$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa File: dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa (raw, json) Hash identifier: NgqiJKpMPpTOdfihI6IXxjT+yxrKerVvoUYpRx/w8Fk= Subject key identifier: 5B:7E:1B:A1:86:F9:48:1A:0E:F7:A6:43:D5:C5:48:9B:94:99:4C:B8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3A0ECF652171CC523DE9249200A0575083AE6AF7 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa Signing time: Tue 24 Feb 2026 00:10:27 +0000 ROA not before: Tue 24 Feb 2026 00:10:27 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0e:cf:65:21:71:cc:52:3d:e9:24:92:00:a0:57:50:83:ae:6a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 24 00:10:27 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=884cd9d6132491b50fb55c0d80620ad063f2b6261aa465c244c08c3447496141, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:77:aa:8e:e8:a2:37:9c:d2:4f:5f:1b:6c: 80:18:2a:0b:d7:a0:80:ea:b6:93:40:82:1c:61:af: 23:d7:2f:4b:a0:15:eb:9a:04:f2:18:fc:ff:6b:48: 60:5b:1f:10:9c:71:4d:4c:e5:0d:02:b7:67:88:32: a6:5a:60:9f:e2:bf:99:34:43:d6:b8:9b:e2:63:bd: 8e:3b:74:64:93:b1:a1:12:77:99:8a:c5:f8:02:8a: 43:68:2e:10:d5:58:31:84:3e:4f:51:39:fd:6a:35: 36:d9:3e:c4:48:dd:d8:4d:ce:65:4b:5f:71:d2:bd: b5:dd:87:8d:fc:7c:f6:ae:88:a3:03:53:51:3f:1d: 45:c6:d5:39:be:e3:5b:43:7b:0d:47:39:f3:f0:33: 69:02:0d:05:3e:11:fd:4b:61:6b:5f:f8:aa:42:15: 84:c0:a3:98:b4:f7:bf:ca:40:36:c4:14:c3:c1:dc: 08:bb:ce:1a:cc:a4:6a:6b:ee:fc:39:7e:da:87:3a: 53:2c:2b:ea:2d:99:d4:9d:25:6e:46:83:0f:b4:f8: 32:19:0c:f6:82:c3:3f:42:16:3d:a2:68:aa:66:03: 6a:ea:6b:ce:2c:a9:b8:66:cd:fd:d2:8a:2c:80:70: 5d:71:cb:0f:69:b1:3d:9c:0e:12:bf:17:04:5d:ae: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7E:1B:A1:86:F9:48:1A:0E:F7:A6:43:D5:C5:48:9B:94:99:4C:B8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbab5aee-69a4-4b7c-8c0f-ab0177caf233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.242.0/23 Signature Algorithm: sha256WithRSAEncryption 70:f3:37:ac:a2:83:cc:79:6f:c8:35:c1:e3:f3:3e:e0:5a:65: c6:56:1f:b9:fb:2c:e4:63:ac:ff:a4:69:2c:02:f4:b1:4e:04: 8a:54:95:d1:15:f1:8b:83:be:58:52:e7:f4:e0:4e:af:18:f1: d5:40:ba:9b:1e:7a:2b:e5:32:47:b9:7d:1a:12:e1:2d:af:e1: 84:a6:e2:c0:73:49:98:85:e8:18:99:57:70:3e:97:e4:89:04: 45:59:0a:c4:49:a9:d9:64:fa:33:60:94:48:85:fa:92:b6:3f: fa:1d:39:89:94:fc:ff:50:10:70:ef:21:c3:75:fd:8f:f3:d5: 67:47:c0:c1:e3:2e:1f:98:18:ea:ad:8e:0d:9f:2f:a3:33:84: 58:be:ec:fc:f6:98:e3:80:ce:9c:6d:d0:0c:22:bc:92:97:14: 2f:44:f4:64:91:bc:81:25:b3:98:2a:18:cd:f8:a0:63:ac:6c: 36:93:28:01:71:ef:6a:e4:f8:ca:7a:ed:56:56:15:2c:90:06: 70:91:e6:6f:98:77:f6:52:f3:b3:0a:7a:5b:c6:0d:46:fd:a3: ef:86:c6:6f:64:4e:ce:12:9d:8f:2b:ac:df:08:95:13:60:98: 4a:a3:f1:66:d7:fc:21:76:a2:7e:a2:1a:ac:f2:79:17:36:56: db:5c:67:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOg7PZSFxzFI96SSSAKBXUIOuavcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjI0MDAxMDI3WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODRjZDlkNjEzMjQ5MWI1MGZiNTVjMGQ4MDYyMGFkMDYz ZjJiNjI2MWFhNDY1YzI0NGMwOGMzNDQ3NDk2MTQxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH3HeqjuiiN5zST18bbIAYKgvXoIDqtpNAghxhryPXL0ug FeuaBPIY/P9rSGBbHxCccU1M5Q0Ct2eIMqZaYJ/iv5k0Q9a4m+JjvY47dGSTsaES d5mKxfgCikNoLhDVWDGEPk9ROf1qNTbZPsRI3dhNzmVLX3HSvbXdh438fPauiKMD U1E/HUXG1Tm+41tDew1HOfPwM2kCDQU+Ef1LYWtf+KpCFYTAo5i097/KQDbEFMPB 3Ai7zhrMpGpr7vw5ftqHOlMsK+otmdSdJW5Ggw+0+DIZDPaCwz9CFj2iaKpmA2rq a84sqbhmzf3SiiyAcF1xyw9psT2cDhK/FwRdrg49AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW34boYb5SBoO96ZD1cVIm5SZTLgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RiYWI1YWVlLTY5YTQtNGI3Yy04YzBmLWFiMDE3N2NhZjIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/IwDQYJKoZIhvcNAQELBQADggEBAHDzN6yig8x5b8g1wePzPuBaZcZW H7n7LORjrP+kaSwC9LFOBIpUldEV8YuDvlhS5/TgTq8Y8dVAupseeivlMke5fRoS 4S2v4YSm4sBzSZiF6BiZV3A+l+SJBEVZCsRJqdlk+jNglEiF+pK2P/odOYmU/P9Q EHDvIcN1/Y/z1WdHwMHjLh+YGOqtjg2fL6MzhFi+7Pz2mOOAzpxt0AwivJKXFC9E 9GSRvIEls5gqGM34oGOsbDaTKAFx72rk+Mp67VZWFSyQBnCR5m+Yd/ZS87MKelvG DUb9o++Gxm9kTs4SnY8rrN8IlRNgmEqj8WbX/CF2on6iGqzyeRc2VttcZ2k= -----END CERTIFICATE-----Generated at Sun Mar 1 21:52:26 2026 by rpki-client