$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa File: 3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa (raw, json) Hash identifier: Ja+7Iryyro1vNMOESbfYy2OsnfnzqA3bt2SHP8EmQAI= Subject key identifier: 2A:DC:43:90:92:27:E1:5A:A7:59:66:F3:E1:0A:14:0E:E7:C9:7B:FD Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 0761E19BCF30F4479EA265F4E189F0BC40917760 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa Signing time: Tue 14 Apr 2026 12:51:38 +0000 ROA not before: Tue 14 Apr 2026 12:51:38 +0000 ROA not after: Mon 13 Jul 2026 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:61:e1:9b:cf:30:f4:47:9e:a2:65:f4:e1:89:f0:bc:40:91:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 14 12:51:38 2026 GMT Not After : Jul 13 23:59:59 2026 GMT Subject: serialNumber=cd577e2cfd435c3a57e4db318e473cd31ee94b88a865b2a0dc1c8f9142414449, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:7b:9a:9a:24:fb:9e:1a:b5:e9:40:14:52: fd:75:c7:ee:a5:54:2c:c0:f7:30:71:a9:a9:4b:3b: f6:ab:c5:aa:f2:6b:e3:3b:a7:12:f4:a4:c8:62:b5: 66:ba:64:0a:c2:ff:9d:18:7b:ec:39:37:2d:f4:d2: 3e:cd:7d:af:56:66:eb:f8:bc:f8:84:89:13:76:3a: 3d:41:bf:92:21:f7:0f:c3:8a:2c:13:38:a2:21:c6: 12:7d:12:ef:c5:ae:40:56:79:46:34:af:e5:83:f5: 6d:06:6d:7d:6d:03:9f:ea:a8:09:dd:67:6c:74:b1: 0b:07:a3:f1:21:9c:b6:ad:6f:3e:12:25:71:8a:f0: 61:22:ac:c8:98:0f:02:7b:cf:9f:47:60:7f:f7:49: 82:12:77:6b:9f:68:cd:04:2c:ea:95:20:2f:4a:58: 02:97:4f:b5:92:a3:d7:bd:65:a6:2d:4f:e5:7e:b2: 33:37:a4:f6:2c:b9:f3:68:14:07:8d:69:33:f5:d1: e8:32:81:2f:b0:22:2e:c2:aa:9f:f7:6f:25:06:53: 80:6c:9a:1b:f5:d9:b2:87:62:6a:60:e6:25:8a:bd: d4:3c:8c:d0:3b:29:a0:ec:8a:87:cd:ca:75:b1:45: 72:be:36:22:8d:cf:f4:35:da:13:79:66:fb:ea:1d: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DC:43:90:92:27:E1:5A:A7:59:66:F3:E1:0A:14:0E:E7:C9:7B:FD X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ff9309b-5167-4aa1-835f-53fff51ef6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.188.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:97:cd:e7:97:79:9b:d7:fa:2a:e7:fc:a7:24:a3:b2:b2:5a: d1:12:eb:c6:98:8b:97:3b:36:7e:b8:66:25:cb:3c:cd:9f:1b: b3:ee:4d:4a:9a:5c:4c:c2:90:3c:04:aa:2c:a7:64:23:c4:d0: 1a:c2:c2:ed:62:23:40:cc:65:ef:a3:bf:57:51:4b:47:10:6f: 12:2b:e3:65:b3:4a:3f:5a:e2:eb:8c:c9:1d:03:fb:d0:1d:76: 4f:6f:76:4c:5c:b8:7b:dd:2d:5c:3d:f8:3e:df:9b:1b:5a:fd: 74:96:70:c0:26:c4:c7:6d:60:8d:c5:3e:1d:7d:b9:71:3c:a4: 56:7e:16:c9:54:77:57:77:e7:da:0f:cf:19:38:b2:4b:0e:ab: 1a:cf:f6:5b:2d:92:0a:a7:4f:6a:33:9c:06:8c:72:1a:e5:f2: d6:f1:55:9c:c4:33:50:e4:6c:da:47:21:9f:b3:9b:8a:39:d4: a6:0e:90:67:fb:62:17:04:c3:c4:d5:6c:3d:0e:69:ea:04:a7: f9:bf:a9:cd:a3:2d:69:21:2a:62:2b:a2:34:07:4c:66:70:50: 23:aa:5b:5a:8a:34:0b:35:ab:32:0f:45:79:36:cb:8e:41:ad: 29:31:d4:7d:0d:7e:14:0c:3a:fb:a4:14:3f:1f:fa:de:29:c7: 26:83:c3:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB2Hhm88w9EeeomX04YnwvECRd2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNDE0MTI1MTM4WhcNMjYwNzEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDU3N2UyY2ZkNDM1YzNhNTdlNGRiMzE4ZTQ3M2NkMzFl ZTk0Yjg4YTg2NWIyYTBkYzFjOGY5MTQyNDE0NDQ5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaIXuamiT7nhq16UAUUv11x+6lVCzA9zBxqalLO/arxary a+M7pxL0pMhitWa6ZArC/50Ye+w5Ny300j7Nfa9WZuv4vPiEiRN2Oj1Bv5Ih9w/D iiwTOKIhxhJ9Eu/FrkBWeUY0r+WD9W0GbX1tA5/qqAndZ2x0sQsHo/EhnLatbz4S JXGK8GEirMiYDwJ7z59HYH/3SYISd2ufaM0ELOqVIC9KWAKXT7WSo9e9ZaYtT+V+ sjM3pPYsufNoFAeNaTP10egygS+wIi7Cqp/3byUGU4Bsmhv12bKHYmpg5iWKvdQ8 jNA7KaDsiofNynWxRXK+NiKNz/Q12hN5ZvvqHQoHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKtxDkJIn4VqnWWbz4QoUDufJe/0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmZjkzMDliLTUxNjctNGFhMS04MzVmLTUzZmZmNTFlZjZmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3bwwDQYJKoZIhvcNAQELBQADggEBAFuXzeeXeZvX+irn/Kcko7KyWtES 68aYi5c7Nn64ZiXLPM2fG7PuTUqaXEzCkDwEqiynZCPE0BrCwu1iI0DMZe+jv1dR S0cQbxIr42WzSj9a4uuMyR0D+9Addk9vdkxcuHvdLVw9+D7fmxta/XSWcMAmxMdt YI3FPh19uXE8pFZ+FslUd1d359oPzxk4sksOqxrP9lstkgqnT2oznAaMchrl8tbx VZzEM1DkbNpHIZ+zm4o51KYOkGf7YhcEw8TVbD0OaeoEp/m/qc2jLWkhKmIrojQH TGZwUCOqW1qKNAs1qzIPRXk2y45BrSkx1H0NfhQMOvukFD8f+t4pxyaDw2I= -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:20 2026 by rpki-client