$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cff2aad7-f173-47b6-ad48-6f279ff321d1.roa File: cff2aad7-f173-47b6-ad48-6f279ff321d1.roa (raw, json) Hash identifier: 1mxlYDOeSQo3F4QbwMf6HElIxDHpO+v1L5jsqQ4G72o= Subject key identifier: 04:F4:0A:6A:BD:FE:AD:25:7B:24:AD:3C:15:96:F0:3C:36:ED:20:13 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 428D12B2FB223896E3425BAFBEE76916B5D8D892 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cff2aad7-f173-47b6-ad48-6f279ff321d1.roa Signing time: Fri 09 Oct 2026 00:20:09 +0000 ROA not before: Fri 09 Oct 2026 00:20:09 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8d:12:b2:fb:22:38:96:e3:42:5b:af:be:e7:69:16:b5:d8:d8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:20:09 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=2d884092c49c23c1101b535f338b7cf3052a973ce73ad050941b4724fe6492ce, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:87:fc:cb:87:e5:16:e9:1a:22:69:58:98: cc:19:d3:4b:22:14:48:2d:cb:a4:f7:0e:98:9b:66: 6d:e7:78:46:2b:a3:9b:ec:f1:dc:37:76:59:d9:92: 36:85:3c:1e:5b:ef:e3:08:23:a3:0f:80:8d:fe:e7: 5e:68:7a:92:30:f2:07:ac:96:30:0c:0f:ff:29:32: 22:5f:fe:95:d3:ec:15:0c:88:b0:c8:ce:25:b9:8c: aa:0c:2f:2c:f7:3a:1f:ff:9d:fb:8a:3f:a9:03:b2: 8c:03:cb:78:6a:32:1f:82:22:a0:5c:73:29:3f:ad: f5:cc:80:d3:09:ca:ff:88:f0:3d:1e:75:7b:96:08: 04:79:f3:c2:e9:de:c3:56:a6:28:6e:e3:5c:bd:fe: d7:3c:1c:1d:ac:10:d9:9d:3d:53:fb:05:4e:68:70: 76:d3:9b:34:10:14:ce:84:14:92:fb:73:1b:1e:09: 50:7e:b4:3d:fb:a7:b6:28:f4:5c:4c:a6:a9:95:a5: f6:ba:0d:de:ce:fa:ae:0b:5b:9a:ff:d8:70:d2:fd: 27:93:89:3c:4c:f2:49:e4:20:4d:99:ed:9c:83:e8: 87:aa:19:c5:84:1a:02:a8:23:56:75:b5:a4:68:05: 86:fb:2e:76:fc:9c:39:c7:74:31:1e:72:1c:9b:c1: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:0A:6A:BD:FE:AD:25:7B:24:AD:3C:15:96:F0:3C:36:ED:20:13 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cff2aad7-f173-47b6-ad48-6f279ff321d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.212.0/24 Signature Algorithm: sha256WithRSAEncryption 19:82:dd:77:0f:20:57:c8:5b:21:21:db:7e:cc:a4:8d:f7:25: ae:16:65:1e:55:91:03:6a:b2:a2:8d:c6:a0:7a:59:75:28:52: f7:d5:ea:c9:fe:66:8a:3c:86:f5:49:2b:f3:72:26:c7:76:66: 82:8d:f5:7b:ae:62:e9:c9:5d:f4:9a:83:38:cc:3a:0c:ae:53: 5b:0f:48:c6:2a:c6:c1:57:50:ef:fc:53:3c:dd:ed:cf:3a:9a: 4d:3b:55:df:c1:06:57:cc:27:d4:20:2e:b5:b1:4e:e8:30:0f: da:b8:c8:f7:4b:12:6a:0b:bc:9b:8d:3b:f6:f4:a2:27:90:7c: a1:62:72:aa:7c:52:1f:f5:b4:79:84:4e:30:b4:36:f5:c6:36: 95:6c:20:f6:34:21:02:d1:16:8a:b9:40:4c:21:3b:82:59:09: 48:99:0e:07:87:ec:1e:cc:4c:96:54:e8:e6:a9:0e:32:81:d1: 9c:72:30:4a:74:99:9f:86:3c:8f:63:da:92:21:ff:2b:a8:b1: b9:75:4e:10:ee:1b:6c:6e:55:74:1f:37:1f:13:52:3d:f3:46: 5a:1e:9e:1b:94:07:39:e7:21:12:c5:d5:b1:da:27:d6:aa:31: 97:2d:0f:b8:f9:c2:42:0b:46:d8:bc:2e:58:f1:04:c5:40:00: 3d:b3:14:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQo0SsvsiOJbjQluvvudpFrXY2JIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAyMDA5WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDg4NDA5MmM0OWMyM2MxMTAxYjUzNWYzMzhiN2NmMzA1 MmE5NzNjZTczYWQwNTA5NDFiNDcyNGZlNjQ5MmNlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsg4f8y4flFukaImlYmMwZ00siFEgty6T3DpibZm3neEYr o5vs8dw3dlnZkjaFPB5b7+MII6MPgI3+515oepIw8gesljAMD/8pMiJf/pXT7BUM iLDIziW5jKoMLyz3Oh//nfuKP6kDsowDy3hqMh+CIqBccyk/rfXMgNMJyv+I8D0e dXuWCAR588Lp3sNWpihu41y9/tc8HB2sENmdPVP7BU5ocHbTmzQQFM6EFJL7cxse CVB+tD37p7Yo9FxMpqmVpfa6Dd7O+q4LW5r/2HDS/SeTiTxM8knkIE2Z7ZyD6Ieq GcWEGgKoI1Z1taRoBYb7Lnb8nDnHdDEechybwWchAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBPQKar3+rSV7JK08FZbwPDbtIBMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NmZjJhYWQ3LWYxNzMtNDdiNi1hZDQ4LTZmMjc5ZmYzMjFkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBABmC3XcPIFfIWyEh237MpI33Ja4W ZR5VkQNqsqKNxqB6WXUoUvfV6sn+Zoo8hvVJK/NyJsd2ZoKN9XuuYunJXfSagzjM OgyuU1sPSMYqxsFXUO/8Uzzd7c86mk07Vd/BBlfMJ9QgLrWxTugwD9q4yPdLEmoL vJuNO/b0oieQfKFicqp8Uh/1tHmETjC0NvXGNpVsIPY0IQLRFoq5QEwhO4JZCUiZ DgeH7B7MTJZU6OapDjKB0ZxyMEp0mZ+GPI9j2pIh/yuosbl1ThDuG2xuVXQfNx8T Uj3zRloenhuUBznnIRLF1bHaJ9aqMZctD7j5wkILRti8LljxBMVAAD2zFDM= -----END CERTIFICATE-----Generated at Mon Nov 9 10:48:05 2026 by rpki-client