$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa File: d61aefde-15db-4326-8486-f4cd98992cbc.roa (raw, json) Hash identifier: JvpiAKHDYsy1EXr53jAfBoY5VTMQXeRHHrNZ50A3j8s= Subject key identifier: FF:8F:C5:FB:B2:E8:AC:62:6E:32:21:9E:F2:2F:DE:BE:F8:13:C1:07 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1A67EC522F8EF6F7DE7D5FA445EA01A5EA82A2CB Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa Signing time: Fri 09 Oct 2026 00:30:31 +0000 ROA not before: Fri 09 Oct 2026 00:30:31 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:67:ec:52:2f:8e:f6:f7:de:7d:5f:a4:45:ea:01:a5:ea:82:a2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:31 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=f541e8562c8a61903fa72929a6006d654634a36919a3d81381a9ebdd2fe7559a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:94:fc:64:fa:22:7f:8e:5a:db:de:4d:05: 0e:a7:ba:96:06:96:0c:99:a3:da:be:be:37:6c:b1: dc:10:fb:13:4e:fd:4c:52:b4:69:a4:1a:e6:7e:03: 8a:6f:02:1d:0f:23:26:c6:ea:fc:b0:b4:01:6f:4c: 77:9c:25:d8:a5:2c:80:5b:9d:f0:66:6c:03:66:a0: ca:98:f7:a7:db:5f:37:3f:0c:ed:79:26:ab:74:c2: c8:03:08:fb:82:91:a1:9b:f8:cf:7e:91:fd:b0:91: 95:47:d6:da:33:d1:f3:f0:d2:54:a6:29:bb:31:42: eb:fd:99:f4:5f:f1:cf:63:65:db:11:c0:ca:5b:f9: 9f:82:48:08:46:3e:da:c3:7f:04:35:c8:6b:a2:1f: 18:05:6d:a6:40:20:0a:2e:48:23:c4:9a:79:9b:f6: c2:62:43:04:ed:e3:04:df:cd:d9:a6:c7:c0:21:c4: 06:0d:51:78:de:0a:22:ff:d4:75:95:c2:94:98:7f: 0c:b1:d0:87:0e:bc:7c:4f:cd:04:75:ea:bf:2b:34: 46:da:8c:e4:94:2a:fb:60:40:39:b1:fd:5f:75:1e: cd:5a:cb:f6:dc:ca:34:ae:cd:1c:84:c2:01:06:97: 28:29:0b:70:c2:55:01:db:2a:7b:18:23:e8:bc:44: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8F:C5:FB:B2:E8:AC:62:6E:32:21:9E:F2:2F:DE:BE:F8:13:C1:07 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.223.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ad:87:0e:dc:e8:67:ab:d8:78:76:8c:98:fc:b2:b1:10:4f: 1d:0a:0c:b9:82:eb:a6:96:2f:8c:73:cf:63:b3:94:ec:a0:29: 18:61:75:02:b9:c8:23:d7:45:2a:a9:d3:5c:80:b5:87:cd:d4: a7:33:6d:6f:75:de:d6:bc:25:6b:80:97:e9:aa:17:65:05:22: ed:c3:6b:f3:40:b6:b1:e8:92:36:b5:9a:3d:30:67:ef:0b:a3: d9:31:fc:a1:9b:6a:c3:cf:ca:0a:8a:ca:6b:76:fd:20:5d:d3: 38:45:34:7b:54:77:24:12:15:a6:02:74:00:38:c7:d7:b4:6e: 08:41:f8:d6:8c:7a:bf:af:8c:09:06:0c:17:bf:11:6a:d2:94: 39:81:2a:4d:cb:80:9d:0a:75:4b:de:41:e9:80:05:a5:14:85: 24:81:09:69:50:d3:06:3d:76:ba:c3:ab:77:f5:8a:4f:a3:e0: 10:ef:d1:88:e3:ea:14:59:e8:00:38:d7:3b:66:d5:f7:51:0a: 55:07:db:de:26:e6:9e:da:b7:69:0b:1f:65:71:c4:29:97:1f: 9f:2b:29:ed:8f:5d:e4:b4:54:c3:1a:46:10:a9:0a:25:42:c0: ba:da:ac:70:7d:f0:02:7e:e3:28:d4:af:d8:63:59:bb:b6:3f: b4:9c:41:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGmfsUi+O9vfefV+kReoBpeqCosswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDMxWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTQxZTg1NjJjOGE2MTkwM2ZhNzI5MjlhNjAwNmQ2NTQ2 MzRhMzY5MTlhM2Q4MTM4MWE5ZWJkZDJmZTc1NTlhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR5JT8ZPoif45a295NBQ6nupYGlgyZo9q+vjdssdwQ+xNO /UxStGmkGuZ+A4pvAh0PIybG6vywtAFvTHecJdilLIBbnfBmbANmoMqY96fbXzc/ DO15Jqt0wsgDCPuCkaGb+M9+kf2wkZVH1toz0fPw0lSmKbsxQuv9mfRf8c9jZdsR wMpb+Z+CSAhGPtrDfwQ1yGuiHxgFbaZAIAouSCPEmnmb9sJiQwTt4wTfzdmmx8Ah xAYNUXjeCiL/1HWVwpSYfwyx0IcOvHxPzQR16r8rNEbajOSUKvtgQDmx/V91Hs1a y/bcyjSuzRyEwgEGlygpC3DCVQHbKnsYI+i8RAb1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/4/F+7LorGJuMiGe8i/evvgTwQcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Q2MWFlZmRlLTE1ZGItNDMyNi04NDg2LWY0Y2Q5ODk5MmNiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d8wDQYJKoZIhvcNAQELBQADggEBAJSthw7c6Ger2Hh2jJj8srEQTx0K DLmC66aWL4xzz2OzlOygKRhhdQK5yCPXRSqp01yAtYfN1KczbW913ta8JWuAl+mq F2UFIu3Da/NAtrHokja1mj0wZ+8Lo9kx/KGbasPPygqKymt2/SBd0zhFNHtUdyQS FaYCdAA4x9e0bghB+NaMer+vjAkGDBe/EWrSlDmBKk3LgJ0KdUveQemABaUUhSSB CWlQ0wY9drrDq3f1ik+j4BDv0Yjj6hRZ6AA41ztm1fdRClUH294m5p7at2kLH2Vx xCmXH58rKe2PXeS0VMMaRhCpCiVCwLrarHB98AJ+4yjUr9hjWbu2P7ScQd0= -----END CERTIFICATE-----Generated at Sun Nov 8 15:48:51 2026 by rpki-client