$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa File: f558359a-2a02-4c8e-9a72-7159b2569d66.roa (raw, json) Hash identifier: gIjIhHp2g2qum/VyI4CaIwxo7803RQUMkHj3FYNLZK0= Subject key identifier: 71:CC:5B:C6:D9:92:5B:25:67:0F:68:E9:7F:14:19:83:15:62:94:05 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1CE011031435097280C55DEF1C3BF48FB9307B74 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa Signing time: Thu 22 Oct 2026 00:10:08 +0000 ROA not before: Thu 22 Oct 2026 00:10:08 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e0:11:03:14:35:09:72:80:c5:5d:ef:1c:3b:f4:8f:b9:30:7b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 22 00:10:08 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=d8bcae67ec36dfbe968a4de1ac20a5bc50a414ee5c6ac5e6e33a8d760ffa80ed, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:eb:0d:8c:df:29:79:f9:15:e5:24:62:38: 93:3b:74:e3:b5:e8:6c:9b:66:3c:3a:c8:2e:2f:3a: e4:e3:33:2d:3c:9c:8b:4b:b0:09:a2:33:dc:c4:8d: 1d:99:84:aa:10:b3:a4:cf:29:7b:f2:2d:82:96:d1: dc:67:66:bd:3c:01:a0:52:01:31:12:09:1b:f9:1d: e5:6f:43:4a:ee:37:3c:49:7f:b9:53:0a:03:ab:48: 70:05:88:fc:62:6e:df:65:96:1f:b2:19:7c:59:2c: ee:bb:7c:f1:7a:c0:88:ad:98:cc:f3:f4:7c:c5:d0: 7c:a7:66:43:af:98:20:2e:9a:56:7b:95:75:21:ab: b0:84:f1:c3:33:58:f1:a4:2c:33:d1:9e:8f:67:ea: 8d:70:71:c3:92:7b:05:c3:9f:e6:b4:ee:68:b9:0b: 50:2a:82:28:e4:f5:56:4e:88:47:7f:ee:4b:47:15: fb:9e:9c:e3:f6:b1:cc:5d:db:93:84:fa:cd:7d:ef: 42:07:3d:48:8a:09:6a:9c:e6:ee:3a:c1:01:77:f1: 8b:3b:11:3c:54:8a:2b:61:44:dd:a4:97:bb:4f:04: e8:84:ac:f1:d9:f2:41:d4:ce:53:d1:5b:4e:0f:c0: b9:1b:9a:d7:5e:5d:28:df:3b:3c:e0:96:69:20:87: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:5B:C6:D9:92:5B:25:67:0F:68:E9:7F:14:19:83:15:62:94:05 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 63:98:be:00:f0:13:3a:5a:d2:d4:81:14:24:a9:15:34:d2:83: c4:cf:31:4d:b0:3d:20:c8:63:7d:27:c4:46:9e:c7:6b:6d:80: a4:30:1b:e6:8b:07:c9:1b:1c:b2:7a:f4:24:d9:0e:09:90:84: 00:55:6c:9c:33:1c:de:75:0a:bf:ff:cd:4d:e9:73:26:3a:c1: 75:38:12:b7:b9:68:1b:50:d1:b8:46:f9:f4:fa:49:6d:42:8d: a9:f1:57:5a:34:c5:12:be:c7:ed:8f:71:fe:4a:7f:58:76:a3: b5:11:7b:da:f7:10:bb:c7:19:9e:7c:2d:8d:3e:2d:da:bd:b2: 8d:5a:c6:24:a3:61:5f:59:d1:d4:27:76:6c:8b:2b:d3:3e:38: f4:68:e0:ce:75:8d:b8:0a:92:8a:db:10:5c:38:08:12:91:19: 91:54:9e:38:a9:cf:cd:55:dc:4a:f7:15:49:dd:54:dd:fa:ac: 34:c0:c4:2f:56:51:6a:16:ef:f1:70:e2:f1:66:e0:81:2c:ca: 25:7f:7a:78:b5:0b:27:46:2a:61:be:c5:27:50:2f:db:28:bc: af:a0:1a:ee:c0:ac:8b:f6:e4:7b:3e:52:12:ae:02:72:a1:17: 5c:fe:fe:10:ee:17:87:39:73:94:23:07:e5:f2:5e:ec:e9:25: 14:ad:8c:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHOARAxQ1CXKAxV3vHDv0j7kwe3QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIyMDAxMDA4WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGJjYWU2N2VjMzZkZmJlOTY4YTRkZTFhYzIwYTViYzUw YTQxNGVlNWM2YWM1ZTZlMzNhOGQ3NjBmZmE4MGVkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcrusNjN8pefkV5SRiOJM7dOO16GybZjw6yC4vOuTjMy08 nItLsAmiM9zEjR2ZhKoQs6TPKXvyLYKW0dxnZr08AaBSATESCRv5HeVvQ0ruNzxJ f7lTCgOrSHAFiPxibt9llh+yGXxZLO67fPF6wIitmMzz9HzF0HynZkOvmCAumlZ7 lXUhq7CE8cMzWPGkLDPRno9n6o1wccOSewXDn+a07mi5C1Aqgijk9VZOiEd/7ktH FfuenOP2scxd25OE+s1970IHPUiKCWqc5u46wQF38Ys7ETxUiithRN2kl7tPBOiE rPHZ8kHUzlPRW04PwLkbmtdeXSjfOzzglmkgh28JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUccxbxtmSWyVnD2jpfxQZgxVilAUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y1NTgzNTlhLTJhMDItNGM4ZS05YTcyLTcxNTliMjU2OWQ2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBAGOYvgDwEzpa0tSBFCSpFTTSg8TP MU2wPSDIY30nxEaex2ttgKQwG+aLB8kbHLJ69CTZDgmQhABVbJwzHN51Cr//zU3p cyY6wXU4Ere5aBtQ0bhG+fT6SW1CjanxV1o0xRK+x+2Pcf5Kf1h2o7URe9r3ELvH GZ58LY0+Ldq9so1axiSjYV9Z0dQndmyLK9M+OPRo4M51jbgKkorbEFw4CBKRGZFU njipz81V3Er3FUndVN36rDTAxC9WUWoW7/Fw4vFm4IEsyiV/eni1CydGKmG+xSdQ L9sovK+gGu7ArIv25Hs+UhKuAnKhF1z+/hDuF4c5c5QjB+XyXuzpJRStjA4= -----END CERTIFICATE-----Generated at Sun Nov 8 04:23:57 2026 by rpki-client