$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa File: 951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa (raw, json) Hash identifier: +VthYkHr2YilCJ4dAgGV7Cf80cnXKsvmkD7+Q3ox2f8= Subject key identifier: 2E:DA:FA:7D:54:BF:D3:67:CF:A3:66:D1:79:A8:7C:D9:4B:5D:39:17 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5CC3882DDA9C7C80C2A36861989F14194C95A8E1 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa Signing time: Tue 21 Jul 2026 00:30:13 +0000 ROA not before: Tue 21 Jul 2026 00:30:13 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c3:88:2d:da:9c:7c:80:c2:a3:68:61:98:9f:14:19:4c:95:a8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:30:13 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=56259ee35cdba489d8b52eb52ffa52e5e5f4148127c93de69999d6860f0393bd, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:be:d5:58:ba:8c:b3:1c:c1:9a:f6:78:b4: 76:64:f4:1b:36:01:6b:ec:7e:37:bb:a8:50:a6:2e: c2:fe:a8:20:37:07:95:e3:cc:50:72:e4:56:92:ab: 7c:ec:3e:24:b4:c3:c7:55:d0:fe:58:09:26:69:78: 9d:57:53:89:98:e9:7a:cc:b3:b3:68:de:09:50:40: fb:f8:08:dd:93:82:a2:25:d9:c9:4a:50:c3:9d:b1: 57:b1:ba:2d:73:45:b1:95:58:42:7c:d5:34:c5:b1: 0a:b0:a5:3f:25:4d:7c:ae:30:71:fa:03:d7:9e:5f: e2:2b:a0:ba:86:40:d8:2f:d2:ca:3f:c0:10:34:59: 55:7d:39:0b:8f:2c:13:ab:1d:1a:d8:11:72:2b:d4: eb:ad:ae:e4:2b:b0:87:fc:4b:ec:f1:37:3b:7a:2a: be:22:46:0a:ae:ad:ef:e8:06:b9:52:df:8c:ab:9f: 16:fa:78:64:bd:e4:74:00:13:13:5e:f7:7a:fc:d8: 74:99:07:bd:3b:6a:6d:8d:66:c0:69:9c:be:fb:0d: 0a:dc:8c:97:a4:ee:98:c6:54:38:c5:05:48:30:8f: 08:46:33:62:b5:42:0f:bb:72:50:df:0c:4c:d6:05: 13:0e:b9:cb:c7:c5:87:53:c2:f1:ce:21:6a:ba:16: 96:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:FA:7D:54:BF:D3:67:CF:A3:66:D1:79:A8:7C:D9:4B:5D:39:17 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/951b66f0-8993-47d2-9bf5-e85f4ad5e32b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.218.0/23 Signature Algorithm: sha256WithRSAEncryption 02:4c:44:4d:49:04:51:02:18:0a:72:59:91:e7:b8:56:b0:95: a2:dc:0c:8c:29:b0:d3:09:b0:fd:64:58:f3:db:0a:1a:21:e5: 33:c0:d6:79:ee:6e:dd:71:b0:c3:21:81:29:39:61:52:16:4b: a3:4e:fb:fc:eb:02:fc:74:73:12:f3:3f:ef:17:e4:be:9b:5a: e2:6b:68:17:1b:e4:ae:7a:cd:bf:7f:35:3d:b9:de:cd:5f:b2: ee:c6:47:76:c8:0a:c3:bd:ac:3d:c3:f9:24:bb:db:e2:9c:7f: 93:41:0b:ca:55:ea:e1:da:da:c3:88:23:f5:3b:20:b0:ad:ee: 38:34:55:d1:7b:e0:35:66:36:d8:ec:91:a9:7f:f1:83:5a:35: 98:aa:9d:f3:7b:f8:e3:01:f7:76:6d:7f:a6:3e:ab:8a:44:e0: 17:e7:4b:49:46:39:d5:64:cf:2a:40:67:1a:08:9c:95:d4:12: 9b:01:2d:b7:bb:4e:8d:7b:6c:1c:21:b4:04:74:0b:6f:45:9f: 70:d9:c7:20:30:db:54:2f:5d:72:13:d2:f8:8d:23:61:0a:92: 72:21:e3:b5:a8:82:fa:ad:93:37:34:9a:ac:a8:51:83:04:62: f7:a8:ec:4d:36:c8:fa:ed:c6:d6:c9:a3:40:ca:93:b7:a5:11: 56:b4:d1:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXMOILdqcfIDCo2hhmJ8UGUyVqOEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAzMDEzWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjI1OWVlMzVjZGJhNDg5ZDhiNTJlYjUyZmZhNTJlNWU1 ZjQxNDgxMjdjOTNkZTY5OTk5ZDY4NjBmMDM5M2JkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVu77VWLqMsxzBmvZ4tHZk9Bs2AWvsfje7qFCmLsL+qCA3 B5XjzFBy5FaSq3zsPiS0w8dV0P5YCSZpeJ1XU4mY6XrMs7No3glQQPv4CN2TgqIl 2clKUMOdsVexui1zRbGVWEJ81TTFsQqwpT8lTXyuMHH6A9eeX+IroLqGQNgv0so/ wBA0WVV9OQuPLBOrHRrYEXIr1OutruQrsIf8S+zxNzt6Kr4iRgqure/oBrlS34yr nxb6eGS95HQAExNe93r82HSZB707am2NZsBpnL77DQrcjJek7pjGVDjFBUgwjwhG M2K1Qg+7clDfDEzWBRMOucvHxYdTwvHOIWq6Fpb1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULtr6fVS/02fPo2bReah82UtdORcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzk1MWI2NmYwLTg5OTMtNDdkMi05YmY1LWU4NWY0YWQ1ZTMyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dowDQYJKoZIhvcNAQELBQADggEBAAJMRE1JBFECGApyWZHnuFawlaLc DIwpsNMJsP1kWPPbChoh5TPA1nnubt1xsMMhgSk5YVIWS6NO+/zrAvx0cxLzP+8X 5L6bWuJraBcb5K56zb9/NT253s1fsu7GR3bICsO9rD3D+SS72+Kcf5NBC8pV6uHa 2sOII/U7ILCt7jg0VdF74DVmNtjskal/8YNaNZiqnfN7+OMB93Ztf6Y+q4pE4Bfn S0lGOdVkzypAZxoInJXUEpsBLbe7To17bBwhtAR0C29Fn3DZxyAw21QvXXIT0viN I2EKknIh47Wogvqtkzc0mqyoUYMEYveo7E02yPrtxtbJo0DKk7elEVa00WY= -----END CERTIFICATE-----Generated at Fri Jul 24 07:22:42 2026 by rpki-client