$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa File: a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa (raw, json) Hash identifier: DZAhMcn/Q3btIMA4FNsrOxJibdUmQn+w83JTaapaY8w= Subject key identifier: E7:BB:11:06:E3:61:91:11:74:7F:1E:F3:4C:82:FA:A2:8F:CE:08:87 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 148E7D61D38537901F623828A36A6FC2C766BBF0 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa Signing time: Sat 24 Oct 2026 00:03:08 +0000 ROA not before: Sat 24 Oct 2026 00:03:08 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8e:7d:61:d3:85:37:90:1f:62:38:28:a3:6a:6f:c2:c7:66:bb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 24 00:03:08 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=c9c6a8cabe7168b667840b214f3a53f5d245b3c4ab935604407309b65a1c7557, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:63:2f:39:d7:3f:73:5c:57:4f:1b:51:f5: 07:7c:07:6e:90:44:41:1d:05:dd:7d:6e:44:4a:dc: d7:69:14:cd:79:a8:ae:bc:5a:7b:32:31:21:6c:c5: 26:0b:7e:49:83:8c:35:44:cc:e0:90:ee:96:0a:15: 4c:5b:c7:c2:17:0b:bb:73:58:ab:2c:7b:15:9a:2f: f1:16:19:42:04:18:51:f7:b1:a6:41:bd:e7:bf:0f: de:cd:3d:60:be:dc:29:14:41:fd:36:07:49:df:1a: 00:03:88:80:b7:57:dd:c8:a2:77:99:86:51:da:92: 82:33:46:c2:2d:22:01:18:18:9c:d5:7d:77:89:e3: 8e:0e:e4:b5:13:62:24:40:d1:3f:e1:75:19:78:06: e7:a9:41:55:a7:2b:60:64:84:ec:ea:7f:6d:24:28: 01:5e:6e:59:6a:7e:66:65:d4:b9:a3:59:53:c5:07: 9a:01:f6:e4:2b:1a:c8:f0:02:17:f1:19:b4:13:a4: 9f:3b:fa:51:c9:6a:2c:02:f9:46:5f:a3:d7:a9:fe: c5:e7:12:f9:5e:f5:72:6d:1d:38:44:27:6d:9e:86: 16:93:68:be:e0:fb:80:61:0d:72:91:93:e2:85:18: eb:bb:8d:35:d1:c9:26:3f:c8:ea:27:d6:de:f6:93: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BB:11:06:E3:61:91:11:74:7F:1E:F3:4C:82:FA:A2:8F:CE:08:87 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.163.0/24 Signature Algorithm: sha256WithRSAEncryption 75:45:ee:4d:24:b6:6e:b2:e2:1a:78:d3:e8:0c:5e:df:89:a6: 31:58:ff:a5:94:75:78:a5:f9:19:14:2d:60:b9:92:41:72:2d: ee:97:dd:a0:a3:8b:88:2d:a6:d3:0e:77:d3:15:c2:fc:fe:a1: 27:b7:51:9c:ad:3a:38:d4:cf:7d:ab:16:d0:96:b8:9a:54:e4: b9:41:0e:e6:52:0e:8e:40:ad:3c:54:57:bf:6c:22:cc:43:93: 84:ac:f3:94:98:da:ac:78:e5:77:b3:dc:a3:77:fc:0f:50:55: 40:81:47:3d:89:06:ee:28:8e:82:0d:ab:d4:80:1a:5e:6d:d2: a9:19:ac:af:b6:45:66:7d:d4:e7:54:1d:ee:a1:70:4e:19:18: 16:e9:9d:99:6e:fb:53:46:a7:4f:01:59:03:af:ba:13:10:32: e9:5e:72:91:6c:35:8e:be:db:a3:45:41:46:f2:dd:76:88:f0: 56:d1:99:9c:fb:bf:0c:05:ba:3d:50:dd:42:d9:12:cd:f6:0a: bc:b7:b6:c1:80:76:df:29:f0:84:44:04:f6:ed:4b:77:86:10: c1:b6:a9:9e:fb:06:5f:93:48:68:50:4d:35:60:b5:e7:cc:2e: 61:f6:24:06:8e:b0:fc:0c:67:dc:51:9a:57:9e:55:ab:8e:66: 7b:4f:34:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFI59YdOFN5AfYjgoo2pvwsdmu/AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDI0MDAwMzA4WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWM2YThjYWJlNzE2OGI2Njc4NDBiMjE0ZjNhNTNmNWQy NDViM2M0YWI5MzU2MDQ0MDczMDliNjVhMWM3NTU3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZt2MvOdc/c1xXTxtR9Qd8B26QREEdBd19bkRK3NdpFM15 qK68WnsyMSFsxSYLfkmDjDVEzOCQ7pYKFUxbx8IXC7tzWKssexWaL/EWGUIEGFH3 saZBvee/D97NPWC+3CkUQf02B0nfGgADiIC3V93IoneZhlHakoIzRsItIgEYGJzV fXeJ444O5LUTYiRA0T/hdRl4BuepQVWnK2BkhOzqf20kKAFebllqfmZl1LmjWVPF B5oB9uQrGsjwAhfxGbQTpJ87+lHJaiwC+UZfo9ep/sXnEvle9XJtHThEJ22ehhaT aL7g+4BhDXKRk+KFGOu7jTXRySY/yOon1t72kwOPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU57sRBuNhkRF0fx7zTIL6oo/OCIcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2E5MWYyNmYwLTVhMWQtNGQ2NS05N2NlLTk0YTI2ZDY2NDZiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3aMwDQYJKoZIhvcNAQELBQADggEBAHVF7k0ktm6y4hp40+gMXt+JpjFY /6WUdXil+RkULWC5kkFyLe6X3aCji4gtptMOd9MVwvz+oSe3UZytOjjUz32rFtCW uJpU5LlBDuZSDo5ArTxUV79sIsxDk4Ss85SY2qx45Xez3KN3/A9QVUCBRz2JBu4o joINq9SAGl5t0qkZrK+2RWZ91OdUHe6hcE4ZGBbpnZlu+1NGp08BWQOvuhMQMule cpFsNY6+26NFQUby3XaI8FbRmZz7vwwFuj1Q3ULZEs32Cry3tsGAdt8p8IREBPbt S3eGEMG2qZ77Bl+TSGhQTTVgtefMLmH2JAaOsPwMZ9xRmleeVauOZntPNOI= -----END CERTIFICATE-----Generated at Thu Nov 5 16:24:48 2026 by rpki-client