$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa File: 8f549665-8398-44a1-8d57-5658d76e1c61.roa (raw, json) Hash identifier: q7PpEnS9l8nKkLVD65UV9ZTZFbFgKxR1H6xFGsHkEW0= Subject key identifier: 77:CF:75:45:00:29:70:71:AA:94:A2:2C:1A:D2:F1:DD:28:1E:2C:72 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4CE6D3FC6E65BF615A1F4CF0176DCDE218FDF490 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa Signing time: Fri 15 May 2026 00:10:19 +0000 ROA not before: Fri 15 May 2026 00:10:19 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e6:d3:fc:6e:65:bf:61:5a:1f:4c:f0:17:6d:cd:e2:18:fd:f4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 15 00:10:19 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=6fb60c28000d1ccb31aa894b424152a004905b1c8211a083165b3b080a95774d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:06:9b:61:3c:c3:03:44:f0:b7:87:6d:11: 37:f6:25:1b:21:81:4c:e6:bc:e7:c2:8b:c9:04:9a: a2:f8:ae:7f:f3:0f:be:1c:35:22:6b:38:7d:2c:cc: ed:6d:a8:1c:24:9d:c0:48:1a:27:65:f0:ff:33:27: 48:d6:1a:04:13:d4:8e:a1:de:b2:08:85:76:dc:a6: 0d:d2:13:a9:c3:83:df:ab:1d:1f:1b:91:b6:f2:d3: c9:13:6c:49:ab:93:66:87:42:dd:21:a9:16:94:60: fb:3a:3e:be:28:19:12:30:98:03:07:ac:83:20:de: 79:12:a6:58:be:9e:05:69:25:37:78:bd:f2:d7:81: db:26:02:58:55:1c:95:fc:4c:3d:7b:13:6d:d3:39: 99:d7:e0:58:d8:db:44:f1:4e:1b:9c:c9:ce:9c:80: 06:15:70:1f:81:89:39:0f:3c:f6:70:25:c6:8e:0a: aa:9e:77:a8:27:a3:71:f5:18:f4:78:98:82:9f:3c: 8e:33:b0:bd:b5:69:08:21:18:8d:0a:2b:47:16:99: c2:83:10:a3:46:61:ae:ad:d0:25:86:c9:8b:f2:d0: 04:ba:2c:65:1d:14:5a:ea:7b:18:41:04:83:6d:95: 6d:f3:87:81:bb:cb:a9:d6:25:05:c9:49:a7:7b:00: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CF:75:45:00:29:70:71:AA:94:A2:2C:1A:D2:F1:DD:28:1E:2C:72 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.234.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:5f:86:e1:05:b7:f8:0f:15:7e:9f:a8:f7:4f:90:54:27:19: e9:dd:a6:be:86:8e:be:7f:77:40:f5:08:ee:55:16:a9:3b:fe: 68:3c:dd:e5:7c:12:0d:0e:a9:9b:8e:8b:7c:a1:2c:e0:f4:57: 44:51:6a:50:6c:65:8a:34:fe:ed:ed:e2:49:36:d5:22:7f:e9: 80:5a:99:19:aa:1f:b5:3f:25:48:f7:ed:58:1f:d5:2c:33:f3: 54:35:72:3e:07:53:e0:39:08:44:e4:5e:3a:e2:0f:50:bc:b5: 35:6e:8e:9c:0c:19:17:20:68:f4:d3:d8:ba:c9:36:64:98:37: 6b:ef:eb:39:e7:31:53:ea:d8:da:7e:da:3a:52:08:ab:c6:6c: c0:d2:88:56:c0:6b:3c:ab:7e:d6:e3:9f:94:14:e4:3d:71:ab: e8:f4:0d:b0:15:8c:76:bf:fd:bf:55:4c:ea:ac:65:86:9c:1f: af:b9:83:32:a3:40:32:9b:48:30:0f:d3:d5:36:d0:ab:97:d4: c1:40:77:8c:5e:f4:25:d6:8d:6f:a0:7f:33:09:d0:91:d6:f7: f3:a7:3f:25:89:9d:9d:6f:c8:58:ba:00:f6:76:14:3f:f8:90: 92:09:9d:91:b3:87:9d:2c:49:d9:5e:bc:23:40:68:1e:a2:5c: 0b:dd:93:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTObT/G5lv2FaH0zwF23N4hj99JAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTE1MDAxMDE5WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmI2MGMyODAwMGQxY2NiMzFhYTg5NGI0MjQxNTJhMDA0 OTA1YjFjODIxMWEwODMxNjViM2IwODBhOTU3NzRkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6wAabYTzDA0Twt4dtETf2JRshgUzmvOfCi8kEmqL4rn/z D74cNSJrOH0szO1tqBwkncBIGidl8P8zJ0jWGgQT1I6h3rIIhXbcpg3SE6nDg9+r HR8bkbby08kTbEmrk2aHQt0hqRaUYPs6Pr4oGRIwmAMHrIMg3nkSpli+ngVpJTd4 vfLXgdsmAlhVHJX8TD17E23TOZnX4FjY20TxThucyc6cgAYVcB+BiTkPPPZwJcaO Cqqed6gno3H1GPR4mIKfPI4zsL21aQghGI0KK0cWmcKDEKNGYa6t0CWGyYvy0AS6 LGUdFFrqexhBBINtlW3zh4G7y6nWJQXJSad7AHn9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUd891RQApcHGqlKIsGtLx3SgeLHIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzhmNTQ5NjY1LTgzOTgtNDRhMS04ZDU3LTU2NThkNzZlMWM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqeowDQYJKoZIhvcNAQELBQADggEBABxfhuEFt/gPFX6fqPdPkFQnGend pr6Gjr5/d0D1CO5VFqk7/mg83eV8Eg0OqZuOi3yhLOD0V0RRalBsZYo0/u3t4kk2 1SJ/6YBamRmqH7U/JUj37Vgf1Swz81Q1cj4HU+A5CETkXjriD1C8tTVujpwMGRcg aPTT2LrJNmSYN2vv6znnMVPq2Np+2jpSCKvGbMDSiFbAazyrftbjn5QU5D1xq+j0 DbAVjHa//b9VTOqsZYacH6+5gzKjQDKbSDAP09U20KuX1MFAd4xe9CXWjW+gfzMJ 0JHW9/OnPyWJnZ1vyFi6APZ2FD/4kJIJnZGzh50sSdlevCNAaB6iXAvdk5o= -----END CERTIFICATE-----Generated at Wed Jun 17 08:42:39 2026 by rpki-client