$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa File: 8f549665-8398-44a1-8d57-5658d76e1c61.roa (raw, json) Hash identifier: xnYHwypqcKnndMbGh2y7t+xQDCDS07O9Nl5j1ahzRBg= Subject key identifier: B1:57:F2:0C:3B:E1:8B:2D:9D:9B:2F:34:96:FA:05:9B:BA:E9:04:AC Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6DC00B761B7A868E3DFFC22D544DCD81F843E5A6 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa Signing time: Tue 24 Feb 2026 00:10:05 +0000 ROA not before: Tue 24 Feb 2026 00:10:05 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c0:0b:76:1b:7a:86:8e:3d:ff:c2:2d:54:4d:cd:81:f8:43:e5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 24 00:10:05 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=c3e84a13d0f39fe39da00ba46ed265c16f8383f52c284e47068109ffdf85829c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:09:e5:0c:5b:d4:ee:6c:5f:ac:f2:71:b8: d0:30:3d:ec:06:19:3b:23:ac:2e:b6:46:b8:a6:9f: 22:13:ec:3b:e4:0b:87:68:80:a7:55:bc:bd:09:6b: 8a:ee:61:be:dd:0a:58:f8:41:ca:c1:b0:cd:6f:46: 3a:bb:7a:3b:73:8b:a8:e1:2e:6a:43:a6:18:97:b8: ac:42:4f:46:12:4e:40:00:b2:70:37:d2:7d:93:c7: 44:53:32:5b:44:8c:e6:3d:12:dc:28:d1:cc:53:8e: eb:a0:11:9d:20:61:c0:94:53:bb:02:72:08:cf:70: c3:0f:a3:c5:07:1f:8b:c5:4c:31:ef:7c:bc:57:df: 76:ab:d2:56:f8:c1:10:d0:69:b3:2b:b1:1c:2c:b0: bd:cc:ed:b9:3a:75:50:6e:ce:29:bf:f2:53:2e:aa: 57:66:91:e3:d6:c0:c3:4d:d4:41:d3:d6:15:ad:0e: 86:42:62:f1:5d:1f:3c:87:3b:8f:e0:2a:60:f2:1a: b6:80:28:2a:ea:00:7d:3c:1f:dd:70:87:ad:17:8c: 41:a5:93:ea:d0:12:bb:23:03:05:9f:91:f3:d6:3e: ab:6f:46:5a:2e:9e:75:d7:29:6c:86:53:2f:40:32: 10:42:00:2f:51:cb:f7:1b:ff:22:7f:6c:92:09:61: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:57:F2:0C:3B:E1:8B:2D:9D:9B:2F:34:96:FA:05:9B:BA:E9:04:AC X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.234.0/24 Signature Algorithm: sha256WithRSAEncryption 17:c0:85:8c:d9:f7:59:76:e0:b1:5b:9a:ec:a1:68:d8:ca:5c: 4b:8e:0c:3a:3a:58:d5:5e:ab:d4:5a:48:9c:16:e2:d3:07:7a: 2e:28:d8:7b:fc:57:6a:a1:39:6d:2b:41:25:8f:3f:7a:27:fc: 23:a0:00:41:c7:80:fd:07:4d:d5:c0:12:db:b2:5d:c4:2a:b2: 00:86:a5:8b:28:f9:c6:70:bf:78:cb:4d:11:d1:02:5b:e7:fd: 38:8a:d7:24:bd:d0:dd:a3:36:53:e2:6e:30:5b:8a:48:e7:d0: f5:ed:29:af:23:5e:1a:eb:7e:43:9b:96:28:3e:8c:c0:8a:f8: 25:8f:bc:58:82:1e:67:b0:26:c3:1e:06:22:28:f8:d2:7e:db: 94:f5:9a:66:6f:06:04:b9:75:38:4b:95:01:2e:ca:8d:0f:94: 6b:f7:a5:99:ad:5a:6c:64:b0:c9:96:b4:f3:29:07:13:0a:f1: 6f:55:78:84:b8:7d:47:e5:2c:86:d3:4b:5d:d1:c8:e9:73:ab: 76:db:51:25:5b:d6:c4:da:53:67:4a:58:bc:7e:27:6e:43:f3: 0c:88:10:8b:80:24:87:0b:eb:e5:d8:96:63:25:8f:91:1b:06: 98:e6:fc:7a:fb:4a:dc:4a:c1:59:0d:8f:55:32:c6:54:3e:aa: 6b:98:96:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbcALdht6ho49/8ItVE3NgfhD5aYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjI0MDAxMDA1WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2U4NGExM2QwZjM5ZmUzOWRhMDBiYTQ2ZWQyNjVjMTZm ODM4M2Y1MmMyODRlNDcwNjgxMDlmZmRmODU4MjljMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx9gnlDFvU7mxfrPJxuNAwPewGGTsjrC62RrimnyIT7Dvk C4dogKdVvL0Ja4ruYb7dClj4QcrBsM1vRjq7ejtzi6jhLmpDphiXuKxCT0YSTkAA snA30n2Tx0RTMltEjOY9Etwo0cxTjuugEZ0gYcCUU7sCcgjPcMMPo8UHH4vFTDHv fLxX33ar0lb4wRDQabMrsRwssL3M7bk6dVBuzim/8lMuqldmkePWwMNN1EHT1hWt DoZCYvFdHzyHO4/gKmDyGraAKCrqAH08H91wh60XjEGlk+rQErsjAwWfkfPWPqtv RlounnXXKWyGUy9AMhBCAC9Ry/cb/yJ/bJIJYUTrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsVfyDDvhiy2dmy80lvoFm7rpBKwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzhmNTQ5NjY1LTgzOTgtNDRhMS04ZDU3LTU2NThkNzZlMWM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqeowDQYJKoZIhvcNAQELBQADggEBABfAhYzZ91l24LFbmuyhaNjKXEuO DDo6WNVeq9RaSJwW4tMHei4o2Hv8V2qhOW0rQSWPP3on/COgAEHHgP0HTdXAEtuy XcQqsgCGpYso+cZwv3jLTRHRAlvn/TiK1yS90N2jNlPibjBbikjn0PXtKa8jXhrr fkOblig+jMCK+CWPvFiCHmewJsMeBiIo+NJ+25T1mmZvBgS5dThLlQEuyo0PlGv3 pZmtWmxksMmWtPMpBxMK8W9VeIS4fUflLIbTS13RyOlzq3bbUSVb1sTaU2dKWLx+ J25D8wyIEIuAJIcL6+XYlmMlj5EbBpjm/Hr7StxKwVkNj1UyxlQ+qmuYlio= -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:45 2026 by rpki-client