$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39fd88ae-5a3b-43a2-93dc-4618fddb4224.roa File: 39fd88ae-5a3b-43a2-93dc-4618fddb4224.roa (raw, json) Hash identifier: E8V9t0e5LYOl9kxlGU2DF82BUkfl9J3EE/3irlJP2Do= Subject key identifier: 7B:7E:26:C3:D6:D9:AE:90:E6:7E:5D:9A:7D:D3:71:7A:27:80:35:A7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2A882AA0D9C2DB4D0176717C3459BAFB4DD94EAF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39fd88ae-5a3b-43a2-93dc-4618fddb4224.roa Signing time: Fri 03 Apr 2026 02:30:08 +0000 ROA not before: Fri 03 Apr 2026 02:30:08 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:88:2a:a0:d9:c2:db:4d:01:76:71:7c:34:59:ba:fb:4d:d9:4e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 3 02:30:08 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=788e6f778d40f42d7b800da7c5dd45275d90bf56a939fa175f9142cee2217895, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:37:19:65:b7:d5:02:4c:65:23:3e:d5:1d: bd:76:3c:ff:5f:8f:c9:ba:0c:2d:25:ed:7d:0a:34: fe:c4:35:9d:11:e0:1c:c0:e4:27:05:82:84:54:b5: b6:51:f7:5f:1a:12:0d:98:1b:b3:86:be:11:47:95: e1:a7:2b:82:b2:d4:86:d8:d7:20:4b:df:65:75:6c: 48:85:f4:d3:2b:40:4f:ec:7b:61:0b:d1:63:f2:4f: c5:20:e2:2c:22:cf:e4:53:7b:f0:b0:51:69:53:5c: aa:4d:77:be:67:23:a9:30:d1:29:32:ef:8a:67:0e: 3e:be:a7:69:bf:2d:10:30:53:1d:bf:b0:f0:07:40: 1e:f2:59:3b:29:25:72:f4:bb:16:90:81:de:82:f1: 66:ad:d2:fc:66:1c:fc:e4:b6:8f:d8:0b:31:82:33: 77:26:92:da:4d:44:dd:d0:74:60:c5:07:94:b1:51: 57:cb:09:30:04:72:c9:80:82:85:9b:3f:e8:01:57: 91:7a:df:62:b9:dc:0b:26:d9:e7:7f:1e:5d:bd:0f: c9:22:63:e0:94:be:31:31:2c:12:95:fb:d5:9a:1d: e6:bc:ef:16:bb:bb:a4:5c:f4:4b:d0:ff:74:46:26: 21:9a:fe:5b:9a:47:f7:f9:71:90:0a:80:e7:2b:d4: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7E:26:C3:D6:D9:AE:90:E6:7E:5D:9A:7D:D3:71:7A:27:80:35:A7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39fd88ae-5a3b-43a2-93dc-4618fddb4224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:70::/44 Signature Algorithm: sha256WithRSAEncryption 7f:3a:a2:c3:ca:18:2d:97:4d:b3:94:97:40:c3:aa:54:75:db: 99:0c:19:dc:02:9b:4f:73:ff:a7:8c:9e:59:21:1f:1c:7e:06: 0c:92:e8:ee:df:f1:97:3f:b6:dc:64:8e:fb:bc:77:00:b0:68: ca:e3:68:00:2e:3d:e3:b9:82:78:73:0d:02:94:77:49:eb:d6: 92:c2:d2:e0:0e:16:60:64:48:80:27:8e:64:5f:f1:cd:1c:d0: 73:cc:f0:7f:a3:65:c1:a8:3e:91:d7:22:74:e2:2c:f9:49:23: 30:73:79:7d:47:85:c2:bc:04:60:0e:5b:87:5b:9b:56:c7:40: 71:11:5d:de:b2:fd:09:b8:a2:c2:41:00:02:34:d5:bc:71:d5: 90:0f:0b:7b:06:49:72:cc:89:f5:b2:8f:22:b8:ca:4c:5f:50: 58:99:8d:dd:33:ff:dc:6d:54:77:0b:4e:99:44:50:2e:9b:e6: 7c:67:4e:88:56:63:8f:f8:14:d8:54:f4:99:9a:03:32:bc:33: 4f:aa:b1:61:ec:9b:03:1a:e2:f8:03:53:57:2c:ed:49:53:8b: f8:35:1d:4a:50:0b:75:1c:60:34:a2:b1:57:0c:39:e1:0f:f4: 6e:f4:1a:3b:3e:4c:22:0e:26:7b:d0:fa:06:93:85:b0:73:e2: 9d:31:5d:10 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKogqoNnC200BdnF8NFm6+03ZTq8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDAzMDIzMDA4WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODhlNmY3NzhkNDBmNDJkN2I4MDBkYTdjNWRkNDUyNzVk OTBiZjU2YTkzOWZhMTc1ZjkxNDJjZWUyMjE3ODk1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeFjcZZbfVAkxlIz7VHb12PP9fj8m6DC0l7X0KNP7ENZ0R 4BzA5CcFgoRUtbZR918aEg2YG7OGvhFHleGnK4Ky1IbY1yBL32V1bEiF9NMrQE/s e2EL0WPyT8Ug4iwiz+RTe/CwUWlTXKpNd75nI6kw0Sky74pnDj6+p2m/LRAwUx2/ sPAHQB7yWTspJXL0uxaQgd6C8Wat0vxmHPzkto/YCzGCM3cmktpNRN3QdGDFB5Sx UVfLCTAEcsmAgoWbP+gBV5F632K53Asm2ed/Hl29D8kiY+CUvjExLBKV+9WaHea8 7xa7u6Rc9EvQ/3RGJiGa/luaR/f5cZAKgOcr1C77AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUe34mw9bZrpDmfl2afdNxeieANacwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM5ZmQ4OGFlLTVhM2ItNDNhMi05M2RjLTQ2MThmZGRiNDIyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwAHAwDQYJKoZIhvcNAQELBQADggEBAH86osPKGC2XTbOUl0DDqlR1 25kMGdwCm09z/6eMnlkhHxx+BgyS6O7f8Zc/ttxkjvu8dwCwaMrjaAAuPeO5gnhz DQKUd0nr1pLC0uAOFmBkSIAnjmRf8c0c0HPM8H+jZcGoPpHXInTiLPlJIzBzeX1H hcK8BGAOW4dbm1bHQHERXd6y/Qm4osJBAAI01bxx1ZAPC3sGSXLMifWyjyK4ykxf UFiZjd0z/9xtVHcLTplEUC6b5nxnTohWY4/4FNhU9JmaAzK8M0+qsWHsmwMa4vgD U1cs7UlTi/g1HUpQC3UcYDSisVcMOeEP9G70Gjs+TCIOJnvQ+gaThbBz4p0xXRA= -----END CERTIFICATE-----Generated at Sun Apr 19 08:41:46 2026 by rpki-client