$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa File: df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa (raw, json) Hash identifier: nbRSLPzbg2AC/2fFTqGvVVJMdEUq3hlGbGRGyTYnJ9Y= Subject key identifier: 7E:52:89:2C:D1:69:75:02:31:2F:EF:D9:92:0A:DD:9E:C9:9E:44:0A Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 785AFC799D886539C61F13F1E2198E131D11A714 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa Signing time: Fri 09 Oct 2026 00:30:16 +0000 ROA not before: Fri 09 Oct 2026 00:30:16 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5a:fc:79:9d:88:65:39:c6:1f:13:f1:e2:19:8e:13:1d:11:a7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:16 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=454e3610151c599d2f9f6b1f97e47e2eeda1696a86a2b039e028ad21588b84a9, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:37:15:e5:77:36:50:78:b7:2a:97:31:35: 6f:61:21:c5:b3:70:29:88:c1:ac:16:7a:3e:e4:cf: d9:5f:20:f1:b6:47:55:d5:b5:54:af:c3:e5:e4:22: ad:a5:cb:4c:24:16:2a:b8:00:ad:df:f1:2a:ab:f6: 21:64:f8:09:fd:d7:79:43:f5:3a:a7:a2:5c:2c:e8: 71:a6:ae:e8:3f:b5:da:f2:84:d6:62:d9:d2:42:28: 9d:91:b1:e1:11:0d:26:24:06:eb:f4:00:ee:b0:d0: 5f:9d:a2:21:18:70:11:a9:d6:c3:6b:5c:a6:e6:69: 6a:36:1b:ab:1e:5e:21:54:cc:b9:ab:9a:d1:1a:84: 26:07:d6:22:3d:da:c6:45:dc:75:15:02:99:bf:7e: 5e:cb:50:72:51:e7:75:cd:e8:28:ab:52:b0:7a:9b: f4:a3:a5:1f:c1:ea:39:9e:ef:e5:e4:c4:cf:99:1c: 06:71:e9:90:e3:92:e2:7f:0d:c9:25:7b:f3:68:d4: 49:c4:a4:bd:19:25:e8:c3:1a:38:89:74:65:93:dc: 78:00:a1:67:a2:53:91:69:3d:e7:c6:b8:45:03:9d: cc:7a:4b:bd:ba:7c:92:e0:91:90:72:c3:61:bd:92: bc:e1:08:7d:63:c8:f8:38:10:0f:f5:f4:a2:b1:6c: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:52:89:2C:D1:69:75:02:31:2F:EF:D9:92:0A:DD:9E:C9:9E:44:0A X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/df197ecf-bb9a-42ae-a19a-a4168fe6a3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.232.0/24 Signature Algorithm: sha256WithRSAEncryption 88:5f:4e:66:a0:df:b5:29:a6:e5:42:4c:1a:93:7d:b7:95:0b: 45:46:32:0f:ac:c1:7c:15:2a:d2:30:d5:a2:1c:44:2c:75:b5: 2f:12:63:c1:43:2f:c5:a5:25:36:91:48:9f:b0:8d:b8:53:16: 44:cc:2f:da:bd:c4:a2:af:c6:9f:67:9c:54:48:3f:18:78:99: 73:29:b5:f4:44:02:34:e2:a8:78:9e:29:da:f8:89:96:ab:ec: 25:98:51:73:29:d2:5d:fd:be:8c:82:06:e0:37:d5:db:31:1d: a0:d9:41:d2:e8:3e:d5:6a:bb:1b:40:11:e6:bc:90:54:d0:ab: 2b:b8:1f:f0:57:60:6f:1e:3b:61:38:82:1c:92:16:d4:2e:78: 11:28:05:a2:32:0e:fd:ed:e5:01:43:f2:c2:2a:e5:87:ba:14: 8d:d4:69:d1:0a:3f:16:3e:9d:c8:9d:4e:4e:6a:7c:ed:9e:7d: 6c:43:99:22:03:f5:26:55:75:16:d0:5e:02:b4:80:4a:67:58: 0a:bc:bd:73:ca:e5:02:39:cd:72:52:f2:36:f2:8c:59:cc:c2: f0:34:87:c1:20:37:ec:15:ce:b2:37:ed:fc:36:89:6a:35:d8: 90:ed:c7:d8:1e:c4:5a:dd:e8:87:3f:28:b2:a0:0a:2d:d5:47: 62:cd:c3:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeFr8eZ2IZTnGHxPx4hmOEx0RpxQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDE2WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTRlMzYxMDE1MWM1OTlkMmY5ZjZiMWY5N2U0N2UyZWVk YTE2OTZhODZhMmIwMzllMDI4YWQyMTU4OGI4NGE5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/xTcV5Xc2UHi3KpcxNW9hIcWzcCmIwawWej7kz9lfIPG2 R1XVtVSvw+XkIq2ly0wkFiq4AK3f8Sqr9iFk+An913lD9Tqnolws6HGmrug/tdry hNZi2dJCKJ2RseERDSYkBuv0AO6w0F+doiEYcBGp1sNrXKbmaWo2G6seXiFUzLmr mtEahCYH1iI92sZF3HUVApm/fl7LUHJR53XN6CirUrB6m/SjpR/B6jme7+XkxM+Z HAZx6ZDjkuJ/Dckle/No1EnEpL0ZJejDGjiJdGWT3HgAoWeiU5FpPefGuEUDncx6 S726fJLgkZByw2G9krzhCH1jyPg4EA/19KKxbMVLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUflKJLNFpdQIxL+/ZkgrdnsmeRAowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RmMTk3ZWNmLWJiOWEtNDJhZS1hMTlhLWE0MTY4ZmU2YTNhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++gwDQYJKoZIhvcNAQELBQADggEBAIhfTmag37UppuVCTBqTfbeVC0VG Mg+swXwVKtIw1aIcRCx1tS8SY8FDL8WlJTaRSJ+wjbhTFkTML9q9xKKvxp9nnFRI Pxh4mXMptfREAjTiqHieKdr4iZar7CWYUXMp0l39voyCBuA31dsxHaDZQdLoPtVq uxtAEea8kFTQqyu4H/BXYG8eO2E4ghySFtQueBEoBaIyDv3t5QFD8sIq5Ye6FI3U adEKPxY+ncidTk5qfO2efWxDmSID9SZVdRbQXgK0gEpnWAq8vXPK5QI5zXJS8jby jFnMwvA0h8EgN+wVzrI37fw2iWo12JDtx9gexFrd6Ic/KLKgCi3VR2LNw4o= -----END CERTIFICATE-----Generated at Sun Nov 8 14:58:34 2026 by rpki-client