$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/786d28e5-14e3-440c-af25-3932909a2a98.roa File: 786d28e5-14e3-440c-af25-3932909a2a98.roa (raw, json) Hash identifier: /k1BKODmj9FzZtopLKLR069D4J5InWyqUM1FFUVsj8c= Subject key identifier: 92:C2:63:1E:CB:BF:8F:B2:A9:4C:81:43:3C:49:76:E8:32:36:75:CF Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6D80749FBCC4EA50B379D1908356BDA6E13D5953 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/786d28e5-14e3-440c-af25-3932909a2a98.roa Signing time: Mon 21 Sep 2026 00:00:05 +0000 ROA not before: Mon 21 Sep 2026 00:00:05 +0000 ROA not after: Sun 20 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.221.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:80:74:9f:bc:c4:ea:50:b3:79:d1:90:83:56:bd:a6:e1:3d:59:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Sep 21 00:00:05 2026 GMT Not After : Dec 20 23:59:59 2026 GMT Subject: serialNumber=5e4798a528fe8e229ee4451ca589729e8c179c2fd9c92765df2e3d7354d3a15a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:b8:4f:a1:e1:c1:38:60:8f:9c:99:d9:38: 17:6f:6d:b4:6a:30:41:3a:c3:7c:c5:f9:38:30:78: cf:14:b0:69:7f:c1:c7:cc:63:a4:8e:46:07:8c:80: a5:05:cc:9b:30:91:9c:da:1b:c1:f8:3b:e2:ab:7f: 95:44:71:83:3b:5f:51:42:fc:c2:00:75:27:5f:58: 98:5b:88:48:7d:c2:8d:04:fc:4c:f1:2e:c2:e9:2a: aa:23:28:32:f3:ea:56:95:58:18:66:6c:e7:79:43: fc:34:2b:1b:bd:83:09:db:c2:70:e1:67:90:9a:aa: 9a:ff:cd:c1:f4:8b:b5:33:41:19:7a:28:88:77:e3: bf:b2:0b:1c:e7:ee:8d:9e:5f:e8:2a:ec:a1:af:53: 96:c7:57:1f:32:f2:53:3f:4b:0b:fb:38:c5:b0:ef: 1b:1a:72:81:fa:3f:e5:3c:7a:46:24:51:31:d6:43: ac:91:29:42:4c:87:82:95:3e:6e:c7:32:9e:8a:d6: 9f:25:0b:aa:b7:23:30:59:3c:80:77:81:f5:3c:55: 4b:56:d1:b5:cf:12:21:20:b7:8c:15:12:a0:b4:16: 33:a9:c0:81:34:f7:ce:33:ba:cc:49:35:1b:0c:0e: 0f:5b:dc:16:71:09:76:2f:9c:cd:19:30:3f:f2:f1: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C2:63:1E:CB:BF:8F:B2:A9:4C:81:43:3C:49:76:E8:32:36:75:CF X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/786d28e5-14e3-440c-af25-3932909a2a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.187.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:09:94:53:4b:ef:19:ba:84:27:c2:f6:75:18:3c:2a:8d:23: 62:9b:13:33:64:72:81:1a:ec:c4:2b:c2:0a:a4:12:05:1c:c6: 64:bd:93:c3:85:94:f9:9a:a1:90:b3:b5:76:8e:ed:20:7a:e4: 8b:40:15:44:25:57:79:0e:cf:6d:7f:c0:2a:2e:58:c2:25:81: b3:71:7a:0f:11:bb:68:d8:cc:2f:2b:bc:74:b6:c4:a0:40:fc: 6e:f9:29:70:90:3f:57:2a:3c:2c:3f:0a:60:de:3c:c5:95:9c: 10:29:5c:e1:19:63:64:26:bb:d1:c9:b4:40:32:9b:60:f6:39: 2a:4b:a8:58:e9:a9:84:60:4c:ac:da:a1:57:8d:0a:56:a4:60: e0:c6:ce:43:04:e3:65:d2:2a:dd:fd:69:45:63:3c:38:59:4a: 50:6e:30:57:70:5b:b5:d6:e7:87:27:c9:e7:35:08:ce:1e:ea: ea:1e:58:55:7c:43:11:30:ec:ab:87:04:b9:95:a7:74:bf:7c: ef:e6:e5:af:d8:3f:38:b2:6f:a1:73:cf:84:1f:00:a1:4e:ee: 13:d5:2a:06:f7:8e:da:d6:8e:6b:63:12:4d:66:0d:e2:e5:9b: 55:26:fa:9c:49:66:7c:fd:db:81:d0:be:b5:5b:85:bb:52:bc: 60:19:a2:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbYB0n7zE6lCzedGQg1a9puE9WVMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwOTIxMDAwMDA1WhcNMjYxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTQ3OThhNTI4ZmU4ZTIyOWVlNDQ1MWNhNTg5NzI5ZThj MTc5YzJmZDljOTI3NjVkZjJlM2Q3MzU0ZDNhMTVhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWdbhPoeHBOGCPnJnZOBdvbbRqMEE6w3zF+TgweM8UsGl/ wcfMY6SORgeMgKUFzJswkZzaG8H4O+Krf5VEcYM7X1FC/MIAdSdfWJhbiEh9wo0E /EzxLsLpKqojKDLz6laVWBhmbOd5Q/w0Kxu9gwnbwnDhZ5Caqpr/zcH0i7UzQRl6 KIh347+yCxzn7o2eX+gq7KGvU5bHVx8y8lM/Swv7OMWw7xsacoH6P+U8ekYkUTHW Q6yRKUJMh4KVPm7HMp6K1p8lC6q3IzBZPIB3gfU8VUtW0bXPEiEgt4wVEqC0FjOp wIE0984zusxJNRsMDg9b3BZxCXYvnM0ZMD/y8aCLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUksJjHsu/j7KpTIFDPEl26DI2dc8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzc4NmQyOGU1LTE0ZTMtNDQwYy1hZjI1LTM5MzI5MDlhMmE5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3bswDQYJKoZIhvcNAQELBQADggEBAD8JlFNL7xm6hCfC9nUYPCqNI2Kb EzNkcoEa7MQrwgqkEgUcxmS9k8OFlPmaoZCztXaO7SB65ItAFUQlV3kOz21/wCou WMIlgbNxeg8Ru2jYzC8rvHS2xKBA/G75KXCQP1cqPCw/CmDePMWVnBApXOEZY2Qm u9HJtEAym2D2OSpLqFjpqYRgTKzaoVeNClakYODGzkME42XSKt39aUVjPDhZSlBu MFdwW7XW54cnyec1CM4e6uoeWFV8QxEw7KuHBLmVp3S/fO/m5a/YPziyb6Fzz4Qf AKFO7hPVKgb3jtrWjmtjEk1mDeLlm1Um+pxJZnz924HQvrVbhbtSvGAZolg= -----END CERTIFICATE-----Generated at Mon Sep 21 09:31:34 2026 by rpki-client