$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa File: f67538ee-cd29-4883-9251-086023a50dc3.roa (raw, json) Hash identifier: nxVMXQHO+t17CiD/8c2bc2Wbc2dvPgysXPT0Q8cyUho= Subject key identifier: 3D:D5:3E:C3:7F:00:E1:30:35:CD:F7:FF:84:42:1A:A0:FA:C6:24:00 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 0CCB51FD667C0CC86C71EA6E04EEE6522ADAB9D3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa Signing time: Tue 21 Jul 2026 00:20:07 +0000 ROA not before: Tue 21 Jul 2026 00:20:07 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cb:51:fd:66:7c:0c:c8:6c:71:ea:6e:04:ee:e6:52:2a:da:b9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 00:20:07 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=9510eb54d2b28b06ffdf8517dbb8c32595a21b6d9e04c4f350a1a21b555137d2, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:82:40:89:a1:a2:65:8d:23:87:be:2a:3b:1e: 6e:c4:db:c6:46:d0:84:65:74:e6:06:1d:b6:c1:85: cd:bc:bb:1e:9b:07:31:05:50:3a:87:72:8b:0f:39: 8e:51:98:1b:ff:9a:bf:93:c7:53:df:40:d0:b7:fc: 2a:57:b5:84:67:32:2d:02:ba:96:65:da:06:78:fc: 69:6d:3f:8e:0b:5c:60:af:94:13:f5:d0:2b:40:2f: 78:ec:f5:ac:9a:59:ba:7e:0e:40:90:5a:95:36:0d: b8:b0:b2:88:01:0c:aa:b2:57:4e:37:e8:48:c7:6d: db:e5:a6:a0:55:6e:60:fb:a9:c3:64:13:b2:d2:97: ce:26:7a:b2:ca:e9:db:75:a4:1d:d2:17:c7:d1:7b: bc:6e:27:ab:76:57:ad:66:af:17:61:3b:18:81:6b: da:d2:a8:19:83:3d:1c:51:a2:f0:68:78:76:e4:7b: ed:9b:7b:5e:f4:63:68:ab:74:22:7b:ad:bf:f1:da: 55:60:09:7e:49:4f:61:20:16:3f:99:e7:66:9f:f5: 2f:7c:d0:df:3e:ee:ff:ab:bd:80:ac:81:f9:4b:5b: 54:03:68:a2:17:f6:68:43:3f:c5:2d:cf:a3:51:ae: 7d:2d:58:ba:43:30:01:d2:88:02:a9:ea:35:de:0d: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D5:3E:C3:7F:00:E1:30:35:CD:F7:FF:84:42:1A:A0:FA:C6:24:00 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.227.0/24 Signature Algorithm: sha256WithRSAEncryption 64:26:30:d1:80:f9:d7:f1:09:db:79:e2:9c:3a:6d:b9:6e:0c: 60:76:72:62:d7:b1:56:f4:14:44:3e:eb:a1:c7:33:92:84:51: ff:f3:9b:c3:20:18:bd:20:ce:2b:5a:94:37:3d:d3:0e:7f:89: 90:ab:dd:1a:ec:1a:d0:b8:6d:4d:60:61:47:91:11:18:3d:1c: b8:29:8c:4c:ca:80:6d:51:e7:d2:99:1c:50:89:43:07:90:a1: bc:88:30:6c:84:8a:f7:23:e0:0d:65:ac:18:5c:45:99:29:95: 16:5d:dd:04:ff:d1:0a:53:a6:33:be:ce:ac:4d:5d:65:e0:1a: a4:64:20:c5:9c:72:ec:5b:cb:e9:a6:df:7f:90:31:b5:8c:47: 90:1d:58:a6:93:3e:10:36:4f:e0:d6:cf:cd:a7:be:15:c2:50: 76:2a:86:29:6c:dc:0a:63:b9:34:fe:a6:52:3a:8e:72:b5:e4: db:a9:fd:f8:b5:9d:b3:4e:ff:43:18:68:b7:53:2c:f4:bf:b5: ef:28:7e:f5:4d:a2:52:1d:3c:93:dd:ba:98:9f:54:ee:c3:af: b9:c1:b2:41:d2:ed:31:b2:3d:21:70:14:9a:35:c7:c0:07:66: 65:63:d8:59:36:ad:ae:20:d5:2d:dc:2b:6b:cb:d3:13:b9:c9: 35:c2:f9:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDMtR/WZ8DMhscepuBO7mUiraudMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIxMDAyMDA3WhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTEwZWI1NGQyYjI4YjA2ZmZkZjg1MTdkYmI4YzMyNTk1 YTIxYjZkOWUwNGM0ZjM1MGExYTIxYjU1NTEzN2QyMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhgkCJoaJljSOHvio7Hm7E28ZG0IRldOYGHbbBhc28ux6b BzEFUDqHcosPOY5RmBv/mr+Tx1PfQNC3/CpXtYRnMi0CupZl2gZ4/GltP44LXGCv lBP10CtAL3js9ayaWbp+DkCQWpU2DbiwsogBDKqyV0436EjHbdvlpqBVbmD7qcNk E7LSl84merLK6dt1pB3SF8fRe7xuJ6t2V61mrxdhOxiBa9rSqBmDPRxRovBoeHbk e+2be170Y2irdCJ7rb/x2lVgCX5JT2EgFj+Z52af9S980N8+7v+rvYCsgflLW1QD aKIX9mhDP8Utz6NRrn0tWLpDMAHSiAKp6jXeDd/5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPdU+w38A4TA1zff/hEIaoPrGJAAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y2NzUzOGVlLWNkMjktNDg4My05MjUxLTA4NjAyM2E1MGRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++MwDQYJKoZIhvcNAQELBQADggEBAGQmMNGA+dfxCdt54pw6bbluDGB2 cmLXsVb0FEQ+66HHM5KEUf/zm8MgGL0gzitalDc90w5/iZCr3RrsGtC4bU1gYUeR ERg9HLgpjEzKgG1R59KZHFCJQweQobyIMGyEivcj4A1lrBhcRZkplRZd3QT/0QpT pjO+zqxNXWXgGqRkIMWccuxby+mm33+QMbWMR5AdWKaTPhA2T+DWz82nvhXCUHYq hils3ApjuTT+plI6jnK15Nup/fi1nbNO/0MYaLdTLPS/te8ofvVNolIdPJPdupif VO7Dr7nBskHS7TGyPSFwFJo1x8AHZmVj2Fk2ra4g1S3cK2vL0xO5yTXC+d0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:43:35 2026 by rpki-client