$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8a554833-7334-4e02-8426-138572f3d41a.roa File: 8a554833-7334-4e02-8426-138572f3d41a.roa (raw, json) Hash identifier: bRnT/ip9kS50+r2clw7KNu28E1RDNZBtknuk6oCy0XM= Subject key identifier: 0B:42:3F:B2:44:58:D0:C4:73:6A:83:54:C9:16:06:15:30:79:F0:F7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 28717009454F64E049C49AA598B8872A0A7045CF Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8a554833-7334-4e02-8426-138572f3d41a.roa Signing time: Fri 09 Oct 2026 00:30:15 +0000 ROA not before: Fri 09 Oct 2026 00:30:15 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:71:70:09:45:4f:64:e0:49:c4:9a:a5:98:b8:87:2a:0a:70:45:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:15 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=13d71723559267287398727b24015bfaa68fe7a7226a06ada7aca6ea2201eb73, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:99:00:73:fc:96:02:7f:c6:da:92:d0:77: ce:2e:14:0a:54:05:d6:83:ae:90:cf:df:c2:06:39: 95:0a:32:b8:c5:1c:3c:42:17:f7:cb:74:4c:81:0f: 68:60:e2:83:5f:c5:74:f8:2c:68:41:f7:44:40:c5: d0:58:7c:65:c6:57:2f:34:9d:7b:b9:99:0c:e1:db: eb:e9:70:91:fb:f7:66:d1:b5:3b:22:15:dc:d9:2b: 43:ca:82:44:61:df:c5:40:0c:50:4b:bc:3c:0e:35: 47:12:49:c8:f7:d9:f3:8d:a7:27:bd:e7:a2:e6:52: 7d:0b:7b:a3:0a:d7:c7:1b:48:d3:63:f6:ce:bc:d4: 22:60:03:97:0b:f2:ee:c7:0a:3f:88:5d:5b:56:e0: d5:24:f6:2e:79:b6:31:c8:11:63:0f:8d:d5:70:87: 18:3c:c2:1d:ca:40:f3:44:ab:0d:9c:a6:fd:7c:64: 70:69:31:1e:22:f5:95:44:65:96:e4:99:60:44:e2: 09:ba:d1:9a:4c:61:b5:9a:e7:a5:fb:48:5e:e5:ee: 9e:47:4f:a2:2b:29:48:dc:ca:e1:3f:f2:77:3e:04: 43:ef:22:57:58:36:93:29:0c:fd:51:56:e5:43:cd: 36:bd:3e:6d:e1:2a:f4:56:50:8f:16:a9:a4:65:5b: 2e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:42:3F:B2:44:58:D0:C4:73:6A:83:54:C9:16:06:15:30:79:F0:F7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8a554833-7334-4e02-8426-138572f3d41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.217.0/24 Signature Algorithm: sha256WithRSAEncryption 02:46:a9:92:c5:a4:01:9d:de:3a:87:1f:89:11:f9:df:88:12: fd:8a:0c:91:50:92:a7:58:a2:4d:a7:ab:ec:8a:df:77:cd:ff: 62:83:1a:d8:4d:64:0c:a4:92:74:75:c0:e0:c1:76:41:e1:e0: e1:6d:5e:a8:b4:58:aa:a7:b8:7b:97:8f:06:df:98:f1:11:7d: 85:95:ce:04:5b:64:35:ab:55:a3:1f:0d:08:e9:79:f1:b6:44: fe:5a:93:b7:cb:43:79:ea:f4:50:e2:de:08:17:aa:3a:b6:25: 10:4d:9e:81:f4:0b:7d:f9:44:fb:df:f8:7f:ed:13:b4:e0:22: eb:8f:61:a8:61:39:cd:85:31:8c:13:53:76:30:e2:42:37:5e: c3:37:04:ce:eb:f8:bc:2c:f8:26:49:f6:16:50:f1:eb:c0:ee: 22:6e:6d:64:23:2c:c5:a5:a3:d4:50:60:be:e0:6d:d7:b0:03: 8e:c8:e9:68:7a:ed:2d:25:aa:40:81:cd:ca:2c:fc:da:c2:7d: 90:54:87:3c:0e:ac:ca:f9:a1:c2:5d:0a:5e:f2:b8:9f:68:73: e3:20:6e:49:ff:d1:6b:ab:59:ed:99:61:48:16:8d:7d:cf:6e: 07:0d:8f:eb:ea:9b:7f:07:93:d9:5e:bb:a4:c7:27:a6:6c:bf: 93:f8:8c:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKHFwCUVPZOBJxJqlmLiHKgpwRc8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDE1WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2Q3MTcyMzU1OTI2NzI4NzM5ODcyN2IyNDAxNWJmYWE2 OGZlN2E3MjI2YTA2YWRhN2FjYTZlYTIyMDFlYjczMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8bJkAc/yWAn/G2pLQd84uFApUBdaDrpDP38IGOZUKMrjF HDxCF/fLdEyBD2hg4oNfxXT4LGhB90RAxdBYfGXGVy80nXu5mQzh2+vpcJH792bR tTsiFdzZK0PKgkRh38VADFBLvDwONUcSScj32fONpye956LmUn0Le6MK18cbSNNj 9s681CJgA5cL8u7HCj+IXVtW4NUk9i55tjHIEWMPjdVwhxg8wh3KQPNEqw2cpv18 ZHBpMR4i9ZVEZZbkmWBE4gm60ZpMYbWa56X7SF7l7p5HT6IrKUjcyuE/8nc+BEPv IldYNpMpDP1RVuVDzTa9Pm3hKvRWUI8WqaRlWy4dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC0I/skRY0MRzaoNUyRYGFTB58PcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzhhNTU0ODMzLTczMzQtNGUwMi04NDI2LTEzODU3MmYzZDQxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dkwDQYJKoZIhvcNAQELBQADggEBAAJGqZLFpAGd3jqHH4kR+d+IEv2K DJFQkqdYok2nq+yK33fN/2KDGthNZAykknR1wODBdkHh4OFtXqi0WKqnuHuXjwbf mPERfYWVzgRbZDWrVaMfDQjpefG2RP5ak7fLQ3nq9FDi3ggXqjq2JRBNnoH0C335 RPvf+H/tE7TgIuuPYahhOc2FMYwTU3Yw4kI3XsM3BM7r+Lws+CZJ9hZQ8evA7iJu bWQjLMWlo9RQYL7gbdewA47I6Wh67S0lqkCBzcos/NrCfZBUhzwOrMr5ocJdCl7y uJ9oc+Mgbkn/0WurWe2ZYUgWjX3PbgcNj+vqm38Hk9leu6THJ6Zsv5P4jLw= -----END CERTIFICATE-----Generated at Thu Nov 5 14:18:27 2026 by rpki-client