$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa File: addfda24-421e-4b45-80e1-dd5a255777c5.roa (raw, json) Hash identifier: 5b6PEJah12Hr9U+iPY1sC9cu3Z0e/8Go0tIfCMGI3Qk= Subject key identifier: 43:21:F5:69:DC:CD:C6:FA:E4:44:34:88:90:46:A4:F5:F7:C4:94:3C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 28057E12A28BCF314C80D4B00CAA6141BA4BA929 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa Signing time: Tue 21 Jul 2026 00:20:08 +0000 ROA not before: Tue 21 Jul 2026 00:20:08 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:05:7e:12:a2:8b:cf:31:4c:80:d4:b0:0c:aa:61:41:ba:4b:a9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:20:08 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=86319561a3a6b3eb8092b90c5c00fc827f01826e17bba6f4d4a42064d687e589, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:6e:5a:e3:2c:80:c0:ab:96:39:78:cc:b5: d9:69:be:4e:30:2d:50:31:81:4a:95:a5:cc:f6:05: 16:d3:8b:f3:1c:2d:c3:67:0e:b5:04:75:78:e7:18: af:20:96:73:82:7c:1f:03:2d:8b:59:72:6a:8a:b6: cb:13:98:82:a4:11:3e:5a:00:10:68:0f:1b:7d:c0: 99:47:06:e1:10:1a:55:06:4c:fe:e3:31:ca:46:7a: 1e:86:f0:e1:0e:10:40:d2:ea:95:70:0c:c4:90:65: 85:92:26:45:89:d0:95:c6:b4:f5:32:be:ca:87:64: 2a:2a:08:01:68:0e:ed:ae:f1:3b:ca:ae:82:b3:7b: d7:ed:e5:8b:cc:be:16:79:c2:a8:6f:16:53:fa:aa: c6:23:11:77:9c:3e:59:5c:70:e8:16:56:de:c0:03: fe:d2:c8:80:a8:bd:47:4b:77:3b:ac:3a:d6:dd:c6: 32:cf:e7:b5:29:58:98:aa:f3:4d:38:2b:7b:21:7c: 6e:64:09:cd:ce:12:f0:80:f9:92:82:bd:9e:3c:82: d8:1d:b6:89:3d:db:e6:cd:e5:26:5d:4c:4f:ce:df: f4:24:23:5c:cc:f7:f9:6c:c0:b0:e6:ff:19:86:98: fd:5a:9e:00:52:e2:33:ef:6a:44:7c:30:ac:cd:64: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:21:F5:69:DC:CD:C6:FA:E4:44:34:88:90:46:A4:F5:F7:C4:94:3C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/addfda24-421e-4b45-80e1-dd5a255777c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.228.0/22 Signature Algorithm: sha256WithRSAEncryption 29:2c:bd:bb:c1:c3:e6:62:b1:37:9e:8e:a0:47:f1:05:9c:ab: be:36:55:b1:dd:08:7d:ee:cb:14:4a:f3:60:df:cd:cc:5c:7f: ef:bd:30:58:7a:2e:56:70:17:f2:20:14:c5:6e:d0:8a:d9:fc: fe:00:dd:71:86:2c:27:63:d0:d2:5f:e5:39:e7:4f:1a:72:bb: a6:fb:a1:35:79:37:6c:6d:03:28:91:20:18:f8:fa:dd:37:14: f3:cc:27:d4:07:0d:98:53:a5:47:f1:d2:ac:5c:fe:ef:26:eb: a8:28:ba:49:34:b7:c4:c7:10:ce:75:81:9a:57:2d:17:11:ec: 4d:1e:4d:13:7d:ae:51:82:1a:a8:bb:f6:f1:23:74:26:a6:15: 0f:67:72:f9:51:b6:f4:c1:e4:bb:80:32:6b:8f:87:8e:63:b5: b3:30:ee:e8:63:d7:15:f6:07:a1:90:5e:68:36:79:14:08:1d: 34:56:28:d3:08:d6:ce:c9:fa:47:74:4e:b2:f2:61:f5:d1:c0: 5a:ac:f5:44:c8:20:28:13:82:ec:e3:a7:bf:ff:3b:37:7e:0b: 4c:e4:82:1b:b7:66:6e:5b:0f:b3:4e:b1:68:77:25:2b:b1:11: 71:5e:2f:55:dc:65:11:f5:81:e0:8e:97:34:c9:f5:ef:a7:7f: 19:9f:12:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKAV+EqKLzzFMgNSwDKphQbpLqSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAyMDA4WhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjMxOTU2MWEzYTZiM2ViODA5MmI5MGM1YzAwZmM4Mjdm MDE4MjZlMTdiYmE2ZjRkNGE0MjA2NGQ2ODdlNTg5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWHm5a4yyAwKuWOXjMtdlpvk4wLVAxgUqVpcz2BRbTi/Mc LcNnDrUEdXjnGK8glnOCfB8DLYtZcmqKtssTmIKkET5aABBoDxt9wJlHBuEQGlUG TP7jMcpGeh6G8OEOEEDS6pVwDMSQZYWSJkWJ0JXGtPUyvsqHZCoqCAFoDu2u8TvK roKze9ft5YvMvhZ5wqhvFlP6qsYjEXecPllccOgWVt7AA/7SyICovUdLdzusOtbd xjLP57UpWJiq8004K3shfG5kCc3OEvCA+ZKCvZ48gtgdtok92+bN5SZdTE/O3/Qk I1zM9/lswLDm/xmGmP1angBS4jPvakR8MKzNZAuHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQyH1adzNxvrkRDSIkEak9ffElDwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2FkZGZkYTI0LTQyMWUtNGI0NS04MGUxLWRkNWEyNTU3NzdjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBACksvbvBw+ZisTeejqBH8QWcq742 VbHdCH3uyxRK82Dfzcxcf++9MFh6LlZwF/IgFMVu0IrZ/P4A3XGGLCdj0NJf5Tnn Txpyu6b7oTV5N2xtAyiRIBj4+t03FPPMJ9QHDZhTpUfx0qxc/u8m66goukk0t8TH EM51gZpXLRcR7E0eTRN9rlGCGqi79vEjdCamFQ9ncvlRtvTB5LuAMmuPh45jtbMw 7uhj1xX2B6GQXmg2eRQIHTRWKNMI1s7J+kd0TrLyYfXRwFqs9UTIICgTguzjp7// Ozd+C0zkghu3Zm5bD7NOsWh3JSuxEXFeL1XcZRH1geCOlzTJ9e+nfxmfEiQ= -----END CERTIFICATE-----Generated at Fri Jul 24 10:43:25 2026 by rpki-client