$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa File: bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa (raw, json) Hash identifier: E0Lu28j16jAZW8HHAX+HXLQCgZNz++gcd2azdEuakoA= Subject key identifier: C4:1E:BA:95:7F:58:77:4D:5F:4C:21:0B:94:78:75:B7:0F:6D:C1:3A Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1CB475DBB3757F25F6B5EB1AC064A58663D295CB Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa Signing time: Sat 02 May 2026 00:20:09 +0000 ROA not before: Sat 02 May 2026 00:20:09 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b4:75:db:b3:75:7f:25:f6:b5:eb:1a:c0:64:a5:86:63:d2:95:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 2 00:20:09 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=e296809282f27022b5f3d8d29099cc362a8c6b0dfd7ee91fab87d48d4e8d062e, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:fd:ca:d2:5d:1f:f0:35:5b:65:aa:a8:02: 67:10:52:de:70:cf:fa:57:c5:ab:fd:32:12:f2:24: 22:5e:d0:b9:91:47:25:68:8b:de:83:81:ad:c4:51: e7:e0:f7:4c:41:7f:33:3c:0a:f8:b1:4d:ad:37:2d: a2:44:75:89:da:b6:56:b1:2f:a8:e2:30:b5:34:50: 90:82:be:d2:f2:79:3d:7b:76:03:a8:4f:6c:83:85: 25:d9:1b:02:f8:df:c6:c5:bc:d7:50:dd:c3:61:12: 0e:f7:95:27:65:fa:2e:80:a6:b6:53:86:f9:87:f1: c1:37:c2:96:17:1b:b8:2b:b1:a7:f7:ff:de:37:08: dd:b2:3c:b1:15:ef:8c:23:21:25:01:aa:b6:80:b5: b2:cd:9a:ec:93:d9:78:81:a6:f2:57:fc:38:d8:06: 3a:68:e6:96:6f:28:ea:0b:fd:32:d4:2c:3c:15:3a: 4d:94:ed:4b:c1:79:37:95:77:19:45:16:55:ab:aa: 6e:22:76:c6:7c:ab:41:42:62:77:42:f5:6c:8a:26: f5:69:42:d4:c6:39:b3:24:b1:ca:5e:63:76:f5:f6: 2c:58:6c:d5:e9:1a:3c:20:8c:ac:97:10:c0:c1:be: ea:77:d6:29:3d:d1:45:3e:7e:0c:d9:8a:59:3a:64: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1E:BA:95:7F:58:77:4D:5F:4C:21:0B:94:78:75:B7:0F:6D:C1:3A X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/bfa510ed-d40b-4552-a4d8-5bb4c30e482a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.213.0/24 Signature Algorithm: sha256WithRSAEncryption 78:d6:94:83:0e:3a:64:5a:7f:50:06:2a:f6:dc:8a:e0:2b:ec: a0:d6:39:b7:04:5e:4d:47:0d:1d:19:56:80:7b:7b:c7:70:12: ff:b3:96:5d:48:e1:ad:9b:48:da:d5:04:1f:09:97:8e:a4:20: 1e:0c:ff:f5:7d:d3:47:d9:e5:d8:e6:5b:fe:14:c6:aa:cd:4a: 47:0b:d7:82:4c:cc:d6:7c:e9:2f:18:6a:1f:fd:cb:a2:94:a7: 72:cd:e0:7d:dc:96:ea:c8:df:12:d2:66:05:47:36:e1:0c:59: a4:17:51:87:c1:95:39:a6:37:82:b2:fe:1b:e4:9b:a9:74:86: 1e:ea:97:30:2a:32:3d:92:f9:ca:d1:e4:b7:92:63:2a:ce:56: 96:ae:2f:3f:c0:13:c0:d2:3f:54:f4:13:39:b4:0d:d4:f9:a3: 95:b7:fb:e2:2d:56:a4:f1:51:0b:12:2f:2f:42:26:d6:1d:cc: 6b:33:57:27:ea:ed:c3:04:c0:e6:9a:d3:dd:ed:86:0a:d5:9f: 9c:f5:8a:45:b7:9d:22:8e:d7:89:cd:27:b3:e9:f7:ce:ba:00: 07:70:d4:9d:57:58:ca:e5:74:39:03:5a:30:79:a9:63:79:60: 05:ba:43:be:83:25:6d:45:34:4b:d8:4c:fb:e2:00:cb:c2:79: fa:5d:8a:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHLR127N1fyX2tesawGSlhmPSlcswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTAyMDAyMDA5WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjk2ODA5MjgyZjI3MDIyYjVmM2Q4ZDI5MDk5Y2MzNjJh OGM2YjBkZmQ3ZWU5MWZhYjg3ZDQ4ZDRlOGQwNjJlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtg/3K0l0f8DVbZaqoAmcQUt5wz/pXxav9MhLyJCJe0LmR RyVoi96Dga3EUefg90xBfzM8CvixTa03LaJEdYnatlaxL6jiMLU0UJCCvtLyeT17 dgOoT2yDhSXZGwL438bFvNdQ3cNhEg73lSdl+i6AprZThvmH8cE3wpYXG7grsaf3 /943CN2yPLEV74wjISUBqraAtbLNmuyT2XiBpvJX/DjYBjpo5pZvKOoL/TLULDwV Ok2U7UvBeTeVdxlFFlWrqm4idsZ8q0FCYndC9WyKJvVpQtTGObMkscpeY3b19ixY bNXpGjwgjKyXEMDBvup31ik90UU+fgzZilk6ZP2TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxB66lX9Yd01fTCELlHh1tw9twTowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JmYTUxMGVkLWQ0MGItNDU1Mi1hNGQ4LTViYjRjMzBlNDgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dUwDQYJKoZIhvcNAQELBQADggEBAHjWlIMOOmRaf1AGKvbciuAr7KDW ObcEXk1HDR0ZVoB7e8dwEv+zll1I4a2bSNrVBB8Jl46kIB4M//V900fZ5djmW/4U xqrNSkcL14JMzNZ86S8Yah/9y6KUp3LN4H3clurI3xLSZgVHNuEMWaQXUYfBlTmm N4Ky/hvkm6l0hh7qlzAqMj2S+crR5LeSYyrOVpauLz/AE8DSP1T0Ezm0DdT5o5W3 ++ItVqTxUQsSLy9CJtYdzGszVyfq7cMEwOaa093thgrVn5z1ikW3nSKO14nNJ7Pp 9866AAdw1J1XWMrldDkDWjB5qWN5YAW6Q76DJW1FNEvYTPviAMvCefpdinM= -----END CERTIFICATE-----Generated at Sun May 3 16:11:08 2026 by rpki-client