$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/20095d9f-1e10-490f-9b49-7f5929635802.roa File: 20095d9f-1e10-490f-9b49-7f5929635802.roa (raw, json) Hash identifier: 6cZfd0T/4W6oC3725/8G04ZO8dJoFEk4rwFqgAOcCos= Subject key identifier: B3:EA:E2:FF:EB:1A:14:3D:E6:02:38:60:9D:0B:34:8F:99:67:0D:83 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 73E30E71204392BCC87C6EBA894A1FD5393DB94B Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/20095d9f-1e10-490f-9b49-7f5929635802.roa Signing time: Sun 02 Aug 2026 00:00:22 +0000 ROA not before: Sun 02 Aug 2026 00:00:22 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e3:0e:71:20:43:92:bc:c8:7c:6e:ba:89:4a:1f:d5:39:3d:b9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Aug 2 00:00:22 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=0f12936bc957a1156b51a5b50a53f4478e139290243af28531211736499d57a7, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:2b:ae:f3:08:09:4e:60:fd:53:57:9a:cc: d1:f3:48:4a:11:08:1b:dc:46:9a:3f:60:22:eb:87: 7e:fb:42:e4:a9:99:43:26:e6:a7:57:61:b0:11:f2: c7:cb:82:00:89:aa:25:96:24:2c:7d:fa:44:34:f3: 3f:a1:59:73:b3:f0:91:44:23:ac:64:e8:83:18:cd: 8b:93:b8:68:33:b5:f8:a0:f6:7f:b6:d8:27:6f:24: 38:38:a9:3e:35:69:38:7b:00:1e:6f:d7:21:f3:28: 8b:63:c5:f4:9f:01:5d:a7:98:5c:38:79:33:e0:f2: c6:70:fa:4b:30:0e:a2:15:4d:60:83:56:87:87:98: ca:66:ec:45:59:26:97:e7:b5:db:fd:e9:0e:73:4b: f0:6b:c2:34:19:9b:3a:29:45:7f:ea:66:7f:c2:f8: 35:8f:cc:61:64:a2:4c:c9:68:e4:26:d9:6c:4a:67: ee:66:82:43:dc:a6:3d:32:c5:60:d1:7e:c0:77:f6: 8a:43:b8:74:3b:c4:b6:a2:28:ae:67:22:9c:0c:53: 2d:0e:fa:3a:10:11:e3:25:0d:26:b0:6c:be:5b:e1: 08:7b:4a:ac:83:0b:f2:8b:3d:82:72:98:81:49:15: b1:0a:c3:b9:0e:40:16:f1:89:5d:4e:6b:58:a1:83: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:E2:FF:EB:1A:14:3D:E6:02:38:60:9D:0B:34:8F:99:67:0D:83 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/20095d9f-1e10-490f-9b49-7f5929635802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:900::/40 Signature Algorithm: sha256WithRSAEncryption 90:0d:b7:85:88:ab:f2:ba:fc:78:f8:ee:97:0f:ba:54:22:c7: 94:e9:e3:1f:43:eb:f2:65:5e:62:0b:2c:a8:7f:83:5a:66:dc: 37:19:77:57:64:c5:a9:55:07:21:0b:ea:41:f7:86:04:ff:30: 5a:c7:f6:cc:1e:3d:75:46:d5:6c:78:65:28:f3:f7:f8:35:9f: 16:14:57:42:e8:4a:5d:1e:5d:b5:92:15:2d:e5:89:12:e5:e8: 66:22:ad:8b:f3:a0:59:9f:56:6f:17:52:64:cf:f8:39:ba:aa: 55:23:01:a6:3c:90:97:c0:4a:73:d1:4a:36:04:d1:80:8b:ce: 95:77:29:7d:4e:b4:4c:13:18:20:52:32:68:0b:c2:9a:67:a2: e4:ff:ec:53:fb:c2:c1:68:f3:2f:66:dc:9a:b7:63:bb:9a:68: 4c:ea:82:d1:1a:56:e6:5e:dc:4f:87:41:5c:a1:3f:af:4d:42: e6:dd:87:c0:4c:78:c3:d4:96:15:7a:7f:6c:f1:81:76:7e:56: f6:92:ca:05:54:cc:13:7b:49:ed:7e:8c:f2:77:f5:43:b9:3c: 56:e2:73:70:6b:78:1c:5d:a0:cc:f2:1c:b2:8a:0e:47:c9:64: 06:f2:94:8c:bd:4b:2e:55:df:50:cb:e6:21:12:91:3d:44:ef: eb:c1:e3:3c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUc+MOcSBDkrzIfG66iUof1Tk9uUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwODAyMDAwMDIyWhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjEyOTM2YmM5NTdhMTE1NmI1MWE1YjUwYTUzZjQ0Nzhl MTM5MjkwMjQzYWYyODUzMTIxMTczNjQ5OWQ1N2E3MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMhiuu8wgJTmD9U1eazNHzSEoRCBvcRpo/YCLrh377QuSp mUMm5qdXYbAR8sfLggCJqiWWJCx9+kQ08z+hWXOz8JFEI6xk6IMYzYuTuGgztfig 9n+22CdvJDg4qT41aTh7AB5v1yHzKItjxfSfAV2nmFw4eTPg8sZw+kswDqIVTWCD VoeHmMpm7EVZJpfntdv96Q5zS/BrwjQZmzopRX/qZn/C+DWPzGFkokzJaOQm2WxK Z+5mgkPcpj0yxWDRfsB39opDuHQ7xLaiKK5nIpwMUy0O+joQEeMlDSawbL5b4Qh7 SqyDC/KLPYJymIFJFbEKw7kOQBbxiV1Oa1ihg8uNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUs+ri/+saFD3mAjhgnQs0j5lnDYMwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzIwMDk1ZDlmLTFlMTAtNDkwZi05YjQ5LTdmNTkyOTYzNTgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOACTANBgkqhkiG9w0BAQsFAAOCAQEAkA23hYir8rr8ePjulw+6VCLH lOnjH0Pr8mVeYgssqH+DWmbcNxl3V2TFqVUHIQvqQfeGBP8wWsf2zB49dUbVbHhl KPP3+DWfFhRXQuhKXR5dtZIVLeWJEuXoZiKti/OgWZ9WbxdSZM/4ObqqVSMBpjyQ l8BKc9FKNgTRgIvOlXcpfU60TBMYIFIyaAvCmmei5P/sU/vCwWjzL2bcmrdju5po TOqC0RpW5l7cT4dBXKE/r01C5t2HwEx4w9SWFXp/bPGBdn5W9pLKBVTME3tJ7X6M 8nf1Q7k8VuJzcGt4HF2gzPIcsooOR8lkBvKUjL1LLlXfUMvmIRKRPUTv68HjPA== -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:29 2026 by rpki-client