$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa File: efff1c41-4813-4726-a794-2bd64d641531.roa (raw, json) Hash identifier: 8DSZs+V0OCEjoIo0wVRBK2DO3yWLMNYgfm21BX2EWfA= Subject key identifier: DE:F0:94:1E:71:71:4E:87:E4:FF:8F:87:8C:45:1D:51:07:B8:83:5D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1A873CEF054A057B2D08F0172B77E3CC7BD2D97D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa Signing time: Fri 09 Oct 2026 00:30:19 +0000 ROA not before: Fri 09 Oct 2026 00:30:19 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:87:3c:ef:05:4a:05:7b:2d:08:f0:17:2b:77:e3:cc:7b:d2:d9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:19 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=d2a0c2001928f37c6921e016b2ac96f0deb6f4d61ae569eedbd1d60f491c6c3b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:bb:68:c9:c6:1c:e5:bb:de:18:82:ef:c1: 9a:98:a8:a9:d7:98:05:69:96:f4:bd:16:e7:bd:27: fe:99:d0:e6:f8:f6:95:f1:ce:64:8d:61:5b:ff:0b: a8:38:ab:ac:b0:40:e1:cd:3a:f3:be:f8:d5:40:5c: 33:51:a6:f1:b5:41:e1:f6:ce:a0:f4:00:2c:64:2f: 92:83:e6:7f:1a:a2:b0:b1:bc:ce:c0:ae:a9:16:53: a5:d2:bd:c7:c3:2a:3b:0b:c3:00:31:08:c8:29:0a: cd:5c:84:8d:30:31:58:5b:c9:59:49:6c:0c:b2:d0: 5e:63:e8:73:27:f0:7e:12:3d:6a:98:cb:34:6f:ca: bf:21:8d:74:15:d4:28:f7:a3:1f:84:83:6a:6b:3b: 1b:22:55:f0:10:94:77:f8:05:a7:f9:b9:c3:c3:90: 88:64:26:df:d9:9e:5b:39:1e:e4:82:a3:4a:ee:0f: 45:a2:b9:9d:f9:b7:3c:c4:3a:a0:e3:cb:4d:fd:ac: ab:df:06:a4:e7:e5:6b:8c:4e:76:d4:57:49:35:15: df:ca:3f:63:04:8e:2c:28:54:6c:2a:84:70:49:67: 98:2c:55:9c:bf:90:54:f6:5c:ca:6c:89:17:12:e8: c8:15:0f:d0:1a:ef:aa:c0:1f:2a:6f:e9:f9:66:14: a4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F0:94:1E:71:71:4E:87:E4:FF:8F:87:8C:45:1D:51:07:B8:83:5D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.235.0/24 Signature Algorithm: sha256WithRSAEncryption 11:d4:ec:de:61:b3:3b:cf:76:ae:04:4f:60:13:e1:40:88:00: ea:86:7c:07:2e:cd:8d:f7:cc:b3:4f:98:f8:3b:71:57:ac:a9: cf:e0:e5:c1:e1:46:8e:42:6f:50:df:8e:0b:48:d3:c0:ed:5a: a7:af:d6:ea:55:06:a0:6d:0a:eb:ce:4f:ac:86:e8:3b:38:6f: 77:d4:8c:9f:ae:69:fc:d6:b2:1f:f8:9f:9e:67:df:fc:7f:9e: 3e:80:35:66:4b:e4:a0:0f:6a:ac:cb:b5:25:73:7c:e3:4e:d9: 7c:eb:1c:69:d7:cb:33:52:06:74:6d:3b:a5:11:87:5b:b3:88: 16:32:5b:1a:6f:c4:0f:ad:95:a5:3a:4f:27:00:f0:ab:66:b0: e0:60:b6:9e:bb:3d:25:43:e1:c6:b5:d5:e2:ba:7e:ef:ca:d9: 2e:02:91:56:73:4d:5d:3b:02:92:cd:d8:90:45:4e:3a:69:4c: 4a:5e:ce:83:40:4f:b8:f9:07:93:af:2a:51:f7:c5:71:bc:00: 2e:79:4e:c6:b7:4d:49:11:55:2c:d8:41:4f:ab:2d:7c:a6:18: b8:22:a0:34:f2:35:8d:c6:03:b3:dc:6c:b1:c2:ef:31:c5:c2: c2:4a:59:79:75:78:7e:1b:d0:2f:b0:14:5e:f8:47:42:b4:d9: f7:5e:54:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGoc87wVKBXstCPAXK3fjzHvS2X0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDE5WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmEwYzIwMDE5MjhmMzdjNjkyMWUwMTZiMmFjOTZmMGRl YjZmNGQ2MWFlNTY5ZWVkYmQxZDYwZjQ5MWM2YzNiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsYrtoycYc5bveGILvwZqYqKnXmAVplvS9Fue9J/6Z0Ob4 9pXxzmSNYVv/C6g4q6ywQOHNOvO++NVAXDNRpvG1QeH2zqD0ACxkL5KD5n8aorCx vM7ArqkWU6XSvcfDKjsLwwAxCMgpCs1chI0wMVhbyVlJbAyy0F5j6HMn8H4SPWqY yzRvyr8hjXQV1Cj3ox+Eg2prOxsiVfAQlHf4Baf5ucPDkIhkJt/Znls5HuSCo0ru D0WiuZ35tzzEOqDjy039rKvfBqTn5WuMTnbUV0k1Fd/KP2MEjiwoVGwqhHBJZ5gs VZy/kFT2XMpsiRcS6MgVD9Aa76rAHypv6flmFKRVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3vCUHnFxTofk/4+HjEUdUQe4g10wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VmZmYxYzQxLTQ4MTMtNDcyNi1hNzk0LTJiZDY0ZDY0MTUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++swDQYJKoZIhvcNAQELBQADggEBABHU7N5hszvPdq4ET2AT4UCIAOqG fAcuzY33zLNPmPg7cVesqc/g5cHhRo5Cb1DfjgtI08DtWqev1upVBqBtCuvOT6yG 6Ds4b3fUjJ+uafzWsh/4n55n3/x/nj6ANWZL5KAPaqzLtSVzfONO2XzrHGnXyzNS BnRtO6URh1uziBYyWxpvxA+tlaU6TycA8KtmsOBgtp67PSVD4ca11eK6fu/K2S4C kVZzTV07ApLN2JBFTjppTEpezoNAT7j5B5OvKlH3xXG8AC55Tsa3TUkRVSzYQU+r LXymGLgioDTyNY3GA7PcbLHC7zHFwsJKWXl1eH4b0C+wFF74R0K02fdeVDs= -----END CERTIFICATE-----Generated at Sun Nov 8 15:18:14 2026 by rpki-client