$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa File: a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa (raw, json) Hash identifier: LsfxO3y7CAJXhyIswWY6LRDLVh2XqoxGTTF+Ge4X4OM= Subject key identifier: BA:23:EF:08:2D:AC:CF:E1:4F:37:4E:10:91:0A:8D:E4:4C:8F:BE:F0 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 54600E7DFA2ADE725830F869E0896B1F2C08A16C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa Signing time: Wed 05 Aug 2026 00:00:10 +0000 ROA not before: Wed 05 Aug 2026 00:00:10 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:60:0e:7d:fa:2a:de:72:58:30:f8:69:e0:89:6b:1f:2c:08:a1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 5 00:00:10 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=d3c0ae81f0d775f0764ac96fb5d87255140f38f4f7c7d9b38f7e6c4f720cf800, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:5e:ef:09:36:a4:1c:e8:78:97:7d:54:0e: 89:22:b2:cf:8f:39:11:0b:e3:22:85:e2:6a:57:bc: df:fc:e3:72:0c:32:59:07:f9:d4:85:03:68:b8:fe: c7:9d:ca:19:8c:56:42:49:e4:9a:24:5a:a3:4c:9a: 3b:2d:46:24:55:5e:89:93:ca:42:8d:08:99:af:a1: e8:b3:7a:1b:09:41:6a:9d:a4:2c:f5:ea:f4:94:22: 1b:5f:76:19:24:92:39:d5:63:a8:ce:15:92:41:73: fa:94:2a:03:7f:c8:9f:37:87:ea:79:d2:0d:68:2a: 25:99:38:e3:1e:68:f9:8d:5c:8b:22:8c:ef:82:d5: 84:68:3b:a6:bd:37:ea:43:1d:16:09:d6:ee:bc:e5: af:6a:08:3d:0f:70:a0:da:9d:d1:0c:1d:61:3c:25: 04:ad:5a:5c:75:61:87:c6:60:43:41:f9:f5:35:33: 74:6d:19:58:bd:05:c2:d3:b5:bd:e2:d1:86:f8:37: f2:5b:b7:8f:a6:2b:a2:5d:58:ea:17:52:f7:58:5b: d3:ae:6c:d0:3c:e6:fe:c6:ce:a5:35:cf:04:14:10: a2:14:d4:88:c4:d4:b4:7e:a2:e6:30:fb:47:20:7c: c1:67:d4:c8:0b:d8:7a:e2:50:b7:50:8f:70:61:ae: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:23:EF:08:2D:AC:CF:E1:4F:37:4E:10:91:0A:8D:E4:4C:8F:BE:F0 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.163.0/24 Signature Algorithm: sha256WithRSAEncryption 27:aa:03:5a:c3:97:db:dd:33:91:25:da:9b:55:1e:b4:b7:29: 51:3b:a6:c2:02:9b:1d:59:6b:6d:0b:c9:6b:20:a2:1a:20:cc: 45:63:65:df:fe:ac:97:f0:a4:16:a5:8e:76:e2:cf:3c:22:ce: a6:78:8d:99:59:93:3a:f1:bd:71:1e:2e:83:84:55:29:cb:e3: c5:1e:3b:92:e7:fb:84:0a:76:37:92:f8:15:f0:30:27:31:a1: fd:4e:f2:d9:dd:87:76:4f:5a:14:bf:63:51:2f:f3:e0:be:e0: 58:91:c5:34:ce:12:a2:29:50:94:b4:c5:02:f5:90:24:bd:66: ba:73:a2:20:ed:4d:aa:78:8f:36:bd:74:d9:63:b6:f2:ce:66: b6:af:4a:0b:a0:a5:6d:75:90:99:b7:1e:48:63:3a:f5:d0:7b: d9:6b:53:dc:f2:45:09:b8:d0:ef:c2:c9:ab:2e:2c:dc:de:e2: 7e:27:96:e6:4a:ce:bd:71:49:6b:ca:69:0a:1f:04:6d:86:02: dd:57:a1:03:b8:cf:c7:79:d0:00:e3:50:8b:8a:e6:b8:35:a0: 33:12:07:91:cf:16:fd:c8:7b:d5:fa:d8:83:28:3e:56:d3:cf: c0:17:c6:b8:af:fc:e5:a3:52:17:92:8b:56:55:be:7d:40:8c: 76:49:68:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVGAOffoq3nJYMPhp4IlrHywIoWwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwODA1MDAwMDEwWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2MwYWU4MWYwZDc3NWYwNzY0YWM5NmZiNWQ4NzI1NTE0 MGYzOGY0ZjdjN2Q5YjM4ZjdlNmM0ZjcyMGNmODAwMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4PV7vCTakHOh4l31UDokiss+POREL4yKF4mpXvN/843IM MlkH+dSFA2i4/sedyhmMVkJJ5JokWqNMmjstRiRVXomTykKNCJmvoeizehsJQWqd pCz16vSUIhtfdhkkkjnVY6jOFZJBc/qUKgN/yJ83h+p50g1oKiWZOOMeaPmNXIsi jO+C1YRoO6a9N+pDHRYJ1u685a9qCD0PcKDandEMHWE8JQStWlx1YYfGYENB+fU1 M3RtGVi9BcLTtb3i0Yb4N/Jbt4+mK6JdWOoXUvdYW9OubNA85v7GzqU1zwQUEKIU 1IjE1LR+ouYw+0cgfMFn1MgL2HriULdQj3BhrjRDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuiPvCC2sz+FPN04QkQqN5EyPvvAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2E5MWYyNmYwLTVhMWQtNGQ2NS05N2NlLTk0YTI2ZDY2NDZiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3aMwDQYJKoZIhvcNAQELBQADggEBACeqA1rDl9vdM5El2ptVHrS3KVE7 psICmx1Za20LyWsgohogzEVjZd/+rJfwpBaljnbizzwizqZ4jZlZkzrxvXEeLoOE VSnL48UeO5Ln+4QKdjeS+BXwMCcxof1O8tndh3ZPWhS/Y1Ev8+C+4FiRxTTOEqIp UJS0xQL1kCS9ZrpzoiDtTap4jza9dNljtvLOZravSgugpW11kJm3HkhjOvXQe9lr U9zyRQm40O/CyasuLNze4n4nluZKzr1xSWvKaQofBG2GAt1XoQO4z8d50ADjUIuK 5rg1oDMSB5HPFv3Ie9X62IMoPlbTz8AXxriv/OWjUheSi1ZVvn1AjHZJaAg= -----END CERTIFICATE-----Generated at Mon Sep 21 08:43:40 2026 by rpki-client