$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa File: b63fd343-5e29-48fc-84c9-2d11751d74e8.roa (raw, json) Hash identifier: fI9W2n4ZVQfJ7u7hmOI7VU0VHyXBjsoSSa4cO52A9EA= Subject key identifier: 3A:4F:6B:E8:93:5D:E4:9D:82:8A:65:BA:31:1A:09:FF:60:48:79:C7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4A419C296DA29AE52A869B1D653540094E9A83F1 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa Signing time: Thu 22 Oct 2026 00:10:07 +0000 ROA not before: Thu 22 Oct 2026 00:10:07 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:41:9c:29:6d:a2:9a:e5:2a:86:9b:1d:65:35:40:09:4e:9a:83:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 22 00:10:07 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=6a5349a43ceaceb0404228db4154810cb6bcb4d7f916455893b1335a12083cf4, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:11:77:3f:7d:a1:e0:80:f7:00:b7:9b:6f: d8:6c:e6:a0:87:52:ba:40:b4:d4:a6:71:89:c7:11: 8a:79:88:c5:e5:44:c7:97:81:44:81:a1:73:f2:a7: 50:da:16:2a:f1:c5:08:3a:ce:32:7a:78:54:98:2e: 2e:c0:21:71:3d:7f:67:15:8f:5b:d0:b3:fe:c6:61: 55:fd:96:3a:05:95:65:8d:17:51:83:78:5c:e8:11: 43:39:37:d0:a8:86:4b:11:c2:ee:a8:2c:75:16:6e: 04:6a:05:8b:93:33:93:a0:3d:14:88:df:7c:3e:42: 72:3a:99:42:ab:3e:54:8d:0c:a4:16:06:b8:89:82: 26:2b:9c:93:35:17:b3:64:28:cd:d0:36:2c:95:b9: f3:b3:60:de:ab:99:82:86:5b:af:e3:80:26:19:86: 72:98:88:b1:41:12:56:e8:dc:f0:b6:84:fd:4a:74: 77:e7:c2:da:22:00:34:b2:07:3c:fb:69:93:37:74: 36:a0:c9:ea:f5:24:37:77:52:0f:47:58:8a:8c:d7: 47:22:4f:2b:25:36:79:3d:7d:89:6b:82:12:4b:80: 09:48:b0:f0:4e:37:a2:08:30:a0:72:de:02:97:b3: bb:fd:b7:1d:a2:f8:74:bd:f3:36:27:2e:7d:43:0c: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4F:6B:E8:93:5D:E4:9D:82:8A:65:BA:31:1A:09:FF:60:48:79:C7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.238.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:e2:7d:6e:4f:24:c7:2c:59:53:41:b1:f8:57:d3:85:ce:68: c2:f5:38:b8:cb:ff:49:28:55:37:b9:69:b7:34:d2:29:48:74: 9f:ec:3f:5b:ba:69:14:32:df:36:82:b3:df:06:59:c3:88:a6: 5e:b9:89:a4:7c:0f:bf:42:1a:32:15:73:42:5f:ba:fc:27:15: d5:ab:6f:d0:f5:3c:20:7e:4e:32:6a:8c:a5:ea:21:cc:67:35: 8b:4e:32:ad:aa:d5:3a:5d:41:bf:9e:a4:88:a5:cd:d9:5f:60: b3:a8:ba:6d:57:6a:54:2d:6f:aa:b6:e0:16:91:c6:a6:72:95: 4f:43:2c:d4:f0:88:36:64:83:5d:1f:62:21:f5:93:77:c9:31: 8a:5e:c3:92:f4:9b:a7:95:a4:38:4e:ba:23:c1:04:36:47:00: b3:79:f5:f9:0b:ef:21:88:60:ff:69:3e:15:9f:1e:9a:e2:37: 30:9d:ea:72:f7:13:49:0c:7a:bd:27:7d:e1:e2:ff:ba:ae:63: fa:b4:73:7f:73:75:99:74:47:f8:ba:b3:60:0d:5a:41:35:66: 88:7a:21:42:80:ae:64:15:d6:42:9a:37:cb:e2:21:5d:70:5f: 66:39:14:71:d0:e5:08:02:ea:2f:24:78:3e:0b:88:9d:11:46: 46:82:f0:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSkGcKW2imuUqhpsdZTVACU6ag/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIyMDAxMDA3WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTUzNDlhNDNjZWFjZWIwNDA0MjI4ZGI0MTU0ODEwY2I2 YmNiNGQ3ZjkxNjQ1NTg5M2IxMzM1YTEyMDgzY2Y0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWexF3P32h4ID3ALebb9hs5qCHUrpAtNSmcYnHEYp5iMXl RMeXgUSBoXPyp1DaFirxxQg6zjJ6eFSYLi7AIXE9f2cVj1vQs/7GYVX9ljoFlWWN F1GDeFzoEUM5N9CohksRwu6oLHUWbgRqBYuTM5OgPRSI33w+QnI6mUKrPlSNDKQW BriJgiYrnJM1F7NkKM3QNiyVufOzYN6rmYKGW6/jgCYZhnKYiLFBElbo3PC2hP1K dHfnwtoiADSyBzz7aZM3dDagyer1JDd3Ug9HWIqM10ciTyslNnk9fYlrghJLgAlI sPBON6IIMKBy3gKXs7v9tx2i+HS98zYnLn1DDHD3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOk9r6JNd5J2CimW6MRoJ/2BIeccwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I2M2ZkMzQzLTVlMjktNDhmYy04NGM5LTJkMTE3NTFkNzRlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqe4wDQYJKoZIhvcNAQELBQADggEBABvifW5PJMcsWVNBsfhX04XOaML1 OLjL/0koVTe5abc00ilIdJ/sP1u6aRQy3zaCs98GWcOIpl65iaR8D79CGjIVc0Jf uvwnFdWrb9D1PCB+TjJqjKXqIcxnNYtOMq2q1TpdQb+epIilzdlfYLOoum1XalQt b6q24BaRxqZylU9DLNTwiDZkg10fYiH1k3fJMYpew5L0m6eVpDhOuiPBBDZHALN5 9fkL7yGIYP9pPhWfHpriNzCd6nL3E0kMer0nfeHi/7quY/q0c39zdZl0R/i6s2AN WkE1Zoh6IUKArmQV1kKaN8viIV1wX2Y5FHHQ5QgC6i8keD4LiJ0RRkaC8Mg= -----END CERTIFICATE-----Generated at Mon Nov 9 17:12:40 2026 by rpki-client