$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa File: bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa (raw, json) Hash identifier: 0YyP07WubKs6ib6a63qS0N0/SrwatiB0uUdzNOW7S8k= Subject key identifier: EF:43:44:E6:21:77:CC:F8:3A:AE:84:C1:F2:AF:ED:64:3E:A4:44:46 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1C899E83318E223C00126888A41C7B0B1FBE007D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa Signing time: Tue 21 Jul 2026 00:20:09 +0000 ROA not before: Tue 21 Jul 2026 00:20:09 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:89:9e:83:31:8e:22:3c:00:12:68:88:a4:1c:7b:0b:1f:be:00:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:20:09 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=eaf5074fcb657c31cf899e0bd765d1ad7105c5f5550a8294e18cec61cc3119b1, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:26:bf:15:db:77:97:62:32:c7:71:be:59: 9b:fe:8c:73:a3:00:a8:8b:6a:d0:11:4b:09:02:b9: 00:c0:7b:f9:79:b3:2e:a1:0a:c3:c7:ae:a1:7a:98: 0e:29:5b:77:89:c1:fd:d7:e7:4a:80:9e:c4:9b:c6: a2:ae:dc:e5:5f:33:4b:10:de:09:d5:cd:4b:69:1e: 6f:17:28:03:5e:ce:98:31:e0:12:c2:ac:83:29:7d: 6b:7f:c4:19:86:c4:c3:4a:d2:a3:16:ba:80:3c:5c: d5:d2:fe:82:85:49:e6:88:b6:1a:20:e5:d4:0a:13: af:be:83:f3:80:9e:0f:26:07:7c:e1:a6:42:1b:cf: f5:51:49:54:80:ae:e0:05:81:95:38:a9:8e:67:c3: cc:aa:df:17:e5:b0:5d:07:44:98:4e:e4:44:5e:ee: d7:fb:47:49:88:d0:52:b3:11:03:fb:02:ed:9b:86: 33:05:63:18:b0:10:0c:bf:e5:76:f3:c8:3f:c3:cc: 4c:85:40:b2:f7:96:a6:79:f4:68:7c:7c:f2:f6:ee: 2f:b2:7f:ce:9f:59:4c:0f:23:ac:77:3a:ff:81:5f: 72:bd:f0:98:05:9a:9d:5e:d5:aa:c6:93:00:ca:95: e3:40:6e:4d:b7:ac:c1:62:7a:3d:0a:4d:cb:69:59: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:43:44:E6:21:77:CC:F8:3A:AE:84:C1:F2:AF:ED:64:3E:A4:44:46 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.213.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:92:89:b3:3c:d4:ed:1a:01:07:7d:3a:f0:48:59:a1:33:6f: 44:4d:3d:b6:65:ca:de:7f:25:03:95:3f:c8:a9:8f:ab:be:ba: ef:a0:98:6d:59:09:50:d5:89:6e:72:bd:0a:7a:f9:2c:21:00: c1:85:d0:c1:29:25:f3:c0:84:cd:ec:8e:38:42:05:9f:28:e9: 97:08:38:7e:00:cb:52:32:24:92:00:c6:e1:9c:0b:1e:11:3c: 63:82:cc:91:45:a8:fe:89:4d:3c:c1:80:59:d0:b6:55:5a:5c: e8:47:95:30:93:27:86:fd:8f:e5:5a:9c:76:25:a0:09:1f:e0: 45:3e:fb:0e:0a:b2:db:5a:aa:f0:72:13:3e:62:21:75:e1:8e: 39:37:94:a4:f7:4e:bc:18:13:62:69:f7:83:05:4a:40:7d:c3: 13:aa:00:df:24:46:a8:3c:55:6c:be:e7:a7:be:96:66:ea:69: be:12:ec:e7:0e:8d:01:13:e3:ab:2e:35:11:ae:d8:68:5f:14: e7:c3:0e:90:0d:fc:8c:d2:00:c7:6a:52:e4:d3:7c:41:43:7e: 05:db:f9:9e:76:2a:5e:5b:c2:d0:ad:21:d4:f7:f9:df:97:5f: bd:8b:bc:9e:4c:08:8c:18:32:49:31:3d:8d:48:d2:7c:20:0d: be:08:ea:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHImegzGOIjwAEmiIpBx7Cx++AH0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAyMDA5WhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWY1MDc0ZmNiNjU3YzMxY2Y4OTllMGJkNzY1ZDFhZDcx MDVjNWY1NTUwYTgyOTRlMThjZWM2MWNjMzExOWIxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDpia/Fdt3l2Iyx3G+WZv+jHOjAKiLatARSwkCuQDAe/l5 sy6hCsPHrqF6mA4pW3eJwf3X50qAnsSbxqKu3OVfM0sQ3gnVzUtpHm8XKANezpgx 4BLCrIMpfWt/xBmGxMNK0qMWuoA8XNXS/oKFSeaIthog5dQKE6++g/OAng8mB3zh pkIbz/VRSVSAruAFgZU4qY5nw8yq3xflsF0HRJhO5ERe7tf7R0mI0FKzEQP7Au2b hjMFYxiwEAy/5XbzyD/DzEyFQLL3lqZ59Gh8fPL27i+yf86fWUwPI6x3Ov+BX3K9 8JgFmp1e1arGkwDKleNAbk23rMFiej0KTctpWYQLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU70NE5iF3zPg6roTB8q/tZD6kREYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JmYTUxMGVkLWQ0MGItNDU1Mi1hNGQ4LTViYjRjMzBlNDgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dUwDQYJKoZIhvcNAQELBQADggEBAD+SibM81O0aAQd9OvBIWaEzb0RN PbZlyt5/JQOVP8ipj6u+uu+gmG1ZCVDViW5yvQp6+SwhAMGF0MEpJfPAhM3sjjhC BZ8o6ZcIOH4Ay1IyJJIAxuGcCx4RPGOCzJFFqP6JTTzBgFnQtlVaXOhHlTCTJ4b9 j+VanHYloAkf4EU++w4KsttaqvByEz5iIXXhjjk3lKT3TrwYE2Jp94MFSkB9wxOq AN8kRqg8VWy+56e+lmbqab4S7OcOjQET46suNRGu2GhfFOfDDpAN/IzSAMdqUuTT fEFDfgXb+Z52Kl5bwtCtIdT3+d+XX72LvJ5MCIwYMkkxPY1I0nwgDb4I6vc= -----END CERTIFICATE-----Generated at Fri Jul 24 07:24:08 2026 by rpki-client