$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa File: b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa (raw, json) Hash identifier: RaKo58cny1z82ZwC9/nfQcobqHAn24YwbLs0sSAN3ao= Subject key identifier: 92:3A:D6:2D:E3:7D:1D:6D:F4:90:27:49:C9:4C:5B:6B:0F:8A:D6:74 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1DFEACD032C19AF0C7F4A4F39F93D8709BF0B26C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa Signing time: Tue 21 Jul 2026 00:30:31 +0000 ROA not before: Tue 21 Jul 2026 00:30:31 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fe:ac:d0:32:c1:9a:f0:c7:f4:a4:f3:9f:93:d8:70:9b:f0:b2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:30:31 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=6496610207440e227a52cec4c4720a4a6c73f9f289010b439e269ad17aa837f6, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:75:d5:7d:26:98:f1:fb:f2:49:7c:82:55:34: f2:15:17:dd:b8:3a:de:40:fe:4e:bb:f5:e8:aa:83: 09:a6:c4:49:4d:1e:e3:e2:10:f1:39:71:24:ac:5d: 46:24:c4:b4:e6:68:0c:3b:56:e4:6b:0b:cd:a7:bb: e3:1d:e5:c5:a7:ed:60:ab:84:6a:31:37:18:3c:bd: 3e:c0:87:aa:75:8a:89:04:da:43:e8:a3:d9:02:29: 76:6d:7f:04:63:86:fb:b9:ea:30:aa:b0:8e:53:bd: 4c:28:14:e6:aa:68:c1:d2:fc:ca:9d:e6:c6:4b:56: 76:fd:a7:b1:21:ca:d5:9a:36:d0:ef:41:2f:bb:a3: 0c:26:9b:4f:34:8d:cf:47:c7:16:b9:6c:e9:c6:da: d5:e6:d4:76:80:86:fc:21:4c:21:ac:f7:f4:c5:8f: ef:68:c7:1b:42:d9:b6:a2:3d:51:40:1b:d2:1e:94: b9:06:04:01:de:a0:b2:98:96:6e:bd:f9:c6:21:fe: 21:fa:cd:75:b3:5c:cc:a3:91:a1:8c:51:96:0a:8e: 17:61:41:7b:71:91:b6:f5:f2:5a:5c:91:1b:40:b1: d7:c8:11:40:00:17:28:66:b8:e7:a0:27:1a:6d:16: b7:21:25:d4:5b:fb:00:6c:08:3f:df:bd:66:d5:1b: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3A:D6:2D:E3:7D:1D:6D:F4:90:27:49:C9:4C:5B:6B:0F:8A:D6:74 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.236.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:71:f0:e0:4d:81:9c:39:ec:e2:2f:4b:15:28:0f:bc:35:e0: b0:75:95:66:91:7a:d8:53:f1:cc:59:c7:43:f8:64:ee:a4:0b: 45:6f:01:a8:e1:53:ad:71:5f:81:54:d5:68:d2:b8:90:c3:52: fa:3b:79:7a:4c:a7:08:0f:eb:30:ff:6a:b4:a3:6c:66:ab:f2: 68:ab:36:a2:19:02:e3:62:34:01:a8:e7:b4:84:dc:7a:2e:41: 8a:e4:9a:a9:3a:3a:a9:6e:38:46:69:b7:cb:0d:1f:4c:df:e4: 83:23:26:e5:6f:76:2e:60:6e:65:a9:c6:5a:4a:d0:80:6e:fb: 4d:16:02:13:60:9c:4d:f3:93:44:5a:d2:b2:5c:e7:a1:2c:ad: 92:47:0c:4b:c3:bb:8e:79:93:85:0c:2d:c1:ca:e2:9c:6d:2a: 2d:5a:25:de:c9:40:4b:c0:54:27:2a:42:ab:67:60:e5:a6:6f: f9:90:d8:47:92:db:f5:84:9c:52:9a:58:54:39:63:b5:30:83: fe:60:f6:74:db:13:6f:ca:2a:55:26:9c:7a:46:60:50:ef:fd: 63:de:fe:20:77:da:45:24:d0:17:97:7a:e5:d1:fc:cf:18:49: bc:c0:6d:c7:7e:2d:d6:0a:d7:29:8c:e0:94:83:73:f0:dc:cf: 64:1b:75:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHf6s0DLBmvDH9KTzn5PYcJvwsmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAzMDMxWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDk2NjEwMjA3NDQwZTIyN2E1MmNlYzRjNDcyMGE0YTZj NzNmOWYyODkwMTBiNDM5ZTI2OWFkMTdhYTgzN2Y2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjddV9Jpjx+/JJfIJVNPIVF924Ot5A/k679eiqgwmmxElN HuPiEPE5cSSsXUYkxLTmaAw7VuRrC82nu+Md5cWn7WCrhGoxNxg8vT7Ah6p1iokE 2kPoo9kCKXZtfwRjhvu56jCqsI5TvUwoFOaqaMHS/Mqd5sZLVnb9p7EhytWaNtDv QS+7owwmm080jc9Hxxa5bOnG2tXm1HaAhvwhTCGs9/TFj+9oxxtC2baiPVFAG9Ie lLkGBAHeoLKYlm69+cYh/iH6zXWzXMyjkaGMUZYKjhdhQXtxkbb18lpckRtAsdfI EUAAFyhmuOegJxptFrchJdRb+wBsCD/fvWbVG8uhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkjrWLeN9HW30kCdJyUxbaw+K1nQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I0YmI5ODUxLWI1YWEtNDM3MC1iZmZlLTRmYzFmZDQxNDg1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++wwDQYJKoZIhvcNAQELBQADggEBABpx8OBNgZw57OIvSxUoD7w14LB1 lWaRethT8cxZx0P4ZO6kC0VvAajhU61xX4FU1WjSuJDDUvo7eXpMpwgP6zD/arSj bGar8mirNqIZAuNiNAGo57SE3HouQYrkmqk6OqluOEZpt8sNH0zf5IMjJuVvdi5g bmWpxlpK0IBu+00WAhNgnE3zk0Ra0rJc56EsrZJHDEvDu455k4UMLcHK4pxtKi1a Jd7JQEvAVCcqQqtnYOWmb/mQ2EeS2/WEnFKaWFQ5Y7Uwg/5g9nTbE2/KKlUmnHpG YFDv/WPe/iB32kUk0BeXeuXR/M8YSbzAbcd+LdYK1ymM4JSDc/Dcz2QbdRc= -----END CERTIFICATE-----Generated at Fri Jul 24 07:25:48 2026 by rpki-client