$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa File: eaef83ec-c27a-4971-921b-164f8f284067.roa (raw, json) Hash identifier: KFr3Be9dgsAZe3Ari9Bte7HF9exD3PZicKdRDejRDjQ= Subject key identifier: 3B:20:7C:A1:8D:E6:DA:EC:F0:3F:33:5B:E5:16:EE:66:C4:CE:9C:B8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 19B00299327CE20739195978F74BC240AB4D9F28 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa Signing time: Fri 09 Oct 2026 00:20:04 +0000 ROA not before: Fri 09 Oct 2026 00:20:04 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b0:02:99:32:7c:e2:07:39:19:59:78:f7:4b:c2:40:ab:4d:9f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Oct 9 00:20:04 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=1162dbf6f11c0966d1065f8df5039d623ae9f325957f66219d6e1e075b5158e6, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:09:de:19:dc:78:c7:a8:77:54:14:78:ad: 98:2f:09:f6:53:9e:48:4a:32:25:cd:8e:52:49:2f: 46:c4:b6:87:dc:44:33:f4:30:d6:e0:d5:77:5e:a7: 96:bc:c4:7c:8c:7e:9d:37:30:e8:b9:1a:79:49:01: 77:d0:2f:14:df:d0:79:3a:6c:68:a9:2f:2a:1c:66: 86:71:91:9a:b6:90:0f:f5:a2:73:ad:10:ea:9b:f6: 78:6d:83:12:be:4b:d1:50:20:22:c5:bb:58:78:d6: d0:c7:57:31:43:90:34:7d:64:d8:f3:4c:80:9e:b6: 46:e0:38:96:c9:e6:f6:7e:07:c9:db:56:dd:2e:d2: a4:92:8f:66:b3:ab:ca:f5:15:6c:0b:39:a9:10:d0: 50:78:ab:e9:0f:b4:a4:21:70:62:04:9e:a1:84:bc: fa:4c:4b:92:7d:d7:00:25:06:96:68:f2:67:73:aa: 43:06:e6:90:bd:e5:cd:c0:c5:95:f5:7d:58:ac:ec: ad:c7:fb:89:2d:33:a1:8c:3b:ac:af:5b:a1:69:42: 9f:17:35:73:ae:05:6e:95:af:05:c8:09:50:f4:f3: 55:2e:bb:b5:9e:4b:f4:43:b8:73:16:c3:06:f9:3f: 1e:c8:2b:9e:13:80:24:fc:43:17:4d:01:60:c7:e6: fa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:7C:A1:8D:E6:DA:EC:F0:3F:33:5B:E5:16:EE:66:C4:CE:9C:B8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.187.0/24 Signature Algorithm: sha256WithRSAEncryption 38:5f:d3:f2:e9:c5:74:d5:0a:84:82:05:c8:71:d9:8b:29:ee: 74:96:c0:66:ff:bd:8c:cf:31:2a:9b:e7:da:98:73:66:c7:3b: a9:08:42:75:ae:7c:4f:38:4d:04:0e:16:1c:57:9b:36:d6:57: 33:96:f6:ed:47:a7:8f:6e:8b:66:02:5e:75:75:27:9c:0c:5c: e4:7d:bf:cd:de:cf:b9:61:3b:bc:f0:5f:af:4d:5d:a8:7a:8e: b7:55:c5:19:ae:ca:6f:24:34:86:12:78:66:1c:ac:73:85:40: 6e:37:e7:fc:dd:58:b2:c0:c3:e3:c2:11:60:f2:7a:fe:00:b7: 00:b6:82:de:f9:c9:c4:e2:dc:df:34:1b:cc:39:7b:50:0e:b1: aa:8a:1c:a1:58:02:5e:d5:6d:4d:26:cc:04:c3:cc:2e:0e:69: ba:84:f0:d0:3b:88:80:e8:fc:0f:04:23:f8:15:c1:f3:91:95: 5b:4d:b0:13:50:00:a1:a0:bc:2a:c9:73:dd:b3:b0:5d:23:72: a0:4b:50:e3:51:5e:3a:a0:ed:44:10:ec:ec:14:5e:3d:03:25: 73:53:5f:3d:71:fe:0a:07:d3:2f:92:29:0c:2a:45:9a:ed:87: 8c:fa:ce:b3:65:69:ed:2a:01:f5:dd:04:3e:90:c0:df:1c:d5: 90:ad:49:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGbACmTJ84gc5GVl490vCQKtNnygwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAyMDA0WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTYyZGJmNmYxMWMwOTY2ZDEwNjVmOGRmNTAzOWQ2MjNh ZTlmMzI1OTU3ZjY2MjE5ZDZlMWUwNzViNTE1OGU2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpRQneGdx4x6h3VBR4rZgvCfZTnkhKMiXNjlJJL0bEtofc RDP0MNbg1Xdep5a8xHyMfp03MOi5GnlJAXfQLxTf0Hk6bGipLyocZoZxkZq2kA/1 onOtEOqb9nhtgxK+S9FQICLFu1h41tDHVzFDkDR9ZNjzTICetkbgOJbJ5vZ+B8nb Vt0u0qSSj2azq8r1FWwLOakQ0FB4q+kPtKQhcGIEnqGEvPpMS5J91wAlBpZo8mdz qkMG5pC95c3AxZX1fVis7K3H+4ktM6GMO6yvW6FpQp8XNXOuBW6VrwXICVD081Uu u7WeS/RDuHMWwwb5Px7IK54TgCT8QxdNAWDH5vrLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOyB8oY3m2uzwPzNb5RbuZsTOnLgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VhZWY4M2VjLWMyN2EtNDk3MS05MjFiLTE2NGY4ZjI4NDA2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37swDQYJKoZIhvcNAQELBQADggEBADhf0/LpxXTVCoSCBchx2Ysp7nSW wGb/vYzPMSqb59qYc2bHO6kIQnWufE84TQQOFhxXmzbWVzOW9u1Hp49ui2YCXnV1 J5wMXOR9v83ez7lhO7zwX69NXah6jrdVxRmuym8kNIYSeGYcrHOFQG435/zdWLLA w+PCEWDyev4AtwC2gt75ycTi3N80G8w5e1AOsaqKHKFYAl7VbU0mzATDzC4OabqE 8NA7iIDo/A8EI/gVwfORlVtNsBNQAKGgvCrJc92zsF0jcqBLUONRXjqg7UQQ7OwU Xj0DJXNTXz1x/goH0y+SKQwqRZrth4z6zrNlae0qAfXdBD6QwN8c1ZCtScY= -----END CERTIFICATE-----Generated at Sun Oct 25 03:06:19 2026 by rpki-client