$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa File: ced1d856-48cb-491b-a1ab-adf22d3bad75.roa (raw, json) Hash identifier: /X8fBawKodi1HHUebGbvsfIqXTZx6urap3MdNcrGor0= Subject key identifier: 35:46:FF:FE:6C:E7:0D:88:43:B8:20:32:B6:07:DD:50:91:9E:E7:24 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 472F0E685E8E1028FD6DD06C2737B27322E35C03 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa Signing time: Mon 03 Aug 2026 00:10:09 +0000 ROA not before: Mon 03 Aug 2026 00:10:09 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2f:0e:68:5e:8e:10:28:fd:6d:d0:6c:27:37:b2:73:22:e3:5c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 3 00:10:09 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=4af65d5cfca056bc4b9fdc4adb7543e94f81144a0a8036cc29fc7b67e097e6ac, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:84:ed:7b:49:69:ff:dc:e5:3c:64:11:c1: 50:24:cd:a3:ba:0b:6e:57:b7:7e:84:01:8c:ec:93: a1:58:12:38:22:df:f4:c7:dd:71:07:91:6c:e6:9b: c5:c6:5d:63:b5:92:92:5d:02:3b:49:ba:29:ba:c1: f8:d3:39:4a:72:11:ac:17:1d:91:06:b0:ca:fb:74: 33:ea:cd:8c:e8:14:38:50:a3:23:0b:14:c1:4a:92: 80:48:fe:aa:69:41:f6:c7:94:3e:9b:57:92:75:46: 38:87:23:0c:8b:45:69:fb:9e:d5:43:13:3a:59:57: 9f:cf:84:6f:00:aa:93:82:19:6c:75:4a:2f:88:fa: d3:71:a3:43:b1:66:21:d4:da:e1:88:c0:9f:ad:0f: c9:a8:f9:4f:a3:08:ce:cc:7e:41:e2:96:07:31:ac: 7a:6a:13:0e:60:17:8e:26:9d:a1:4c:96:b8:c4:74: 56:3b:df:ff:bd:96:ae:28:35:40:c9:0e:1a:00:00: b9:34:95:6e:4c:b7:e0:85:6a:3a:8b:b0:fa:73:8c: 2f:84:00:4d:f1:0e:30:88:13:c6:8f:f5:cf:91:ee: 8f:b4:4e:15:ff:14:50:62:70:70:74:30:6c:fa:8d: 04:6c:66:43:71:37:1f:a7:d0:79:a4:dd:12:7e:f8: b1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:46:FF:FE:6C:E7:0D:88:43:B8:20:32:B6:07:DD:50:91:9E:E7:24 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ced1d856-48cb-491b-a1ab-adf22d3bad75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.176.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:5d:6f:d3:5c:ca:aa:2c:5b:f2:9e:4d:de:97:fb:c6:fc:34: a7:fa:14:ec:19:d0:6f:68:51:3b:de:8d:40:98:e8:b6:19:c5: 05:4d:ec:7c:6e:98:8e:61:60:b6:ec:f2:7c:3b:bc:98:ef:30: 0e:42:bf:ea:ee:ab:b9:22:76:1d:c7:f9:eb:4e:71:63:7d:f5: 29:3f:ef:dc:69:16:3e:f6:0d:45:61:6d:ae:1d:e6:9e:2c:cb: 2b:c0:73:82:23:49:9e:2e:cf:50:24:42:30:7a:ec:96:e8:e7: d6:13:ba:a9:ba:45:66:e8:c9:79:c8:64:85:2e:a9:c3:3c:57: cc:bf:52:eb:74:c1:5e:8e:d5:d9:42:8e:2c:45:f3:29:b9:d7: e7:54:ca:b9:ea:a6:9f:c2:47:b7:7d:30:6a:c0:ff:c1:13:8c: 21:5b:06:4e:f7:1a:02:71:cb:27:fd:12:91:e9:16:e0:e5:8e: 69:da:a0:97:a1:4f:65:c1:f9:0c:c8:8a:06:cf:c6:43:ec:58: da:0f:d6:ef:b7:77:97:f6:78:2b:ab:10:08:6e:32:2a:20:d8: 13:82:6e:57:c1:d1:a4:d4:23:5b:d9:71:d3:cd:8d:46:ff:27: 0f:92:e8:25:e1:58:84:31:47:50:c7:74:ae:06:d5:71:90:9d: c6:77:15:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURy8OaF6OECj9bdBsJzeycyLjXAMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwODAzMDAxMDA5WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWY2NWQ1Y2ZjYTA1NmJjNGI5ZmRjNGFkYjc1NDNlOTRm ODExNDRhMGE4MDM2Y2MyOWZjN2I2N2UwOTdlNmFjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWtYTte0lp/9zlPGQRwVAkzaO6C25Xt36EAYzsk6FYEjgi 3/TH3XEHkWzmm8XGXWO1kpJdAjtJuim6wfjTOUpyEawXHZEGsMr7dDPqzYzoFDhQ oyMLFMFKkoBI/qppQfbHlD6bV5J1RjiHIwyLRWn7ntVDEzpZV5/PhG8AqpOCGWx1 Si+I+tNxo0OxZiHU2uGIwJ+tD8mo+U+jCM7MfkHilgcxrHpqEw5gF44mnaFMlrjE dFY73/+9lq4oNUDJDhoAALk0lW5Mt+CFajqLsPpzjC+EAE3xDjCIE8aP9c+R7o+0 ThX/FFBicHB0MGz6jQRsZkNxNx+n0Hmk3RJ++LHDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNUb//mznDYhDuCAytgfdUJGe5yQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NlZDFkODU2LTQ4Y2ItNDkxYi1hMWFiLWFkZjIyZDNiYWQ3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARM37AwDQYJKoZIhvcNAQELBQADggEBAG5db9NcyqosW/KeTd6X+8b8NKf6 FOwZ0G9oUTvejUCY6LYZxQVN7HxumI5hYLbs8nw7vJjvMA5Cv+ruq7kidh3H+etO cWN99Sk/79xpFj72DUVhba4d5p4syyvAc4IjSZ4uz1AkQjB67Jbo59YTuqm6RWbo yXnIZIUuqcM8V8y/Uut0wV6O1dlCjixF8ym51+dUyrnqpp/CR7d9MGrA/8ETjCFb Bk73GgJxyyf9EpHpFuDljmnaoJehT2XB+QzIigbPxkPsWNoP1u+3d5f2eCurEAhu Miog2BOCblfB0aTUI1vZcdPNjUb/Jw+S6CXhWIQxR1DHdK4G1XGQncZ3Fdg= -----END CERTIFICATE-----Generated at Mon Sep 21 20:48:20 2026 by rpki-client