$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa File: 951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa (raw, json) Hash identifier: plzOwZr/73DRCjgdCTz8iGa00GoL4II+eKIyyJdMQeU= Subject key identifier: 31:49:77:E9:35:7C:07:79:40:9A:0B:FD:D9:40:08:9C:DA:4A:34:53 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5CCF3CFC8E2EFC339E1D92EAA93103A556E6E13E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa Signing time: Wed 11 Feb 2026 00:30:30 +0000 ROA not before: Wed 11 Feb 2026 00:30:30 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:cf:3c:fc:8e:2e:fc:33:9e:1d:92:ea:a9:31:03:a5:56:e6:e1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:30:30 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=998a30ebbb155351ca7b5709a6d853caed891924061ce68eb29ee74413466370, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:c0:8e:7c:43:9a:0a:ba:21:93:c4:12:3f: 4d:57:99:8d:11:e6:16:c7:5c:67:44:ba:74:92:6b: 60:e3:7e:b1:b6:eb:68:dd:a0:40:04:98:c3:16:48: c1:2e:60:db:76:66:99:28:27:8d:a5:9f:5b:ee:29: 63:22:cd:2d:c5:a5:16:c3:21:2a:92:53:b7:a4:2e: 0b:c4:74:25:f1:35:6a:e3:25:ae:a5:54:ed:ef:43: 98:67:e0:ea:bf:7e:a4:b9:9c:09:26:e0:70:1b:d8: 70:28:ba:26:5f:98:79:61:35:3b:ab:fd:0c:36:5d: 00:16:0a:03:8e:1d:ce:0f:e2:d5:36:fd:a1:f3:a8: 09:9b:4b:83:b2:c1:ef:2b:0d:0b:bd:7b:95:b1:6f: 64:e7:7f:cc:a5:35:36:02:ad:c4:ba:c4:7a:1d:0e: 1c:25:f4:5a:de:78:91:ac:aa:58:be:5b:d7:e3:70: 0b:13:14:5a:43:52:85:c7:f2:be:38:b4:ed:93:c0: 81:3a:86:b2:89:c5:87:4b:71:96:8f:6d:c1:c0:0a: 32:70:df:f4:ac:48:b2:54:ba:b8:f3:10:10:fe:f9: 30:85:fe:de:d7:e3:08:3f:66:46:ce:86:4c:af:3e: d6:8b:7b:e0:58:2f:4a:51:4a:cd:46:50:eb:ec:03: d8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:49:77:E9:35:7C:07:79:40:9A:0B:FD:D9:40:08:9C:DA:4A:34:53 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.218.0/23 Signature Algorithm: sha256WithRSAEncryption 32:ae:92:33:a1:df:d9:e3:0d:4d:3c:79:4d:15:4f:64:91:fa: c0:20:bc:30:ff:9b:10:a1:48:3d:04:88:e3:57:63:a3:c8:e8: c6:0a:5d:88:9e:09:90:2f:2a:b8:68:3b:7e:38:fe:58:3e:ce: 62:c4:e7:13:d6:95:9e:d6:8c:c4:0f:a8:63:35:cd:b2:8a:ef: e3:11:f3:47:eb:31:71:e7:b6:77:ef:ee:70:8f:f5:ec:c3:c3: 0f:13:88:6b:d2:c8:99:cc:14:8b:ed:6a:9f:56:22:b8:f9:b8: 58:f1:0a:e7:b8:4a:ae:b1:8d:34:cf:91:4f:9a:f9:80:3f:6f: c3:c5:17:fb:a4:57:0a:6b:8f:8e:f5:90:7b:f2:79:96:d9:78: 7a:b4:c6:18:49:84:51:33:65:2d:03:97:c1:bb:c5:37:bb:79: 2a:eb:77:ea:6f:ed:e9:94:4f:70:7b:7a:e8:87:e2:cf:49:bd: 90:94:ec:07:38:73:6a:05:d2:1f:1d:d2:54:cf:2e:30:ab:79: 35:ba:dd:98:b7:ff:d7:ae:35:c5:d7:2d:66:4e:4e:c6:97:2d: f2:c3:ed:c1:74:80:62:9f:c1:0b:a2:1f:91:b8:cf:ef:de:04: fd:c6:69:60:43:ec:6e:c0:25:f0:f3:5f:30:9f:03:d9:7b:8c: 0d:c9:4a:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXM88/I4u/DOeHZLqqTEDpVbm4T4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAzMDMwWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OThhMzBlYmJiMTU1MzUxY2E3YjU3MDlhNmQ4NTNjYWVk ODkxOTI0MDYxY2U2OGViMjllZTc0NDEzNDY2MzcwMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH/MCOfEOaCrohk8QSP01XmY0R5hbHXGdEunSSa2DjfrG2 62jdoEAEmMMWSMEuYNt2ZpkoJ42ln1vuKWMizS3FpRbDISqSU7ekLgvEdCXxNWrj Ja6lVO3vQ5hn4Oq/fqS5nAkm4HAb2HAouiZfmHlhNTur/Qw2XQAWCgOOHc4P4tU2 /aHzqAmbS4Oywe8rDQu9e5Wxb2Tnf8ylNTYCrcS6xHodDhwl9FreeJGsqli+W9fj cAsTFFpDUoXH8r44tO2TwIE6hrKJxYdLcZaPbcHACjJw3/SsSLJUurjzEBD++TCF /t7X4wg/ZkbOhkyvPtaLe+BYL0pRSs1GUOvsA9g9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMUl36TV8B3lAmgv92UAInNpKNFMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzk1MWI2NmYwLTg5OTMtNDdkMi05YmY1LWU4NWY0YWQ1ZTMyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dowDQYJKoZIhvcNAQELBQADggEBADKukjOh39njDU08eU0VT2SR+sAg vDD/mxChSD0EiONXY6PI6MYKXYieCZAvKrhoO344/lg+zmLE5xPWlZ7WjMQPqGM1 zbKK7+MR80frMXHntnfv7nCP9ezDww8TiGvSyJnMFIvtap9WIrj5uFjxCue4Sq6x jTTPkU+a+YA/b8PFF/ukVwprj471kHvyeZbZeHq0xhhJhFEzZS0Dl8G7xTe7eSrr d+pv7emUT3B7euiH4s9JvZCU7Ac4c2oF0h8d0lTPLjCreTW63Zi3/9euNcXXLWZO TsaXLfLD7cF0gGKfwQuiH5G4z+/eBP3GaWBD7G7AJfDzXzCfA9l7jA3JSsI= -----END CERTIFICATE-----Generated at Mon Mar 2 06:29:58 2026 by rpki-client