$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa File: 3f672c72-4d5f-408a-8326-7e62adbed891.roa (raw, json) Hash identifier: 4uhcJFtGoKHyxrXZoCbtUvveBF1qR2XY9PVFZ7Sa5O4= Subject key identifier: AE:34:DB:31:55:DD:B9:A8:F1:97:93:37:5E:BD:1E:F1:FD:EA:5B:2A Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7D08040FD9764A76D1136C661107990CA4F86821 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa Signing time: Sat 02 May 2026 00:20:06 +0000 ROA not before: Sat 02 May 2026 00:20:06 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:08:04:0f:d9:76:4a:76:d1:13:6c:66:11:07:99:0c:a4:f8:68:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 2 00:20:06 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=d471b39c18bee3a581ec10e2cbe6f643b734db3b8655921c97b0164a0b10509c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:53:eb:23:51:28:20:d1:01:01:18:2a:26: 75:0b:97:03:a0:0c:4d:5d:44:d3:ca:29:72:89:de: 62:20:d8:de:42:a7:39:fa:a3:65:c3:91:45:47:82: d5:2b:75:b4:d0:ac:26:b3:c0:31:68:e9:f3:81:b6: d8:bd:52:ca:61:72:a7:cb:e9:a9:ad:bd:6f:a9:db: 82:ca:0f:51:07:c3:e5:c1:ca:56:38:70:b4:01:6a: d5:7a:78:64:b1:aa:c0:b9:1c:00:5f:3c:ba:45:b6: b1:b5:8d:4b:81:91:85:ff:63:30:f9:85:4d:d7:a0: 62:1e:f5:db:1d:c5:2f:a7:fa:00:07:24:31:a8:b0: a8:e4:70:9c:e5:bb:d7:db:65:c4:e8:e1:34:0e:77: 72:9f:21:0f:2e:bd:ca:cc:ed:fd:2b:e7:62:2a:99: a5:5d:5d:66:b9:c4:4e:73:91:04:a8:8f:f2:82:1b: f4:b0:8d:88:b8:ee:0c:41:2e:45:a6:c9:de:4c:a1: 60:3d:6c:fd:0b:5a:05:29:d6:aa:49:b9:3b:a2:23: 81:f9:88:33:c1:10:e2:bb:41:3b:2d:58:f9:43:6c: 0c:80:2d:da:29:a3:0c:e4:ed:c3:84:af:9a:a9:03: 53:ed:0f:6b:2e:d1:c2:91:54:30:00:86:e8:07:e2: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:34:DB:31:55:DD:B9:A8:F1:97:93:37:5E:BD:1E:F1:FD:EA:5B:2A X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:66:f5:cc:c4:3c:bb:73:0e:f4:0b:1e:0d:aa:8e:77:a8:ce: 1a:e8:9a:5e:95:11:72:c5:d5:cc:d3:da:38:b4:5a:3e:88:8b: 33:2b:a5:ba:93:16:ea:f0:6a:be:38:a6:63:2e:b6:5f:b9:75: e0:74:3d:5f:e8:53:90:4f:09:61:0e:9c:57:5a:27:73:c3:fe: fa:44:54:61:26:14:29:ce:d6:e2:6f:32:63:da:ad:cb:c9:ac: 9a:d5:c6:9b:e7:00:41:76:17:11:16:34:e2:87:3b:45:df:97: 18:18:98:20:46:3a:8b:dc:ee:79:c5:b1:2e:9d:18:e7:4f:bd: 6c:69:e2:5e:70:d7:4c:08:3a:54:78:d5:e0:cc:03:55:e7:f5: 76:b6:2e:e7:1a:72:f8:d5:c7:f8:05:a8:d3:86:25:22:c8:ce: 2c:78:b1:66:3f:36:39:35:74:2d:8b:68:b0:bf:ec:8b:a7:8a: 9d:3c:e6:94:a6:4f:c8:5b:09:4b:d8:47:4c:b4:44:f2:08:4e: c1:db:27:ea:10:e6:7e:a7:3c:1f:90:b7:e0:45:f0:c7:ad:ff: 7d:51:3e:03:ff:93:80:fe:c5:38:09:cb:28:f6:4a:7c:94:0d: 8c:6a:f5:14:4a:39:52:13:9f:d2:eb:cf:7f:8b:91:a2:bf:0c: c4:b6:f7:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfQgED9l2SnbRE2xmEQeZDKT4aCEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTAyMDAyMDA2WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDcxYjM5YzE4YmVlM2E1ODFlYzEwZTJjYmU2ZjY0M2I3 MzRkYjNiODY1NTkyMWM5N2IwMTY0YTBiMTA1MDljMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZUlPrI1EoINEBARgqJnULlwOgDE1dRNPKKXKJ3mIg2N5C pzn6o2XDkUVHgtUrdbTQrCazwDFo6fOBtti9UsphcqfL6amtvW+p24LKD1EHw+XB ylY4cLQBatV6eGSxqsC5HABfPLpFtrG1jUuBkYX/YzD5hU3XoGIe9dsdxS+n+gAH JDGosKjkcJzlu9fbZcTo4TQOd3KfIQ8uvcrM7f0r52IqmaVdXWa5xE5zkQSoj/KC G/SwjYi47gxBLkWmyd5MoWA9bP0LWgUp1qpJuTuiI4H5iDPBEOK7QTstWPlDbAyA Ldopowzk7cOEr5qpA1PtD2su0cKRVDAAhugH4hBVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrjTbMVXduajxl5M3Xr0e8f3qWyowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmNjcyYzcyLTRkNWYtNDA4YS04MzI2LTdlNjJhZGJlZDg5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAExm9czEPLtzDvQLHg2qjneozhro ml6VEXLF1czT2ji0Wj6IizMrpbqTFurwar44pmMutl+5deB0PV/oU5BPCWEOnFda J3PD/vpEVGEmFCnO1uJvMmParcvJrJrVxpvnAEF2FxEWNOKHO0XflxgYmCBGOovc 7nnFsS6dGOdPvWxp4l5w10wIOlR41eDMA1Xn9Xa2LucacvjVx/gFqNOGJSLIzix4 sWY/Njk1dC2LaLC/7Iunip085pSmT8hbCUvYR0y0RPIITsHbJ+oQ5n6nPB+Qt+BF 8Met/31RPgP/k4D+xTgJyyj2SnyUDYxq9RRKOVITn9Lrz3+LkaK/DMS29zg= -----END CERTIFICATE-----Generated at Sun May 3 16:53:37 2026 by rpki-client