$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa File: d5bcdba4-b39f-49d7-81da-145442d6f180.roa (raw, json) Hash identifier: 60kp/VZm+G482WSjyPptVEBW0opSNRhGmnhTCKigsdE= Subject key identifier: E7:E6:55:5B:B4:4B:2B:72:E9:D7:03:BE:47:1D:63:6F:B6:7C:3D:DA Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 418F3F65690529F0FCB4332B9DB0CC3F460F084E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa Signing time: Tue 21 Jul 2026 00:30:32 +0000 ROA not before: Tue 21 Jul 2026 00:30:32 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8f:3f:65:69:05:29:f0:fc:b4:33:2b:9d:b0:cc:3f:46:0f:08:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:30:32 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=b622777560d99789074be7b5066d384a5d60e5e1f6ba4f494dd424710f3809fd, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:7a:a7:e9:6d:ef:7e:f3:81:5a:5e:94:fe: 50:16:8f:96:dd:8a:01:e3:53:95:af:37:27:e8:79: 82:fe:96:c0:00:d6:dc:22:d0:76:34:25:ca:30:be: f0:c4:d3:5d:cd:16:54:5a:be:1f:bc:c8:70:99:57: ef:09:61:15:d3:6c:f2:6c:06:1a:db:e0:80:97:03: 81:10:ed:bb:53:1e:c6:a0:d0:c7:7c:a1:d0:09:ff: 7e:90:bd:a7:9d:a5:a6:3a:6b:9e:db:f3:1f:eb:8a: 34:14:d7:8c:fb:dd:dd:ab:53:29:61:52:f4:f4:a6: 90:70:37:bc:a9:3e:68:22:f4:8e:4a:a7:93:b4:71: 6e:d7:41:2d:e0:0f:4a:99:a4:48:f9:50:ba:4e:ad: 05:bd:72:b3:b4:87:58:6d:d5:ef:bd:47:b9:55:35: 1f:13:f1:0c:b7:45:e7:19:97:e1:0d:1a:cb:b2:07: 2b:b2:58:97:0e:5b:d9:a1:a2:9a:30:18:fe:c9:ec: 75:56:3b:34:f5:97:20:f5:49:dc:f0:24:97:67:70: 9a:59:3d:37:52:86:63:0c:3a:55:fa:37:11:25:c7: ca:15:1c:fe:b1:ac:3d:42:5d:b8:60:f3:3c:73:82: a5:b3:0d:c5:40:c0:79:f5:47:46:0f:d5:53:e4:93: ea:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E6:55:5B:B4:4B:2B:72:E9:D7:03:BE:47:1D:63:6F:B6:7C:3D:DA X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.177.0/24 Signature Algorithm: sha256WithRSAEncryption 06:c2:a5:d6:96:0a:58:a3:05:14:d2:7c:5c:4f:62:29:83:20: c2:f5:6c:77:6e:df:f0:8c:c8:07:ef:55:2c:31:d2:9b:c0:ab: 28:c8:dd:14:9a:45:a5:af:d9:13:31:43:d7:45:99:ef:d6:a1: f5:f3:9c:e0:f6:40:a3:ac:64:fa:09:f7:15:06:a8:70:d6:0a: 1d:e1:b5:6a:aa:87:91:a9:a4:aa:06:b5:76:f9:c7:39:85:94: 4d:10:d4:46:b3:76:34:87:cb:58:7e:60:e4:df:32:2c:68:d3: a0:b5:fe:d8:60:3c:94:ec:f3:0b:4f:4a:2b:de:61:89:f9:30: 02:7f:60:77:64:a7:39:ea:49:b6:f1:8b:9b:1f:97:b4:fe:02: 6c:10:14:15:d8:26:a5:bd:96:2a:0a:09:d9:8e:d3:7f:7a:a1: 66:ec:51:c6:43:c4:6f:fa:0a:b4:44:5e:0b:79:cd:e8:9a:a6: be:84:6f:6c:52:1c:83:ba:e2:fa:e4:05:d0:13:96:83:85:a4: 93:37:a2:4e:13:7f:1e:a0:06:a3:19:de:d0:49:97:cf:92:a6: eb:1b:17:33:1b:b6:eb:ce:43:4b:a9:eb:3f:92:df:c0:d2:b7: ee:d6:2e:46:e8:7b:be:7d:e4:44:ae:c3:64:a8:3f:ba:e3:08: f4:66:5f:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQY8/ZWkFKfD8tDMrnbDMP0YPCE4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAzMDMyWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjIyNzc3NTYwZDk5Nzg5MDc0YmU3YjUwNjZkMzg0YTVk NjBlNWUxZjZiYTRmNDk0ZGQ0MjQ3MTBmMzgwOWZkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCczXqn6W3vfvOBWl6U/lAWj5bdigHjU5WvNyfoeYL+lsAA 1twi0HY0JcowvvDE013NFlRavh+8yHCZV+8JYRXTbPJsBhrb4ICXA4EQ7btTHsag 0Md8odAJ/36QvaedpaY6a57b8x/rijQU14z73d2rUylhUvT0ppBwN7ypPmgi9I5K p5O0cW7XQS3gD0qZpEj5ULpOrQW9crO0h1ht1e+9R7lVNR8T8Qy3RecZl+ENGsuy ByuyWJcOW9mhopowGP7J7HVWOzT1lyD1SdzwJJdncJpZPTdShmMMOlX6NxElx8oV HP6xrD1CXbhg8zxzgqWzDcVAwHn1R0YP1VPkk+qFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5+ZVW7RLK3Lp1wO+Rx1jb7Z8PdowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Q1YmNkYmE0LWIzOWYtNDlkNy04MWRhLTE0NTQ0MmQ2ZjE4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37EwDQYJKoZIhvcNAQELBQADggEBAAbCpdaWClijBRTSfFxPYimDIML1 bHdu3/CMyAfvVSwx0pvAqyjI3RSaRaWv2RMxQ9dFme/WofXznOD2QKOsZPoJ9xUG qHDWCh3htWqqh5GppKoGtXb5xzmFlE0Q1EazdjSHy1h+YOTfMixo06C1/thgPJTs 8wtPSiveYYn5MAJ/YHdkpznqSbbxi5sfl7T+AmwQFBXYJqW9lioKCdmO0396oWbs UcZDxG/6CrREXgt5zeiapr6Eb2xSHIO64vrkBdATloOFpJM3ok4Tfx6gBqMZ3tBJ l8+SpusbFzMbtuvOQ0up6z+S38DSt+7WLkboe7595ESuw2SoP7rjCPRmXwQ= -----END CERTIFICATE-----Generated at Fri Jul 24 19:01:22 2026 by rpki-client