$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa File: b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa (raw, json) Hash identifier: kFpyB4dIQreH/d/VHJDK33LPV4NqXr8BtHYQaXgtvvU= Subject key identifier: 25:9D:5E:4C:B9:F2:EC:D2:7C:04:5B:EB:C2:48:D4:F0:00:69:18:2F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6F5DA02CF4735B2B83F5AE6370D690290F57F450 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa Signing time: Fri 09 Oct 2026 00:20:11 +0000 ROA not before: Fri 09 Oct 2026 00:20:11 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 23.251.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5d:a0:2c:f4:73:5b:2b:83:f5:ae:63:70:d6:90:29:0f:57:f4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:20:11 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=c42ad11a03461859425bcb823bd00c2a9f69c33c0839f2bbc397a75b9ffc6350, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:59:b8:a2:7c:b5:3f:b2:70:b7:b5:7e:3e: 32:ec:ed:b6:f9:a8:04:8b:70:5a:dc:be:9f:35:dd: 90:60:c5:9a:45:5b:a4:9f:18:29:1d:88:6e:b7:38: b6:e8:dc:b8:5a:5d:42:03:78:44:7b:26:eb:6e:26: 69:6f:c7:db:a6:09:3d:36:46:6e:14:34:77:36:2d: 98:db:23:d8:3e:a9:cd:2d:a8:ae:38:80:8f:0b:d2: b6:ac:87:a2:82:42:0a:09:8e:5b:74:d6:6f:07:ff: 50:7f:62:97:e6:34:b9:79:39:8f:39:01:7d:6f:af: 91:85:9a:e8:36:03:a2:d5:ca:3f:8d:61:8c:10:27: a8:e8:2c:c1:06:25:21:90:d2:06:6c:a2:e6:ef:5a: ee:38:24:a4:c6:fd:52:73:71:ef:6e:40:3f:69:9f: 81:71:36:91:e4:25:1e:a9:7e:c5:08:1b:67:89:ea: c8:87:c6:b8:fa:79:a7:bb:b5:ea:90:08:e0:80:56: 42:b2:ea:6a:90:53:82:a1:cc:5d:43:3f:2d:7e:eb: 94:bf:e1:05:fb:9b:ba:47:da:ec:89:b3:ae:3e:fd: 5b:31:22:a8:ef:96:1f:ec:c5:75:d7:6e:f5:e3:34: 7c:2d:68:93:d4:1f:51:71:1f:9b:5c:41:b3:26:54: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9D:5E:4C:B9:F2:EC:D2:7C:04:5B:EB:C2:48:D4:F0:00:69:18:2F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.228.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:83:d3:bb:98:8f:4a:dd:72:ca:2b:a0:42:e9:3f:5a:7f:bb: a0:88:dc:cd:00:f6:c5:13:e0:46:e5:f1:ed:b8:ea:09:c2:97: e3:97:34:70:a6:b1:4d:b2:0b:f1:fd:c0:a4:c4:39:e0:a5:44: 32:90:f5:dd:ab:5f:b1:8d:12:7c:35:90:da:d8:07:5a:85:52: 90:82:13:67:6d:3e:4e:28:ad:20:97:f2:d6:d7:5e:8e:62:9a: 5a:62:7f:3c:12:35:82:46:8b:07:ee:89:2e:6f:5a:2b:03:8d: 85:26:ff:96:f9:14:3c:4c:c1:61:33:39:9c:fc:16:c9:aa:6b: 80:0b:22:bb:c9:14:76:ed:78:a3:6a:dc:28:b0:68:87:c0:f5: 81:6b:e9:93:32:06:d7:f6:0e:64:7e:b5:be:5e:c2:f9:a5:af: 83:d4:fe:90:6b:4d:a4:57:a1:83:d0:d7:ca:68:fa:4e:08:3d: 94:3a:93:02:58:bd:61:97:47:4b:84:d5:4e:fb:46:f6:71:d2: a2:30:12:63:f4:67:26:c6:dc:42:1b:8b:e1:06:10:43:08:24: df:1b:88:10:c6:20:8d:a0:5f:42:18:2d:71:38:52:d1:d0:7a: 27:5b:04:02:f8:45:3d:0b:ef:da:f1:f9:47:1d:25:4d:08:bc: 26:ac:3c:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb12gLPRzWyuD9a5jcNaQKQ9X9FAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAyMDExWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDJhZDExYTAzNDYxODU5NDI1YmNiODIzYmQwMGMyYTlm NjljMzNjMDgzOWYyYmJjMzk3YTc1YjlmZmM2MzUwMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuSVm4ony1P7Jwt7V+PjLs7bb5qASLcFrcvp813ZBgxZpF W6SfGCkdiG63OLbo3LhaXUIDeER7JutuJmlvx9umCT02Rm4UNHc2LZjbI9g+qc0t qK44gI8L0rash6KCQgoJjlt01m8H/1B/YpfmNLl5OY85AX1vr5GFmug2A6LVyj+N YYwQJ6joLMEGJSGQ0gZsoubvWu44JKTG/VJzce9uQD9pn4FxNpHkJR6pfsUIG2eJ 6siHxrj6eae7teqQCOCAVkKy6mqQU4KhzF1DPy1+65S/4QX7m7pH2uyJs64+/Vsx Iqjvlh/sxXXXbvXjNHwtaJPUH1FxH5tcQbMmVIYrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJZ1eTLny7NJ8BFvrwkjU8ABpGC8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I2ZWU5M2Q4LWQ3YTctNDFhZC04ZGUxLTkwYTA1NWJjMTk3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBABqD07uYj0rdcsoroELpP1p/u6CI 3M0A9sUT4Ebl8e246gnCl+OXNHCmsU2yC/H9wKTEOeClRDKQ9d2rX7GNEnw1kNrY B1qFUpCCE2dtPk4orSCX8tbXXo5imlpifzwSNYJGiwfuiS5vWisDjYUm/5b5FDxM wWEzOZz8Fsmqa4ALIrvJFHbteKNq3CiwaIfA9YFr6ZMyBtf2DmR+tb5ewvmlr4PU /pBrTaRXoYPQ18po+k4IPZQ6kwJYvWGXR0uE1U77RvZx0qIwEmP0ZybG3EIbi+EG EEMIJN8biBDGII2gX0IYLXE4UtHQeidbBAL4RT0L79rx+UcdJU0IvCasPJ0= -----END CERTIFICATE-----Generated at Sun Nov 8 15:15:22 2026 by rpki-client