$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa File: be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa (raw, json) Hash identifier: VgteIDh1rVMf2uRNxDh/VCrmOLrEWy87UHsvPq7tlGo= Subject key identifier: A0:18:5B:FC:D5:4F:2F:1A:68:8E:92:1A:8C:E6:B7:61:FA:A7:11:B8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 48FF50E3FC40748E6777FDF43FBA4FD19C39E749 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa Signing time: Fri 15 May 2026 00:10:20 +0000 ROA not before: Fri 15 May 2026 00:10:20 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ff:50:e3:fc:40:74:8e:67:77:fd:f4:3f:ba:4f:d1:9c:39:e7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 15 00:10:20 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=9631d8116fa16ce60c7c9ca77f4ebed6e8be9176d9e97ac2b311ff97949590a7, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:13:b3:ed:68:16:89:2e:26:b8:28:3c:af: 9c:e2:1f:ec:39:80:0e:90:15:5f:2a:eb:e8:a2:b9: 55:c1:e5:7f:d6:7d:13:5b:d2:f0:53:31:4f:eb:cd: e8:e4:8d:7f:6d:3e:71:bb:6c:90:42:24:9d:6f:61: 2d:53:62:25:3f:03:50:54:da:d7:b0:ee:16:2a:a5: 28:7a:87:5f:6f:f9:6e:aa:b8:3f:75:77:a5:12:2e: e2:74:01:b4:c6:2b:d0:55:b6:de:f8:bf:e7:52:f3: d9:6d:9c:70:57:5a:70:dc:f1:24:ac:a8:f2:38:17: 0b:ba:60:72:2e:f1:f9:e0:f9:8e:84:b3:0a:05:d9: 4f:1d:da:fa:ce:73:b1:e3:22:be:b8:57:93:f1:94: cf:54:3d:91:c4:c0:03:89:63:1c:e4:84:c5:81:33: d4:94:37:b2:d2:26:b9:76:52:61:c6:ce:b4:db:00: 58:bb:22:d3:c1:b0:3c:3d:3f:ec:f7:ad:e6:4f:44: 25:61:71:74:84:8d:ab:3e:9a:98:ab:6c:46:07:f8: 56:a0:ad:c9:cb:18:e3:35:c3:67:99:b6:0e:68:d6: 25:f5:93:69:5c:f3:3d:c3:d7:fe:e4:0e:19:00:e5: a0:bf:70:53:e5:f1:03:03:e7:01:09:02:a9:1d:a1: 10:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:18:5B:FC:D5:4F:2F:1A:68:8E:92:1A:8C:E6:B7:61:FA:A7:11:B8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 65:f9:eb:2a:5f:bc:0b:19:97:39:c7:c7:99:65:38:c8:56:37: 6f:ab:07:f0:90:2b:d0:b7:4f:8a:e8:f9:ec:d7:b1:b2:5e:6a: a3:16:d6:a1:93:71:75:5a:91:31:7a:9c:3c:2c:d9:a1:d7:a8: 60:bc:ca:74:7d:11:85:c4:c8:cf:c6:3e:cd:8f:cd:f4:16:02: 4d:60:ef:bc:40:1d:b4:fa:c9:29:41:47:8e:3d:26:69:e3:82: f3:4e:82:8c:3b:f5:f0:72:4b:b5:37:59:a4:84:d4:0a:08:ab: 0f:c6:a8:2a:7d:ce:dc:95:f9:1c:13:3f:9d:4e:aa:86:67:55: 78:11:1b:99:8e:7f:0a:fb:aa:08:4b:c9:14:93:98:4e:94:29: b1:6d:67:a7:a3:d2:d1:d3:2b:dd:95:d2:fb:85:41:41:37:3c: a8:d5:23:68:50:07:52:8b:1f:68:31:50:15:89:39:01:73:a7: c1:64:97:46:85:ac:4f:fd:ec:66:b8:e2:a2:23:a3:60:0a:f5: 09:7b:50:7f:97:62:4d:67:77:de:d8:f4:f5:32:54:24:4b:d4: ef:49:e6:90:7b:39:f5:e5:45:d5:38:11:be:05:4c:6a:36:c6: bc:d5:0c:dc:aa:48:ff:25:27:20:0d:30:10:4a:6b:72:4b:21: c4:08:12:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSP9Q4/xAdI5nd/30P7pP0Zw550kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTE1MDAxMDIwWhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjMxZDgxMTZmYTE2Y2U2MGM3YzljYTc3ZjRlYmVkNmU4 YmU5MTc2ZDllOTdhYzJiMzExZmY5Nzk0OTU5MGE3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4axOz7WgWiS4muCg8r5ziH+w5gA6QFV8q6+iiuVXB5X/W fRNb0vBTMU/rzejkjX9tPnG7bJBCJJ1vYS1TYiU/A1BU2tew7hYqpSh6h19v+W6q uD91d6USLuJ0AbTGK9BVtt74v+dS89ltnHBXWnDc8SSsqPI4Fwu6YHIu8fng+Y6E swoF2U8d2vrOc7HjIr64V5PxlM9UPZHEwAOJYxzkhMWBM9SUN7LSJrl2UmHGzrTb AFi7ItPBsDw9P+z3reZPRCVhcXSEjas+mpirbEYH+FagrcnLGOM1w2eZtg5o1iX1 k2lc8z3D1/7kDhkA5aC/cFPl8QMD5wEJAqkdoRA7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoBhb/NVPLxpojpIajOa3YfqnEbgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JlNmQyN2JjLWE1NmQtNGRjZS1iMmMyLTVhNzU2ZWNhNDE1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBAGX56ypfvAsZlznHx5llOMhWN2+r B/CQK9C3T4ro+ezXsbJeaqMW1qGTcXVakTF6nDws2aHXqGC8ynR9EYXEyM/GPs2P zfQWAk1g77xAHbT6ySlBR449JmnjgvNOgow79fByS7U3WaSE1AoIqw/GqCp9ztyV +RwTP51OqoZnVXgRG5mOfwr7qghLyRSTmE6UKbFtZ6ej0tHTK92V0vuFQUE3PKjV I2hQB1KLH2gxUBWJOQFzp8Fkl0aFrE/97Ga44qIjo2AK9Ql7UH+XYk1nd97Y9PUy VCRL1O9J5pB7OfXlRdU4Eb4FTGo2xrzVDNyqSP8lJyANMBBKa3JLIcQIErg= -----END CERTIFICATE-----Generated at Wed Jun 17 08:36:15 2026 by rpki-client