$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa File: d5bcdba4-b39f-49d7-81da-145442d6f180.roa (raw, json) Hash identifier: yWoPUpewsoJ2AdVZ4BcGqssHppIo+SV7tT5ee4uqtcg= Subject key identifier: 1E:B9:9F:3C:32:46:70:8F:CC:66:9E:C2:A5:B3:B7:29:D4:8D:B8:AC Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 450624C0FC1560BBA50B8C3EC3444971457190F6 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa Signing time: Sat 02 May 2026 00:30:08 +0000 ROA not before: Sat 02 May 2026 00:30:08 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:06:24:c0:fc:15:60:bb:a5:0b:8c:3e:c3:44:49:71:45:71:90:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 2 00:30:08 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=2c642552ca840250c2932174eeff999e27df48ff0dd13fa63e983496d2fbe573, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:fa:40:d2:b1:18:b7:fa:3c:56:0c:b8:17: e7:5c:27:23:a9:69:d4:7a:6e:ae:13:d8:89:10:73: fc:c4:d0:4d:32:29:d8:e5:e8:4f:1f:dd:02:a4:b7: 75:b3:42:a8:04:f1:18:64:ff:bd:90:24:c5:bd:de: 95:84:85:97:4e:0c:9a:32:dd:ae:26:fc:38:b3:0c: 16:91:00:31:26:1e:dd:6b:b6:43:7f:28:38:1c:94: 9d:91:0f:11:e2:7c:6e:03:6c:f8:5c:2f:93:53:b9: 24:60:1c:43:20:d1:31:e4:e1:86:fe:97:74:c6:d4: f3:f1:de:2f:72:2e:c7:d1:d9:b2:17:d0:cd:bb:b0: 79:4c:b5:3a:3a:d0:7d:9d:51:1d:06:3c:36:c1:19: c0:8a:ff:1c:64:0e:eb:4d:95:71:39:dc:1d:65:d6: 67:c8:05:c0:f2:d6:e6:f6:5e:55:51:01:d2:77:c2: 39:68:a7:7c:e3:67:30:a2:fb:0e:71:a9:45:46:59: 5f:df:5d:ca:a1:5b:41:59:be:b9:8b:94:88:b7:e0: 0d:a2:8d:5f:a6:0d:fd:7c:22:dd:47:d2:c8:7c:10: 24:e7:97:b8:53:fe:ba:a4:9f:dc:6d:ff:15:d6:7b: eb:80:33:1d:cc:1e:31:f6:c2:1d:f1:89:e4:54:4f: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B9:9F:3C:32:46:70:8F:CC:66:9E:C2:A5:B3:B7:29:D4:8D:B8:AC X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d5bcdba4-b39f-49d7-81da-145442d6f180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.177.0/24 Signature Algorithm: sha256WithRSAEncryption 45:42:27:f8:db:57:68:81:96:ee:30:05:6e:ec:02:ce:d4:ca: 1f:bc:25:48:95:22:c0:4f:30:f4:db:46:39:ba:19:87:c6:a1: 02:5e:c1:2d:86:ad:52:c2:74:89:47:a0:2d:d5:8d:18:62:1f: 67:19:5c:1d:b3:1e:29:36:7a:a3:63:b5:49:1e:0f:30:39:70: 07:db:49:23:e5:e2:3a:07:3d:67:4d:d0:23:b2:87:9c:bf:91: b9:d4:37:f8:fc:4a:3d:b5:14:85:b8:b9:50:a1:8a:5f:93:b7: 7f:a7:56:78:5d:37:ab:9c:dc:7e:5f:dc:31:e9:43:d4:0d:ab: 45:f1:31:b4:74:53:aa:de:8f:81:da:ef:cf:1d:17:16:dd:69: 48:48:ef:8d:66:b9:df:0d:74:03:13:8c:79:ed:df:68:3b:fa: b6:a1:0c:18:c9:5e:03:90:39:95:63:12:dd:0f:3d:98:30:08: e4:0d:44:cf:4a:56:28:a7:54:14:b2:3d:53:96:13:f1:c7:33: 8d:36:4d:99:6c:7f:3c:f6:bf:20:f5:d5:94:26:b3:4b:5b:68: 3e:d8:a5:9b:9c:d6:03:29:8b:8b:3a:da:b5:6e:2a:ea:bb:51: b3:e6:d7:46:20:63:46:8f:9c:4a:04:7f:ea:7e:a7:9b:ab:85: e1:74:f0:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURQYkwPwVYLulC4w+w0RJcUVxkPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTAyMDAzMDA4WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzY0MjU1MmNhODQwMjUwYzI5MzIxNzRlZWZmOTk5ZTI3 ZGY0OGZmMGRkMTNmYTYzZTk4MzQ5NmQyZmJlNTczMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+RvpA0rEYt/o8Vgy4F+dcJyOpadR6bq4T2IkQc/zE0E0y Kdjl6E8f3QKkt3WzQqgE8Rhk/72QJMW93pWEhZdODJoy3a4m/DizDBaRADEmHt1r tkN/KDgclJ2RDxHifG4DbPhcL5NTuSRgHEMg0THk4Yb+l3TG1PPx3i9yLsfR2bIX 0M27sHlMtTo60H2dUR0GPDbBGcCK/xxkDutNlXE53B1l1mfIBcDy1ub2XlVRAdJ3 wjlop3zjZzCi+w5xqUVGWV/fXcqhW0FZvrmLlIi34A2ijV+mDf18It1H0sh8ECTn l7hT/rqkn9xt/xXWe+uAMx3MHjH2wh3xieRUT/NhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHrmfPDJGcI/MZp7CpbO3KdSNuKwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Q1YmNkYmE0LWIzOWYtNDlkNy04MWRhLTE0NTQ0MmQ2ZjE4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37EwDQYJKoZIhvcNAQELBQADggEBAEVCJ/jbV2iBlu4wBW7sAs7Uyh+8 JUiVIsBPMPTbRjm6GYfGoQJewS2GrVLCdIlHoC3VjRhiH2cZXB2zHik2eqNjtUke DzA5cAfbSSPl4joHPWdN0COyh5y/kbnUN/j8Sj21FIW4uVChil+Tt3+nVnhdN6uc 3H5f3DHpQ9QNq0XxMbR0U6rej4Ha788dFxbdaUhI741mud8NdAMTjHnt32g7+rah DBjJXgOQOZVjEt0PPZgwCOQNRM9KViinVBSyPVOWE/HHM402TZlsfzz2vyD11ZQm s0tbaD7YpZuc1gMpi4s62rVuKuq7UbPm10YgY0aPnEoEf+p+p5urheF08MU= -----END CERTIFICATE-----Generated at Sun May 3 15:23:12 2026 by rpki-client