$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa File: addfda24-421e-4b45-80e1-dd5a255777c5.roa (raw, json) Hash identifier: KsnblXMrR5I325CbJkzf4dC5AyBGlKkNj02RceGdyYo= Subject key identifier: 65:9A:CE:13:E2:B7:75:60:91:6B:49:64:4E:4A:6C:A6:A5:88:94:56 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 503F80658B306BDD861186E0E02151829D48FD28 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa Signing time: Wed 11 Feb 2026 00:20:12 +0000 ROA not before: Wed 11 Feb 2026 00:20:12 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3f:80:65:8b:30:6b:dd:86:11:86:e0:e0:21:51:82:9d:48:fd:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:20:12 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=913f945c8a9bb7b60895549b998073b1da41f0e34869fbf0f5e0d4ba7122fd0f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:2d:cb:04:26:26:fd:26:ae:94:e2:ec:b7: 5a:f2:40:d6:1f:38:ed:a8:7d:05:4d:e1:03:8c:e4: cf:21:18:28:22:62:70:56:82:ce:db:fc:b0:7c:22: a6:d1:22:85:cd:8f:15:ea:6f:e3:f2:d5:03:6d:0f: 4b:60:3c:fb:c7:6d:b5:ed:44:34:25:50:37:e9:82: 68:a4:89:c3:77:46:38:44:38:44:64:df:e1:ce:25: f6:ee:e5:83:ec:9b:f8:66:7e:4b:40:c2:ca:44:29: 35:ff:83:b0:bf:d8:b0:8d:93:1b:23:52:bb:95:fd: 5f:a1:36:19:6e:21:64:8d:99:2d:be:3b:46:a9:a6: 0f:14:a2:83:e5:17:34:a9:dc:c5:d1:57:77:45:c9: 97:23:64:ab:99:7a:31:ec:cf:f3:b1:97:46:22:de: 8a:07:44:93:76:65:ec:4f:7b:2e:d1:65:15:38:2e: 2e:4e:33:cc:03:f8:79:2d:cd:e3:2d:63:9c:9a:60: ad:48:78:2d:c6:fd:58:e1:06:c4:50:8d:83:9a:4b: 72:25:d2:dc:4b:3f:2f:56:7e:b6:cc:4f:70:20:49: 12:0f:c6:f5:19:e2:cc:ff:c9:81:35:d9:7d:02:94: 48:5a:2c:e1:08:0c:c5:01:67:81:4a:17:6d:23:3b: 08:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9A:CE:13:E2:B7:75:60:91:6B:49:64:4E:4A:6C:A6:A5:88:94:56 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.228.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:ec:a6:f8:f1:74:19:3a:1c:be:31:04:f3:d3:3e:71:a2:61: 26:35:b2:60:7e:55:0b:38:94:eb:2e:57:92:bd:ec:59:6b:1f: 03:dc:fd:3d:8b:61:ba:de:25:b6:ec:fe:8b:7c:6f:00:b7:9e: 4a:ad:f4:f5:1d:81:d5:a1:8b:e2:1d:6c:33:ad:f3:1f:90:fe: b1:97:0e:12:f7:64:86:cc:9f:69:3a:57:b8:97:be:aa:44:49: f9:78:35:b5:e0:15:68:4a:b1:f7:09:95:e1:d5:bb:69:bf:76: 40:50:dc:bb:ab:64:2c:f4:ef:07:32:16:c1:c6:be:b7:0d:3f: b4:26:0d:f3:29:11:6e:37:46:71:49:71:d8:de:5c:d1:44:1b: b9:00:4d:5a:59:f0:ff:dd:35:51:6d:b6:b1:40:11:70:ca:09: 41:02:1f:a6:e6:46:1f:e2:1c:47:75:e2:52:bc:ec:08:25:24: 92:5f:80:1b:da:c4:20:ad:ca:62:d1:21:71:4a:78:2f:68:cb: 89:a7:a5:ec:1b:2a:97:20:46:aa:a3:27:20:b4:66:f0:26:8b: e6:39:26:45:35:31:cf:4a:11:f6:62:8d:16:c2:f4:69:3e:1f: 94:dd:6c:38:bf:f4:0f:dc:46:31:68:85:20:76:97:38:02:64: 56:48:c9:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUD+AZYswa92GEYbg4CFRgp1I/SgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAyMDEyWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTNmOTQ1YzhhOWJiN2I2MDg5NTU0OWI5OTgwNzNiMWRh NDFmMGUzNDg2OWZiZjBmNWUwZDRiYTcxMjJmZDBmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCCi3LBCYm/SaulOLst1ryQNYfOO2ofQVN4QOM5M8hGCgi YnBWgs7b/LB8IqbRIoXNjxXqb+Py1QNtD0tgPPvHbbXtRDQlUDfpgmikicN3RjhE OERk3+HOJfbu5YPsm/hmfktAwspEKTX/g7C/2LCNkxsjUruV/V+hNhluIWSNmS2+ O0appg8UooPlFzSp3MXRV3dFyZcjZKuZejHsz/Oxl0Yi3ooHRJN2ZexPey7RZRU4 Li5OM8wD+HktzeMtY5yaYK1IeC3G/VjhBsRQjYOaS3Il0txLPy9WfrbMT3AgSRIP xvUZ4sz/yYE12X0ClEhaLOEIDMUBZ4FKF20jOwj7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZZrOE+K3dWCRa0lkTkpspqWIlFYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2FkZGZkYTI0LTQyMWUtNGI0NS04MGUxLWRkNWEyNTU3NzdjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBABrspvjxdBk6HL4xBPPTPnGiYSY1 smB+VQs4lOsuV5K97FlrHwPc/T2LYbreJbbs/ot8bwC3nkqt9PUdgdWhi+IdbDOt 8x+Q/rGXDhL3ZIbMn2k6V7iXvqpESfl4NbXgFWhKsfcJleHVu2m/dkBQ3LurZCz0 7wcyFsHGvrcNP7QmDfMpEW43RnFJcdjeXNFEG7kATVpZ8P/dNVFttrFAEXDKCUEC H6bmRh/iHEd14lK87AglJJJfgBvaxCCtymLRIXFKeC9oy4mnpewbKpcgRqqjJyC0 ZvAmi+Y5JkU1Mc9KEfZijRbC9Gk+H5TdbDi/9A/cRjFohSB2lzgCZFZIyRo= -----END CERTIFICATE-----Generated at Mon Mar 2 13:47:46 2026 by rpki-client