$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/23268f09-4b45-42c9-8085-5872d0d580b4.roa File: 23268f09-4b45-42c9-8085-5872d0d580b4.roa (raw, json) Hash identifier: 0eB5wBU9C2L+9rTpxnxWPidT/hPWhXUeXVegn6m+vs8= Subject key identifier: 20:4D:78:A6:AB:E5:F0:66:43:F2:2A:33:DE:CF:F4:4D:8E:0B:6A:50 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 71A80FEA9C63D46CBBC432174C3EF5D098EF350B Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/23268f09-4b45-42c9-8085-5872d0d580b4.roa Signing time: Thu 14 May 2026 21:47:16 +0000 ROA not before: Thu 14 May 2026 21:47:16 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a8:0f:ea:9c:63:d4:6c:bb:c4:32:17:4c:3e:f5:d0:98:ef:35:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 21:47:16 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=467539b5883cd42a656ba22b0506d21af0d1c295a64d3bf94997110907dd8fff, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:33:cd:35:31:e5:7b:79:53:36:d0:82:af:61: a4:d3:fe:dc:7e:7f:6b:b8:95:f1:d1:12:24:11:ea: 78:6d:fa:17:74:5e:1b:5e:80:ce:b9:9c:e5:2d:ed: a4:13:b1:29:c1:33:d0:0f:95:df:52:30:c1:45:21: a5:42:fc:21:aa:80:bc:5d:e2:8d:19:08:08:5d:32: 39:ca:e2:e9:7c:2c:4a:0c:3c:8d:42:d7:dc:c6:21: fd:9d:ab:53:7a:76:6e:d3:98:48:60:e4:01:b3:4e: aa:aa:43:30:c2:8a:94:6f:a8:7b:17:41:44:0c:56: e5:3b:58:d4:09:13:52:03:d6:d0:7c:ee:0e:ca:37: e6:36:c4:02:ad:5f:56:45:d0:eb:63:56:7c:95:79: 5f:47:1d:b1:d7:1e:7f:42:98:f6:9f:e5:a5:d8:3f: 8a:00:1e:25:52:ef:32:f0:59:0f:1b:ba:cd:84:85: 02:90:2d:7e:ae:22:16:b5:9e:ba:53:2b:49:f8:7f: e5:19:d4:b2:96:18:ff:5a:21:0b:65:8c:1c:0c:f6: f8:e7:d6:5d:9f:34:2c:47:8f:3f:29:6a:c7:88:68: 0e:32:ff:56:4a:e4:2d:da:14:58:04:55:d5:ad:21: 83:cc:ef:3c:39:e4:3b:15:74:ac:c2:4a:52:43:e1: 49:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4D:78:A6:AB:E5:F0:66:43:F2:2A:33:DE:CF:F4:4D:8E:0B:6A:50 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/23268f09-4b45-42c9-8085-5872d0d580b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1000::/40 Signature Algorithm: sha256WithRSAEncryption c4:4f:15:91:e7:cb:3a:f8:ae:ab:a3:5a:94:5b:dc:98:66:26: 83:da:fb:2c:96:b6:ae:06:49:a3:71:51:df:64:b0:51:6a:ed: 6b:02:d4:35:98:e5:27:71:f0:e3:73:a7:2e:64:f5:33:e1:60: f2:f2:05:8a:c7:c5:1b:39:0a:a9:38:8c:81:0b:9b:81:b1:04: ec:66:fb:96:ac:d3:52:01:bc:14:33:eb:b0:c2:fd:1f:47:ac: d0:51:1f:65:7a:a7:54:b9:f6:92:09:7c:d4:7c:2f:f6:7f:c4: 5c:3c:25:ac:3b:41:5c:d5:63:4b:9f:93:f1:8c:2d:7b:1d:b9: be:00:11:ea:cd:2e:7a:e7:80:ee:d5:4d:3a:59:e0:fd:6c:c6: fc:7d:78:d2:75:e2:f6:f4:02:22:ba:1d:e5:aa:55:74:c3:4d: 27:1c:6e:83:f9:e6:47:7e:ea:d1:b6:c0:b3:ca:7e:5d:d8:21: e3:4f:e7:66:f5:84:53:38:ac:f1:b1:32:e2:a1:e5:db:cd:7a: 77:e9:77:7c:40:30:e9:5b:72:aa:d9:3a:05:a6:a7:6e:b6:0b: ad:79:e5:b0:d4:d5:f5:27:f0:3e:ac:17:35:61:9b:57:51:5f: b5:fb:08:6c:ee:0d:ec:6d:c2:0f:f9:8a:b1:66:ad:75:15:e9: 04:6b:ee:d6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcagP6pxj1Gy7xDIXTD710JjvNQswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzE2WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Njc1MzliNTg4M2NkNDJhNjU2YmEyMmIwNTA2ZDIxYWYw ZDFjMjk1YTY0ZDNiZjk0OTk3MTEwOTA3ZGQ4ZmZmMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYM801MeV7eVM20IKvYaTT/tx+f2u4lfHREiQR6nht+hd0 XhtegM65nOUt7aQTsSnBM9APld9SMMFFIaVC/CGqgLxd4o0ZCAhdMjnK4ul8LEoM PI1C19zGIf2dq1N6dm7TmEhg5AGzTqqqQzDCipRvqHsXQUQMVuU7WNQJE1ID1tB8 7g7KN+Y2xAKtX1ZF0OtjVnyVeV9HHbHXHn9CmPaf5aXYP4oAHiVS7zLwWQ8bus2E hQKQLX6uIha1nrpTK0n4f+UZ1LKWGP9aIQtljBwM9vjn1l2fNCxHjz8paseIaA4y /1ZK5C3aFFgEVdWtIYPM7zw55DsVdKzCSlJD4UkBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIE14pqvl8GZD8ioz3s/0TY4LalAwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzIzMjY4ZjA5LTRiNDUtNDJjOS04MDg1LTU4NzJkMGQ1ODBiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAEDANBgkqhkiG9w0BAQsFAAOCAQEAxE8VkefLOviuq6NalFvcmGYm g9r7LJa2rgZJo3FR32SwUWrtawLUNZjlJ3Hw43OnLmT1M+Fg8vIFisfFGzkKqTiM gQubgbEE7Gb7lqzTUgG8FDPrsML9H0es0FEfZXqnVLn2kgl81Hwv9n/EXDwlrDtB XNVjS5+T8Ywtex25vgAR6s0ueueA7tVNOlng/WzG/H140nXi9vQCIrod5apVdMNN Jxxug/nmR37q0bbAs8p+Xdgh40/nZvWEUzis8bEy4qHl2816d+l3fEAw6Vtyqtk6 BaanbrYLrXnlsNTV9SfwPqwXNWGbV1FftfsIbO4N7G3CD/mKsWatdRXpBGvu1g== -----END CERTIFICATE-----Generated at Fri May 22 16:04:22 2026 by rpki-client