$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa File: 32fde2e1-3674-4a8c-9968-42521c781b0a.roa (raw, json) Hash identifier: apj4DYO8lYxEe0iEHU8xKbFucxDKZSOpuZ0dOdfNRGE= Subject key identifier: 27:70:AD:43:8B:AE:27:B7:D2:20:B6:B7:1F:74:83:63:E5:41:1F:94 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2A5D94FCDBD202EAA43FB1994724B3B61769D72A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa Signing time: Tue 21 Jul 2026 00:30:50 +0000 ROA not before: Tue 21 Jul 2026 00:30:50 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5d:94:fc:db:d2:02:ea:a4:3f:b1:99:47:24:b3:b6:17:69:d7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:30:50 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=610a624d3f94c3f663175999eb0d97074a98763927b6a4a4659b14185441a14d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:74:e8:61:d6:83:4c:e5:c6:64:f7:f2:90: 6e:1b:6f:bd:3b:2f:b1:b9:3e:99:f9:fb:0b:79:e9: 9c:05:fd:81:ab:fb:fb:ae:45:d5:8a:fb:43:19:9b: fc:21:0c:5c:a2:fa:7f:44:e6:a5:6b:c8:55:8d:c1: 90:0e:fd:39:44:25:42:95:34:72:30:4f:f0:32:e8: f2:13:58:89:be:a6:b8:02:8d:ed:1b:c4:24:32:97: c2:f6:19:3c:82:59:6d:f6:0d:44:56:c5:5c:e7:38: 80:82:05:ea:85:f0:c6:42:a3:51:7f:62:25:d7:9f: 9b:a3:e6:57:88:f5:a5:cb:a0:75:7c:54:f0:42:3f: 45:13:28:47:de:b5:4f:6a:2e:dc:55:41:78:6c:fb: b0:1b:48:cb:22:ff:45:03:6c:15:ae:8b:54:1c:f6: 4b:c9:92:f8:92:a4:eb:1f:00:f3:0e:13:fd:0b:b8: 93:8a:19:b9:26:2a:e2:62:be:3d:7d:7c:a2:80:1d: ad:01:17:56:eb:ba:83:2a:4a:58:ac:35:60:d5:38: 6e:d7:fc:ef:f2:67:f3:93:63:97:b9:5c:f4:13:f0: 69:bc:b6:95:69:c7:8b:4b:02:7f:b3:86:6b:17:8d: 4a:5c:cf:5c:d5:d6:83:27:dd:4f:fb:56:16:6f:b4: 1b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:AD:43:8B:AE:27:B7:D2:20:B6:B7:1F:74:83:63:E5:41:1F:94 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.238.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:66:d4:6c:6b:cb:74:fb:bf:cf:e9:b4:fe:52:d5:7f:c7:9d: 12:25:7d:93:cb:54:99:95:53:ba:40:9c:84:b4:0a:4e:ff:cb: 6c:1b:13:17:88:ab:28:dc:9f:20:9f:4d:50:99:0d:56:04:41: b1:b3:15:90:63:43:e8:5e:63:78:92:2c:63:f1:a1:18:57:7e: 65:1d:52:15:ce:4a:5f:56:1e:89:54:52:4b:98:ba:61:b4:52: 5f:a9:28:b1:49:45:e8:5d:a4:c5:2b:ec:19:a9:fe:a6:7d:9c: db:8e:57:21:73:81:d7:05:3f:e1:73:24:c4:cf:87:23:fb:a4: 1a:e9:b7:53:01:97:16:17:29:d1:b3:70:74:4b:0e:e9:83:e2: 0f:c8:91:d0:99:d3:5c:48:51:f1:45:33:d9:fb:23:55:61:e4: 77:a9:5a:9f:c7:e8:eb:4e:39:6f:ee:f2:fb:08:7c:9d:ec:3d: 76:eb:18:03:d4:e7:5d:9c:31:89:48:42:d5:ca:60:0e:ed:28: e5:66:85:5f:df:fe:90:e1:ec:35:ac:7e:c8:cb:56:1d:da:8d: 0d:25:b3:2a:65:ab:75:c8:4e:a0:29:55:d0:ba:84:00:97:3f: 42:3b:0d:50:ca:7d:4e:c1:11:90:9b:75:d7:bd:6c:3f:ba:56: b5:53:81:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKl2U/NvSAuqkP7GZRySzthdp1yowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAzMDUwWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTBhNjI0ZDNmOTRjM2Y2NjMxNzU5OTllYjBkOTcwNzRh OTg3NjM5MjdiNmE0YTQ2NTliMTQxODU0NDFhMTRkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJ/nToYdaDTOXGZPfykG4bb707L7G5Ppn5+wt56ZwF/YGr +/uuRdWK+0MZm/whDFyi+n9E5qVryFWNwZAO/TlEJUKVNHIwT/Ay6PITWIm+prgC je0bxCQyl8L2GTyCWW32DURWxVznOICCBeqF8MZCo1F/YiXXn5uj5leI9aXLoHV8 VPBCP0UTKEfetU9qLtxVQXhs+7AbSMsi/0UDbBWui1Qc9kvJkviSpOsfAPMOE/0L uJOKGbkmKuJivj19fKKAHa0BF1bruoMqSlisNWDVOG7X/O/yZ/OTY5e5XPQT8Gm8 tpVpx4tLAn+zhmsXjUpcz1zV1oMn3U/7VhZvtBvvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ3CtQ4uuJ7fSILa3H3SDY+VBH5QwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyZmRlMmUxLTM2NzQtNGE4Yy05OTY4LTQyNTIxYzc4MWIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++4wDQYJKoZIhvcNAQELBQADggEBAIxm1Gxry3T7v8/ptP5S1X/HnRIl fZPLVJmVU7pAnIS0Ck7/y2wbExeIqyjcnyCfTVCZDVYEQbGzFZBjQ+heY3iSLGPx oRhXfmUdUhXOSl9WHolUUkuYumG0Ul+pKLFJRehdpMUr7Bmp/qZ9nNuOVyFzgdcF P+FzJMTPhyP7pBrpt1MBlxYXKdGzcHRLDumD4g/IkdCZ01xIUfFFM9n7I1Vh5Hep Wp/H6OtOOW/u8vsIfJ3sPXbrGAPU512cMYlIQtXKYA7tKOVmhV/f/pDh7DWsfsjL Vh3ajQ0lsyplq3XITqApVdC6hACXP0I7DVDKfU7BEZCbdde9bD+6VrVTgSw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:28:41 2026 by rpki-client