$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cff2aad7-f173-47b6-ad48-6f279ff321d1.roa File: cff2aad7-f173-47b6-ad48-6f279ff321d1.roa (raw, json) Hash identifier: ipSUNG9PjixraZ3c9C4LYZ1etklIDlaxf7Dl7EV6O74= Subject key identifier: 9E:93:9F:6A:68:32:CE:93:32:57:63:8A:BF:36:BB:7B:95:1F:57:C6 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 433E5A7B34970655DED52F929716157E628DB963 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cff2aad7-f173-47b6-ad48-6f279ff321d1.roa Signing time: Tue 21 Jul 2026 00:20:06 +0000 ROA not before: Tue 21 Jul 2026 00:20:06 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3e:5a:7b:34:97:06:55:de:d5:2f:92:97:16:15:7e:62:8d:b9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:20:06 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=1f08cdca2df69e4c491f94cc36cf5e74cfdbe62383b0174f036b9182fb95caf4, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3a:0c:73:5e:02:5e:b0:0f:fd:9b:cc:dd:24: 27:7f:b9:3f:89:c2:19:65:7d:fc:5f:a0:56:94:ac: f0:7c:63:2e:52:6f:78:dc:02:66:a7:91:1d:6b:58: 5c:32:55:c6:7a:97:48:6a:a5:94:b1:01:92:9f:b2: fb:e5:c1:ab:42:bc:4a:92:c0:32:fb:0f:09:b1:fd: be:67:25:50:b6:d0:45:ef:2f:d6:de:c5:86:51:de: 7c:05:f7:0c:bb:2a:6f:d1:ac:53:6b:d8:c1:e4:4f: 06:26:d9:fc:8a:e0:95:da:25:4a:2f:27:b1:dc:b2: 4f:a9:e8:e7:3f:8f:2d:ba:3d:7f:ba:86:17:7c:e5: 76:68:ff:88:67:28:dc:49:24:f8:2a:8d:81:4d:7a: dc:66:31:3a:63:d3:5e:e4:00:78:69:87:37:f5:76: 86:db:c2:dc:10:dc:82:eb:d6:0f:cb:5a:92:26:91: f0:f9:8c:b4:59:70:80:c2:96:e3:19:84:82:5e:f5: 55:d1:d6:bc:79:88:b7:2f:1f:19:96:d1:d4:64:b0: 9e:eb:9f:ea:c3:a8:68:fc:8c:a0:be:2c:ab:a7:93: 12:0b:53:33:02:b7:34:9c:0d:4e:bd:c7:69:c6:12: 58:8d:f3:c0:80:7a:9e:44:f5:ca:5b:ad:38:38:a0: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:9F:6A:68:32:CE:93:32:57:63:8A:BF:36:BB:7B:95:1F:57:C6 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cff2aad7-f173-47b6-ad48-6f279ff321d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.212.0/24 Signature Algorithm: sha256WithRSAEncryption 01:d4:e7:c1:38:50:54:16:51:ea:d2:3d:88:10:96:3d:83:6b: 0b:f3:47:ae:8c:60:e3:a8:22:16:d7:85:c1:b0:8e:41:8f:bb: 79:81:77:16:f3:2b:7d:f4:e9:8c:71:95:11:0c:18:ba:e1:18: ae:18:93:23:8c:4d:2f:cc:cd:dd:e1:10:82:fe:df:d0:b7:1f: 96:16:21:6e:2f:d1:5d:f8:3f:cd:45:1b:28:c9:11:dd:43:4e: fd:f5:8a:38:8f:8d:60:35:31:35:78:dc:7e:34:52:9a:93:2c: 81:59:35:28:4f:a6:67:1c:9e:ba:e1:d1:77:86:2f:cf:12:aa: 42:50:34:32:f9:26:cf:7d:f0:36:94:3d:e4:8d:d7:cd:43:35: 4d:cd:21:cd:86:50:2f:f7:91:54:e9:e2:b1:11:3a:21:68:75: d8:86:2c:41:f7:67:c1:e9:32:37:37:93:82:c9:21:bc:12:f3: ba:e2:14:cd:0b:7c:dc:71:b8:f1:c1:4d:5f:81:8c:e5:0f:88: 19:ea:38:6c:f3:57:b0:90:55:85:df:78:2c:58:a7:59:ac:3b: 59:5d:91:a4:c9:5d:f0:5e:64:36:e0:f2:af:9d:cc:02:c6:96: df:f0:67:e9:30:55:e8:82:7c:5c:1d:a5:3a:4b:4d:74:a0:5d: 4c:7a:5e:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQz5aezSXBlXe1S+SlxYVfmKNuWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAyMDA2WhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjA4Y2RjYTJkZjY5ZTRjNDkxZjk0Y2MzNmNmNWU3NGNm ZGJlNjIzODNiMDE3NGYwMzZiOTE4MmZiOTVjYWY0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxOgxzXgJesA/9m8zdJCd/uT+JwhllffxfoFaUrPB8Yy5S b3jcAmankR1rWFwyVcZ6l0hqpZSxAZKfsvvlwatCvEqSwDL7Dwmx/b5nJVC20EXv L9bexYZR3nwF9wy7Km/RrFNr2MHkTwYm2fyK4JXaJUovJ7Hcsk+p6Oc/jy26PX+6 hhd85XZo/4hnKNxJJPgqjYFNetxmMTpj017kAHhphzf1dobbwtwQ3ILr1g/LWpIm kfD5jLRZcIDCluMZhIJe9VXR1rx5iLcvHxmW0dRksJ7rn+rDqGj8jKC+LKunkxIL UzMCtzScDU69x2nGEliN88CAep5E9cpbrTg4oN3dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnpOfamgyzpMyV2OKvza7e5UfV8YwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NmZjJhYWQ3LWYxNzMtNDdiNi1hZDQ4LTZmMjc5ZmYzMjFkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBAAHU58E4UFQWUerSPYgQlj2Dawvz R66MYOOoIhbXhcGwjkGPu3mBdxbzK3306YxxlREMGLrhGK4YkyOMTS/Mzd3hEIL+ 39C3H5YWIW4v0V34P81FGyjJEd1DTv31ijiPjWA1MTV43H40UpqTLIFZNShPpmcc nrrh0XeGL88SqkJQNDL5Js998DaUPeSN181DNU3NIc2GUC/3kVTp4rEROiFoddiG LEH3Z8HpMjc3k4LJIbwS87riFM0LfNxxuPHBTV+BjOUPiBnqOGzzV7CQVYXfeCxY p1msO1ldkaTJXfBeZDbg8q+dzALGlt/wZ+kwVeiCfFwdpTpLTXSgXUx6XlU= -----END CERTIFICATE-----Generated at Fri Jul 24 13:34:10 2026 by rpki-client