$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8621c38c-da14-4436-8fad-6252da797f1a.roa File: 8621c38c-da14-4436-8fad-6252da797f1a.roa (raw, json) Hash identifier: aNUtvHzfz3jORZ1jxXvU+RLewc5SAB4yg6Kvhy+abqI= Subject key identifier: C0:78:E1:C9:A8:38:DB:CE:CF:D5:4D:B9:40:62:65:12:51:FF:7C:EC Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 64D4FD9770CB2319D8FB064043478FFE8D14EE4B Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8621c38c-da14-4436-8fad-6252da797f1a.roa Signing time: Tue 21 Jul 2026 00:30:34 +0000 ROA not before: Tue 21 Jul 2026 00:30:34 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d4:fd:97:70:cb:23:19:d8:fb:06:40:43:47:8f:fe:8d:14:ee:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:30:34 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=49ab479880a0e8feefb003316415e2802fcd03daa6ed37c7dd5b56a497e0b02c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:b4:1c:1d:ff:0d:6f:30:18:f6:0e:58:3c: 89:26:88:14:4b:c7:c2:ef:95:51:50:82:4b:f0:d8: 5e:a7:da:8c:f3:80:53:1c:1b:db:8c:29:5e:29:b0: 6a:e9:92:56:94:e1:93:b6:d9:8b:d4:7e:63:18:77: 5f:a9:2b:8a:26:02:f4:ce:a1:0c:f0:91:3e:6f:15: 14:ac:6e:1b:57:7f:bb:83:ce:4f:9c:72:6c:ca:07: af:ec:e7:9f:b4:8f:f4:a5:d5:de:ea:85:66:b2:5f: a7:c4:a9:be:91:74:42:97:ed:b3:00:69:a0:5c:f0: 50:a5:03:36:95:ee:6c:79:7d:d1:f3:71:5f:c5:6d: 34:cd:fd:34:64:44:33:f8:a3:a0:bb:f9:a5:dc:5d: 75:de:b2:72:d7:db:26:81:14:a1:df:4a:c3:9f:fb: 2b:98:aa:ba:12:0b:40:c9:69:99:cd:d1:47:89:57: 42:0a:b0:27:44:8a:83:ed:7e:57:c0:33:e0:66:03: c4:25:84:fd:e8:5b:ac:2f:81:fa:1f:fb:3c:a9:4e: da:f8:d4:47:76:a3:33:83:9c:2a:fa:79:4c:66:3a: 0b:c0:50:7e:f5:ad:5c:94:cf:5e:2f:1b:84:7e:84: 49:f1:50:91:d5:0e:a9:ce:81:3d:b5:17:2f:b8:6e: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:78:E1:C9:A8:38:DB:CE:CF:D5:4D:B9:40:62:65:12:51:FF:7C:EC X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8621c38c-da14-4436-8fad-6252da797f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.222.0/24 Signature Algorithm: sha256WithRSAEncryption 88:b3:9e:bc:c1:c5:1f:f6:6d:0d:cc:d0:5c:db:64:e4:82:0b: 1d:11:a0:56:46:77:1f:b3:ec:38:bc:15:d9:76:fb:f5:75:22: 7e:dc:5e:e8:bc:68:76:33:37:a0:80:c8:ec:82:b7:3d:0e:61: 78:39:e5:2c:bd:84:fd:7d:4a:23:bf:e8:bb:56:70:f1:8f:64: a8:f2:a9:8c:20:97:ea:8a:39:85:c7:d6:ac:53:26:30:8b:20: de:9b:43:e0:07:36:5c:db:3c:26:0d:91:ef:0d:0d:3c:7c:65: c5:50:dd:ce:b6:99:0d:4c:9d:29:56:08:3b:5f:e1:87:67:e1: 86:07:27:90:5f:7d:80:40:ee:82:b2:53:26:93:ad:35:79:d5: 34:a5:74:fb:4a:ad:a3:40:a7:b9:ba:b4:a6:b1:05:dc:74:04: a3:df:d8:ec:61:68:21:85:59:2c:c2:7f:e4:e1:0a:99:d6:f9: 03:60:1f:eb:d0:14:f9:6e:09:c9:cb:23:ca:6a:2b:97:43:88: 0d:92:dc:a1:e9:d4:54:38:59:7d:76:f5:b9:29:c3:5a:bb:66: 4e:ed:26:cd:49:66:86:6e:fa:f5:40:25:86:c3:d2:5c:6a:11: ec:3a:3f:b4:21:dc:ea:cc:f0:33:b6:6c:6e:ed:4b:9c:fb:3a: 99:d7:5d:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZNT9l3DLIxnY+wZAQ0eP/o0U7kswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAzMDM0WhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OWFiNDc5ODgwYTBlOGZlZWZiMDAzMzE2NDE1ZTI4MDJm Y2QwM2RhYTZlZDM3YzdkZDViNTZhNDk3ZTBiMDJjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNw7QcHf8NbzAY9g5YPIkmiBRLx8LvlVFQgkvw2F6n2ozz gFMcG9uMKV4psGrpklaU4ZO22YvUfmMYd1+pK4omAvTOoQzwkT5vFRSsbhtXf7uD zk+ccmzKB6/s55+0j/Sl1d7qhWayX6fEqb6RdEKX7bMAaaBc8FClAzaV7mx5fdHz cV/FbTTN/TRkRDP4o6C7+aXcXXXesnLX2yaBFKHfSsOf+yuYqroSC0DJaZnN0UeJ V0IKsCdEioPtflfAM+BmA8QlhP3oW6wvgfof+zypTtr41Ed2ozODnCr6eUxmOgvA UH71rVyUz14vG4R+hEnxUJHVDqnOgT21Fy+4bqpBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwHjhyag4287P1U25QGJlElH/fOwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzg2MjFjMzhjLWRhMTQtNDQzNi04ZmFkLTYyNTJkYTc5N2YxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d4wDQYJKoZIhvcNAQELBQADggEBAIiznrzBxR/2bQ3M0FzbZOSCCx0R oFZGdx+z7Di8Fdl2+/V1In7cXui8aHYzN6CAyOyCtz0OYXg55Sy9hP19SiO/6LtW cPGPZKjyqYwgl+qKOYXH1qxTJjCLIN6bQ+AHNlzbPCYNke8NDTx8ZcVQ3c62mQ1M nSlWCDtf4Ydn4YYHJ5BffYBA7oKyUyaTrTV51TSldPtKraNAp7m6tKaxBdx0BKPf 2OxhaCGFWSzCf+ThCpnW+QNgH+vQFPluCcnLI8pqK5dDiA2S3KHp1FQ4WX129bkp w1q7Zk7tJs1JZoZu+vVAJYbD0lxqEew6P7Qh3OrM8DO2bG7tS5z7OpnXXa0= -----END CERTIFICATE-----Generated at Fri Jul 24 07:29:47 2026 by rpki-client