$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa File: c9752aac-8490-485f-92b7-6a6ba02b76d5.roa (raw, json) Hash identifier: mE1NCZnULMz9Q1jbG7L3l6AOsQJkcV9LVw8j9R9PapQ= Subject key identifier: 7F:8F:0C:D3:1A:F8:10:30:29:8E:19:61:EE:B1:55:84:55:2C:28:00 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 630204FB12DC8AA8A815551E435485C10826CAC7 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa Signing time: Fri 23 Oct 2026 00:02:52 +0000 ROA not before: Fri 23 Oct 2026 00:02:52 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 199.127.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:02:04:fb:12:dc:8a:a8:a8:15:55:1e:43:54:85:c1:08:26:ca:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 23 00:02:52 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=0b37da9bc4c5568b752f9159a67c48ea4acb3fb3bd987076230514633688155e, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:52:51:a5:5f:56:ed:d1:93:66:1b:97:92: db:13:61:0d:35:ff:b7:3d:b8:81:dd:05:32:49:71: 4f:e4:42:0b:1b:88:69:77:c2:e7:79:eb:48:5c:36: 79:6e:5e:69:ad:a5:b2:3a:07:2a:ef:bc:6f:75:11: b5:56:e0:ae:c7:b5:60:c3:ca:d7:ed:b0:0f:4f:e3: 07:c1:19:a0:32:1b:32:46:fc:ef:ff:e0:85:c9:83: c8:9d:9a:45:91:9b:35:aa:0c:0f:fa:38:2f:d9:7f: 47:50:fc:77:90:cc:d1:30:14:fb:5e:b2:2d:06:05: f3:33:54:91:be:c5:bb:b0:7d:4a:6a:8e:10:aa:8b: 45:7b:f7:a4:29:5f:b4:1e:89:17:de:fb:23:22:02: 3f:c2:32:d9:b4:8d:2e:e0:8d:de:ea:e7:76:77:6a: ae:c1:7c:33:62:ee:81:44:59:74:2e:9b:be:1e:30: f4:9b:72:3f:3a:94:a1:e5:f0:dd:de:97:72:3e:0a: a8:84:99:dc:b0:a7:d3:3e:7f:4b:78:5b:3a:79:81: 7a:4a:fa:45:e5:7c:31:84:d7:37:ed:c0:40:5d:12: 34:0a:81:26:9d:87:23:be:66:a8:c5:e9:ed:7f:38: 00:30:cb:01:f8:1f:50:c7:99:b8:02:fe:15:14:2e: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8F:0C:D3:1A:F8:10:30:29:8E:19:61:EE:B1:55:84:55:2C:28:00 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.127.232.0/22 Signature Algorithm: sha256WithRSAEncryption 83:7e:a7:77:df:cc:2d:fb:b7:f2:cb:be:99:db:8a:c2:25:a3: ef:05:c4:e4:07:ea:03:45:bd:cd:61:73:92:07:43:a3:97:dc: d5:f2:34:8d:6a:bd:88:6e:e6:ef:17:44:de:a3:92:79:c9:04: d3:ba:08:9f:25:54:55:66:3a:73:77:24:79:86:6a:9e:13:55: 2f:08:31:10:b6:d6:9d:5b:ad:37:51:cf:ab:5c:93:7b:36:9a: 30:08:a6:b4:dd:8f:5d:1b:03:42:a5:a6:3e:c6:08:22:23:58: 5d:74:e2:63:15:1a:8a:89:c3:32:7a:99:c3:c4:5b:78:41:60: 5e:f9:62:93:d4:82:54:73:ed:7f:78:b4:a8:48:6f:68:cd:b2: ac:7d:d0:eb:b6:05:b4:a9:5d:73:d7:a0:7f:8d:6a:37:1e:34: 44:ca:b6:01:28:86:fb:bc:8a:6e:b3:87:17:d1:9d:ee:ad:71: 61:4d:4d:b1:fb:27:cc:26:1c:29:aa:f8:bf:b5:3e:a2:57:eb: 23:31:53:ab:57:ae:69:d9:77:01:ac:00:4a:fa:55:40:25:7d: 23:50:7f:4c:c2:1b:0d:0f:a2:b0:6f:b5:87:24:40:6f:65:1a: d0:a3:de:ce:f1:85:74:f4:44:77:91:f6:74:11:df:38:07:25: d5:23:5d:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYwIE+xLciqioFVUeQ1SFwQgmyscwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIzMDAwMjUyWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjM3ZGE5YmM0YzU1NjhiNzUyZjkxNTlhNjdjNDhlYTRh Y2IzZmIzYmQ5ODcwNzYyMzA1MTQ2MzM2ODgxNTVlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2w1JRpV9W7dGTZhuXktsTYQ01/7c9uIHdBTJJcU/kQgsb iGl3wud560hcNnluXmmtpbI6ByrvvG91EbVW4K7HtWDDytftsA9P4wfBGaAyGzJG /O//4IXJg8idmkWRmzWqDA/6OC/Zf0dQ/HeQzNEwFPtesi0GBfMzVJG+xbuwfUpq jhCqi0V796QpX7QeiRfe+yMiAj/CMtm0jS7gjd7q53Z3aq7BfDNi7oFEWXQum74e MPSbcj86lKHl8N3el3I+CqiEmdywp9M+f0t4Wzp5gXpK+kXlfDGE1zftwEBdEjQK gSadhyO+ZqjF6e1/OAAwywH4H1DHmbgC/hUULhe3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf48M0xr4EDApjhlh7rFVhFUsKAAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2M5NzUyYWFjLTg0OTAtNDg1Zi05MmI3LTZhNmJhMDJiNzZkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALHf+gwDQYJKoZIhvcNAQELBQADggEBAIN+p3ffzC37t/LLvpnbisIlo+8F xOQH6gNFvc1hc5IHQ6OX3NXyNI1qvYhu5u8XRN6jknnJBNO6CJ8lVFVmOnN3JHmG ap4TVS8IMRC21p1brTdRz6tck3s2mjAIprTdj10bA0Klpj7GCCIjWF104mMVGoqJ wzJ6mcPEW3hBYF75YpPUglRz7X94tKhIb2jNsqx90Ou2BbSpXXPXoH+NajceNETK tgEohvu8im6zhxfRne6tcWFNTbH7J8wmHCmq+L+1PqJX6yMxU6tXrmnZdwGsAEr6 VUAlfSNQf0zCGw0PorBvtYckQG9lGtCj3s7xhXT0RHeR9nQR3zgHJdUjXSQ= -----END CERTIFICATE-----Generated at Sun Nov 8 15:40:43 2026 by rpki-client