$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa File: ebd968d3-ce48-4118-aed7-b938cd13153f.roa (raw, json) Hash identifier: /4v1dwxVOPDWKh3vMu46zWiYCFTMhUVbwwQ94q+kZbM= Subject key identifier: DE:74:59:26:46:B1:3C:6B:16:4D:46:85:4F:B7:9F:F1:80:FB:9A:23 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 595D9A633CDD743B74BB9C3EBA75554ADE5C3C3C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa Signing time: Fri 09 Oct 2026 00:30:16 +0000 ROA not before: Fri 09 Oct 2026 00:30:16 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5d:9a:63:3c:dd:74:3b:74:bb:9c:3e:ba:75:55:4a:de:5c:3c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:16 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=c827138868ea4cb6bc72fe1c959d077628c1ae7457c2d1650a488796f7bd332d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:55:12:78:5e:bd:d2:27:e8:6b:29:2d:bc:b1: 13:d3:32:b6:ff:76:97:8e:b8:a5:97:68:cb:fc:60: b7:1b:09:bd:e0:7a:95:06:71:cc:12:c3:df:d1:3d: f3:34:7b:a5:25:27:38:23:c1:af:ac:dc:28:58:c7: e8:eb:a0:32:f1:18:b9:56:d3:73:b5:97:a4:0e:dc: d1:a7:ef:10:14:2a:49:7f:1f:1d:2f:28:79:9c:ff: 05:25:27:7b:36:a6:9e:83:fc:3d:98:d5:b1:78:34: ee:53:c7:56:f1:c1:a3:17:56:da:33:c4:05:dd:d6: cb:7a:03:88:cf:f8:9b:5e:20:bd:ca:be:ea:67:8e: 52:b5:e9:51:d5:41:58:1d:aa:56:30:b5:c3:c9:c1: 3b:9a:9a:ab:c0:9a:be:6f:2a:92:d3:fa:7a:1b:72: 8c:97:35:95:a9:51:88:9e:0f:69:af:ca:fc:43:ab: e4:0b:fd:05:55:3d:01:55:b7:49:93:9f:82:ef:61: 12:ca:d6:a1:9d:89:ee:29:33:d1:5d:f7:60:05:13: bd:8b:50:c1:cd:96:1a:e2:fc:41:4c:5c:b8:1e:69: ad:2c:61:d2:8a:cb:2f:ae:41:c6:50:81:91:15:c0: 40:a5:a9:f1:c0:54:62:60:05:ab:bc:a8:54:79:75: 1c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:74:59:26:46:B1:3C:6B:16:4D:46:85:4F:B7:9F:F1:80:FB:9A:23 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.228.0/24 Signature Algorithm: sha256WithRSAEncryption 18:65:35:b0:09:a8:cf:27:e9:bf:5c:b3:a2:4f:82:d2:6f:72: e2:f8:6b:c7:06:1e:f3:13:7b:5f:f1:5b:c4:40:63:d4:3f:ca: db:ee:f5:29:7c:b0:d3:2b:93:3d:fb:ab:28:61:38:74:35:76: 06:98:f5:39:ea:27:6b:23:5e:46:1e:40:f6:23:3d:1c:d3:b4: 22:02:32:ea:05:00:c0:21:30:73:a2:74:e2:f4:80:21:7c:fc: 78:a9:52:70:bf:53:87:d4:50:9f:aa:a9:34:4e:f2:72:51:fe: 6c:c4:93:e4:9e:bf:91:8a:66:95:b8:a7:1b:01:f2:5a:cd:ca: f0:e8:66:d2:3d:10:d2:04:98:3d:8e:f1:2a:56:4c:01:14:c5: 99:9f:15:e7:13:90:25:ed:5d:6e:ef:eb:c2:af:e3:81:05:2d: 1c:1d:2c:6c:43:f6:c3:a3:ea:d5:c6:e7:42:86:d1:6f:da:e1: 1f:16:b7:82:42:85:44:a4:1e:09:d5:eb:3e:60:fa:58:c5:70: 82:14:50:9a:ce:27:13:f6:18:80:73:fe:e2:b9:d4:5d:f8:74: f0:c7:80:14:77:8c:14:f7:fa:80:90:1e:53:b3:23:c6:c6:28: ec:0a:f2:b9:98:ce:70:10:8b:e8:42:68:80:1c:cd:8c:f9:39: e3:b2:65:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWV2aYzzddDt0u5w+unVVSt5cPDwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDE2WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODI3MTM4ODY4ZWE0Y2I2YmM3MmZlMWM5NTlkMDc3NjI4 YzFhZTc0NTdjMmQxNjUwYTQ4ODc5NmY3YmQzMzJkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEVRJ4Xr3SJ+hrKS28sRPTMrb/dpeOuKWXaMv8YLcbCb3g epUGccwSw9/RPfM0e6UlJzgjwa+s3ChYx+jroDLxGLlW03O1l6QO3NGn7xAUKkl/ Hx0vKHmc/wUlJ3s2pp6D/D2Y1bF4NO5Tx1bxwaMXVtozxAXd1st6A4jP+JteIL3K vupnjlK16VHVQVgdqlYwtcPJwTuamqvAmr5vKpLT+nobcoyXNZWpUYieD2mvyvxD q+QL/QVVPQFVt0mTn4LvYRLK1qGdie4pM9Fd92AFE72LUMHNlhri/EFMXLgeaa0s YdKKyy+uQcZQgZEVwEClqfHAVGJgBau8qFR5dRyNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3nRZJkaxPGsWTUaFT7ef8YD7miMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ViZDk2OGQzLWNlNDgtNDExOC1hZWQ3LWI5MzhjZDEzMTUzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqeQwDQYJKoZIhvcNAQELBQADggEBABhlNbAJqM8n6b9cs6JPgtJvcuL4 a8cGHvMTe1/xW8RAY9Q/ytvu9Sl8sNMrkz37qyhhOHQ1dgaY9TnqJ2sjXkYeQPYj PRzTtCICMuoFAMAhMHOidOL0gCF8/HipUnC/U4fUUJ+qqTRO8nJR/mzEk+Sev5GK ZpW4pxsB8lrNyvDoZtI9ENIEmD2O8SpWTAEUxZmfFecTkCXtXW7v68Kv44EFLRwd LGxD9sOj6tXG50KG0W/a4R8Wt4JChUSkHgnV6z5g+ljFcIIUUJrOJxP2GIBz/uK5 1F34dPDHgBR3jBT3+oCQHlOzI8bGKOwK8rmYznAQi+hCaIAczYz5OeOyZVY= -----END CERTIFICATE-----Generated at Mon Nov 9 17:19:03 2026 by rpki-client