$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39b4de27-d3e7-4ae9-89bd-4d3c779e3840.roa File: 39b4de27-d3e7-4ae9-89bd-4d3c779e3840.roa (raw, json) Hash identifier: JnnyVY1lAh29cv17F8302j5gWOluTerUjMDrXuva3eA= Subject key identifier: DB:32:36:E3:10:9A:7B:54:9E:24:B6:79:FB:EA:F4:65:E9:9C:19:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B32E38A261EB84A2993111DD34604D03E6139B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39b4de27-d3e7-4ae9-89bd-4d3c779e3840.roa Signing time: Thu 16 Apr 2026 00:00:41 +0000 ROA not before: Thu 16 Apr 2026 00:00:41 +0000 ROA not after: Wed 15 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 108.161.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:32:e3:8a:26:1e:b8:4a:29:93:11:1d:d3:46:04:d0:3e:61:39:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:41 2026 GMT Not After : Jul 15 23:59:59 2026 GMT Subject: serialNumber=2dca1249c3d9e168fbb9efe4108a76f14f632ce60c249addd3ba527ab8373df7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:7a:1b:b4:1e:d3:f9:2d:42:cd:53:4f:5a: f0:94:ba:b2:b1:30:4b:54:f2:d0:b5:30:e1:1e:3d: a4:bd:f9:10:e9:7b:5a:29:5e:45:1b:49:e8:70:92: 60:c6:6b:80:fc:38:11:d4:df:58:0f:a5:ba:d0:6c: 4c:34:89:60:6b:82:18:ed:58:19:7d:6f:b2:04:99: 21:83:c9:db:25:1f:6c:e5:f2:bf:c9:49:d1:d5:76: a1:75:95:cd:d2:37:30:08:37:1b:2e:4e:28:b1:fb: 10:de:b3:3e:c3:48:54:17:5a:d9:51:08:37:c5:b1: 1b:97:ba:40:8e:a0:6a:4f:b1:36:42:a3:d4:50:dc: 03:3b:dc:65:f8:70:3b:49:6d:8d:c1:4d:f0:0e:85: 5b:2e:18:91:25:3d:b7:13:f0:32:7a:76:98:cf:99: b2:78:ed:4a:31:18:d4:69:f5:af:98:06:cf:99:27: 47:36:38:ba:54:af:af:e4:b8:fd:f3:93:36:22:a7: c6:31:bf:eb:ea:a6:36:29:47:77:64:01:72:f1:a0: 5d:b6:f2:90:be:34:91:ee:45:cb:a6:c3:02:b1:55: bf:9b:e6:52:b3:57:10:92:37:63:5e:aa:2c:d4:8b: 31:b7:96:b9:c6:63:a4:e2:2a:76:eb:80:82:55:5b: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:32:36:E3:10:9A:7B:54:9E:24:B6:79:FB:EA:F4:65:E9:9C:19:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39b4de27-d3e7-4ae9-89bd-4d3c779e3840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.161.176.0/20 Signature Algorithm: sha256WithRSAEncryption 41:3f:9a:88:e6:51:67:f7:8c:43:c4:05:4e:db:8a:6b:81:1b: da:ae:91:45:46:5b:71:34:7a:ed:41:e7:69:19:ff:a1:de:45: 9d:38:ba:8f:f0:1d:ca:a2:93:b5:16:d7:d8:fc:63:74:f3:bb: cd:54:56:ed:cc:83:39:f2:da:f0:9b:84:7a:e6:ac:ca:29:f6: 88:4e:60:d1:aa:26:d1:e5:57:be:15:66:00:34:fd:a1:01:3c: 4c:1d:5d:a6:0e:2b:90:22:d8:48:35:92:c3:7e:1d:d6:b7:88: f6:aa:d3:f2:09:d8:c5:e6:7c:18:b2:4f:a2:79:92:ec:ad:a6: 63:ae:63:41:f2:d3:7a:d2:b8:20:1d:cd:ec:20:7d:24:c7:7b: c7:d7:e4:6b:2e:ba:65:61:3b:57:e0:4e:bc:ba:29:d1:47:c9: ed:72:e3:b6:33:86:13:89:dd:9b:c7:c7:f7:90:2b:d8:9d:c0: 50:d5:95:32:88:d2:06:30:cc:01:54:b3:14:ff:4a:a7:fd:f6: b4:9d:3c:a3:47:a1:c9:29:6f:a3:d5:5d:b5:82:70:47:89:fc: e1:18:8d:77:03:bd:94:19:ed:1f:fe:50:4e:bb:82:5a:7b:49: a6:ad:8f:0f:c4:59:68:b0:f7:fc:d1:b7:af:5b:2e:0b:72:fc: e7:07:43:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWzLjiiYeuEopkxEd00YE0D5hObEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDE2MDAwMDQxWhcNMjYwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGNhMTI0OWMzZDllMTY4ZmJiOWVmZTQxMDhhNzZmMTRm NjMyY2U2MGMyNDlhZGRkM2JhNTI3YWI4MzczZGY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFFHobtB7T+S1CzVNPWvCUurKxMEtU8tC1MOEePaS9+RDp e1opXkUbSehwkmDGa4D8OBHU31gPpbrQbEw0iWBrghjtWBl9b7IEmSGDydslH2zl 8r/JSdHVdqF1lc3SNzAINxsuTiix+xDesz7DSFQXWtlRCDfFsRuXukCOoGpPsTZC o9RQ3AM73GX4cDtJbY3BTfAOhVsuGJElPbcT8DJ6dpjPmbJ47UoxGNRp9a+YBs+Z J0c2OLpUr6/kuP3zkzYip8Yxv+vqpjYpR3dkAXLxoF228pC+NJHuRcumwwKxVb+b 5lKzVxCSN2NeqizUizG3lrnGY6TiKnbrgIJVWz/vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2zI24xCae1SeJLZ5++r0ZemcGeswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM5YjRkZTI3LWQzZTctNGFlOS04OWJkLTRkM2M3NzllMzg0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARsobAwDQYJKoZIhvcNAQELBQADggEBAEE/mojmUWf3jEPEBU7bimuBG9qu kUVGW3E0eu1B52kZ/6HeRZ04uo/wHcqik7UW19j8Y3Tzu81UVu3Mgzny2vCbhHrm rMop9ohOYNGqJtHlV74VZgA0/aEBPEwdXaYOK5Ai2Eg1ksN+Hda3iPaq0/IJ2MXm fBiyT6J5kuytpmOuY0Hy03rSuCAdzewgfSTHe8fX5GsuumVhO1fgTry6KdFHye1y 47YzhhOJ3ZvHx/eQK9idwFDVlTKI0gYwzAFUsxT/Sqf99rSdPKNHockpb6PVXbWC cEeJ/OEYjXcDvZQZ7R/+UE67glp7Saatjw/EWWiw9/zRt69bLgty/OcHQwo= -----END CERTIFICATE-----Generated at Fri Apr 17 06:32:31 2026 by rpki-client