$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/20095d9f-1e10-490f-9b49-7f5929635802.roa File: 20095d9f-1e10-490f-9b49-7f5929635802.roa (raw, json) Hash identifier: rQ9kqBcHy0WEbMJ5MljZQ3ow372LZN63TG79a+rqIjs= Subject key identifier: 5E:9A:A6:01:59:46:8E:08:DD:DA:B2:57:64:2A:7A:49:6E:EE:FD:2D Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 4A3AB09D42F9386EB38998725EA5936B9290C608 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/20095d9f-1e10-490f-9b49-7f5929635802.roa Signing time: Thu 14 May 2026 21:47:26 +0000 ROA not before: Thu 14 May 2026 21:47:26 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3a:b0:9d:42:f9:38:6e:b3:89:98:72:5e:a5:93:6b:92:90:c6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 21:47:26 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=bd278864c5031ba946b77c66d822ec29ff6337b5517e69b26448e23f31c161e3, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:da:7e:4d:90:05:bc:24:88:4d:e4:24:a4: d5:48:27:88:12:0e:49:3d:65:9e:db:24:97:8d:54: 86:1f:ce:f3:c7:9f:b4:6c:52:bc:40:bd:3c:08:88: 1a:93:6e:80:0b:91:ae:09:8b:8e:02:54:05:da:e6: 99:5a:37:8e:ba:84:b4:70:b7:91:6d:d9:a3:c1:65: bd:fa:97:99:b8:4c:74:32:73:e8:5a:c8:e2:c0:ea: 57:8d:a1:4e:94:6f:99:ae:a7:75:7e:3c:69:7a:4c: 56:de:87:10:e9:6b:58:35:f9:b8:50:ad:c9:41:28: 93:41:2e:50:72:a2:d8:47:fd:cc:34:82:58:77:1f: f6:f5:bc:3b:99:e3:75:8a:72:0c:ac:1b:ab:b1:a4: cb:c3:03:17:cf:7a:bd:55:4a:38:bf:0f:76:8e:35: da:2f:7b:fc:45:c3:bc:58:7b:4f:39:a2:ff:e7:74: bf:64:7e:5c:b6:f9:ad:72:56:98:00:2d:0a:49:67: fd:bb:d5:ab:1d:d9:d7:a6:a9:cb:8b:52:a5:df:49: e1:33:ce:bc:81:53:75:2c:fc:66:40:78:03:ab:14: f4:83:b2:07:7e:62:c4:71:ea:c5:a6:6b:f6:bb:d5: 9b:cb:6b:a7:ab:04:55:77:2e:9a:fa:0f:2c:13:f4: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9A:A6:01:59:46:8E:08:DD:DA:B2:57:64:2A:7A:49:6E:EE:FD:2D X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/20095d9f-1e10-490f-9b49-7f5929635802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:900::/40 Signature Algorithm: sha256WithRSAEncryption 2f:27:e3:1a:03:1c:08:24:50:bf:4e:2e:77:9b:ee:09:94:36: 86:28:35:f5:75:2b:5f:99:01:c4:c1:7f:a0:79:fa:fa:e0:a2: 18:f5:d3:5f:5a:ae:0f:39:73:f8:6b:b7:72:66:8a:53:d8:f4: 23:f3:fc:f1:ce:d1:7f:0c:0e:2f:0e:aa:b0:40:9e:d4:19:68: be:eb:bb:09:7d:19:fe:df:11:8e:76:2b:fb:c0:37:bf:71:83: 66:85:d0:85:40:84:ec:68:49:02:e2:0d:a3:d6:9f:19:99:3f: b8:18:b6:52:ba:59:f1:c2:30:27:2f:58:a8:e4:46:77:20:e2: 8f:f2:c9:41:81:8e:e2:a6:c4:9b:41:f4:f6:01:f2:3d:36:49: c8:58:94:ff:ae:d3:46:08:e1:ab:9a:ef:4a:4e:8a:35:ed:d8: be:70:b1:ec:4e:11:af:0d:e1:ab:6f:59:0f:04:57:4c:11:6e: f7:32:73:49:ef:16:ce:fd:66:df:16:66:41:22:46:aa:39:25: 25:ce:23:b3:05:cf:1f:bd:4b:5a:0f:4d:fd:e9:5c:34:8a:d7: 31:1a:04:39:5e:e0:ba:be:c1:c6:c4:90:86:0b:41:c0:20:e7: 08:3f:bd:94:73:28:4e:27:8c:d4:01:63:67:fc:2b:c4:2e:5c: fa:48:69:6f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSjqwnUL5OG6ziZhyXqWTa5KQxggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzI2WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDI3ODg2NGM1MDMxYmE5NDZiNzdjNjZkODIyZWMyOWZm NjMzN2I1NTE3ZTY5YjI2NDQ4ZTIzZjMxYzE2MWUzMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMKNp+TZAFvCSITeQkpNVIJ4gSDkk9ZZ7bJJeNVIYfzvPH n7RsUrxAvTwIiBqTboALka4Ji44CVAXa5plaN466hLRwt5Ft2aPBZb36l5m4THQy c+hayOLA6leNoU6Ub5mup3V+PGl6TFbehxDpa1g1+bhQrclBKJNBLlByothH/cw0 glh3H/b1vDuZ43WKcgysG6uxpMvDAxfPer1VSji/D3aONdove/xFw7xYe085ov/n dL9kfly2+a1yVpgALQpJZ/271asd2demqcuLUqXfSeEzzryBU3Us/GZAeAOrFPSD sgd+YsRx6sWma/a71ZvLa6erBFV3Lpr6DywT9PThAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUXpqmAVlGjgjd2rJXZCp6SW7u/S0wHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzIwMDk1ZDlmLTFlMTAtNDkwZi05YjQ5LTdmNTkyOTYzNTgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOACTANBgkqhkiG9w0BAQsFAAOCAQEALyfjGgMcCCRQv04ud5vuCZQ2 hig19XUrX5kBxMF/oHn6+uCiGPXTX1quDzlz+Gu3cmaKU9j0I/P88c7RfwwOLw6q sECe1Blovuu7CX0Z/t8RjnYr+8A3v3GDZoXQhUCE7GhJAuINo9afGZk/uBi2UrpZ 8cIwJy9YqORGdyDij/LJQYGO4qbEm0H09gHyPTZJyFiU/67TRgjhq5rvSk6KNe3Y vnCx7E4Rrw3hq29ZDwRXTBFu9zJzSe8Wzv1m3xZmQSJGqjklJc4jswXPH71LWg9N /elcNIrXMRoEOV7gur7BxsSQhgtBwCDnCD+9lHMoTieM1AFjZ/wrxC5c+khpbw== -----END CERTIFICATE-----Generated at Fri May 22 16:04:24 2026 by rpki-client