$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a1532cad-101c-42fe-83e3-e4a74867afd7.roa File: a1532cad-101c-42fe-83e3-e4a74867afd7.roa (raw, json) Hash identifier: WIOxpJbnzaejECPbwTZa89bhH7vRhtAxQ5eiP/H5Z7A= Subject key identifier: 25:76:00:68:89:39:C7:CA:AD:1A:2D:A1:50:C2:65:9E:16:00:F3:92 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 74AC9A54D6BC342F684084B6F4C10A667266CBB4 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a1532cad-101c-42fe-83e3-e4a74867afd7.roa Signing time: Mon 03 Aug 2026 00:10:09 +0000 ROA not before: Mon 03 Aug 2026 00:10:09 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ac:9a:54:d6:bc:34:2f:68:40:84:b6:f4:c1:0a:66:72:66:cb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 3 00:10:09 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=731dad6a5a90d855771a914b5146bb5293042a3fa1d00f2ed6f7881912a21076, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:b7:ef:67:76:d1:92:9a:7c:cf:e7:8d:95: 7f:00:a1:23:a8:27:32:a8:b0:0c:01:1e:f8:ad:06: d9:ec:85:79:f0:81:3b:14:17:d3:9f:ec:6e:e4:bc: e0:02:9f:16:fc:d7:7e:a9:b4:21:89:96:b0:fe:21: b1:00:ed:78:0c:9a:9d:74:31:b1:ea:74:a2:8d:e2: 3e:a6:0d:cd:2d:a3:36:c3:50:6a:46:5b:7b:8d:04: b5:f9:37:7e:c8:98:85:eb:ba:f2:02:d0:bb:b0:ed: c4:df:e4:bf:a3:e5:3a:a7:72:59:6e:37:0b:68:8d: 55:f7:87:69:1f:9c:01:9c:9c:a5:04:9b:e8:7d:cb: f8:4d:64:72:24:8e:6b:83:3f:af:d5:73:b4:60:f7: ac:fa:f3:0b:e3:1d:4a:68:f1:68:45:e2:ef:19:b1: 50:99:66:f7:19:6c:94:d8:59:ed:1f:d8:e3:fc:48: b1:3f:08:97:d2:14:f9:7a:ff:dd:e6:c2:fe:56:c7: b4:4d:7f:cf:14:f0:86:40:63:c5:25:1e:35:2f:cf: 0b:cd:ca:f7:37:78:9a:a9:a3:96:2a:76:6e:36:c3: 73:10:9f:30:54:93:1c:55:9f:2a:c7:97:55:52:ae: 89:ea:ff:0c:76:a5:f8:14:e8:05:f5:92:49:81:19: c3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:76:00:68:89:39:C7:CA:AD:1A:2D:A1:50:C2:65:9E:16:00:F3:92 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a1532cad-101c-42fe-83e3-e4a74867afd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.224.0/19 Signature Algorithm: sha256WithRSAEncryption 81:8e:e4:9e:46:9e:1a:96:53:0d:e7:92:27:bf:0e:b9:55:49: 43:0a:a3:82:21:20:42:ab:a3:03:f9:05:ab:63:43:cf:6f:9a: c6:7d:57:b7:11:4e:5f:61:65:c3:30:59:c4:a3:ba:f4:a2:da: ab:e2:92:4b:88:74:7a:f4:c9:4b:ab:34:e5:b4:57:ff:f0:d3: 57:42:69:fa:71:df:66:2b:59:a5:25:df:9d:02:cd:1f:43:99: 07:45:a5:91:23:85:6c:85:53:ed:8c:f1:5a:d1:11:37:12:83: 3e:ae:08:93:9c:37:4c:d3:4e:1d:f1:e4:de:d6:bc:84:08:b6: fd:23:cd:25:eb:d3:5f:d2:11:78:c3:3d:7b:f0:28:0c:41:2e: 81:0b:22:a7:0e:4d:4f:82:b6:62:23:46:85:03:41:81:a1:9b: 41:f4:7e:4c:3a:59:ce:46:b0:10:4d:09:80:f4:be:bd:99:bc: 4a:73:f2:19:18:32:25:1e:7d:d2:d5:e5:75:e7:c5:53:90:ff: 58:59:7b:7f:7e:74:ef:81:4f:66:c8:27:6c:d0:3b:08:78:ac: 3c:1b:80:1d:a1:cd:39:d4:75:7c:31:8f:6f:71:d9:d7:01:33: 22:79:00:23:92:34:c7:df:86:e8:aa:c7:6f:4c:de:32:33:6e: 12:c0:aa:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdKyaVNa8NC9oQIS29MEKZnJmy7QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwODAzMDAxMDA5WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzFkYWQ2YTVhOTBkODU1NzcxYTkxNGI1MTQ2YmI1Mjkz MDQyYTNmYTFkMDBmMmVkNmY3ODgxOTEyYTIxMDc2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc/bfvZ3bRkpp8z+eNlX8AoSOoJzKosAwBHvitBtnshXnw gTsUF9Of7G7kvOACnxb8136ptCGJlrD+IbEA7XgMmp10MbHqdKKN4j6mDc0tozbD UGpGW3uNBLX5N37ImIXruvIC0Luw7cTf5L+j5TqnclluNwtojVX3h2kfnAGcnKUE m+h9y/hNZHIkjmuDP6/Vc7Rg96z68wvjHUpo8WhF4u8ZsVCZZvcZbJTYWe0f2OP8 SLE/CJfSFPl6/93mwv5Wx7RNf88U8IZAY8UlHjUvzwvNyvc3eJqpo5Yqdm42w3MQ nzBUkxxVnyrHl1VSronq/wx2pfgU6AX1kkmBGcNHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJXYAaIk5x8qtGi2hUMJlnhYA85IwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ExNTMyY2FkLTEwMWMtNDJmZS04M2UzLWU0YTc0ODY3YWZkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUX++AwDQYJKoZIhvcNAQELBQADggEBAIGO5J5GnhqWUw3nkie/DrlVSUMK o4IhIEKrowP5BatjQ89vmsZ9V7cRTl9hZcMwWcSjuvSi2qvikkuIdHr0yUurNOW0 V//w01dCafpx32YrWaUl350CzR9DmQdFpZEjhWyFU+2M8VrRETcSgz6uCJOcN0zT Th3x5N7WvIQItv0jzSXr01/SEXjDPXvwKAxBLoELIqcOTU+CtmIjRoUDQYGhm0H0 fkw6Wc5GsBBNCYD0vr2ZvEpz8hkYMiUefdLV5XXnxVOQ/1hZe39+dO+BT2bIJ2zQ Owh4rDwbgB2hzTnUdXwxj29x2dcBMyJ5ACOSNMffhuiqx29M3jIzbhLAqs8= -----END CERTIFICATE-----Generated at Mon Sep 21 12:52:01 2026 by rpki-client