$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4714ad7b-a768-483a-bdb9-c35a68830b39.roa File: 4714ad7b-a768-483a-bdb9-c35a68830b39.roa (raw, json) Hash identifier: v2Z4KpjIQrpgATenDoX5OzFtksDe9rKBDFREjM8JL+s= Subject key identifier: 0E:61:C0:42:1A:66:EF:7C:F9:ED:41:6C:BD:D9:61:EA:24:02:68:5C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5A6D4989456BFED6A4440B9A6A065140B075A829 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4714ad7b-a768-483a-bdb9-c35a68830b39.roa Signing time: Tue 21 Jul 2026 00:30:53 +0000 ROA not before: Tue 21 Jul 2026 00:30:53 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6d:49:89:45:6b:fe:d6:a4:44:0b:9a:6a:06:51:40:b0:75:a8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:30:53 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=2519f5bce42fc5a329d7573a904a29bd552f1a52a1bb9bdab2c4b932e0b691dd, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:ba:1d:91:48:a2:95:ec:56:f2:ea:f4:10: e9:a2:67:0d:52:9f:1e:0d:1e:79:02:f3:42:27:bd: 45:71:31:94:7e:ec:43:83:52:0c:22:9c:03:2c:24: 24:60:0a:9c:0b:59:57:13:ff:bb:7c:95:7b:9b:82: f5:37:3d:66:3b:1f:ad:de:e7:3a:46:51:59:f8:cd: 05:40:00:9a:7b:3c:23:53:16:2d:28:0b:3b:8d:d3: c0:a2:48:2b:41:38:2f:64:81:00:68:b6:63:65:99: 73:60:3e:18:19:5c:63:99:c0:9c:37:8a:b5:cf:97: af:a8:f8:bb:18:76:25:9c:cd:e0:41:12:55:ea:78: a9:97:d6:35:4d:93:52:0f:78:e2:38:c2:6c:78:86: d5:02:56:72:c0:ec:9d:d1:0d:e2:c6:11:7d:ca:30: 04:24:2c:13:a9:f0:2a:6c:1a:bc:7a:c8:22:bb:41: bc:f3:6c:69:b3:f1:49:e8:fe:62:f7:b2:eb:3c:37: f3:e1:8f:6d:d0:13:31:ef:1a:ec:e5:9a:e1:3b:13: 65:16:ce:f9:a8:83:e9:40:d0:3d:89:08:38:7b:c7: ff:78:36:9e:0b:19:ae:79:0e:b8:14:2e:60:2a:58: bd:2f:5a:56:d1:f2:46:11:20:79:39:fe:cb:8b:f0: fa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:61:C0:42:1A:66:EF:7C:F9:ED:41:6C:BD:D9:61:EA:24:02:68:5C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4714ad7b-a768-483a-bdb9-c35a68830b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.216.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ca:41:3a:23:ea:37:74:e6:4a:dc:e9:ab:16:0d:e5:93:aa: fe:ed:aa:c1:45:c7:1f:8a:6f:90:97:a8:2a:60:81:a3:cc:c7: fa:e9:d4:1e:0d:72:78:bd:41:61:97:dd:ab:77:9c:35:09:ca: 99:6c:09:0b:72:0b:a1:9f:90:84:c1:ff:eb:da:41:e2:7b:c1: 43:bf:8e:e5:40:b1:38:49:b7:78:d9:a2:7e:55:1f:e9:f1:98: 16:0e:eb:56:ce:ff:f2:c5:34:5b:d6:fa:2c:e3:51:fe:cd:fd: a6:ea:64:23:f3:8a:3d:8f:b1:e0:cf:62:7c:76:83:dc:88:70: 98:00:f7:11:90:d9:8c:f2:43:41:61:69:c8:bb:b7:bd:29:41: 2f:7b:d0:5c:83:e7:be:76:03:dd:d6:67:de:5a:b8:8d:0e:24: 19:77:ab:32:22:0a:02:79:67:b3:ae:b9:14:88:8c:38:7a:bf: 9b:59:35:73:86:12:e0:b0:19:11:ba:73:34:db:7f:ea:28:b0: 9e:89:17:a3:fa:f7:60:d4:d6:91:8b:a8:66:be:2f:16:af:62: e2:82:3a:d1:62:62:d5:ae:87:d8:f0:2e:6b:b0:41:b3:37:02: 3f:96:ce:06:02:f3:17:0d:cf:96:43:ac:a8:3b:0c:d8:9e:a4: 5f:16:f2:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWm1JiUVr/takRAuaagZRQLB1qCkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAzMDUzWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTE5ZjViY2U0MmZjNWEzMjlkNzU3M2E5MDRhMjliZDU1 MmYxYTUyYTFiYjliZGFiMmM0YjkzMmUwYjY5MWRkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnVrodkUiilexW8ur0EOmiZw1Snx4NHnkC80InvUVxMZR+ 7EODUgwinAMsJCRgCpwLWVcT/7t8lXubgvU3PWY7H63e5zpGUVn4zQVAAJp7PCNT Fi0oCzuN08CiSCtBOC9kgQBotmNlmXNgPhgZXGOZwJw3irXPl6+o+LsYdiWczeBB ElXqeKmX1jVNk1IPeOI4wmx4htUCVnLA7J3RDeLGEX3KMAQkLBOp8CpsGrx6yCK7 QbzzbGmz8Uno/mL3sus8N/Phj23QEzHvGuzlmuE7E2UWzvmog+lA0D2JCDh7x/94 Np4LGa55DrgULmAqWL0vWlbR8kYRIHk5/suL8PqlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDmHAQhpm73z57UFsvdlh6iQCaFwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzQ3MTRhZDdiLWE3NjgtNDgzYS1iZGI5LWMzNWE2ODgzMGIzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dgwDQYJKoZIhvcNAQELBQADggEBABbKQToj6jd05krc6asWDeWTqv7t qsFFxx+Kb5CXqCpggaPMx/rp1B4Ncni9QWGX3at3nDUJyplsCQtyC6GfkITB/+va QeJ7wUO/juVAsThJt3jZon5VH+nxmBYO61bO//LFNFvW+izjUf7N/abqZCPzij2P seDPYnx2g9yIcJgA9xGQ2YzyQ0Fhaci7t70pQS970FyD5752A93WZ95auI0OJBl3 qzIiCgJ5Z7OuuRSIjDh6v5tZNXOGEuCwGRG6czTbf+oosJ6JF6P692DU1pGLqGa+ LxavYuKCOtFiYtWuh9jwLmuwQbM3Aj+WzgYC8xcNz5ZDrKg7DNiepF8W8mk= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:31 2026 by rpki-client