$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39ed776a-4b27-4772-993b-9f7d8a2212c6.roa File: 39ed776a-4b27-4772-993b-9f7d8a2212c6.roa (raw, json) Hash identifier: 3kFpQWKM8mqa4Fdoojp645M0E/SZ+M3yV7lfUn2FOLg= Subject key identifier: 91:B6:7F:22:92:C1:40:1C:BA:3A:33:27:37:0A:F1:A7:F6:6B:89:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1CD8A57DF3AAB42040770DC91AB88F3D9AD9A185 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39ed776a-4b27-4772-993b-9f7d8a2212c6.roa Signing time: Fri 01 May 2026 01:11:46 +0000 ROA not before: Fri 01 May 2026 01:11:46 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 15.248.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d8:a5:7d:f3:aa:b4:20:40:77:0d:c9:1a:b8:8f:3d:9a:d9:a1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 1 01:11:46 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=70b88b3dcde0531cae8d339840e1e909664b774baffe0b6593ebf0633355f7ff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:16:cd:af:79:69:4b:41:fd:03:51:03:1d:0c: cd:fa:ff:40:d8:6a:1d:20:19:79:2f:c1:ed:18:92: 53:8a:9e:4c:ae:b0:99:70:4c:62:76:df:6e:93:e9: f9:74:27:f1:c3:19:5a:2f:6c:91:5c:1b:87:6f:a9: b1:21:25:2d:5a:4c:83:de:4c:a9:3f:83:a9:a8:c7: 41:f8:95:bb:93:bd:38:9d:3e:41:2e:f4:f4:28:6b: c4:ce:3d:14:98:bc:0c:bd:7d:9f:5c:1d:d4:11:74: 84:72:94:61:5d:8a:a1:bd:64:f7:32:b7:5c:94:3a: ce:08:13:91:75:a6:c9:28:8e:84:3c:4b:42:c0:60: 23:50:e9:6a:e7:f6:6a:f2:06:73:87:1f:bd:96:18: 4d:e0:94:32:22:e5:22:51:08:74:b7:bc:fc:53:ff: 0e:fc:62:5d:30:e7:d0:e1:96:f3:c8:2e:8b:a3:b0: 8e:b1:88:87:dc:4b:d8:37:9a:f9:86:3f:2b:ab:03: 51:9d:b0:f9:5b:a9:14:48:03:e7:64:d7:e6:e3:da: 34:9f:94:fd:56:3b:1e:6e:6c:64:69:78:2a:41:10: ce:de:88:7b:ee:5c:48:13:9c:c9:ba:ac:db:d3:3a: d9:af:83:e3:5d:cd:57:2f:ca:84:d9:89:b9:9c:e5: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:7F:22:92:C1:40:1C:BA:3A:33:27:37:0A:F1:A7:F6:6B:89:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39ed776a-4b27-4772-993b-9f7d8a2212c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.138.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:a3:c2:d1:bd:d4:44:0b:15:51:29:6c:47:a0:a2:d8:22:dd: ad:bf:00:89:e5:db:e5:1d:39:e1:6a:48:60:ba:80:6c:0e:c3: 15:54:96:a0:fc:49:56:8c:02:a1:f1:92:3f:82:10:8e:ee:24: 5e:ab:54:1e:d1:7c:ea:e8:7e:5b:1e:13:78:45:e0:f3:c9:b3: 44:be:7d:f5:19:85:c0:9b:42:8d:8c:f5:22:2d:f3:2c:0c:5e: 31:97:e1:78:9d:8d:8d:cc:7a:82:3b:84:78:99:f2:70:9d:67: e0:46:2c:4f:b7:6b:cd:27:c0:cb:83:a9:bb:e5:e1:04:3d:d1: 4f:2c:c4:9f:c6:62:4d:2f:be:2e:bc:62:b8:3c:91:13:ba:a9: 69:6f:5c:68:6a:37:d5:73:61:a4:e7:24:3a:6a:be:02:a3:b8: a2:29:c1:35:ae:8a:64:38:00:fc:92:8b:a9:20:44:55:b5:3d: b2:e6:5d:d4:d5:dc:67:60:de:d2:f6:2f:a1:6d:7e:7a:2e:0b: 39:1e:4e:63:6f:05:e7:c8:59:27:7f:dd:e8:c9:d5:e2:45:0d: ec:85:19:98:99:0b:31:0e:af:43:cd:b8:42:39:48:c4:24:7a: 7c:7b:9f:cb:d2:8d:e0:3e:9b:fc:d3:9b:93:64:6f:7e:69:5a: 4b:64:e9:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHNilffOqtCBAdw3JGriPPZrZoYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTAxMDExMTQ2WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MGI4OGIzZGNkZTA1MzFjYWU4ZDMzOTg0MGUxZTkwOTY2 NGI3NzRiYWZmZTBiNjU5M2ViZjA2MzMzNTVmN2ZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNFs2veWlLQf0DUQMdDM36/0DYah0gGXkvwe0YklOKnkyu sJlwTGJ2326T6fl0J/HDGVovbJFcG4dvqbEhJS1aTIPeTKk/g6mox0H4lbuTvTid PkEu9PQoa8TOPRSYvAy9fZ9cHdQRdIRylGFdiqG9ZPcyt1yUOs4IE5F1pskojoQ8 S0LAYCNQ6Wrn9mryBnOHH72WGE3glDIi5SJRCHS3vPxT/w78Yl0w59DhlvPILouj sI6xiIfcS9g3mvmGPyurA1GdsPlbqRRIA+dk1+bj2jSflP1WOx5ubGRpeCpBEM7e iHvuXEgTnMm6rNvTOtmvg+NdzVcvyoTZibmc5Wk9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkbZ/IpLBQBy6OjMnNwrxp/Zrif8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5ZWQ3NzZhLTRiMjctNDc3Mi05OTNiLTlmN2Q4YTIyMTJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP+IowDQYJKoZIhvcNAQELBQADggEBAFujwtG91EQLFVEpbEegotgi3a2/ AInl2+UdOeFqSGC6gGwOwxVUlqD8SVaMAqHxkj+CEI7uJF6rVB7RfOroflseE3hF 4PPJs0S+ffUZhcCbQo2M9SIt8ywMXjGX4XidjY3MeoI7hHiZ8nCdZ+BGLE+3a80n wMuDqbvl4QQ90U8sxJ/GYk0vvi68Yrg8kRO6qWlvXGhqN9VzYaTnJDpqvgKjuKIp wTWuimQ4APySi6kgRFW1PbLmXdTV3Gdg3tL2L6FtfnouCzkeTmNvBefIWSd/3ejJ 1eJFDeyFGZiZCzEOr0PNuEI5SMQkenx7n8vSjeA+m/zTm5Nkb35pWktk6eQ= -----END CERTIFICATE-----Generated at Tue May 12 22:36:58 2026 by rpki-client