$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa File: 7c541838-12b7-470a-b044-f31d3ab72ede.roa (raw, json) Hash identifier: GcX+QWvCZB0q2rvQIDz6HwIzQTrODmPqKOYWADHb6DU= Subject key identifier: E1:41:2A:BB:4F:BD:5E:57:9E:A4:40:FB:A5:11:95:E5:98:72:9D:2A Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3D16CFEDD7AABF5E8D7A90CB517565C41A8ED226 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa Signing time: Wed 11 Feb 2026 00:30:28 +0000 ROA not before: Wed 11 Feb 2026 00:30:28 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:16:cf:ed:d7:aa:bf:5e:8d:7a:90:cb:51:75:65:c4:1a:8e:d2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:30:28 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=76c42ca3a37ee25a5a60fd67842fd30433c92c893f47bdbd9dc085e74580be1a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:3e:69:3a:bb:b7:e0:5e:a8:c4:f1:c7:28: db:30:92:4e:0b:b7:65:a2:8e:46:03:ab:5d:18:5a: 6e:df:dd:9b:53:d2:1d:b8:87:5f:a0:49:2f:d5:36: b4:b6:0c:66:75:bb:95:84:24:54:6f:be:6d:8f:1f: 17:43:db:e2:08:d3:4d:89:2e:15:af:7e:4e:e7:15: 85:e1:e2:28:40:52:4d:84:f6:c7:c1:8d:ac:d5:01: 92:29:1f:bc:99:98:9d:f5:ec:04:af:d1:41:0d:65: 1c:a9:2a:17:37:1e:c3:76:03:9f:5c:ca:f7:03:38: ec:83:80:81:1c:a2:49:15:79:ae:38:88:fa:01:05: cb:16:69:d7:96:f4:5e:43:ba:8e:f7:1e:f8:c7:3b: 34:91:c8:93:33:8b:81:a4:12:1a:a8:f1:b5:3a:b0: 6f:39:99:14:34:08:70:6a:18:54:87:09:b3:34:42: 54:da:35:33:81:d5:19:8b:56:6d:08:7e:0e:4e:ac: 24:2f:00:de:33:f6:68:be:24:49:b0:54:91:3f:7f: 4c:c7:1c:c1:a9:c7:22:99:c9:14:58:e7:11:09:54: 72:aa:a7:8b:e4:15:39:bf:6f:0f:d8:99:2b:e2:d3: 3a:3b:76:4c:58:8e:eb:f2:55:78:47:b7:58:0f:f0: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:41:2A:BB:4F:BD:5E:57:9E:A4:40:FB:A5:11:95:E5:98:72:9D:2A X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:c5:2c:51:d1:08:f7:39:86:52:73:df:eb:b6:f8:d3:ef:2d: 12:7f:fe:99:ff:3a:12:e1:06:35:a1:bb:72:c8:50:f1:21:a2: c1:01:d8:a3:57:74:0f:92:cc:33:c2:25:7c:de:81:75:20:77: 28:ec:e2:15:85:3f:17:8d:43:76:67:51:19:85:77:09:7a:53: 00:10:ea:b9:48:8e:fe:4c:b9:3d:05:1d:b9:a0:1c:95:1e:7b: f1:e7:73:98:1b:af:1c:1f:92:29:a8:6e:67:46:50:2e:a5:77: 27:f2:77:a7:e1:fa:f7:d5:03:25:b8:16:f2:d3:5f:56:2a:aa: d9:c4:20:73:dc:d1:d5:e2:e9:9e:7f:82:3d:82:aa:07:d5:2e: 52:62:e3:8e:89:5e:28:cd:b0:95:73:c5:97:fd:d7:ab:7c:34: c4:cb:c5:c0:12:9e:74:0a:d1:19:62:20:d0:4c:5e:82:c9:ab: 08:eb:05:9e:bd:08:33:c2:32:e9:f2:55:b7:f6:1a:2f:de:02: ca:34:26:85:b9:b4:a3:8b:86:2b:9e:e9:2b:05:a5:9a:c4:4c: 3c:d6:33:f7:38:70:9c:b1:fa:de:0e:16:46:b6:5f:c6:03:2e: ac:c7:f4:e1:31:ec:ac:b6:82:18:3a:dc:c2:23:ca:8c:66:64: 0a:b0:ad:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPRbP7deqv16NepDLUXVlxBqO0iYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAzMDI4WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmM0MmNhM2EzN2VlMjVhNWE2MGZkNjc4NDJmZDMwNDMz YzkyYzg5M2Y0N2JkYmQ5ZGMwODVlNzQ1ODBiZTFhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQAz5pOru34F6oxPHHKNswkk4Lt2WijkYDq10YWm7f3ZtT 0h24h1+gSS/VNrS2DGZ1u5WEJFRvvm2PHxdD2+II002JLhWvfk7nFYXh4ihAUk2E 9sfBjazVAZIpH7yZmJ317ASv0UENZRypKhc3HsN2A59cyvcDOOyDgIEcokkVea44 iPoBBcsWadeW9F5Duo73HvjHOzSRyJMzi4GkEhqo8bU6sG85mRQ0CHBqGFSHCbM0 QlTaNTOB1RmLVm0Ifg5OrCQvAN4z9mi+JEmwVJE/f0zHHMGpxyKZyRRY5xEJVHKq p4vkFTm/bw/YmSvi0zo7dkxYjuvyVXhHt1gP8Kd7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4UEqu0+9XleepED7pRGV5ZhynSowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzdjNTQxODM4LTEyYjctNDcwYS1iMDQ0LWYzMWQzYWI3MmVkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dAwDQYJKoZIhvcNAQELBQADggEBAI/FLFHRCPc5hlJz3+u2+NPvLRJ/ /pn/OhLhBjWhu3LIUPEhosEB2KNXdA+SzDPCJXzegXUgdyjs4hWFPxeNQ3ZnURmF dwl6UwAQ6rlIjv5MuT0FHbmgHJUee/Hnc5gbrxwfkimobmdGUC6ldyfyd6fh+vfV AyW4FvLTX1YqqtnEIHPc0dXi6Z5/gj2CqgfVLlJi446JXijNsJVzxZf916t8NMTL xcASnnQK0RliINBMXoLJqwjrBZ69CDPCMunyVbf2Gi/eAso0JoW5tKOLhiue6SsF pZrETDzWM/c4cJyx+t4OFka2X8YDLqzH9OEx7Ky2ghg63MIjyoxmZAqwrcw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:15 2026 by rpki-client