$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa File: efff1c41-4813-4726-a794-2bd64d641531.roa (raw, json) Hash identifier: ojq+froBzpKXRuLdiUH5mvL75Cey/fbV7jczYEhaMd8= Subject key identifier: 45:14:BC:78:57:D1:15:A9:E4:0B:04:BE:EE:77:6B:AE:D5:94:03:E5 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7954CF8829D3ACAA0022CCF89BF302BB63A74DBD Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa Signing time: Tue 21 Jul 2026 00:30:52 +0000 ROA not before: Tue 21 Jul 2026 00:30:52 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:54:cf:88:29:d3:ac:aa:00:22:cc:f8:9b:f3:02:bb:63:a7:4d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:30:52 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=cdb4c05581000368c1b13f82e9a798632324dd403685a7bb7207963b106715f1, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:ad:b9:c1:ca:80:25:ad:c5:cd:f0:21:db: 34:c8:5d:56:ed:8e:45:32:33:35:89:f7:19:34:a3: c0:69:98:96:a3:fa:f5:f5:66:2c:2a:b2:5d:a4:90: 7f:e9:4f:7e:db:dd:3b:80:95:39:04:86:d0:1d:2d: 21:16:62:61:68:e7:80:40:fb:56:8b:fa:36:c6:80: 80:b7:af:f6:61:1c:49:a0:ba:13:0b:ef:ce:14:78: 79:d1:8f:4f:af:5f:65:a1:d5:f4:5d:ed:40:86:6e: 3b:6a:5d:4a:42:7e:de:46:0f:36:46:e8:48:c0:7b: 2e:dd:2d:46:95:29:ab:6e:50:71:37:e6:6e:c1:7f: 88:1f:b7:1c:42:23:e4:af:d8:7c:8b:4e:5b:cd:ac: 90:cc:69:be:94:e5:a6:70:2f:86:c9:a9:e7:1a:b3: 26:b8:bf:48:d3:a3:64:e5:4a:9b:d5:8b:cc:ea:7f: 5a:73:b5:20:59:4b:24:4f:bd:da:0a:d7:68:a8:fc: 95:23:e0:c8:f2:54:4f:a2:67:1f:56:10:f0:35:06: fb:23:78:e2:4c:ec:6e:98:02:a4:ed:97:ed:4a:fb: 42:6b:59:7e:6b:59:37:9b:2e:d3:31:1d:46:d2:28: 40:31:4c:6e:1c:c7:ad:1a:7d:71:af:ef:44:06:20: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:14:BC:78:57:D1:15:A9:E4:0B:04:BE:EE:77:6B:AE:D5:94:03:E5 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.235.0/24 Signature Algorithm: sha256WithRSAEncryption 58:b1:17:b1:ee:e9:46:ef:4b:7b:eb:24:d7:f0:32:e1:ca:d2: df:0e:48:fb:b8:ba:7c:f7:1f:b0:60:a2:3d:7c:c2:41:8a:86: af:60:c0:54:7c:21:d7:8e:e0:d3:12:5f:32:d8:8d:4c:8d:fc: 41:62:f1:3f:ba:5c:ff:fb:d6:19:1f:4a:a4:8b:a9:c1:bc:1e: 70:dc:8f:46:b1:38:c4:31:57:32:7c:a6:bd:d7:30:04:52:de: 3d:77:43:8d:27:81:f0:3b:c7:bb:09:0b:96:37:a5:7b:b0:c2: fa:fb:d6:1b:d9:f4:fa:23:59:15:eb:74:c0:0d:ec:2e:f6:f2: c4:58:a3:6d:6c:cd:0d:2b:7f:1f:51:07:db:8b:91:5b:b3:38: a5:ee:41:10:9c:3e:9d:c3:bd:c0:1e:d8:b8:fc:43:5d:d3:b6: 4e:f4:53:ef:43:ac:c7:81:59:ad:fa:45:00:d5:c0:bb:32:3b: 5e:6e:93:a0:bc:90:18:e9:99:b3:38:8d:94:fa:75:18:57:ad: a8:9d:33:49:65:70:6c:94:39:35:30:44:0f:dd:0f:cc:38:50: 9f:e8:68:43:98:87:02:73:90:1f:ce:ea:51:39:42:74:a3:98: dc:e4:69:52:62:9c:a7:84:9c:19:20:bd:61:0d:95:55:e6:02: d9:de:29:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeVTPiCnTrKoAIsz4m/MCu2OnTb0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAzMDUyWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZGI0YzA1NTgxMDAwMzY4YzFiMTNmODJlOWE3OTg2MzIz MjRkZDQwMzY4NWE3YmI3MjA3OTYzYjEwNjcxNWYxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrG625wcqAJa3FzfAh2zTIXVbtjkUyMzWJ9xk0o8BpmJaj +vX1Ziwqsl2kkH/pT37b3TuAlTkEhtAdLSEWYmFo54BA+1aL+jbGgIC3r/ZhHEmg uhML784UeHnRj0+vX2Wh1fRd7UCGbjtqXUpCft5GDzZG6EjAey7dLUaVKatuUHE3 5m7Bf4gftxxCI+Sv2HyLTlvNrJDMab6U5aZwL4bJqecasya4v0jTo2TlSpvVi8zq f1pztSBZSyRPvdoK12io/JUj4MjyVE+iZx9WEPA1BvsjeOJM7G6YAqTtl+1K+0Jr WX5rWTebLtMxHUbSKEAxTG4cx60afXGv70QGILuPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURRS8eFfRFankCwS+7ndrrtWUA+UwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VmZmYxYzQxLTQ4MTMtNDcyNi1hNzk0LTJiZDY0ZDY0MTUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++swDQYJKoZIhvcNAQELBQADggEBAFixF7Hu6UbvS3vrJNfwMuHK0t8O SPu4unz3H7Bgoj18wkGKhq9gwFR8IdeO4NMSXzLYjUyN/EFi8T+6XP/71hkfSqSL qcG8HnDcj0axOMQxVzJ8pr3XMARS3j13Q40ngfA7x7sJC5Y3pXuwwvr71hvZ9Poj WRXrdMAN7C728sRYo21szQ0rfx9RB9uLkVuzOKXuQRCcPp3DvcAe2Lj8Q13Ttk70 U+9DrMeBWa36RQDVwLsyO15uk6C8kBjpmbM4jZT6dRhXraidM0llcGyUOTUwRA/d D8w4UJ/oaEOYhwJzkB/O6lE5QnSjmNzkaVJinKeEnBkgvWENlVXmAtneKbg= -----END CERTIFICATE-----Generated at Fri Jul 24 07:26:57 2026 by rpki-client