$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa File: cb088b4a-420f-4b13-84d1-b160e021b919.roa (raw, json) Hash identifier: XLCYs68PJ/ne3rZ1+Z8v5hTwaICenAt9Uj0cvIxkIZg= Subject key identifier: FA:16:F7:99:3D:ED:4F:D4:18:59:2F:1C:97:F2:51:4F:D5:BB:25:18 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5314BFDEE9535E570A3AECC16C1A6D9B702F5E76 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa Signing time: Fri 09 Oct 2026 00:20:06 +0000 ROA not before: Fri 09 Oct 2026 00:20:06 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:14:bf:de:e9:53:5e:57:0a:3a:ec:c1:6c:1a:6d:9b:70:2f:5e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:20:06 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=b37ef6a4946cee1a2692126c8d4d6b532fc6b27eb245ab3b5977b91e2aa2ab63, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:d3:df:34:5c:84:0e:da:4a:03:d3:18:01: 9d:83:d0:7a:36:de:7a:f8:1b:e5:3a:7b:b0:db:4d: b9:43:3b:06:a1:77:a9:bd:40:6c:a1:23:7a:1e:31: 6b:fc:7a:d7:3c:16:55:b2:d2:ca:a4:f2:3a:25:df: ec:56:5d:0d:9e:88:99:2a:63:5d:46:2f:9c:57:5e: c1:2f:cf:10:4e:9c:7c:f5:14:c8:37:68:f9:6f:d7: d8:d8:5f:0a:07:7b:c2:93:a2:54:a3:56:58:7a:64: cf:b2:f1:54:31:cf:17:a5:59:d4:c3:72:9f:a2:86: 91:63:f7:61:9a:fb:d4:46:a8:13:f3:45:74:83:af: d2:dd:97:4c:e3:4b:b8:a7:31:ce:d9:62:0a:b0:5a: 15:74:ab:04:22:e0:e1:f0:23:18:51:c4:96:d9:08: 81:21:12:f7:6f:23:af:a4:86:b1:2f:66:35:42:ed: 68:c0:6a:16:47:a2:bb:1f:91:79:9f:6b:15:fb:d4: 7e:b4:b5:4d:9d:d2:1b:72:5e:41:98:18:2e:73:cb: 2f:9e:b1:e6:73:bb:e5:37:3a:92:04:cb:fd:96:c7: 4e:26:b6:ea:b9:10:ab:43:04:ae:cc:6c:21:0c:2a: 68:39:3f:b2:18:9e:5a:6c:73:a2:d1:c3:5a:69:25: 31:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:16:F7:99:3D:ED:4F:D4:18:59:2F:1C:97:F2:51:4F:D5:BB:25:18 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cb088b4a-420f-4b13-84d1-b160e021b919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.227.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:ed:02:98:b6:a5:8b:31:f8:3f:67:62:c8:df:73:2b:ad:d6: dc:51:12:a3:44:1e:9b:d7:d7:66:3f:46:cc:8a:b3:62:28:5a: d4:10:c9:b8:a8:0e:59:d2:48:82:ad:1d:92:f9:84:42:6d:e1: 5a:92:ad:23:06:f3:54:2a:56:5a:d4:21:ed:ea:d8:f3:47:07: 3b:8e:d7:1e:c5:1f:c4:b4:70:77:0f:67:67:88:7b:88:fd:ae: 10:94:75:52:7b:74:a7:b1:6e:42:4c:2a:68:b0:58:96:a8:c7: 53:a4:99:16:80:68:bc:b5:3d:39:9f:dc:ef:80:a8:dd:35:52: 63:ac:6e:82:f6:ab:4d:64:a9:54:33:d1:56:11:4c:14:13:22: e0:27:59:a1:74:6b:25:ce:1b:6f:40:35:5b:26:94:71:e1:da: b6:12:f5:24:aa:17:d6:55:9f:a5:f6:34:a7:19:db:a5:6a:11: 8d:4b:32:cd:55:c8:4f:95:34:48:c4:f9:f5:a4:25:40:c5:7a: d0:21:89:26:18:d3:cc:98:de:45:57:34:80:90:1a:2c:cc:6c: 03:bd:15:d2:03:70:c0:40:d5:13:c1:f8:9f:cf:b9:72:79:59: 26:d7:72:82:69:6c:ec:50:75:54:35:84:47:e0:7f:db:65:62: 8b:57:e6:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUxS/3ulTXlcKOuzBbBptm3AvXnYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAyMDA2WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzdlZjZhNDk0NmNlZTFhMjY5MjEyNmM4ZDRkNmI1MzJm YzZiMjdlYjI0NWFiM2I1OTc3YjkxZTJhYTJhYjYzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs6dPfNFyEDtpKA9MYAZ2D0Ho23nr4G+U6e7DbTblDOwah d6m9QGyhI3oeMWv8etc8FlWy0sqk8jol3+xWXQ2eiJkqY11GL5xXXsEvzxBOnHz1 FMg3aPlv19jYXwoHe8KTolSjVlh6ZM+y8VQxzxelWdTDcp+ihpFj92Ga+9RGqBPz RXSDr9Ldl0zjS7inMc7ZYgqwWhV0qwQi4OHwIxhRxJbZCIEhEvdvI6+khrEvZjVC 7WjAahZHorsfkXmfaxX71H60tU2d0htyXkGYGC5zyy+eseZzu+U3OpIEy/2Wx04m tuq5EKtDBK7MbCEMKmg5P7IYnlpsc6LRw1ppJTHzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+hb3mT3tT9QYWS8cl/JRT9W7JRgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NiMDg4YjRhLTQyMGYtNGIxMy04NGQxLWIxNjBlMDIxYjkxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqeMwDQYJKoZIhvcNAQELBQADggEBAArtApi2pYsx+D9nYsjfcyut1txR EqNEHpvX12Y/RsyKs2IoWtQQybioDlnSSIKtHZL5hEJt4VqSrSMG81QqVlrUIe3q 2PNHBzuO1x7FH8S0cHcPZ2eIe4j9rhCUdVJ7dKexbkJMKmiwWJaox1OkmRaAaLy1 PTmf3O+AqN01UmOsboL2q01kqVQz0VYRTBQTIuAnWaF0ayXOG29ANVsmlHHh2rYS 9SSqF9ZVn6X2NKcZ26VqEY1LMs1VyE+VNEjE+fWkJUDFetAhiSYY08yY3kVXNICQ GizMbAO9FdIDcMBA1RPB+J/PuXJ5WSbXcoJpbOxQdVQ1hEfgf9tlYotX5rs= -----END CERTIFICATE-----Generated at Sun Nov 8 15:47:07 2026 by rpki-client