$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa File: 271f0380-5b52-472a-bc37-cdbbdcd650e9.roa (raw, json) Hash identifier: DToa5Oyn+ER0oeoROR8Sxt/fUvXLhzmKzAN0QcTEmeY= Subject key identifier: 10:66:EF:BB:FF:67:B7:7C:13:57:9F:D9:BA:F1:F0:C3:81:9B:4C:C2 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3C3B462DF82F8EB3B4804EED7636DB7565ADE50D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa Signing time: Sat 02 May 2026 00:30:27 +0000 ROA not before: Sat 02 May 2026 00:30:27 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3b:46:2d:f8:2f:8e:b3:b4:80:4e:ed:76:36:db:75:65:ad:e5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 2 00:30:27 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=c7f3584eed1006b725f1740e5a8c621e9b429f8bf7275aca54c0511093411054, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:47:e1:08:03:7c:aa:e2:1c:f8:33:d0:10: c6:c3:cc:12:32:04:79:7c:8a:c9:8e:30:c5:e8:5f: 4b:9e:bb:f6:ac:3d:d2:e6:d2:08:3b:a9:c8:25:8e: 97:98:2e:11:2b:79:74:1b:8f:ef:8a:7a:95:cc:91: ed:54:88:0c:47:89:14:06:8c:94:44:66:27:f5:f7: 60:ef:0a:76:73:5b:de:0a:d4:13:fb:c3:db:b6:0c: 3b:94:22:76:12:45:56:31:a0:4f:1a:2f:85:02:f1: 42:bd:4a:3f:cd:12:70:7e:d7:cc:2e:74:fe:c0:c4: c5:c9:72:46:68:ea:1f:91:96:26:8f:af:9f:a5:d1: a5:4f:f4:0b:08:6b:af:57:15:24:04:04:2f:a9:82: 20:e9:f0:4f:03:67:23:f3:90:f3:e5:08:f3:db:f7: 5c:88:1a:8b:6e:70:c8:67:93:88:e3:97:ea:ba:bf: 7f:42:68:2f:10:3f:91:64:f0:f9:4d:9f:17:70:1f: f1:e4:5d:cd:73:97:e4:dc:c2:ee:f3:f0:00:d0:a7: 98:bc:82:b7:06:c1:3c:53:f0:6d:72:6a:d5:13:c8: 86:06:15:cd:bb:1b:d3:6f:ec:bb:a8:25:c6:91:61: 6a:55:00:45:5c:2c:ab:f9:bb:d5:1d:34:93:c4:ee: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:66:EF:BB:FF:67:B7:7C:13:57:9F:D9:BA:F1:F0:C3:81:9B:4C:C2 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.217.0/24 Signature Algorithm: sha256WithRSAEncryption 06:16:c6:2f:15:8f:45:ad:dc:2a:95:92:c6:0b:46:d9:dc:97: 48:f6:06:24:d5:c8:ad:23:36:e2:d1:90:96:e0:95:5b:fb:75: 1f:bd:d1:7c:72:05:bc:04:65:b3:0c:d9:73:8d:13:e2:1e:3c: e4:80:75:45:9a:24:15:e1:40:40:08:2d:4f:d2:d8:36:35:8c: 9b:db:14:71:fb:25:8d:8b:4c:57:39:1f:98:85:71:46:8f:38: 21:22:d5:3a:83:75:2e:7d:ca:38:0a:bb:a6:2a:51:e9:8c:9a: 7d:8e:22:36:27:57:5a:84:f6:ff:96:06:30:16:12:60:9f:e8: 67:8c:f5:7b:b7:87:78:2a:60:49:eb:a7:5d:5e:d0:8c:51:db: 1c:73:69:de:ef:2c:71:27:80:33:4e:5e:ec:0c:ba:e3:7b:09: d4:18:dd:ca:48:8d:97:54:e3:e1:76:24:d2:97:03:97:6b:4c: b7:ab:0e:d9:99:42:10:ea:69:f8:b0:b1:b9:09:a0:9f:35:b4: 36:99:e1:df:07:83:a7:cd:da:04:fb:dd:bc:b2:e5:43:fa:00: 15:c7:21:40:6c:49:71:21:ec:2b:63:f3:54:fc:ea:62:13:86: b3:29:6f:0f:66:65:50:fd:0f:35:6c:66:e1:68:16:b3:52:f4: 6d:34:c9:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPDtGLfgvjrO0gE7tdjbbdWWt5Q0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTAyMDAzMDI3WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2YzNTg0ZWVkMTAwNmI3MjVmMTc0MGU1YThjNjIxZTli NDI5ZjhiZjcyNzVhY2E1NGMwNTExMDkzNDExMDU0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbpkfhCAN8quIc+DPQEMbDzBIyBHl8ismOMMXoX0ueu/as PdLm0gg7qcgljpeYLhEreXQbj++KepXMke1UiAxHiRQGjJREZif192DvCnZzW94K 1BP7w9u2DDuUInYSRVYxoE8aL4UC8UK9Sj/NEnB+18wudP7AxMXJckZo6h+RliaP r5+l0aVP9AsIa69XFSQEBC+pgiDp8E8DZyPzkPPlCPPb91yIGotucMhnk4jjl+q6 v39CaC8QP5Fk8PlNnxdwH/HkXc1zl+Tcwu7z8ADQp5i8grcGwTxT8G1yatUTyIYG Fc27G9Nv7LuoJcaRYWpVAEVcLKv5u9UdNJPE7n35AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEGbvu/9nt3wTV5/ZuvHww4GbTMIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzI3MWYwMzgwLTViNTItNDcyYS1iYzM3LWNkYmJkY2Q2NTBlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dkwDQYJKoZIhvcNAQELBQADggEBAAYWxi8Vj0Wt3CqVksYLRtncl0j2 BiTVyK0jNuLRkJbglVv7dR+90XxyBbwEZbMM2XONE+IePOSAdUWaJBXhQEAILU/S 2DY1jJvbFHH7JY2LTFc5H5iFcUaPOCEi1TqDdS59yjgKu6YqUemMmn2OIjYnV1qE 9v+WBjAWEmCf6GeM9Xu3h3gqYEnrp11e0IxR2xxzad7vLHEngDNOXuwMuuN7CdQY 3cpIjZdU4+F2JNKXA5drTLerDtmZQhDqafiwsbkJoJ81tDaZ4d8Hg6fN2gT73byy 5UP6ABXHIUBsSXEh7Ctj81T86mIThrMpbw9mZVD9DzVsZuFoFrNS9G00ycA= -----END CERTIFICATE-----Generated at Sun May 3 15:22:56 2026 by rpki-client