$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a1532cad-101c-42fe-83e3-e4a74867afd7.roa File: a1532cad-101c-42fe-83e3-e4a74867afd7.roa (raw, json) Hash identifier: vbSA3AjM4K3sJI71lG13PkHN132VbXtpygDsyZ4RI5M= Subject key identifier: 8F:19:0F:44:92:29:5E:B5:CA:53:18:92:B3:78:7B:0A:F9:D9:69:BD Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3C68484FFB50BAE04E7AB481BEA26BB6AC511D18 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a1532cad-101c-42fe-83e3-e4a74867afd7.roa Signing time: Thu 22 Oct 2026 00:10:11 +0000 ROA not before: Thu 22 Oct 2026 00:10:11 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:68:48:4f:fb:50:ba:e0:4e:7a:b4:81:be:a2:6b:b6:ac:51:1d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 22 00:10:11 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=4918af16c24254fe2f8e8fb53cf28f6c23984f4c71547301fb6427c3052224fd, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:ee:43:8b:c5:e0:27:a6:2c:8b:9d:14:2e: 6d:97:9e:81:d4:99:6c:46:11:f7:d8:3b:e7:61:53: 83:05:04:de:7f:03:9e:66:4b:df:09:e6:4b:29:4f: 01:7a:e5:8e:a5:5a:db:55:a4:68:32:45:4d:3a:da: 20:21:36:e7:80:bf:92:cd:c4:7b:6a:11:d3:52:92: 2c:5d:5c:7b:0a:7d:54:58:eb:36:46:44:28:3d:8b: ea:34:e3:e0:0b:fb:a6:01:17:23:4e:55:05:fc:45: 18:2d:d5:c8:24:5e:6a:3c:12:c3:2e:be:e9:9e:31: 3a:f4:2b:32:4e:08:5e:2b:3e:38:fd:de:4b:ed:02: de:98:f3:4c:08:9e:26:14:c1:23:2d:3c:4e:20:0d: d4:ac:f5:6e:26:5c:18:87:28:d9:05:56:dd:56:01: 94:1c:4f:6d:a5:68:5a:84:50:8e:b6:ee:f3:f4:f9: 5d:0a:ef:ac:26:22:47:f6:54:f8:22:48:97:14:40: f1:48:f3:6c:51:04:50:b1:81:1c:31:5b:dd:54:ca: a9:d9:1b:68:42:ef:88:32:62:f5:54:ca:60:21:bc: 1a:bb:f0:a9:6c:fc:08:8d:b0:0a:e5:fd:7f:03:cd: 70:c6:b6:d7:ef:c5:5e:de:47:43:bd:01:c8:ee:f0: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:19:0F:44:92:29:5E:B5:CA:53:18:92:B3:78:7B:0A:F9:D9:69:BD X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a1532cad-101c-42fe-83e3-e4a74867afd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.224.0/19 Signature Algorithm: sha256WithRSAEncryption 10:5b:ae:e7:83:fe:83:11:bb:cc:ce:e4:34:f7:f4:69:4c:fa: e1:4e:8c:6d:38:1e:e4:9d:23:31:d9:cf:35:85:f2:3e:22:56: 76:98:8a:7d:e0:34:5b:f6:b4:8d:93:7b:fd:fa:dd:31:b9:be: 23:95:55:b2:05:08:fa:dd:d3:3a:ec:db:4d:e8:2e:47:c4:3c: 48:44:7d:03:83:7f:f0:29:b5:a4:52:b8:70:ed:0b:e7:de:b4: 59:ec:27:e0:30:45:d3:ff:af:78:ee:fb:84:31:cf:ba:e9:b5: f2:3f:fb:53:b2:a1:9f:ee:1d:05:55:5e:33:08:f4:6f:78:e0: 1a:52:a9:32:99:9b:4c:64:61:12:17:bf:44:51:bb:23:bf:cb: 67:a4:6d:1f:85:08:c9:59:68:1a:17:17:cb:57:b4:3a:38:6a: ea:f9:f6:c7:32:d4:0e:38:63:ab:32:da:70:67:12:41:3b:da: 5f:7f:f1:ad:3f:94:7e:48:93:40:b0:00:89:5c:51:6f:26:e0: 5e:c8:78:60:15:1a:3d:89:12:ee:8f:17:39:96:25:c7:27:9b: 3b:d2:12:40:79:db:fc:a5:b4:54:21:ee:80:81:01:ce:62:14: a9:59:86:02:d1:b9:10:5c:c2:7c:26:c2:a0:4f:4e:30:c4:d6: 20:f2:c1:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPGhIT/tQuuBOerSBvqJrtqxRHRgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIyMDAxMDExWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTE4YWYxNmMyNDI1NGZlMmY4ZThmYjUzY2YyOGY2YzIz OTg0ZjRjNzE1NDczMDFmYjY0MjdjMzA1MjIyNGZkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Y+5Di8XgJ6Ysi50ULm2XnoHUmWxGEffYO+dhU4MFBN5/ A55mS98J5kspTwF65Y6lWttVpGgyRU062iAhNueAv5LNxHtqEdNSkixdXHsKfVRY 6zZGRCg9i+o04+AL+6YBFyNOVQX8RRgt1cgkXmo8EsMuvumeMTr0KzJOCF4rPjj9 3kvtAt6Y80wIniYUwSMtPE4gDdSs9W4mXBiHKNkFVt1WAZQcT22laFqEUI627vP0 +V0K76wmIkf2VPgiSJcUQPFI82xRBFCxgRwxW91UyqnZG2hC74gyYvVUymAhvBq7 8Kls/AiNsArl/X8DzXDGttfvxV7eR0O9Acju8BsdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjxkPRJIpXrXKUxiSs3h7CvnZab0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ExNTMyY2FkLTEwMWMtNDJmZS04M2UzLWU0YTc0ODY3YWZkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUX++AwDQYJKoZIhvcNAQELBQADggEBABBbrueD/oMRu8zO5DT39GlM+uFO jG04HuSdIzHZzzWF8j4iVnaYin3gNFv2tI2Te/363TG5viOVVbIFCPrd0zrs203o LkfEPEhEfQODf/AptaRSuHDtC+fetFnsJ+AwRdP/r3ju+4Qxz7rptfI/+1OyoZ/u HQVVXjMI9G944BpSqTKZm0xkYRIXv0RRuyO/y2ekbR+FCMlZaBoXF8tXtDo4aur5 9scy1A44Y6sy2nBnEkE72l9/8a0/lH5Ik0CwAIlcUW8m4F7IeGAVGj2JEu6PFzmW JccnmzvSEkB52/yltFQh7oCBAc5iFKlZhgLRuRBcwnwmwqBPTjDE1iDywTI= -----END CERTIFICATE-----Generated at Sun Nov 8 15:16:30 2026 by rpki-client