$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa File: 2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa (raw, json) Hash identifier: OH8WaSygGgRgpKg5MXIuGyz/GY1WB7P7QYdydTCsFi0= Subject key identifier: 5D:DD:3E:E5:F5:9A:42:DD:59:99:65:8F:2C:51:39:9B:23:45:22:9F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1EA5902B49352F92680F7625FBB9432D9D3CE8D1 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa Signing time: Tue 21 Jul 2026 00:30:32 +0000 ROA not before: Tue 21 Jul 2026 00:30:32 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a5:90:2b:49:35:2f:92:68:0f:76:25:fb:b9:43:2d:9d:3c:e8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:30:32 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=f8392009fc5685dac3ea3629777395048a48bd560d4b416b4858f707f7f1c14c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:eb:25:73:ba:34:38:bb:a0:19:0f:1f:95: 9d:84:f2:0d:f1:92:85:8e:11:0f:dc:cf:db:4c:ed: cc:17:59:f3:15:6f:b0:fb:d7:38:59:aa:52:e1:8b: 3f:5c:06:66:9c:54:2e:35:2b:44:dd:36:79:0a:1c: 58:fe:52:3d:a4:c7:f4:73:30:b6:66:ba:b1:2c:ee: 36:3d:96:d3:99:a6:37:2a:f9:60:ee:bb:00:63:06: c0:8d:19:92:4b:9e:a6:c9:bb:21:53:73:eb:80:c1: 2a:78:45:c6:22:73:ff:fb:81:90:bd:05:8c:6b:0a: 12:e2:c9:3e:5c:99:86:e9:69:b8:ef:a1:0b:1f:a9: 87:1a:50:25:20:c6:4c:60:57:8d:0b:ac:69:dd:61: f8:05:b0:d2:d3:09:ed:05:76:56:af:55:76:4d:b5: 45:25:5a:d7:61:8c:3b:e0:91:d5:0d:f1:3d:b6:77: 5f:98:db:99:1b:d5:fa:64:7e:5d:c2:ed:04:5b:62: e6:ff:af:bc:e0:84:b8:6a:cf:e4:ac:83:4f:75:33: 3c:84:d3:26:ea:c5:18:c0:cf:ba:73:78:cf:95:7b: 62:86:31:71:2e:6e:f7:f1:36:f4:c0:e7:fa:d8:d6: 0c:e4:ee:4f:a1:7c:68:4b:ed:f3:37:19:64:40:01: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DD:3E:E5:F5:9A:42:DD:59:99:65:8F:2C:51:39:9B:23:45:22:9F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.229.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:e6:15:2c:68:a5:15:fc:5d:45:db:19:a1:bd:9b:f9:97:74: 59:61:63:5a:a9:81:95:34:09:c9:ed:23:b2:c8:79:b8:bd:f5: 92:87:86:e5:90:a4:91:5e:cb:63:9c:99:1b:db:7a:70:24:36: ce:14:e0:5e:22:3b:58:83:06:25:9e:81:78:a9:05:ba:05:16: 9c:37:42:bb:21:de:8e:09:92:27:df:33:53:fc:b9:7c:c8:72: 4e:40:4d:0e:ee:21:2b:7a:bd:61:10:98:e5:ef:4d:01:63:25: 0f:ca:60:54:c3:72:c5:24:a9:82:6f:8e:e9:f9:ed:45:8b:19: 78:6c:9d:c3:ab:c9:f1:53:f7:96:29:14:a1:51:f0:b2:04:c9: 7e:c8:d5:fd:32:6a:5e:04:c8:20:6e:5f:b7:b6:ac:19:e3:37: 34:37:5e:92:9a:d5:cf:d2:b4:71:6b:6c:90:b5:37:7b:43:2f: 72:c9:de:30:84:69:aa:b4:10:f1:cf:59:05:aa:90:9d:f0:8d: 0a:3a:d9:b8:17:7b:6f:75:66:a1:92:4b:77:57:b2:70:11:d8: aa:0a:50:c0:9a:e8:b9:80:11:92:24:75:68:58:72:b4:5b:dd: 95:16:28:2d:5c:d8:de:d4:6f:41:1d:77:c1:04:78:96:2e:e4: a4:dc:39:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHqWQK0k1L5JoD3Yl+7lDLZ086NEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAzMDMyWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODM5MjAwOWZjNTY4NWRhYzNlYTM2Mjk3NzczOTUwNDhh NDhiZDU2MGQ0YjQxNmI0ODU4ZjcwN2Y3ZjFjMTRjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeWOslc7o0OLugGQ8flZ2E8g3xkoWOEQ/cz9tM7cwXWfMV b7D71zhZqlLhiz9cBmacVC41K0TdNnkKHFj+Uj2kx/RzMLZmurEs7jY9ltOZpjcq +WDuuwBjBsCNGZJLnqbJuyFTc+uAwSp4RcYic//7gZC9BYxrChLiyT5cmYbpabjv oQsfqYcaUCUgxkxgV40LrGndYfgFsNLTCe0FdlavVXZNtUUlWtdhjDvgkdUN8T22 d1+Y25kb1fpkfl3C7QRbYub/r7zghLhqz+Ssg091MzyE0ybqxRjAz7pzeM+Ve2KG MXEubvfxNvTA5/rY1gzk7k+hfGhL7fM3GWRAAfJRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXd0+5fWaQt1ZmWWPLFE5myNFIp8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzJjZTBkYTEzLTBlODgtNGJmMi1iZDlkLTM1MTY4YmNlZmRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqeUwDQYJKoZIhvcNAQELBQADggEBAFrmFSxopRX8XUXbGaG9m/mXdFlh Y1qpgZU0CcntI7LIebi99ZKHhuWQpJFey2OcmRvbenAkNs4U4F4iO1iDBiWegXip BboFFpw3Qrsh3o4JkiffM1P8uXzIck5ATQ7uISt6vWEQmOXvTQFjJQ/KYFTDcsUk qYJvjun57UWLGXhsncOryfFT95YpFKFR8LIEyX7I1f0yal4EyCBuX7e2rBnjNzQ3 XpKa1c/StHFrbJC1N3tDL3LJ3jCEaaq0EPHPWQWqkJ3wjQo62bgXe291ZqGSS3dX snAR2KoKUMCa6LmAEZIkdWhYcrRb3ZUWKC1c2N7Ub0Edd8EEeJYu5KTcOe8= -----END CERTIFICATE-----Generated at Fri Jul 24 15:36:15 2026 by rpki-client