$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/14a2c378-9504-481e-9866-906c67b80678.roa File: 14a2c378-9504-481e-9866-906c67b80678.roa (raw, json) Hash identifier: Az/uMUnXBoEGypz9k11zJxo23liw+CSV1lfOZQ98ouA= Subject key identifier: 10:E3:48:AD:37:46:84:15:20:C2:D8:F7:2D:01:12:10:20:B4:97:AC Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 12589A1DD6FAE2192E6D90CC622D84E5CB19EEB5 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/14a2c378-9504-481e-9866-906c67b80678.roa Signing time: Fri 03 Jul 2026 00:00:03 +0000 ROA not before: Fri 03 Jul 2026 00:00:03 +0000 ROA not after: Thu 01 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:58:9a:1d:d6:fa:e2:19:2e:6d:90:cc:62:2d:84:e5:cb:19:ee:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 3 00:00:03 2026 GMT Not After : Oct 1 23:59:59 2026 GMT Subject: serialNumber=b4345657c2c6249db20a204df3d937715f42bfdff1055e6e9d082678429e747d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ea:b1:76:22:14:5e:bf:2c:c1:b4:ba:79:e0: 99:6b:99:e1:fa:94:78:f1:29:4f:17:42:f0:03:5c: d2:e7:9e:ce:d2:a2:60:c3:9a:dd:ba:2c:6b:bf:63: 8f:dd:3b:ad:e6:7c:71:f7:c3:ff:44:86:39:e4:63: e2:b0:45:c9:76:c7:fc:2e:15:b9:05:80:07:ad:8d: 60:04:3b:10:e5:49:bc:30:4c:e8:35:7b:fd:1a:6b: 67:1d:20:48:ba:b9:80:5e:0b:5f:03:96:0f:6f:5f: ab:a1:24:4e:ff:ac:ab:a5:eb:b4:81:dd:70:0c:ea: 52:11:96:3f:8b:f8:ed:b4:db:70:12:ba:41:8f:47: ff:a5:af:bc:2e:40:73:18:7b:76:8c:c1:dd:07:a5: d5:13:54:4d:25:12:1a:44:10:ad:87:f3:25:31:b2: 5d:4a:00:2f:ec:36:91:d5:91:2f:53:ad:bb:56:75: dc:4f:cb:0c:35:d9:52:b9:e3:dd:e2:92:36:56:32: 46:d1:f1:1a:ce:10:a7:9b:5e:df:0c:5c:2c:64:e5: d6:a0:d9:73:43:6c:3c:cf:2a:58:9e:97:3f:32:09: f9:a1:ab:52:65:2a:b0:fa:bd:4d:80:73:3a:ed:6a: b9:0a:23:33:41:03:df:2b:5d:96:cf:49:af:2f:8d: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E3:48:AD:37:46:84:15:20:C2:D8:F7:2D:01:12:10:20:B4:97:AC X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/14a2c378-9504-481e-9866-906c67b80678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.187.0/24 Signature Algorithm: sha256WithRSAEncryption 62:95:fc:a3:36:3b:02:3a:1b:b3:7d:40:82:b1:2b:19:c9:15: 1b:1d:4b:cd:e2:43:22:fc:33:a6:de:7b:04:1a:a7:94:9d:1c: a9:0d:7a:b0:b1:c8:65:70:cb:80:3f:c1:9b:f0:41:f5:50:77: 2e:45:e5:cd:14:fb:30:41:cc:8b:75:7d:e3:32:61:e6:f9:f7: 6c:97:8d:6c:2f:66:ac:c1:3b:52:a0:5a:1f:5c:54:dc:8c:20: 46:a4:1b:67:b6:bf:47:02:64:1f:f4:5c:29:2e:67:b6:62:1d: 9d:df:57:8d:4e:b9:d1:5d:e1:3d:54:93:39:9d:05:4d:4d:a6: 8e:58:31:33:dd:e5:79:a3:35:52:41:5b:4a:c8:58:45:58:76: 22:ae:8a:f7:ab:1f:86:7c:c8:c7:b7:82:26:33:d8:56:94:4f: 62:dd:2c:9f:40:f8:57:df:f1:0f:b8:1e:a7:d6:4e:7c:f6:1b: a8:2f:a7:92:1f:53:31:2f:89:71:d7:1b:97:d1:4c:21:d8:e2: 69:c7:d3:85:ab:ab:3b:51:a0:25:f5:db:40:f9:3f:61:bc:77: f8:da:81:db:f9:72:db:02:5a:30:f5:54:40:c0:2b:70:9e:62: 41:9c:eb:12:de:12:b8:65:9f:67:05:e2:89:3e:bd:c4:ad:a4: c7:cd:84:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEliaHdb64hkubZDMYi2E5csZ7rUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzAzMDAwMDAzWhcNMjYxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDM0NTY1N2MyYzYyNDlkYjIwYTIwNGRmM2Q5Mzc3MTVm NDJiZmRmZjEwNTVlNmU5ZDA4MjY3ODQyOWU3NDdkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDu6rF2IhRevyzBtLp54JlrmeH6lHjxKU8XQvADXNLnns7S omDDmt26LGu/Y4/dO63mfHH3w/9EhjnkY+KwRcl2x/wuFbkFgAetjWAEOxDlSbww TOg1e/0aa2cdIEi6uYBeC18Dlg9vX6uhJE7/rKul67SB3XAM6lIRlj+L+O2023AS ukGPR/+lr7wuQHMYe3aMwd0HpdUTVE0lEhpEEK2H8yUxsl1KAC/sNpHVkS9TrbtW ddxPyww12VK5493ikjZWMkbR8RrOEKebXt8MXCxk5dag2XNDbDzPKlielz8yCfmh q1JlKrD6vU2AczrtarkKIzNBA98rXZbPSa8vjYKTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEONIrTdGhBUgwtj3LQESECC0l6wwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzE0YTJjMzc4LTk1MDQtNDgxZS05ODY2LTkwNmM2N2I4MDY3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3bswDQYJKoZIhvcNAQELBQADggEBAGKV/KM2OwI6G7N9QIKxKxnJFRsd S83iQyL8M6beewQap5SdHKkNerCxyGVwy4A/wZvwQfVQdy5F5c0U+zBBzIt1feMy Yeb592yXjWwvZqzBO1KgWh9cVNyMIEakG2e2v0cCZB/0XCkuZ7ZiHZ3fV41OudFd 4T1UkzmdBU1Npo5YMTPd5XmjNVJBW0rIWEVYdiKuiverH4Z8yMe3giYz2FaUT2Ld LJ9A+Fff8Q+4HqfWTnz2G6gvp5IfUzEviXHXG5fRTCHY4mnH04WrqztRoCX120D5 P2G8d/jagdv5ctsCWjD1VEDAK3CeYkGc6xLeErhln2cF4ok+vcStpMfNhGs= -----END CERTIFICATE-----Generated at Fri Jul 24 07:34:33 2026 by rpki-client