$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa File: 951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa (raw, json) Hash identifier: XCbNqvAXcmJaeRDABlT/2fF6h21k6d13fXQJ2F6al3w= Subject key identifier: 0D:D0:58:36:AC:94:17:2B:29:26:E3:2C:74:AF:EF:0A:4F:02:46:AC Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 07092B7B9C7FF1C5C0738FC90018EA231340EB4F Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa Signing time: Fri 09 Oct 2026 00:30:45 +0000 ROA not before: Fri 09 Oct 2026 00:30:45 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:09:2b:7b:9c:7f:f1:c5:c0:73:8f:c9:00:18:ea:23:13:40:eb:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:45 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=62eace1a6ae81f4cc0f83715cef793bf67307e246c22dd32fc521e484145e75d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:4f:e1:86:b0:d2:f6:2c:70:c0:05:fc:5f: 56:60:04:e0:f1:88:ae:e8:a9:c0:e8:b9:46:bf:58: ce:63:7d:45:9c:d0:97:e4:f1:b9:90:ba:ec:12:97: 34:f9:11:d0:06:41:fb:48:f0:5a:aa:81:a4:59:9d: c6:27:1b:54:47:43:a7:e6:4f:a3:60:b5:91:81:65: e2:55:3d:1a:7c:45:c7:dd:cf:61:e7:84:b2:61:28: 63:88:b5:7d:72:a0:af:44:c9:d8:e0:75:98:7f:f1: f3:3a:0e:3e:12:9e:9b:62:00:e7:33:d6:2b:ab:bd: 45:90:e6:f3:9f:92:8b:ce:03:3e:70:11:15:d5:e5: d1:60:f8:ef:4f:66:5c:ac:4e:97:2e:b2:1f:1a:5c: db:e5:34:cb:cd:67:ff:ec:88:82:8d:48:72:c5:55: 66:88:85:cf:ff:15:46:7d:54:69:6b:4a:71:c8:3d: 08:d5:7e:d3:f5:2e:25:14:2e:17:48:b2:39:81:d1: bd:ff:e8:dd:d7:a0:6b:06:a5:05:e9:5a:f0:fd:17: 46:15:eb:65:20:26:29:4a:9f:db:40:87:b6:cd:5c: c9:93:f9:1b:b4:2b:4c:28:e5:00:a7:58:e1:97:cb: ad:fc:2c:e6:86:9b:e3:18:8b:40:99:13:1b:85:70: 1a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D0:58:36:AC:94:17:2B:29:26:E3:2C:74:AF:EF:0A:4F:02:46:AC X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.218.0/23 Signature Algorithm: sha256WithRSAEncryption 88:db:81:d1:3d:32:82:e2:34:32:bb:00:c7:05:cf:01:e7:01: a9:25:37:38:d0:53:f9:d5:35:a5:ba:1c:75:f9:09:a5:8d:0b: d8:c1:7b:73:67:95:dc:68:72:62:ef:e1:07:2d:da:4f:f7:fe: 58:57:66:d4:0e:18:9c:e2:b2:f6:8f:f9:6a:52:cc:7a:ac:b0: d5:ae:23:a0:e6:16:ee:b4:b7:aa:49:78:11:81:5e:d4:57:ad: b7:07:22:f3:3c:dc:03:96:53:6d:86:9e:ca:a6:86:68:1c:85: 01:41:bf:98:d7:59:73:79:6c:f4:52:28:74:f7:7a:26:49:6d: 8c:94:3d:4c:d2:19:e2:8c:3f:6e:0a:26:44:e9:e8:80:91:55: 15:8a:de:be:3d:30:53:2d:ee:9a:e3:b3:84:7c:59:e3:5b:8d: e2:fc:6d:db:d4:94:0d:6c:93:0a:d8:26:32:f0:fa:85:fc:f7: 6f:d9:64:81:3e:5e:4b:62:c1:fa:91:ef:a6:e6:25:ee:9b:01: 7a:b5:b2:da:4f:59:49:5a:b9:f7:b2:0a:bd:55:07:c1:03:47: 00:31:72:13:9e:9e:d5:f6:1e:69:a2:28:ec:d8:ab:1d:63:e0: ec:84:e7:66:20:50:6e:e7:ea:3a:a1:4e:60:3f:c7:b0:0a:a3: 42:6f:32:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBwkre5x/8cXAc4/JABjqIxNA608wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDQ1WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmVhY2UxYTZhZTgxZjRjYzBmODM3MTVjZWY3OTNiZjY3 MzA3ZTI0NmMyMmRkMzJmYzUyMWU0ODQxNDVlNzVkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9tU/hhrDS9ixwwAX8X1ZgBODxiK7oqcDouUa/WM5jfUWc 0Jfk8bmQuuwSlzT5EdAGQftI8FqqgaRZncYnG1RHQ6fmT6NgtZGBZeJVPRp8Rcfd z2HnhLJhKGOItX1yoK9EydjgdZh/8fM6Dj4SnptiAOcz1iurvUWQ5vOfkovOAz5w ERXV5dFg+O9PZlysTpcush8aXNvlNMvNZ//siIKNSHLFVWaIhc//FUZ9VGlrSnHI PQjVftP1LiUULhdIsjmB0b3/6N3XoGsGpQXpWvD9F0YV62UgJilKn9tAh7bNXMmT +Ru0K0wo5QCnWOGXy638LOaGm+MYi0CZExuFcBpjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDdBYNqyUFyspJuMsdK/vCk8CRqwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzk1MWI2NmYwLTg5OTMtNDdkMi05YmY1LWU4NWY0YWQ1ZTMyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dowDQYJKoZIhvcNAQELBQADggEBAIjbgdE9MoLiNDK7AMcFzwHnAakl NzjQU/nVNaW6HHX5CaWNC9jBe3NnldxocmLv4Qct2k/3/lhXZtQOGJzisvaP+WpS zHqssNWuI6DmFu60t6pJeBGBXtRXrbcHIvM83AOWU22GnsqmhmgchQFBv5jXWXN5 bPRSKHT3eiZJbYyUPUzSGeKMP24KJkTp6ICRVRWK3r49MFMt7prjs4R8WeNbjeL8 bdvUlA1skwrYJjLw+oX892/ZZIE+XktiwfqR76bmJe6bAXq1stpPWUlaufeyCr1V B8EDRwAxchOentX2HmmiKOzYqx1j4OyE52YgUG7n6jqhTmA/x7AKo0JvMpg= -----END CERTIFICATE-----Generated at Sun Nov 8 14:56:22 2026 by rpki-client