$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/786d28e5-14e3-440c-af25-3932909a2a98.roa File: 786d28e5-14e3-440c-af25-3932909a2a98.roa (raw, json) Hash identifier: 9gxJ8IKtxTjOqbmCiTCpQgEPyu582OoKWBKSrw0ceZs= Subject key identifier: 4D:B9:6D:C1:EF:CB:31:59:06:AC:12:44:09:BF:7B:6E:C8:3B:CD:B0 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 74FBC72BCF32A6DE1A83C7D9BB80608EA7E8D07C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/786d28e5-14e3-440c-af25-3932909a2a98.roa Signing time: Tue 14 Apr 2026 12:51:38 +0000 ROA not before: Tue 14 Apr 2026 12:51:38 +0000 ROA not after: Mon 13 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.221.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fb:c7:2b:cf:32:a6:de:1a:83:c7:d9:bb:80:60:8e:a7:e8:d0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 14 12:51:38 2026 GMT Not After : Jul 13 23:59:59 2026 GMT Subject: serialNumber=92f0a214d2752b44fc7cc4e9f4b131d89f913ee48414c6a01318c9038f25f9b1, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:82:66:a0:4f:37:7b:e0:5d:d9:1f:5d:62: 70:10:91:ea:80:30:63:98:43:20:49:0e:a6:4d:c9: eb:19:4e:0f:23:2f:a3:4a:ff:54:02:0b:71:e8:36: 1c:c5:bb:49:32:58:03:31:70:e9:18:8a:4a:9b:ef: c7:4f:56:73:16:0a:18:59:90:7c:e0:c2:3c:44:3f: 9c:4e:e5:38:b2:f0:87:06:f4:f5:d2:d2:b3:f9:7c: f8:3c:79:27:0b:df:6a:f3:ca:8d:99:b8:4e:14:89: ef:89:2e:41:4b:f6:5d:49:65:53:8c:b1:96:d7:ae: 87:c0:68:77:dc:b6:a2:95:34:9d:98:61:39:93:91: 6f:de:a5:51:62:cf:38:e5:b3:dc:98:6e:6a:66:32: eb:47:05:c4:f9:42:9f:53:f2:85:a7:dc:d9:c0:da: 05:3c:32:f2:8c:e4:bf:ce:81:d0:a2:49:aa:13:2b: 81:4a:35:6b:f0:1b:d4:b3:12:67:41:7a:5e:fa:08: e4:6b:58:8a:50:9d:6b:47:98:e1:76:24:59:c8:1c: 75:3c:69:29:f4:94:dd:ba:04:2c:3e:6a:66:a8:90: e2:b7:94:4e:75:98:66:ff:56:be:f6:a3:c8:57:bc: 41:33:c9:67:19:7d:4e:ab:3d:0f:72:ec:58:c5:85: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:6D:C1:EF:CB:31:59:06:AC:12:44:09:BF:7B:6E:C8:3B:CD:B0 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/786d28e5-14e3-440c-af25-3932909a2a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.187.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:52:e5:1c:1c:f8:1e:31:94:67:21:a9:f0:99:c4:f0:7b:7d: 7c:fc:01:d0:16:13:87:e3:d8:32:51:35:75:2b:12:cb:26:40: 0f:4c:b0:19:66:e9:7d:f3:a1:f7:51:29:e8:7e:84:a0:1b:77: e7:9f:04:20:a0:83:5c:f8:14:fe:37:45:32:67:0e:5b:4d:42: fe:eb:9d:fe:09:3f:92:3b:63:10:65:ea:9a:76:3b:4c:4d:fa: 8d:73:28:7a:8a:c3:7c:de:9e:69:a1:03:b9:9d:fa:51:8f:f6: 5f:bf:6c:12:29:dc:12:03:fa:f4:5e:97:76:05:26:32:0d:f8: 44:aa:48:bd:c1:30:8b:f7:b9:8b:86:f9:d5:91:4e:2a:9a:5b: 99:af:80:15:14:d1:27:cf:81:29:63:8f:8c:55:31:d7:d7:28: ad:28:15:9b:ab:87:36:82:f5:21:31:34:c8:ef:6e:b7:58:9f: 6b:7a:71:ea:0a:d2:9b:05:84:9a:b4:82:e6:05:e0:20:11:53: 12:04:25:4f:bf:76:15:2c:4d:ad:91:56:c3:5b:82:a5:d3:16: a1:d0:59:0a:79:c6:64:b7:f2:ad:d4:0f:1a:17:24:38:42:1d: 2c:ab:cf:b8:18:85:0c:69:61:80:b4:a1:04:c2:1e:b1:74:67: 22:df:a7:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdPvHK88ypt4ag8fZu4Bgjqfo0HwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNDE0MTI1MTM4WhcNMjYwNzEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MmYwYTIxNGQyNzUyYjQ0ZmM3Y2M0ZTlmNGIxMzFkODlm OTEzZWU0ODQxNGM2YTAxMzE4YzkwMzhmMjVmOWIxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVCYJmoE83e+Bd2R9dYnAQkeqAMGOYQyBJDqZNyesZTg8j L6NK/1QCC3HoNhzFu0kyWAMxcOkYikqb78dPVnMWChhZkHzgwjxEP5xO5Tiy8IcG 9PXS0rP5fPg8eScL32rzyo2ZuE4Uie+JLkFL9l1JZVOMsZbXrofAaHfctqKVNJ2Y YTmTkW/epVFizzjls9yYbmpmMutHBcT5Qp9T8oWn3NnA2gU8MvKM5L/OgdCiSaoT K4FKNWvwG9SzEmdBel76CORrWIpQnWtHmOF2JFnIHHU8aSn0lN26BCw+amaokOK3 lE51mGb/Vr72o8hXvEEzyWcZfU6rPQ9y7FjFhSxVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTbltwe/LMVkGrBJECb97bsg7zbAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzc4NmQyOGU1LTE0ZTMtNDQwYy1hZjI1LTM5MzI5MDlhMmE5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3bswDQYJKoZIhvcNAQELBQADggEBAHpS5Rwc+B4xlGchqfCZxPB7fXz8 AdAWE4fj2DJRNXUrEssmQA9MsBlm6X3zofdRKeh+hKAbd+efBCCgg1z4FP43RTJn DltNQv7rnf4JP5I7YxBl6pp2O0xN+o1zKHqKw3zenmmhA7md+lGP9l+/bBIp3BID +vRel3YFJjIN+ESqSL3BMIv3uYuG+dWRTiqaW5mvgBUU0SfPgSljj4xVMdfXKK0o FZurhzaC9SExNMjvbrdYn2t6ceoK0psFhJq0guYF4CARUxIEJU+/dhUsTa2RVsNb gqXTFqHQWQp5xmS38q3UDxoXJDhCHSyrz7gYhQxpYYC0oQTCHrF0ZyLfp2c= -----END CERTIFICATE-----Generated at Fri Apr 17 05:58:13 2026 by rpki-client