$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa File: 84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa (raw, json) Hash identifier: OBK9A0R2to8ldFOddr3ggo+JW5B3++HOvx2bsOzGx1k= Subject key identifier: 89:A3:CA:03:0D:FE:0C:54:02:75:14:75:7F:B0:80:C0:DB:D4:A2:4E Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2795DB6BA22810FB417DF60D41FE34A0538ECBC9 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa Signing time: Wed 11 Feb 2026 00:20:06 +0000 ROA not before: Wed 11 Feb 2026 00:20:06 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:95:db:6b:a2:28:10:fb:41:7d:f6:0d:41:fe:34:a0:53:8e:cb:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:20:06 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=b021df9650cb4e9e24b513f959cdd68b22b164f548e611ddc3595f6c80c88425, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:52:20:39:4c:d9:76:eb:1f:a3:6b:48:37: 5a:fd:a9:57:7a:7b:43:af:f5:ad:1d:86:e7:7a:71: 4c:aa:53:06:bb:ea:04:1e:c7:f8:3a:c5:70:f4:60: 60:29:1d:e8:9b:00:93:ed:63:58:14:ff:d0:e4:e7: 17:a2:c4:55:c1:55:59:b1:a1:0c:f1:d6:f0:2e:09: 44:e6:f5:92:b4:40:21:b6:c1:1d:e3:a0:62:e7:f0: 48:98:b2:2f:6f:17:87:a1:47:b6:b3:54:97:b3:ca: a3:67:c3:90:2a:72:20:25:4d:47:8b:db:60:1b:a0: 83:91:4f:17:e3:23:f6:51:58:3b:4b:56:8a:e5:52: 4f:6e:37:39:28:21:b0:4f:4d:d9:65:f9:64:6a:08: 5b:3e:82:0e:b9:79:d4:2a:2b:b2:a8:12:4e:9c:12: e8:7a:d1:95:0d:bc:9d:d0:ed:22:f0:fe:c2:82:ae: 2d:11:ab:04:b0:03:c4:8e:0e:83:dd:fc:5b:f8:9e: a2:ad:22:0f:23:08:52:5e:cf:7f:18:c7:3b:7b:f2: d9:e7:37:46:9a:9b:b2:2a:8d:31:9e:d9:6b:3e:e2: ae:58:f2:be:ec:a5:95:21:1d:03:9d:11:eb:45:4c: 15:95:38:05:8c:d3:15:43:18:ac:f7:9c:9f:06:01: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:CA:03:0D:FE:0C:54:02:75:14:75:7F:B0:80:C0:DB:D4:A2:4E X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.234.0/24 Signature Algorithm: sha256WithRSAEncryption 39:2c:71:5f:29:24:40:c5:76:ae:1c:7f:1b:da:06:92:38:ec: 78:f0:2d:0d:1d:8b:ba:38:ec:02:13:18:0f:ff:0b:54:f3:63: f3:36:d8:5e:63:0c:e8:d9:0c:9c:2b:0c:b5:7d:44:98:bc:46: 15:c8:47:8f:40:ba:f8:fe:3f:ba:13:ce:b3:31:aa:21:8d:06: b6:c4:db:d9:b2:34:29:d2:17:98:71:31:6a:06:4d:99:39:e0: 96:87:66:3c:ae:89:31:e1:19:9e:0e:95:c9:9a:05:4b:5f:5d: 95:79:02:dd:91:1e:bd:3a:0a:18:cb:90:4b:57:fe:a6:09:17: 30:f2:30:1a:eb:6e:09:96:ac:a6:a2:0b:94:9f:aa:9d:df:9e: 9d:f4:02:22:e8:93:e6:4b:85:d7:fa:10:88:13:2e:75:11:9e: 79:69:57:b3:e4:21:ae:85:57:1e:e3:c3:b6:e1:ad:66:ee:b7: 89:9f:04:7c:57:c2:4b:18:60:ba:f4:c1:e7:cb:e0:c8:27:ed: a3:a9:16:86:e4:d9:ec:c1:71:10:09:e3:8c:6a:3a:83:b4:7b: ea:ac:d1:67:0b:0e:60:b1:c8:67:b1:bf:d9:58:d2:d6:00:d8: 12:9e:26:e2:d4:62:93:c9:2a:09:bd:1b:10:e8:33:43:38:d7: df:bd:46:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ5Xba6IoEPtBffYNQf40oFOOy8kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAyMDA2WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDIxZGY5NjUwY2I0ZTllMjRiNTEzZjk1OWNkZDY4YjIy YjE2NGY1NDhlNjExZGRjMzU5NWY2YzgwYzg4NDI1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+5VIgOUzZdusfo2tIN1r9qVd6e0Ov9a0dhud6cUyqUwa7 6gQex/g6xXD0YGApHeibAJPtY1gU/9Dk5xeixFXBVVmxoQzx1vAuCUTm9ZK0QCG2 wR3joGLn8EiYsi9vF4ehR7azVJezyqNnw5AqciAlTUeL22AboIORTxfjI/ZRWDtL VorlUk9uNzkoIbBPTdll+WRqCFs+gg65edQqK7KoEk6cEuh60ZUNvJ3Q7SLw/sKC ri0RqwSwA8SODoPd/Fv4nqKtIg8jCFJez38Yxzt78tnnN0aam7IqjTGe2Ws+4q5Y 8r7spZUhHQOdEetFTBWVOAWM0xVDGKz3nJ8GAdBNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiaPKAw3+DFQCdRR1f7CAwNvUok4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzg0YzAzOGFlLTdhNWEtNDE0YS1iZDAwLTFlZGI2ZmJlNWFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++owDQYJKoZIhvcNAQELBQADggEBADkscV8pJEDFdq4cfxvaBpI47Hjw LQ0di7o47AITGA//C1TzY/M22F5jDOjZDJwrDLV9RJi8RhXIR49Auvj+P7oTzrMx qiGNBrbE29myNCnSF5hxMWoGTZk54JaHZjyuiTHhGZ4OlcmaBUtfXZV5At2RHr06 ChjLkEtX/qYJFzDyMBrrbgmWrKaiC5Sfqp3fnp30AiLok+ZLhdf6EIgTLnURnnlp V7PkIa6FVx7jw7bhrWbut4mfBHxXwksYYLr0wefL4Mgn7aOpFobk2ezBcRAJ44xq OoO0e+qs0WcLDmCxyGexv9lY0tYA2BKeJuLUYpPJKgm9GxDoM0M419+9RrU= -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:35 2026 by rpki-client