$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa File: 3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa (raw, json) Hash identifier: by/SufJcrQ09UnlwTwnQ2u1cjSNDEKDoHLCmcEysXrk= Subject key identifier: C4:31:0A:03:1F:4D:8D:88:92:45:3D:00:57:A0:F3:75:25:AF:A3:C7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 69E30D688CF0EFDB90E52F31DE714C870C6B2F17 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa Signing time: Fri 03 Jul 2026 00:00:04 +0000 ROA not before: Fri 03 Jul 2026 00:00:04 +0000 ROA not after: Thu 01 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e3:0d:68:8c:f0:ef:db:90:e5:2f:31:de:71:4c:87:0c:6b:2f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 3 00:00:04 2026 GMT Not After : Oct 1 23:59:59 2026 GMT Subject: serialNumber=111b629912d83cc506b01baf3170c53147c8ad0ad6c4652dbb8e6080cd84b9b9, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:4e:89:0d:ae:25:ea:21:a9:01:30:da:bb: bc:78:38:16:a1:08:67:36:be:50:e4:75:4c:7f:d2: b9:5c:4d:08:15:8d:c4:1c:2c:e3:91:cd:43:b1:db: 00:7a:82:a9:25:49:fe:c5:41:3c:1f:c5:16:87:53: b5:a1:74:09:df:40:da:cb:30:72:c2:91:8b:b4:a6: d8:c4:e2:95:fe:60:c2:54:57:07:6b:e4:5b:29:9a: d0:f0:7f:a2:a6:f1:57:be:49:5a:da:78:25:15:ae: b8:ce:4c:c9:fd:21:dd:39:03:0c:ff:a9:fd:62:75: 41:2b:c6:11:11:71:e6:cf:d2:7c:ea:30:37:ee:7d: fe:45:f8:b3:29:eb:bf:cd:04:f2:6e:64:e6:7b:2e: ca:ce:0b:bb:de:db:09:fc:22:8e:12:91:7a:87:47: aa:60:c5:49:12:cc:76:80:9f:17:27:92:ad:79:86: 2e:f1:d1:6f:e8:ed:7f:06:3c:87:82:70:04:db:b1: e3:33:be:91:48:51:5c:d9:b7:58:3e:2c:ac:f0:c4: 89:33:b0:c2:dd:26:2d:3a:7c:5f:df:47:b4:a6:32: 23:b8:49:23:3a:83:77:c0:f1:17:d8:5d:13:86:be: 9c:06:09:73:35:50:a9:c7:2c:23:41:a5:8b:97:20: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:31:0A:03:1F:4D:8D:88:92:45:3D:00:57:A0:F3:75:25:AF:A3:C7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.188.0/24 Signature Algorithm: sha256WithRSAEncryption 94:22:58:5e:bb:1a:aa:0a:d0:30:f0:55:76:75:40:a3:6b:d7: e2:3e:84:c6:0f:ab:8c:c9:49:5e:a7:9d:90:f0:3f:c1:6d:4e: 2b:7d:d5:fd:58:fa:17:46:89:cf:59:e3:78:55:84:5c:a2:87: af:4e:1a:fc:45:a0:01:40:68:1e:3b:44:73:02:13:4d:cb:a8: 79:47:9a:51:21:77:5f:5f:8d:e1:e0:a3:5f:3c:2e:ea:f0:34: 78:d8:ac:73:69:7d:f3:67:60:5b:d1:18:8f:b6:b3:64:3d:41: f6:3f:e2:bb:50:fa:2e:a2:b2:da:37:75:fe:fb:c4:38:fc:93: 73:aa:25:06:5c:18:b1:84:3c:98:90:7e:ca:84:20:e6:cb:58: ed:32:fd:8b:30:c4:a6:47:66:ea:c0:b9:07:3c:64:9d:f3:c2: 81:75:70:e2:01:9e:18:bd:69:a7:8e:63:c9:53:32:53:59:c0: 6e:e2:14:66:1d:0a:05:ac:ec:0e:7b:60:e9:c4:6d:57:81:34: ab:d3:d0:74:9c:0c:d9:74:11:50:11:5f:7e:13:af:23:ea:60: b2:0b:67:fb:e5:1d:32:28:15:ff:1f:52:c9:22:ae:0a:c0:1f: 5d:5b:bc:11:4d:4a:8e:d8:53:4f:0b:47:48:a0:53:43:73:3f: ee:77:58:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaeMNaIzw79uQ5S8x3nFMhwxrLxcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzAzMDAwMDA0WhcNMjYxMDAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTFiNjI5OTEyZDgzY2M1MDZiMDFiYWYzMTcwYzUzMTQ3 YzhhZDBhZDZjNDY1MmRiYjhlNjA4MGNkODRiOWI5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRFU6JDa4l6iGpATDau7x4OBahCGc2vlDkdUx/0rlcTQgV jcQcLOORzUOx2wB6gqklSf7FQTwfxRaHU7WhdAnfQNrLMHLCkYu0ptjE4pX+YMJU Vwdr5FspmtDwf6Km8Ve+SVraeCUVrrjOTMn9Id05Awz/qf1idUErxhERcebP0nzq MDfuff5F+LMp67/NBPJuZOZ7LsrOC7ve2wn8Io4SkXqHR6pgxUkSzHaAnxcnkq15 hi7x0W/o7X8GPIeCcATbseMzvpFIUVzZt1g+LKzwxIkzsMLdJi06fF/fR7SmMiO4 SSM6g3fA8RfYXROGvpwGCXM1UKnHLCNBpYuXICAPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxDEKAx9NjYiSRT0AV6DzdSWvo8cwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmZjkzMDliLTUxNjctNGFhMS04MzVmLTUzZmZmNTFlZjZmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3bwwDQYJKoZIhvcNAQELBQADggEBAJQiWF67GqoK0DDwVXZ1QKNr1+I+ hMYPq4zJSV6nnZDwP8FtTit91f1Y+hdGic9Z43hVhFyih69OGvxFoAFAaB47RHMC E03LqHlHmlEhd19fjeHgo188LurwNHjYrHNpffNnYFvRGI+2s2Q9QfY/4rtQ+i6i sto3df77xDj8k3OqJQZcGLGEPJiQfsqEIObLWO0y/YswxKZHZurAuQc8ZJ3zwoF1 cOIBnhi9aaeOY8lTMlNZwG7iFGYdCgWs7A57YOnEbVeBNKvT0HScDNl0EVARX34T ryPqYLILZ/vlHTIoFf8fUskirgrAH11bvBFNSo7YU08LR0igU0NzP+53WFM= -----END CERTIFICATE-----Generated at Fri Jul 24 03:45:29 2026 by rpki-client