$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa File: c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa (raw, json) Hash identifier: jg9MGjO+aVElAv7OuKczm/wNPNDFvg6k/+mj8LyzCe0= Subject key identifier: 54:11:D7:33:D5:AE:21:78:2E:04:F6:61:19:1B:F4:FA:2A:B2:32:E2 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6A423C658452F9AF343AE07501CA66F74B17534A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa Signing time: Sat 02 May 2026 00:30:33 +0000 ROA not before: Sat 02 May 2026 00:30:33 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:42:3c:65:84:52:f9:af:34:3a:e0:75:01:ca:66:f7:4b:17:53:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 2 00:30:33 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=9abdc32837ee589358dde1b68492c034d20722625dee28b2d28a3dbbb2f77eff, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:2b:d7:74:9d:3a:d3:7a:a8:ef:90:1c:96: ee:6f:49:10:19:6e:c1:2c:55:f1:3d:d2:11:71:fd: c5:e0:43:11:2a:4f:75:16:f0:21:37:90:86:0d:07: eb:3f:fe:da:5b:70:d4:f1:a1:19:88:9d:ff:2b:94: 9f:c6:30:b4:84:e6:4d:3b:12:9b:ee:e9:16:b3:95: 3b:9c:e6:1d:5d:e8:69:58:bb:d5:a5:2c:05:4b:50: b6:09:87:05:c6:64:00:27:95:ba:c2:c0:3d:02:a5: 82:ad:6d:30:d7:4a:71:42:78:7d:a1:4b:3b:60:40: e5:59:73:54:92:89:cc:ac:75:a0:dc:d5:ca:df:55: b0:b1:6b:c8:19:07:25:70:bc:cf:55:91:4d:5c:94: e6:d2:be:a1:61:1c:b7:f8:e6:ca:a4:5d:c2:e6:25: e4:96:57:6c:3f:96:4c:7f:57:c2:a6:2c:4e:18:a7: bf:f4:00:49:b0:b7:98:2d:89:52:64:c2:07:6b:8b: f9:b1:d2:83:93:75:ba:51:ca:b0:5a:91:a3:73:bf: 20:c4:dc:0b:c4:ba:9b:98:4d:fb:5c:a8:fb:33:da: b3:84:38:90:4a:42:a7:d9:bc:6e:5b:eb:a1:dd:74: 19:20:90:1d:dc:8b:f1:da:4e:da:d9:e2:ed:5b:ca: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:11:D7:33:D5:AE:21:78:2E:04:F6:61:19:1B:F4:FA:2A:B2:32:E2 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9ae478d-8ba3-4e12-a21c-382bc0501a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.216.0/24 Signature Algorithm: sha256WithRSAEncryption 87:4f:3b:96:d1:10:a9:bc:60:77:68:c2:17:4c:c6:d7:a8:92: d9:71:16:12:50:aa:8c:5d:7d:b6:2d:7a:e5:36:77:f5:e3:43: 4f:9f:72:59:f8:70:09:a4:8b:26:e8:8b:60:63:2d:61:f7:96: 9a:af:21:0a:98:fe:09:38:2a:07:9b:9a:24:29:c1:13:ed:28: 9a:cc:7b:87:6d:5a:4f:20:a0:d5:bd:69:13:7b:00:7b:0d:e5: 37:a8:1c:b7:4b:f0:bf:4e:a3:04:ce:08:27:e4:95:82:20:9c: ce:65:68:18:1f:53:28:a3:15:8c:22:00:a2:59:c0:6f:03:b2: 7c:20:70:7d:f3:d3:56:a4:8c:88:55:91:98:bb:31:94:1e:f3: 59:58:44:3b:16:95:95:6a:e8:36:36:2b:b5:db:6d:91:c3:1c: b2:50:15:3c:18:0e:52:7c:5e:82:f1:f3:ca:5a:9c:35:31:d9: 33:f1:79:d1:25:18:82:06:a6:6d:8b:51:1c:bf:4d:37:b5:59: 2d:d8:e7:3f:76:32:ca:6e:e9:1b:64:ec:5c:c6:37:ce:d8:53: b6:3e:ac:67:71:f4:54:54:45:9e:4d:b0:d8:96:4a:8d:a7:ba: de:04:ce:af:00:63:28:36:c6:d3:48:28:16:cf:78:7b:87:9f: cd:72:b7:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUakI8ZYRS+a80OuB1Acpm90sXU0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTAyMDAzMDMzWhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWJkYzMyODM3ZWU1ODkzNThkZGUxYjY4NDkyYzAzNGQy MDcyMjYyNWRlZTI4YjJkMjhhM2RiYmIyZjc3ZWZmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+xivXdJ0603qo75Aclu5vSRAZbsEsVfE90hFx/cXgQxEq T3UW8CE3kIYNB+s//tpbcNTxoRmInf8rlJ/GMLSE5k07Epvu6RazlTuc5h1d6GlY u9WlLAVLULYJhwXGZAAnlbrCwD0CpYKtbTDXSnFCeH2hSztgQOVZc1SSicysdaDc 1crfVbCxa8gZByVwvM9VkU1clObSvqFhHLf45sqkXcLmJeSWV2w/lkx/V8KmLE4Y p7/0AEmwt5gtiVJkwgdri/mx0oOTdbpRyrBakaNzvyDE3AvEupuYTftcqPsz2rOE OJBKQqfZvG5b66HddBkgkB3ci/HaTtrZ4u1byt6/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVBHXM9WuIXguBPZhGRv0+iqyMuIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2M5YWU0NzhkLThiYTMtNGUxMi1hMjFjLTM4MmJjMDUwMWExZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dgwDQYJKoZIhvcNAQELBQADggEBAIdPO5bREKm8YHdowhdMxteoktlx FhJQqoxdfbYteuU2d/XjQ0+fcln4cAmkiyboi2BjLWH3lpqvIQqY/gk4KgebmiQp wRPtKJrMe4dtWk8goNW9aRN7AHsN5TeoHLdL8L9OowTOCCfklYIgnM5laBgfUyij FYwiAKJZwG8DsnwgcH3z01akjIhVkZi7MZQe81lYRDsWlZVq6DY2K7XbbZHDHLJQ FTwYDlJ8XoLx88panDUx2TPxedElGIIGpm2LURy/TTe1WS3Y5z92Mspu6Rtk7FzG N87YU7Y+rGdx9FRURZ5NsNiWSo2nut4Ezq8AYyg2xtNIKBbPeHuHn81ytyA= -----END CERTIFICATE-----Generated at Sun May 3 15:22:56 2026 by rpki-client