$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa File: 39b45593-f3f3-4a2e-aa3a-895815db366a.roa (raw, json) Hash identifier: 4LGgS4SM41JUienMeo/RzOv3MqNuS+0gRHdnysPJF30= Subject key identifier: 70:42:E2:01:74:F5:AC:1B:2C:F2:2C:91:BF:65:B6:7F:A7:9C:CB:60 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0794948B37D57FBA7659A5B0268D0C26BB1A0372 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa Signing time: Tue 19 May 2026 04:20:11 +0000 ROA not before: Tue 19 May 2026 04:20:11 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:94:94:8b:37:d5:7f:ba:76:59:a5:b0:26:8d:0c:26:bb:1a:03:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 04:20:11 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=f42fd45a23d1520e29bd51ac3182efcefe3066771a26ecd13a918931262d2cf1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:09:a2:1c:3f:01:42:47:aa:c8:0d:59:05: f9:dc:d0:8d:2e:3d:fc:52:70:24:5c:41:c6:5a:65: 2b:b2:1a:f4:6a:d1:df:30:63:a7:99:c0:75:ee:51: 1a:57:18:90:7d:a8:3a:69:ce:5c:c7:69:6e:8d:3b: 94:63:28:81:d1:a8:11:24:aa:b5:97:e6:a6:bb:41: bd:e0:08:52:8d:38:b7:b3:2d:f6:08:f4:44:0f:73: b6:e1:90:5f:6c:fa:a3:bc:54:54:35:be:26:15:7d: 94:47:9e:c4:a9:09:cc:bb:13:12:f3:95:2d:f1:5a: c0:20:99:ff:67:55:da:0a:45:bb:5a:02:9e:0a:28: eb:38:d6:b1:f4:91:02:a2:be:6e:39:6e:71:de:88: 89:0a:bd:e4:69:31:75:76:8f:47:72:ed:6b:7d:e7: 36:67:ca:12:b5:4d:db:fb:03:be:18:c6:4e:45:ac: f6:52:f8:71:5d:6b:0c:58:ea:0c:1b:2d:0e:23:31: f3:a5:fe:da:8a:2a:00:3a:da:35:fa:99:15:e2:b6: 72:0b:f6:03:91:d5:66:e0:ee:a4:3a:dd:b6:5f:b4: dd:27:38:73:7f:ba:31:d1:31:77:60:16:11:49:05: 35:74:9f:04:22:a5:39:0d:4d:63:3a:a5:b6:51:ff: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:42:E2:01:74:F5:AC:1B:2C:F2:2C:91:BF:65:B6:7F:A7:9C:CB:60 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/39 Signature Algorithm: sha256WithRSAEncryption 42:77:03:fb:42:86:02:6b:86:7b:4a:d9:4a:b3:ed:be:c4:65: a9:b8:06:0c:cf:15:fe:ca:a0:9a:7d:11:0b:ec:49:b7:bb:d7: 3d:e8:a0:d7:4d:05:aa:f1:a4:e1:f1:5e:71:9c:c8:26:54:61: 90:90:39:80:64:11:af:56:73:b6:c1:ed:52:17:83:d0:dc:79: ff:f5:f5:1c:72:63:dc:e0:99:47:f8:c0:53:27:8c:ae:8f:5a: b9:64:dd:c1:17:70:e6:c4:8f:ed:d7:98:e4:fb:d5:72:e6:85: 9a:30:e5:88:b9:a9:63:df:4b:2b:66:ed:97:9f:a2:31:c4:11: 4c:bc:d1:27:aa:f9:d5:5a:d7:1e:6a:1a:75:36:60:2b:7d:4e: f8:00:36:19:71:dd:1a:8c:6c:99:25:19:d1:eb:4e:dc:27:96: dc:2b:db:f5:f4:ce:f2:6c:06:af:c8:64:fa:ed:94:cc:45:48: d1:12:2e:82:3d:2d:5c:82:27:93:12:59:77:d2:10:86:ac:79: 49:df:92:d7:c7:a0:9e:65:59:a7:12:bb:ff:38:7f:68:8c:62: 75:11:83:f4:e6:9b:d9:8d:c1:2c:6d:c3:4f:f4:6a:55:3c:6d: ac:30:e4:f0:2b:b6:39:69:c8:18:3b:56:e0:fd:0b:07:20:58: c2:e2:a8:39 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUB5SUizfVf7p2WaWwJo0MJrsaA3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQyMDExWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDJmZDQ1YTIzZDE1MjBlMjliZDUxYWMzMTgyZWZjZWZl MzA2Njc3MWEyNmVjZDEzYTkxODkzMTI2MmQyY2YxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjIQmiHD8BQkeqyA1ZBfnc0I0uPfxScCRcQcZaZSuyGvRq 0d8wY6eZwHXuURpXGJB9qDppzlzHaW6NO5RjKIHRqBEkqrWX5qa7Qb3gCFKNOLez LfYI9EQPc7bhkF9s+qO8VFQ1viYVfZRHnsSpCcy7ExLzlS3xWsAgmf9nVdoKRbta Ap4KKOs41rH0kQKivm45bnHeiIkKveRpMXV2j0dy7Wt95zZnyhK1Tdv7A74Yxk5F rPZS+HFdawxY6gwbLQ4jMfOl/tqKKgA62jX6mRXitnIL9gOR1Wbg7qQ63bZftN0n OHN/ujHRMXdgFhFJBTV0nwQipTkNTWM6pbZR/0FXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUcELiAXT1rBss8iyRv2W2f6ecy2AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM5YjQ1NTkzLWYzZjMtNGEyZS1hYTNhLTg5NTgxNWRiMzY2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAPAAADANBgkqhkiG9w0BAQsFAAOCAQEAQncD+0KGAmuGe0rZSrPtvsRl qbgGDM8V/sqgmn0RC+xJt7vXPeig100FqvGk4fFecZzIJlRhkJA5gGQRr1ZztsHt UheD0Nx5//X1HHJj3OCZR/jAUyeMro9auWTdwRdw5sSP7deY5PvVcuaFmjDliLmp Y99LK2btl5+iMcQRTLzRJ6r51VrXHmoadTZgK31O+AA2GXHdGoxsmSUZ0etO3CeW 3Cvb9fTO8mwGr8hk+u2UzEVI0RIugj0tXIInkxJZd9IQhqx5Sd+S18egnmVZpxK7 /zh/aIxidRGD9Oab2Y3BLG3DT/RqVTxtrDDk8Cu2OWnIGDtW4P0LByBYwuKoOQ== -----END CERTIFICATE-----Generated at Wed May 27 18:31:34 2026 by rpki-client