$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa File: e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa (raw, json) Hash identifier: 4MSkZ3Gu4mROUTIOLli4X4dv/nXIXm9EfPmJeOcCm/Q= Subject key identifier: A8:83:12:1C:70:39:1B:AF:4E:B1:51:14:CD:E3:7A:E5:19:0B:37:75 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 576F2F3D6DAB404DB48E10B4330CFBD4165BD287 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa Signing time: Wed 05 Aug 2026 00:00:10 +0000 ROA not before: Wed 05 Aug 2026 00:00:10 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.221.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6f:2f:3d:6d:ab:40:4d:b4:8e:10:b4:33:0c:fb:d4:16:5b:d2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Aug 5 00:00:10 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=8f2fb518c85d66523c8ab8f637b1d016b8a3b94b4af4416fb68ff6a0e6942b15, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:e2:41:12:ff:f8:91:de:d3:a9:bf:d5:01: ab:99:1d:1c:8b:04:53:80:7c:46:d3:8c:a1:d3:0d: b6:dd:38:6a:37:ba:fc:77:a6:18:78:11:d2:cc:2e: 7b:b3:5f:c9:c1:a3:74:33:69:33:eb:d8:47:3d:7b: 11:a2:1a:6a:19:6c:e7:80:32:4f:9b:9a:26:c0:fd: 8f:b9:0d:04:58:e9:45:f5:8e:c6:3f:eb:b2:c0:04: 71:80:cd:c1:d2:89:c1:25:70:d8:a1:9d:d3:fd:db: 8f:63:21:e5:e7:2b:48:e6:18:52:4a:44:06:46:3e: 76:7b:b6:25:33:b7:2f:c3:a0:26:dd:cb:5b:bd:02: 6f:ee:0b:95:95:aa:a8:0d:b9:5f:e2:47:fd:ac:78: c1:92:5d:4a:3b:54:a0:31:f7:29:bb:70:d4:68:9c: 52:d7:2a:ef:e1:0f:78:9e:b2:d0:66:11:15:a5:e8: 5e:0d:7b:1f:23:5c:a3:c7:3f:a1:7b:5c:6f:8d:65: cd:87:77:03:80:37:6d:9f:07:51:56:66:b2:7c:28: ce:35:c2:f5:8d:31:b3:0b:81:33:5f:7e:b6:97:0b: 6e:92:65:2c:ce:68:1e:50:03:e5:6f:ab:01:dc:09: 0a:74:79:97:52:b3:8a:ea:de:9a:c4:ac:c8:68:0c: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:83:12:1C:70:39:1B:AF:4E:B1:51:14:CD:E3:7A:E5:19:0B:37:75 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e7138651-9d24-41c2-8af2-d0a2f7645ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.163.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a6:a1:c4:c0:52:18:b2:ae:f8:00:85:f9:97:f8:92:8c:02: f9:71:0e:c7:ed:8a:b3:0f:bf:cb:82:44:6d:85:37:f3:9c:8d: 83:f8:20:dc:dc:5a:38:2e:8c:d7:de:81:4d:1d:2f:bf:66:c9: 72:0e:26:45:dd:0a:ab:1d:1e:95:53:71:0e:15:35:1b:f2:49: e6:32:62:47:b7:86:c6:23:db:ac:b5:5b:1d:a0:53:e4:86:7d: 36:e1:11:26:da:47:71:f0:71:10:5f:c8:ef:92:81:00:4c:7f: 7d:8b:06:89:9b:82:a4:ab:26:40:d5:c8:1b:1c:a9:3f:62:69: 03:32:9e:01:e5:e4:9e:60:58:27:0e:6a:ff:c8:cf:a2:c3:2d: f4:54:42:84:a2:f1:fd:b7:5c:21:63:94:6b:fa:43:8e:fb:00: 2e:c1:22:be:1e:c7:59:a6:9c:c8:34:e9:0c:db:f2:47:e6:35: 08:72:62:68:91:97:f3:87:3a:ed:aa:67:cc:ca:ec:7c:ca:f6: 87:68:2a:4b:ac:30:fa:7a:e6:ec:e1:b1:e7:c0:ba:47:7c:26: 96:2d:f5:ef:ac:5e:18:aa:b1:0f:cd:93:0a:c1:4c:30:79:91: 5a:be:ac:d4:ca:fe:fc:55:e0:4a:40:95:c6:10:7e:66:9e:ac: f1:df:13:22 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV28vPW2rQE20jhC0Mwz71BZb0ocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwODA1MDAwMDEwWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjJmYjUxOGM4NWQ2NjUyM2M4YWI4ZjYzN2IxZDAxNmI4 YTNiOTRiNGFmNDQxNmZiNjhmZjZhMGU2OTQyYjE1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl2OJBEv/4kd7Tqb/VAauZHRyLBFOAfEbTjKHTDbbdOGo3 uvx3phh4EdLMLnuzX8nBo3QzaTPr2Ec9exGiGmoZbOeAMk+bmibA/Y+5DQRY6UX1 jsY/67LABHGAzcHSicElcNihndP9249jIeXnK0jmGFJKRAZGPnZ7tiUzty/DoCbd y1u9Am/uC5WVqqgNuV/iR/2seMGSXUo7VKAx9ym7cNRonFLXKu/hD3iestBmERWl 6F4Nex8jXKPHP6F7XG+NZc2HdwOAN22fB1FWZrJ8KM41wvWNMbMLgTNffraXC26S ZSzOaB5QA+VvqwHcCQp0eZdSs4rq3prErMhoDAidAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqIMSHHA5G69OsVEUzeN65RkLN3UwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2U3MTM4NjUxLTlkMjQtNDFjMi04YWYyLWQwYTJmNzY0NWNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3aMwDQYJKoZIhvcNAQELBQADggEBAIamocTAUhiyrvgAhfmX+JKMAvlx DsftirMPv8uCRG2FN/OcjYP4INzcWjgujNfegU0dL79myXIOJkXdCqsdHpVTcQ4V NRvySeYyYke3hsYj26y1Wx2gU+SGfTbhESbaR3HwcRBfyO+SgQBMf32LBombgqSr JkDVyBscqT9iaQMyngHl5J5gWCcOav/Iz6LDLfRUQoSi8f23XCFjlGv6Q477AC7B Ir4ex1mmnMg06Qzb8kfmNQhyYmiRl/OHOu2qZ8zK7HzK9odoKkusMPp65uzhsefA ukd8JpYt9e+sXhiqsQ/NkwrBTDB5kVq+rNTK/vxV4EpAlcYQfmaerPHfEyI= -----END CERTIFICATE-----Generated at Mon Sep 21 09:27:46 2026 by rpki-client