak2AfD6BAMv4bkoi U0Iv2L/D/KwNnWnuHH37ko23OZ0WxPKaK31WMYgtByxtSHtqjIv7mJ3X+J5Hzr52 zjeD+PaW9VNtU3yiqLpyoIHNczPFqAtnyxzphVyGucOV9BgrdnktkVIdVz/b+DYN a4KRjAzCHDOsrRQV0fvp5annrjU9YdH6HTyUOLb5CM+G1MWfIKM4tb3Dj0l/7A1v W+ap+NTkIYaNs8mS89A+agE5AfYXIjuvFBBv8wxadZT7d9TcNwSRmGLIcNKd5E5j G5IXH3If8dr8JdK1vJIvUMqUMtoIn8lEfPXL6EzQFGtuSz6bJArgFveSw7I= -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:22 2026 by rpki-client