$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa File: 8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa (raw, json) Hash identifier: VX362NHlW0tKAGWMA2WDWxriDxSyNXDGoG74xV0hRMw= Subject key identifier: 90:FA:18:A8:BE:10:8E:D0:EA:56:6F:58:D9:58:87:5A:4A:EF:D9:D1 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 40EE5D3AC4A706BA0B9CC31BC3F2EBF2853EA55C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa Signing time: Thu 22 Oct 2026 00:10:13 +0000 ROA not before: Thu 22 Oct 2026 00:10:13 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ee:5d:3a:c4:a7:06:ba:0b:9c:c3:1b:c3:f2:eb:f2:85:3e:a5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 22 00:10:13 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=f2c829fd888f6b27a00841fc3d5d5174677c8c1492aa03e38f6e67f60c526a52, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:53:e8:c1:0e:cc:36:95:04:06:7f:fa:ab: 65:2f:8a:d8:c5:b9:22:2e:ba:0e:c5:c6:b6:39:e7: 06:d7:6f:44:a8:94:86:b3:1a:6d:d8:74:49:06:cc: b7:32:a8:f7:ff:c2:09:46:68:b0:a0:a7:a3:b2:5d: e4:38:67:e1:a7:d3:e2:d3:9f:66:9a:d7:5e:0b:a1: 37:e5:ec:dd:11:17:94:c4:db:a2:72:40:f6:72:c2: c2:ca:6f:90:cd:03:f2:8b:e7:fd:2e:e5:2e:db:14: 25:2d:06:dc:8a:4e:3d:b5:43:f8:dd:1d:d4:d6:e5: 58:0b:a5:e7:27:ee:30:f9:ef:8f:82:71:a2:37:61: 3d:cb:89:01:7a:61:12:dc:d2:72:f7:0d:78:66:b8: e5:3b:fe:05:84:18:b7:c5:04:22:3e:4c:8d:2a:45: 06:a6:fd:db:10:3f:6b:af:bc:55:6b:33:7b:1f:e6: 93:59:55:7b:34:4b:36:a2:80:a7:a8:cc:46:f0:01: 71:2f:5d:15:72:a4:6d:8b:2c:5b:26:00:40:6d:58: 17:cf:0d:60:81:e7:6a:62:a3:de:97:65:0b:0e:7b: 3f:90:52:e9:e4:67:74:96:41:46:bb:73:79:82:d1: d1:0b:77:77:8c:0d:62:ea:12:8c:dd:20:1d:b4:be: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FA:18:A8:BE:10:8E:D0:EA:56:6F:58:D9:58:87:5A:4A:EF:D9:D1 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.246.0/23 Signature Algorithm: sha256WithRSAEncryption 26:86:a2:ba:c5:cc:db:41:41:08:bd:6c:9f:d0:b2:bd:a3:d2: b2:61:05:32:af:96:06:e7:de:c4:17:46:4a:d7:1d:44:eb:b9: 50:fa:97:9d:c1:66:b2:a6:8f:1e:3e:46:c8:37:0f:cb:51:f4: 6b:fc:b5:6c:db:4e:db:83:5f:72:8a:b8:9b:d2:fd:78:5b:19: 76:09:04:b6:51:cb:64:84:40:48:0f:46:99:55:02:25:86:49: fe:6c:3c:75:35:12:b8:77:dc:da:dc:3e:67:33:95:de:7e:07: 3c:8e:5d:e8:ce:03:47:57:17:ff:2a:e6:64:d0:10:a2:d1:4f: b7:86:d2:6b:46:fc:9b:a4:e1:f2:41:01:44:e7:99:1d:f8:43: ae:8c:b9:e0:d2:55:3f:21:0f:d1:7c:80:dc:6f:8f:20:05:37: 83:2a:79:38:b4:e7:52:2d:43:3f:b6:c7:d2:98:57:39:a5:6f: c6:ee:4e:6c:37:be:a0:37:9b:4c:62:c6:7b:01:6a:39:02:a1: 9c:62:97:fa:46:54:26:26:0d:2e:d1:2a:67:25:12:be:81:10: da:d6:ba:07:55:3a:9d:d3:0e:ff:16:09:5c:c8:f3:65:2e:e7: 0a:cc:07:15:80:ea:96:6c:28:9a:5f:c9:48:64:7b:ce:18:3c: 57:5c:a2:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQO5dOsSnBroLnMMbw/Lr8oU+pVwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIyMDAxMDEzWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmM4MjlmZDg4OGY2YjI3YTAwODQxZmMzZDVkNTE3NDY3 N2M4YzE0OTJhYTAzZTM4ZjZlNjdmNjBjNTI2YTUyMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUR1PowQ7MNpUEBn/6q2UvitjFuSIuug7FxrY55wbXb0So lIazGm3YdEkGzLcyqPf/wglGaLCgp6OyXeQ4Z+Gn0+LTn2aa114LoTfl7N0RF5TE 26JyQPZywsLKb5DNA/KL5/0u5S7bFCUtBtyKTj21Q/jdHdTW5VgLpecn7jD574+C caI3YT3LiQF6YRLc0nL3DXhmuOU7/gWEGLfFBCI+TI0qRQam/dsQP2uvvFVrM3sf 5pNZVXs0SzaigKeozEbwAXEvXRVypG2LLFsmAEBtWBfPDWCB52pio96XZQsOez+Q UunkZ3SWQUa7c3mC0dELd3eMDWLqEozdIB20vh/xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkPoYqL4QjtDqVm9Y2ViHWkrv2dEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzhiNTJmNjQwLTQyZDYtNDdiNy1hMDhlLWQyZjg5MzFkNWNmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/YwDQYJKoZIhvcNAQELBQADggEBACaGorrFzNtBQQi9bJ/Qsr2j0rJh BTKvlgbn3sQXRkrXHUTruVD6l53BZrKmjx4+Rsg3D8tR9Gv8tWzbTtuDX3KKuJvS /XhbGXYJBLZRy2SEQEgPRplVAiWGSf5sPHU1Erh33NrcPmczld5+BzyOXejOA0dX F/8q5mTQEKLRT7eG0mtG/Juk4fJBAUTnmR34Q66MueDSVT8hD9F8gNxvjyAFN4Mq eTi051ItQz+2x9KYVzmlb8buTmw3vqA3m0xixnsBajkCoZxil/pGVCYmDS7RKmcl Er6BENrWugdVOp3TDv8WCVzI82Uu5wrMBxWA6pZsKJpfyUhke84YPFdcosI= -----END CERTIFICATE-----Generated at Sun Nov 8 15:18:47 2026 by rpki-client