$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa File: f558359a-2a02-4c8e-9a72-7159b2569d66.roa (raw, json) Hash identifier: HoVCZE3a90b+gLW1yt/cI9wU5T1qq/K3d4ebbmitVek= Subject key identifier: 2F:60:AF:6C:63:81:99:1E:A6:3C:12:39:A8:14:47:6D:4B:35:83:CF Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 788153AF0C4C118A2E384EFB1A5B746CD75D9D7A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa Signing time: Tue 24 Feb 2026 00:10:07 +0000 ROA not before: Tue 24 Feb 2026 00:10:07 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:81:53:af:0c:4c:11:8a:2e:38:4e:fb:1a:5b:74:6c:d7:5d:9d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 24 00:10:07 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=1e9bf408de88f9fd96bab910f3bcad60d4f3253b1ef3bca5b620fe400808ed4c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:51:7e:a5:49:dd:6a:90:fd:be:49:08:a1: ba:46:33:4a:2f:d4:58:04:8b:ba:87:1a:e6:de:04: 16:14:da:3e:3b:ed:58:d1:34:6d:aa:43:2e:f5:fb: 8d:b9:35:18:04:79:31:81:3a:2d:f2:e5:5b:7c:d1: d8:76:28:c2:1b:f6:44:2a:03:da:cc:f9:cc:ae:e6: ef:df:87:09:c9:ae:57:4d:95:8b:ca:86:54:93:f5: e8:e6:5b:6a:60:29:9d:a5:9c:85:22:a7:24:08:fe: 7f:7b:bd:dc:88:db:ad:0a:c7:b3:e7:e0:2e:a1:5f: 85:92:90:40:36:bf:59:97:aa:9a:3e:88:1c:a2:64: b3:20:e2:3f:f6:a7:92:34:fc:ce:bd:14:ac:e7:42: 2b:b1:6c:80:59:12:a0:fc:90:9d:55:fa:46:93:02: 3d:7d:39:65:65:3a:d3:8a:15:be:4d:eb:2c:dd:cc: fb:37:d4:9f:68:76:b0:71:e8:6b:6a:c1:f6:73:8d: a8:ca:10:11:5e:9a:43:e7:b6:ab:80:17:64:3d:a7: 4f:9a:52:31:e3:f8:42:13:e7:a7:d0:1d:0d:3c:c7: c4:9f:ac:c7:3a:3c:b6:ac:e8:1f:8e:58:59:ad:5f: f1:76:32:74:be:89:34:2c:f9:78:a8:21:82:0c:ee: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:60:AF:6C:63:81:99:1E:A6:3C:12:39:A8:14:47:6D:4B:35:83:CF X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:05:0e:57:56:b6:84:17:0e:94:62:31:1d:20:44:c3:46:4e: 3f:d3:41:d1:5b:88:7c:e4:88:71:77:3d:d8:67:31:91:0e:c6: 2f:e0:7f:81:ef:c5:12:80:03:72:61:21:a3:a5:ef:f4:2b:f8: 30:c2:d9:18:07:f8:d1:3e:33:39:50:1a:fa:fc:d4:16:40:82: f6:59:7e:de:99:f9:31:a9:41:57:96:95:06:97:aa:23:b0:e6: 6c:ee:14:44:09:0d:f9:12:8d:53:33:6a:f0:76:8d:f4:e8:2f: 49:49:1f:c5:77:a9:2b:0b:1f:0b:0a:80:32:45:cc:ab:4a:24: 31:80:09:42:72:17:52:ec:a7:72:20:07:f5:7f:0b:98:82:7a: ae:b1:f1:24:1d:d9:66:76:f1:59:00:9f:2e:6c:a7:0f:52:74: ce:62:4f:06:09:06:95:c1:ba:05:39:2c:d7:d4:c6:52:ab:71: 22:38:30:c4:ab:b1:de:12:65:a5:f7:f6:16:4f:ec:e9:9d:d1: bd:88:1b:24:6d:00:af:eb:49:a0:cb:f4:50:9d:aa:51:93:d6: 81:39:2a:b9:9c:ca:b4:d0:91:4e:df:4a:30:2e:48:d0:94:8a: 66:2a:ec:d7:74:e9:a0:6b:e1:15:ce:55:8c:fc:96:fd:76:62: 67:c7:38:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeIFTrwxMEYouOE77Glt0bNddnXowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjI0MDAxMDA3WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTliZjQwOGRlODhmOWZkOTZiYWI5MTBmM2JjYWQ2MGQ0 ZjMyNTNiMWVmM2JjYTViNjIwZmU0MDA4MDhlZDRjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh3VF+pUndapD9vkkIobpGM0ov1FgEi7qHGubeBBYU2j47 7VjRNG2qQy71+425NRgEeTGBOi3y5Vt80dh2KMIb9kQqA9rM+cyu5u/fhwnJrldN lYvKhlST9ejmW2pgKZ2lnIUipyQI/n97vdyI260Kx7Pn4C6hX4WSkEA2v1mXqpo+ iByiZLMg4j/2p5I0/M69FKznQiuxbIBZEqD8kJ1V+kaTAj19OWVlOtOKFb5N6yzd zPs31J9odrBx6GtqwfZzjajKEBFemkPntquAF2Q9p0+aUjHj+EIT56fQHQ08x8Sf rMc6PLas6B+OWFmtX/F2MnS+iTQs+XioIYIM7jtHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL2CvbGOBmR6mPBI5qBRHbUs1g88wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y1NTgzNTlhLTJhMDItNGM4ZS05YTcyLTcxNTliMjU2OWQ2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBAGsFDldWtoQXDpRiMR0gRMNGTj/T QdFbiHzkiHF3PdhnMZEOxi/gf4HvxRKAA3JhIaOl7/Qr+DDC2RgH+NE+MzlQGvr8 1BZAgvZZft6Z+TGpQVeWlQaXqiOw5mzuFEQJDfkSjVMzavB2jfToL0lJH8V3qSsL HwsKgDJFzKtKJDGACUJyF1Lsp3IgB/V/C5iCeq6x8SQd2WZ28VkAny5spw9SdM5i TwYJBpXBugU5LNfUxlKrcSI4MMSrsd4SZaX39hZP7Omd0b2IGyRtAK/rSaDL9FCd qlGT1oE5KrmcyrTQkU7fSjAuSNCUimYq7Nd06aBr4RXOVYz8lv12YmfHOIA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:39:49 2026 by rpki-client