$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b09c0df5-29e8-430d-b994-fadbc1050235.roa File: b09c0df5-29e8-430d-b994-fadbc1050235.roa (raw, json) Hash identifier: /RTa6Pc3Ru5a3i42Z0OExx+fXu0LE1DSz0tiBqQg63U= Subject key identifier: B5:D1:23:E1:50:43:22:69:A7:B0:F4:C9:DF:8D:FF:CE:43:03:1F:24 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1FBC8B55301A73FCF4899F21D6B99847C77CF4E9 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b09c0df5-29e8-430d-b994-fadbc1050235.roa Signing time: Wed 11 Feb 2026 00:30:52 +0000 ROA not before: Wed 11 Feb 2026 00:30:52 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bc:8b:55:30:1a:73:fc:f4:89:9f:21:d6:b9:98:47:c7:7c:f4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:30:52 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=e3ceecc397713ea182a431513b6fdcc92f536b04fe4f9b58ba1c2a48ef1dd21d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:73:74:f0:07:5f:13:d8:ef:f4:e5:42:c9: fa:9b:76:c5:cf:e6:0e:2f:95:18:bc:3a:ba:ef:a0: d6:47:4a:64:c5:a4:7f:04:0a:77:4f:82:e1:56:63: d2:db:f1:4b:e7:31:75:8c:3f:2a:16:66:1d:ee:71: 0d:d3:a5:5f:88:bc:b1:92:aa:77:f5:5f:4f:b1:14: 06:38:89:7c:23:ee:7b:0a:57:6e:a8:69:ff:01:dc: f9:04:9b:56:18:5f:8f:8e:b2:f7:cf:f5:1a:be:33: 6c:f3:5d:6d:88:ad:b0:e6:16:04:7b:3e:8b:ea:14: 07:6d:85:07:44:90:fd:87:c8:ee:23:a4:5a:40:56: 30:92:b3:25:1d:34:59:44:70:af:73:ed:cd:18:9b: 30:3c:87:0c:24:86:e3:ea:4e:ed:8a:f6:42:b2:b1: bd:3c:a9:f9:a0:ea:28:27:50:23:62:d1:fd:ce:0f: 72:c4:fc:d9:a4:60:46:dc:44:eb:97:bb:1f:6f:27: 86:32:b5:66:00:d6:4d:84:0f:30:87:82:1a:3e:f0: 6b:d7:33:77:bb:41:b6:f5:38:54:49:a8:3f:4f:bf: 21:8f:58:70:99:a9:86:a5:85:44:25:4d:43:ca:2a: 2f:8e:e4:69:2e:ba:c3:9c:bd:49:ad:2f:5a:8c:73: be:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D1:23:E1:50:43:22:69:A7:B0:F4:C9:DF:8D:FF:CE:43:03:1F:24 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b09c0df5-29e8-430d-b994-fadbc1050235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.214.0/24 Signature Algorithm: sha256WithRSAEncryption 51:93:0f:d6:ac:64:36:e5:2f:57:29:5c:f9:91:57:82:63:4d: e7:94:55:2d:53:66:4e:6a:37:73:0c:8f:02:85:64:b2:09:9b: ab:20:99:29:6d:55:07:40:8d:2f:88:a1:80:63:d8:c9:9b:47: 72:b2:ff:00:de:e1:7e:05:63:b4:b3:1e:d3:f5:69:88:af:6a: 73:ac:18:87:f2:b3:9a:2c:df:ec:80:f7:fe:77:9b:47:49:0f: 1f:cc:74:76:33:99:96:be:9e:8b:b6:be:02:7b:37:24:3e:41: a8:6c:22:69:f5:1d:01:1c:4e:76:3c:76:c4:e1:b3:fc:1e:cb: 55:01:5a:4e:22:9a:2b:fc:70:09:8e:72:2c:07:46:ee:e4:31: e9:0a:9b:2f:93:d7:b3:67:99:8b:59:17:bc:68:4a:f6:75:10: c3:80:98:da:f9:81:43:4a:1e:35:c3:95:9d:20:8f:f5:73:d3: bd:46:d4:61:22:9a:e2:ae:45:97:a8:aa:3c:1c:c6:5c:7a:84: 36:0c:ef:ce:ce:92:7c:7a:8b:61:77:d6:b1:64:6d:f1:24:b5: 62:68:6a:05:d8:1a:12:95:c9:0e:e0:aa:15:e5:d0:6c:68:73: a3:b1:0e:c2:02:1a:ec:58:11:d8:59:bc:c7:22:4f:c9:14:58: 1f:1a:28:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH7yLVTAac/z0iZ8h1rmYR8d89OkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAzMDUyWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2NlZWNjMzk3NzEzZWExODJhNDMxNTEzYjZmZGNjOTJm NTM2YjA0ZmU0ZjliNThiYTFjMmE0OGVmMWRkMjFkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCycXN08AdfE9jv9OVCyfqbdsXP5g4vlRi8OrrvoNZHSmTF pH8ECndPguFWY9Lb8UvnMXWMPyoWZh3ucQ3TpV+IvLGSqnf1X0+xFAY4iXwj7nsK V26oaf8B3PkEm1YYX4+OsvfP9Rq+M2zzXW2IrbDmFgR7PovqFAdthQdEkP2HyO4j pFpAVjCSsyUdNFlEcK9z7c0YmzA8hwwkhuPqTu2K9kKysb08qfmg6ignUCNi0f3O D3LE/NmkYEbcROuXux9vJ4YytWYA1k2EDzCHgho+8GvXM3e7Qbb1OFRJqD9PvyGP WHCZqYalhUQlTUPKKi+O5GkuusOcvUmtL1qMc77bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtdEj4VBDImmnsPTJ343/zkMDHyQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2IwOWMwZGY1LTI5ZTgtNDMwZC1iOTk0LWZhZGJjMTA1MDIzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dYwDQYJKoZIhvcNAQELBQADggEBAFGTD9asZDblL1cpXPmRV4JjTeeU VS1TZk5qN3MMjwKFZLIJm6sgmSltVQdAjS+IoYBj2MmbR3Ky/wDe4X4FY7SzHtP1 aYivanOsGIfys5os3+yA9/53m0dJDx/MdHYzmZa+nou2vgJ7NyQ+QahsImn1HQEc TnY8dsThs/wey1UBWk4imiv8cAmOciwHRu7kMekKmy+T17NnmYtZF7xoSvZ1EMOA mNr5gUNKHjXDlZ0gj/Vz071G1GEimuKuRZeoqjwcxlx6hDYM787Oknx6i2F31rFk bfEktWJoagXYGhKVyQ7gqhXl0Gxoc6OxDsICGuxYEdhZvMciT8kUWB8aKCs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:11:22 2026 by rpki-client