$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa File: addfda24-421e-4b45-80e1-dd5a255777c5.roa (raw, json) Hash identifier: DOa7mbdc8jQFeP59L6B7Rx+Zf86m/fGSbByves+yuA8= Subject key identifier: 31:90:C3:AC:49:79:5F:30:E5:A9:B4:EE:1E:36:59:DF:D3:4E:51:2A Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 754A9A170E7045EC9B454721495C59346B1AD013 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa Signing time: Fri 09 Oct 2026 00:20:11 +0000 ROA not before: Fri 09 Oct 2026 00:20:11 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4a:9a:17:0e:70:45:ec:9b:45:47:21:49:5c:59:34:6b:1a:d0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:20:11 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=1e9313865f73d3f770a0ac6f7cfae1d3aeb8870c634494bc416abe1dd4d4d10b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:0c:76:90:40:91:fd:d3:dd:a7:78:17:60: 9f:07:f9:f6:56:69:8c:8d:1c:4f:c6:c5:4a:5f:27: 53:74:96:45:0d:51:12:2f:20:9c:d8:1b:1e:3a:7e: 0c:4c:21:00:29:7a:51:45:8e:6a:85:1a:ef:4c:34: 3b:d1:f9:fe:77:d2:12:ca:77:56:a0:bc:9b:1a:86: 75:c0:76:21:6a:3e:15:8e:2c:9d:ac:93:3f:75:d7: 32:99:61:92:e8:27:8d:b3:7b:6c:08:d9:ee:92:e9: 97:2a:9b:8b:9b:85:6b:9d:3e:00:14:bb:da:7d:39: bb:f5:c0:90:7d:28:bb:9b:83:b4:6c:31:63:a9:a2: 8f:cc:b2:b0:26:8b:23:75:42:cd:55:f7:1e:ab:b3: 02:18:98:e5:a5:ec:19:27:8a:a1:ef:7d:b9:93:f3: c8:9e:b0:e3:39:13:b1:83:e1:9f:88:0a:cc:b9:b4: a0:8c:96:de:14:cb:b1:2e:b9:97:cc:aa:89:8b:4b: c1:c3:d4:6f:e9:52:ed:30:5c:b3:d9:75:09:07:61: 0d:49:cc:bf:e4:08:93:1a:7d:07:83:d8:97:07:b5: 34:3a:b0:c5:d6:91:d0:13:6b:2e:7e:78:a1:50:eb: 47:db:b9:fb:f8:fc:ee:3d:60:3a:e0:68:38:54:50: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:90:C3:AC:49:79:5F:30:E5:A9:B4:EE:1E:36:59:DF:D3:4E:51:2A X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.228.0/22 Signature Algorithm: sha256WithRSAEncryption 13:e8:c6:34:8e:94:6f:13:96:a3:78:e0:ba:34:c9:d0:92:05: 19:45:28:6c:6c:60:bf:38:31:b6:64:94:1c:9b:53:c3:ee:23: a2:b5:b6:b2:81:c6:61:2d:93:47:3a:94:16:de:83:e7:b9:c6: f8:1c:3a:d2:7c:b6:e0:a3:c5:2f:8e:fb:3c:2a:9a:11:0f:56: e7:5e:59:1b:f5:7a:e0:be:d5:ac:40:8a:d4:b5:13:30:49:72: ba:e0:be:f4:af:fc:db:79:a5:20:89:76:24:48:95:ca:90:a3: f7:4d:f7:1d:68:47:c7:37:2e:40:22:bf:35:7d:92:73:2a:15: f9:ae:e0:2f:e5:d5:02:2f:49:be:db:82:8a:26:0e:0f:19:7f: 21:a4:57:a2:5b:b3:d2:48:7e:17:06:ac:c7:b5:f7:7d:4e:7b: 2c:f7:e0:86:e5:bc:dc:0b:ae:73:bd:c3:21:35:44:5e:c0:eb: 2e:02:3f:27:d6:08:36:28:4a:4c:4f:fd:d7:aa:47:51:97:d4: 83:42:f3:1f:23:3c:9f:3b:33:23:41:76:2b:a6:b7:0f:bb:b4: 44:32:19:26:73:a9:68:7d:b1:20:13:25:f0:1c:83:fa:6d:a1: 8b:c2:fb:65:dd:d6:92:e8:4a:fc:4d:80:cb:7c:b0:ea:55:08: c8:80:af:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdUqaFw5wReybRUchSVxZNGsa0BMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAyMDExWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTkzMTM4NjVmNzNkM2Y3NzBhMGFjNmY3Y2ZhZTFkM2Fl Yjg4NzBjNjM0NDk0YmM0MTZhYmUxZGQ0ZDRkMTBiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCszAx2kECR/dPdp3gXYJ8H+fZWaYyNHE/GxUpfJ1N0lkUN URIvIJzYGx46fgxMIQApelFFjmqFGu9MNDvR+f530hLKd1agvJsahnXAdiFqPhWO LJ2skz911zKZYZLoJ42ze2wI2e6S6Zcqm4ubhWudPgAUu9p9Obv1wJB9KLubg7Rs MWOpoo/MsrAmiyN1Qs1V9x6rswIYmOWl7BkniqHvfbmT88iesOM5E7GD4Z+ICsy5 tKCMlt4Uy7EuuZfMqomLS8HD1G/pUu0wXLPZdQkHYQ1JzL/kCJMafQeD2JcHtTQ6 sMXWkdATay5+eKFQ60fbufv4/O49YDrgaDhUUJoZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMZDDrEl5XzDlqbTuHjZZ39NOUSowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2FkZGZkYTI0LTQyMWUtNGI0NS04MGUxLWRkNWEyNTU3NzdjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBABPoxjSOlG8TlqN44Lo0ydCSBRlF KGxsYL84MbZklBybU8PuI6K1trKBxmEtk0c6lBbeg+e5xvgcOtJ8tuCjxS+O+zwq mhEPVudeWRv1euC+1axAitS1EzBJcrrgvvSv/Nt5pSCJdiRIlcqQo/dN9x1oR8c3 LkAivzV9knMqFfmu4C/l1QIvSb7bgoomDg8ZfyGkV6Jbs9JIfhcGrMe1931Oeyz3 4IblvNwLrnO9wyE1RF7A6y4CPyfWCDYoSkxP/deqR1GX1INC8x8jPJ87MyNBdium tw+7tEQyGSZzqWh9sSATJfAcg/ptoYvC+2Xd1pLoSvxNgMt8sOpVCMiAr3I= -----END CERTIFICATE-----Generated at Sun Nov 8 14:57:57 2026 by rpki-client