$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa File: 60789a29-f516-47ec-9154-b2b610f7282e.roa (raw, json) Hash identifier: eGteAhElSxw+d0YI88lgl+2rdkHTdRvzqJWoRDiL+BE= Subject key identifier: 01:FE:1A:1A:6F:90:DA:5B:A3:01:66:D8:24:9E:BC:67:89:C4:1B:DF Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5ADB5FEE01B04CA87142587403A8BEF57E7C2E85 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa Signing time: Thu 08 Oct 2026 00:05:04 +0000 ROA not before: Thu 08 Oct 2026 00:05:04 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 216.221.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:db:5f:ee:01:b0:4c:a8:71:42:58:74:03:a8:be:f5:7e:7c:2e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 8 00:05:04 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=d23558fd21b9a84fd0517c343b2d99b33906d9b2236fc14244b20ff6549c7d9d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e5:d8:ce:4c:41:50:e3:97:f6:99:ca:3c:81: fd:00:f5:ff:e4:e5:07:56:87:06:31:ba:c0:ba:9d: 41:f1:1b:7f:ab:4b:75:77:9e:fb:4d:75:ce:28:ff: c0:71:7f:5e:a6:e2:7f:82:b4:f5:e8:b6:bc:0f:7b: 4b:67:a4:5c:c8:c1:35:44:5f:bd:7d:39:f2:08:90: 3d:f6:81:04:dd:5b:a5:75:e4:1b:df:4e:bd:5c:39: 17:1f:16:f9:72:8f:a8:7b:5c:3e:0c:f9:75:72:0f: a1:d4:f4:31:1f:da:5c:c0:52:c7:80:6c:7e:aa:d9: 23:e8:7c:4b:c5:7a:79:e8:80:56:d2:09:03:fe:40: cd:ff:60:3c:e8:4d:4e:7c:69:e1:c3:9c:a2:d7:a1: dd:3e:8b:6f:50:a9:9c:d6:d3:b1:d1:79:6e:4a:58: e9:b7:68:4a:de:65:80:5c:a5:0d:9c:f4:a6:9b:c8: 07:e5:25:71:fa:b5:d9:b2:48:59:54:e1:71:27:06: 37:24:2a:2a:e4:d6:e8:7e:68:e0:c0:85:ae:aa:7b: ed:72:f9:49:77:f0:6b:e2:c1:8b:5c:36:94:91:99: 53:b3:b1:ad:35:e7:af:cc:35:82:d2:42:4d:10:9f: 0e:2c:68:c8:ee:e0:03:1a:d6:8a:79:93:c0:6e:74: c2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FE:1A:1A:6F:90:DA:5B:A3:01:66:D8:24:9E:BC:67:89:C4:1B:DF X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.168.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:27:38:af:43:6d:b1:76:2a:76:4f:69:96:ab:ab:cf:0f:ee: db:97:f6:24:8a:b2:ca:c8:f9:5d:5a:a9:db:3e:e8:bf:78:eb: 7b:9f:c8:71:d2:08:cd:23:45:d2:fb:3f:99:2f:90:05:da:2a: ba:6a:53:5b:83:4f:86:aa:56:bc:18:77:a7:f3:4c:59:a9:0b: 75:f3:cf:18:cb:a6:3b:80:c0:2a:9f:3f:78:ea:46:16:7d:4a: ea:76:e9:86:86:c9:d4:2b:81:aa:24:4b:bf:f0:c7:de:ad:68: 9f:ef:aa:be:79:fd:99:46:3d:6f:e7:e2:e5:a6:a1:6c:9b:8e: f3:e6:4c:b8:8f:31:d8:74:eb:bf:38:27:0d:9f:5e:aa:7b:c0: 20:a5:24:50:97:f2:e3:06:3c:a3:68:d1:c2:1c:ae:b6:e8:c7: f5:64:7a:5c:11:d9:59:66:ac:e0:5e:95:09:42:e3:77:6e:05: fb:59:a1:9f:bb:d1:a3:04:83:9e:9c:5b:5b:2b:ee:84:6f:83: de:3a:1a:eb:ee:b1:ef:bb:e3:49:02:c9:e1:38:36:eb:d1:de: cd:21:b2:5f:a2:75:6c:70:21:e9:45:22:93:83:0c:d6:76:ad: 6b:52:0d:ce:f2:31:7f:d4:29:d1:a7:58:7e:c5:17:18:f3:7e: bc:c7:8d:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWttf7gGwTKhxQlh0A6i+9X58LoUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA4MDAwNTA0WhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjM1NThmZDIxYjlhODRmZDA1MTdjMzQzYjJkOTliMzM5 MDZkOWIyMjM2ZmMxNDI0NGIyMGZmNjU0OWM3ZDlkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCN5djOTEFQ45f2mco8gf0A9f/k5QdWhwYxusC6nUHxG3+r S3V3nvtNdc4o/8Bxf16m4n+CtPXotrwPe0tnpFzIwTVEX719OfIIkD32gQTdW6V1 5BvfTr1cORcfFvlyj6h7XD4M+XVyD6HU9DEf2lzAUseAbH6q2SPofEvFennogFbS CQP+QM3/YDzoTU58aeHDnKLXod0+i29QqZzW07HReW5KWOm3aEreZYBcpQ2c9Kab yAflJXH6tdmySFlU4XEnBjckKirk1uh+aODAha6qe+1y+Ul38GviwYtcNpSRmVOz sa0156/MNYLSQk0Qnw4saMju4AMa1op5k8BudMLrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAf4aGm+Q2lujAWbYJJ68Z4nEG98wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzYwNzg5YTI5LWY1MTYtNDdlYy05MTU0LWIyYjYxMGY3MjgyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPY3agwDQYJKoZIhvcNAQELBQADggEBACwnOK9DbbF2KnZPaZarq88P7tuX 9iSKssrI+V1aqds+6L9463ufyHHSCM0jRdL7P5kvkAXaKrpqU1uDT4aqVrwYd6fz TFmpC3XzzxjLpjuAwCqfP3jqRhZ9Sup26YaGydQrgaokS7/wx96taJ/vqr55/ZlG PW/n4uWmoWybjvPmTLiPMdh06784Jw2fXqp7wCClJFCX8uMGPKNo0cIcrrbox/Vk elwR2VlmrOBelQlC43duBftZoZ+70aMEg56cW1sr7oRvg946Guvuse+740kCyeE4 NuvR3s0hsl+idWxwIelFIpODDNZ2rWtSDc7yMX/UKdGnWH7FFxjzfrzHjWE= -----END CERTIFICATE-----Generated at Tue Nov 10 11:38:15 2026 by rpki-client