$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa File: 5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa (raw, json) Hash identifier: 2oIsc4i+MIMpq6jIORmFIIHlrmy5YIOC6JoboIvDha4= Subject key identifier: 38:D6:6D:27:DC:5D:2A:58:25:C1:F8:13:08:3C:4D:DB:57:5C:91:96 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 35E56FAFD3B52F95E0530089669D5D484BC81F98 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa Signing time: Fri 09 Oct 2026 00:30:18 +0000 ROA not before: Fri 09 Oct 2026 00:30:18 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e5:6f:af:d3:b5:2f:95:e0:53:00:89:66:9d:5d:48:4b:c8:1f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:30:18 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=1f4efe2a3cff7ef9913faed5f71b367851d399a9dc6eb47b2ae9f9f97a0a91a2, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:98:37:78:d4:03:ab:7b:56:72:6f:4b:d8: fd:db:39:1d:44:b6:6f:85:bc:a3:90:db:5a:8b:71: 79:ad:ed:a5:ae:59:8a:23:24:dd:85:14:b2:ab:70: ec:37:cf:e9:06:c7:ed:49:a0:ab:f2:87:d1:01:c0: e4:21:7a:69:b8:68:f1:6e:cb:b0:79:b3:e0:e6:82: 0a:5d:a7:4f:5f:9d:4e:4b:61:1d:a7:ba:26:f5:9c: a6:63:5e:89:9b:28:ba:2b:f1:97:3b:70:93:c4:d3: ee:36:ba:da:9a:4c:f9:fa:2c:c0:aa:56:0d:b2:3e: 30:68:1a:6a:04:ca:8b:32:b5:ed:cd:50:47:53:0d: 63:6e:5d:48:3c:d7:32:18:ff:61:78:00:37:78:33: b4:6d:f5:9c:35:2d:92:46:1b:88:a0:53:a5:54:99: de:b7:80:f0:b4:0a:bf:03:7a:95:73:cf:b1:2e:1b: a6:f4:49:fa:43:23:1f:cd:99:02:75:c2:ca:a2:1f: f2:83:6e:08:c5:bb:60:3c:5a:14:0c:9d:12:b1:e8: c8:be:91:c5:31:14:23:67:93:da:02:5b:87:63:25: 69:60:24:bf:ed:74:cb:c6:d3:f4:29:02:37:cd:f8: 40:61:ba:da:db:f2:5c:87:da:2d:74:98:ed:a7:6b: c9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D6:6D:27:DC:5D:2A:58:25:C1:F8:13:08:3C:4D:DB:57:5C:91:96 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.233.0/24 Signature Algorithm: sha256WithRSAEncryption 00:73:30:a2:17:da:75:21:aa:e9:e9:af:73:5a:a6:b1:14:75: 74:32:82:d0:06:ba:cc:bf:f1:89:c8:78:16:24:c8:f2:08:69: 66:5d:3a:2c:ff:51:69:94:3a:ca:ad:ce:02:b6:f1:5e:3d:1e: 54:00:34:50:80:b7:b4:85:a0:8e:57:c2:ec:05:0d:0b:f1:86: fc:9b:f9:01:32:dd:33:e8:c4:57:80:1f:45:48:4c:e0:18:07: fa:36:a0:1c:ad:80:da:a5:14:30:d1:03:5c:2f:bd:67:4f:1b: 71:df:d8:fa:f3:35:b9:21:9e:6f:db:95:1c:ef:63:99:62:95: 56:13:21:b1:cc:d0:56:cd:d4:e8:48:2a:da:cc:86:d3:68:dc: 73:f6:26:c0:8d:b6:b6:4e:67:a5:5c:4c:10:4c:1d:bc:af:1e: cd:4b:91:4e:3c:81:2f:5c:1c:24:55:2d:ba:26:f5:cc:0f:29: 39:48:23:c1:a2:fb:21:72:92:0a:11:28:9b:f5:53:16:73:3d: 59:3e:9e:cd:6e:c6:ab:67:d1:4d:67:b7:20:34:5d:98:90:89: 03:93:8c:f5:c5:0d:53:6c:98:1a:f5:0f:13:7c:96:28:21:59: 3a:e4:6d:aa:29:79:1a:12:89:cb:1e:01:39:28:f4:06:fa:e9: 4c:94:e8:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNeVvr9O1L5XgUwCJZp1dSEvIH5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDE4WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjRlZmUyYTNjZmY3ZWY5OTEzZmFlZDVmNzFiMzY3ODUx ZDM5OWE5ZGM2ZWI0N2IyYWU5ZjlmOTdhMGE5MWEyMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClx5g3eNQDq3tWcm9L2P3bOR1Etm+FvKOQ21qLcXmt7aWu WYojJN2FFLKrcOw3z+kGx+1JoKvyh9EBwOQhemm4aPFuy7B5s+Dmggpdp09fnU5L YR2nuib1nKZjXombKLor8Zc7cJPE0+42utqaTPn6LMCqVg2yPjBoGmoEyosyte3N UEdTDWNuXUg81zIY/2F4ADd4M7Rt9Zw1LZJGG4igU6VUmd63gPC0Cr8DepVzz7Eu G6b0SfpDIx/NmQJ1wsqiH/KDbgjFu2A8WhQMnRKx6Mi+kcUxFCNnk9oCW4djJWlg JL/tdMvG0/QpAjfN+EBhutrb8lyH2i10mO2na8kbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUONZtJ9xdKlglwfgTCDxN21dckZYwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVkMzRmNzk3LTZkMTYtNDk4YS1iNjZkLThjN2QwZmNhYzc3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++kwDQYJKoZIhvcNAQELBQADggEBAABzMKIX2nUhqunpr3NaprEUdXQy gtAGusy/8YnIeBYkyPIIaWZdOiz/UWmUOsqtzgK28V49HlQANFCAt7SFoI5XwuwF DQvxhvyb+QEy3TPoxFeAH0VITOAYB/o2oBytgNqlFDDRA1wvvWdPG3Hf2PrzNbkh nm/blRzvY5lilVYTIbHM0FbN1OhIKtrMhtNo3HP2JsCNtrZOZ6VcTBBMHbyvHs1L kU48gS9cHCRVLbom9cwPKTlII8Gi+yFykgoRKJv1UxZzPVk+ns1uxqtn0U1ntyA0 XZiQiQOTjPXFDVNsmBr1DxN8lighWTrkbaopeRoSicseATko9Ab66UyU6J0= -----END CERTIFICATE-----Generated at Sun Nov 1 14:38:23 2026 by rpki-client