$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2c6acfb9-88e4-49a6-a867-52ef14cb3e9f.roa File: 2c6acfb9-88e4-49a6-a867-52ef14cb3e9f.roa (raw, json) Hash identifier: ZHD4qjO9cuxpkASPKRcqxgNxrD+FYMZuCgzGiS8XFZw= Subject key identifier: 9F:8C:0E:12:00:77:5C:61:3E:9C:54:FC:2B:7E:EF:14:A3:F8:1D:69 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 0B2F4554C89FD761FD2FFBDEF631146374594EAA Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2c6acfb9-88e4-49a6-a867-52ef14cb3e9f.roa Signing time: Sun 02 Aug 2026 00:00:23 +0000 ROA not before: Sun 02 Aug 2026 00:00:23 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2f:45:54:c8:9f:d7:61:fd:2f:fb:de:f6:31:14:63:74:59:4e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Aug 2 00:00:23 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=febd35d4cd9409a6dad8b9ffc79349c7fd6c61dd1888c9725aa10332a0fa5c6e, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1a:32:25:5f:c4:55:89:8a:0c:d0:29:3b:4d: fe:6b:19:be:aa:e8:4c:12:e0:4a:19:fd:1e:c9:e4: 8d:b0:40:92:e5:53:c2:78:f9:21:b8:98:31:07:31: 73:e6:32:98:a3:8b:97:14:79:7d:1b:6e:01:16:87: ba:bc:9e:fe:bb:de:31:b1:fe:55:03:d3:c8:33:a0: db:7c:93:93:7d:fe:8a:97:da:88:25:d3:78:1a:60: c4:d9:8d:77:cf:8b:4f:14:9b:47:de:77:d7:4c:06: 85:9b:7e:4f:a4:81:a0:08:46:cf:35:87:ff:1f:93: ab:46:43:0c:c0:11:42:99:e6:3e:8f:74:4e:43:f8: a6:a0:3c:8d:26:31:6e:0d:d0:58:49:43:bb:4e:16: af:f6:d8:8c:75:14:1a:62:03:bd:79:a8:72:8d:dc: b5:ef:94:f8:67:0b:b2:04:9b:92:ee:37:bb:65:81: 24:d4:9b:96:9a:b5:e4:3f:c1:ed:df:8b:cd:05:61: 7a:e1:18:7d:94:b0:9f:41:f3:b2:0e:de:1a:7d:8a: d3:44:07:cd:b3:27:33:a2:06:d7:42:75:09:00:e1: b6:42:a3:f0:15:35:ac:e1:30:08:2d:20:92:7d:c2: 54:29:87:0f:ca:3d:83:d6:76:db:24:dd:d5:ed:b1: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8C:0E:12:00:77:5C:61:3E:9C:54:FC:2B:7E:EF:14:A3:F8:1D:69 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2c6acfb9-88e4-49a6-a867-52ef14cb3e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1b00::/40 Signature Algorithm: sha256WithRSAEncryption 03:63:ad:9e:7b:f9:b9:b3:e8:fd:a4:86:27:9f:3b:62:59:86: e5:06:1d:c0:63:8f:c9:37:f3:ce:75:db:00:87:60:ab:a7:b3: e6:30:ba:2f:22:5d:af:04:7f:c0:9b:cc:ba:5b:ba:5c:cf:e9: 3c:50:1d:a2:23:0e:4b:ba:2b:9f:b7:ed:9c:32:c7:76:c0:fc: 41:16:59:ab:7c:dc:3d:fe:fb:f7:2a:a3:a1:c6:b8:a1:ed:fe: d5:10:00:22:ae:4c:1e:f2:1b:8b:ef:5c:fa:f7:81:d0:a4:86: 79:23:30:0f:b2:d4:e5:b8:7c:58:92:23:bf:fc:aa:bc:93:f5: d9:20:42:25:68:ad:70:92:fc:f6:87:71:37:76:b8:cd:4e:9d: d1:1c:41:73:3d:b3:fb:e2:ba:b0:5a:9a:bf:a1:f4:07:0a:ed: cd:e1:97:cd:85:c9:f5:ff:45:2c:94:5f:40:1e:2e:14:3b:15: 29:6f:9b:70:cd:9d:55:82:f5:35:b6:e5:86:38:17:5f:27:a2: 0f:7a:62:32:aa:9f:b3:91:9d:24:76:31:10:ee:30:16:09:9b: 7f:97:70:e2:05:33:08:c3:25:54:cf:a3:7a:e6:c4:86:f7:56: dd:55:da:81:58:d7:b5:16:ae:9e:44:05:e8:40:2d:9c:83:48: e8:0d:5f:5d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCy9FVMif12H9L/ve9jEUY3RZTqowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwODAyMDAwMDIzWhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWJkMzVkNGNkOTQwOWE2ZGFkOGI5ZmZjNzkzNDljN2Zk NmM2MWRkMTg4OGM5NzI1YWExMDMzMmEwZmE1YzZlMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlGjIlX8RViYoM0Ck7Tf5rGb6q6EwS4EoZ/R7J5I2wQJLl U8J4+SG4mDEHMXPmMpiji5cUeX0bbgEWh7q8nv673jGx/lUD08gzoNt8k5N9/oqX 2ogl03gaYMTZjXfPi08Um0fed9dMBoWbfk+kgaAIRs81h/8fk6tGQwzAEUKZ5j6P dE5D+KagPI0mMW4N0FhJQ7tOFq/22Ix1FBpiA715qHKN3LXvlPhnC7IEm5LuN7tl gSTUm5aateQ/we3fi80FYXrhGH2UsJ9B87IO3hp9itNEB82zJzOiBtdCdQkA4bZC o/AVNazhMAgtIJJ9wlQphw/KPYPWdtsk3dXtsTV1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUn4wOEgB3XGE+nFT8K37vFKP4HWkwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzJjNmFjZmI5LTg4ZTQtNDlhNi1hODY3LTUyZWYxNGNiM2U5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAGzANBgkqhkiG9w0BAQsFAAOCAQEAA2Otnnv5ubPo/aSGJ587YlmG 5QYdwGOPyTfzznXbAIdgq6ez5jC6LyJdrwR/wJvMulu6XM/pPFAdoiMOS7orn7ft nDLHdsD8QRZZq3zcPf779yqjoca4oe3+1RAAIq5MHvIbi+9c+veB0KSGeSMwD7LU 5bh8WJIjv/yqvJP12SBCJWitcJL89odxN3a4zU6d0RxBcz2z++K6sFqav6H0Bwrt zeGXzYXJ9f9FLJRfQB4uFDsVKW+bcM2dVYL1NbblhjgXXyeiD3piMqqfs5GdJHYx EO4wFgmbf5dw4gUzCMMlVM+jeubEhvdW3VXagVjXtRaunkQF6EAtnINI6A1fXQ== -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:36 2026 by rpki-client