$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa File: f67538ee-cd29-4883-9251-086023a50dc3.roa (raw, json) Hash identifier: 1gOLkfzoPkB3JaUhYrwogv0CX49wZDD33R5yMuxzUls= Subject key identifier: F5:BF:51:73:63:CE:CB:81:D4:46:1F:4B:A9:7B:96:A6:FC:F7:67:2F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 626F9AC22A5A0FAFD79A87F0CC191EF53C8DAECE Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa Signing time: Sat 02 May 2026 00:20:08 +0000 ROA not before: Sat 02 May 2026 00:20:08 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6f:9a:c2:2a:5a:0f:af:d7:9a:87:f0:cc:19:1e:f5:3c:8d:ae:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 2 00:20:08 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=9e6905fa454827438644dcdd3dcca3b199e956b0017f2bb9b7864d5ed94fbf6b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:37:c4:ff:1f:0d:3d:1b:8f:22:06:71:3c: ce:bb:13:d6:1a:8d:b3:6f:eb:07:ac:47:0a:6c:5f: f0:2e:8a:a5:d9:fc:88:61:a9:fb:c2:2a:90:a5:2f: 45:cc:98:57:78:93:5f:ef:c8:eb:74:f0:0e:88:1b: b6:22:1b:a2:4f:6e:f1:f2:4c:32:4f:25:0c:8a:ae: 61:35:52:05:73:45:09:34:24:5b:89:f5:88:5e:f6: 5b:3e:e9:4b:9b:f1:64:4c:0d:87:d0:6e:db:43:d3: a8:85:e2:68:ca:3e:48:54:b8:fe:2a:67:55:b8:69: 86:79:6d:64:4e:a5:70:33:26:27:87:95:03:8f:69: b4:7f:53:88:1f:b5:ac:d3:10:ae:05:25:bd:66:c6: fc:54:11:af:fd:58:58:11:b0:80:55:bc:d2:db:56: 2c:39:0f:8f:61:c5:58:8e:fc:5b:d6:c4:83:6d:9c: 78:d8:a8:60:5e:b4:8a:cf:e6:e5:52:35:88:5a:f3: 26:74:02:31:8b:99:40:4c:c7:c6:9d:4c:9d:50:a4: b3:2e:3d:31:93:6a:8d:81:30:72:8b:71:6a:90:e4: b8:2e:fd:82:96:0a:1f:15:86:4d:75:c3:09:68:72: 80:08:2a:45:81:33:09:37:a1:10:dc:90:24:7a:57: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BF:51:73:63:CE:CB:81:D4:46:1F:4B:A9:7B:96:A6:FC:F7:67:2F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:97:da:fb:2a:87:ed:f9:c1:49:68:f2:0c:51:04:b9:13:5a: d0:bf:ba:dd:6a:71:dc:41:38:00:9f:6b:89:f5:48:40:85:7c: b7:8b:c4:a5:5f:e5:37:4e:35:ac:64:2d:4c:bc:73:cb:d2:9f: 2e:e6:e3:95:94:e6:47:23:80:d3:33:9a:84:db:03:d8:12:0e: ed:8d:77:54:87:5c:88:9b:c2:02:cc:18:36:59:35:3e:19:9e: 97:4b:87:83:ad:76:33:a9:81:09:43:25:1f:01:57:d8:53:00: ea:5b:54:ea:9e:23:2d:35:87:10:98:9a:91:5a:d4:2c:a3:de: 93:90:1b:dd:e6:9e:8f:12:45:da:62:8d:59:82:25:73:e4:ec: 25:0a:d8:4c:ba:27:b4:5c:76:77:a5:02:3e:3e:88:94:78:ad: 11:83:f9:88:ee:c5:29:bc:1b:14:52:9d:b1:ca:d8:88:18:24: 9f:b9:f2:b6:46:02:5f:ab:f6:ae:dd:f6:54:55:30:0c:ff:de: 92:8a:d9:23:82:02:8c:43:2e:75:2e:ac:f5:1d:b3:d9:57:f4: ba:d5:84:fd:ba:97:04:cc:40:15:df:43:ca:cb:bc:3e:f2:ce: a9:e5:9f:2a:ae:3a:71:c7:08:7f:7b:2e:e4:5a:73:d9:20:f3: 0f:2d:ad:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYm+awipaD6/XmofwzBke9TyNrs4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTAyMDAyMDA4WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTY5MDVmYTQ1NDgyNzQzODY0NGRjZGQzZGNjYTNiMTk5 ZTk1NmIwMDE3ZjJiYjliNzg2NGQ1ZWQ5NGZiZjZiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpkzfE/x8NPRuPIgZxPM67E9YajbNv6wesRwpsX/AuiqXZ /IhhqfvCKpClL0XMmFd4k1/vyOt08A6IG7YiG6JPbvHyTDJPJQyKrmE1UgVzRQk0 JFuJ9Yhe9ls+6Uub8WRMDYfQbttD06iF4mjKPkhUuP4qZ1W4aYZ5bWROpXAzJieH lQOPabR/U4gftazTEK4FJb1mxvxUEa/9WFgRsIBVvNLbViw5D49hxViO/FvWxINt nHjYqGBetIrP5uVSNYha8yZ0AjGLmUBMx8adTJ1QpLMuPTGTao2BMHKLcWqQ5Lgu /YKWCh8Vhk11wwlocoAIKkWBMwk3oRDckCR6V6QTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9b9Rc2POy4HURh9LqXuWpvz3Zy8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y2NzUzOGVlLWNkMjktNDg4My05MjUxLTA4NjAyM2E1MGRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++MwDQYJKoZIhvcNAQELBQADggEBAG6X2vsqh+35wUlo8gxRBLkTWtC/ ut1qcdxBOACfa4n1SECFfLeLxKVf5TdONaxkLUy8c8vSny7m45WU5kcjgNMzmoTb A9gSDu2Nd1SHXIibwgLMGDZZNT4ZnpdLh4OtdjOpgQlDJR8BV9hTAOpbVOqeIy01 hxCYmpFa1Cyj3pOQG93mno8SRdpijVmCJXPk7CUK2Ey6J7RcdnelAj4+iJR4rRGD +YjuxSm8GxRSnbHK2IgYJJ+58rZGAl+r9q7d9lRVMAz/3pKK2SOCAoxDLnUurPUd s9lX9LrVhP26lwTMQBXfQ8rLvD7yzqnlnyquOnHHCH97LuRac9kg8w8trW4= -----END CERTIFICATE-----Generated at Sun May 3 16:52:47 2026 by rpki-client