$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6585280b-21cf-4117-b60a-a89406148b03.roa File: 6585280b-21cf-4117-b60a-a89406148b03.roa (raw, json) Hash identifier: dv0hAnTLCdGiF5sDg0ZxCVUArtkV3Ug8pAtxjfZkE8A= Subject key identifier: F5:CD:90:D9:89:E1:0D:43:E2:7B:99:C5:CB:C3:C8:0C:C1:DC:7B:CC Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 41285C65BACE329DF585CCC6488F9E5FCDEEE6F2 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6585280b-21cf-4117-b60a-a89406148b03.roa Signing time: Thu 14 May 2026 21:47:22 +0000 ROA not before: Thu 14 May 2026 21:47:22 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:28:5c:65:ba:ce:32:9d:f5:85:cc:c6:48:8f:9e:5f:cd:ee:e6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 21:47:22 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=17c4b5ad49dd100be43c5c562ce1f3101e502caa6f69c46a6df9fe4e449ef72b, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:18:49:7c:89:02:cc:f2:87:4f:7c:35:3b: a1:f1:d5:8b:43:1b:ac:de:9b:48:69:c0:e3:42:04: 28:ad:cc:e0:45:de:2f:ff:31:b8:dd:7f:c3:cd:c9: 3c:71:a9:41:9f:47:75:5f:ef:46:ef:4a:59:3e:fb: 3a:92:5f:70:e2:49:25:2c:01:d6:58:a4:18:38:48: ea:1e:49:d3:0d:b0:f4:28:64:3a:31:3f:07:d9:53: 3c:5b:8f:92:91:2e:8a:0b:89:39:f6:32:8a:cc:19: 41:a1:3e:1a:98:b3:c6:bf:31:7a:85:97:8b:a1:3e: 26:7c:c9:bb:9f:44:8c:37:a2:97:e6:1f:fc:9b:de: 33:e1:c6:06:1b:3b:b6:78:c0:be:b5:2b:80:4a:cf: f8:64:a9:d6:b8:5b:dd:57:68:f6:d7:1c:1f:29:ac: 45:de:14:d2:2b:07:51:8e:bd:01:28:f5:f4:dd:57: ba:3d:67:d5:e6:29:0b:25:a3:a4:77:8a:da:46:b9: 04:e5:4e:d2:33:ae:a6:34:80:94:9d:c3:d6:c7:e2: bb:8a:87:a1:33:2d:d2:0a:c9:81:a2:fd:f9:5f:86: 84:61:39:47:42:82:4f:ac:b3:0b:07:80:78:69:7b: de:7a:60:a0:1d:ea:17:6b:d2:a1:84:c9:0b:34:ec: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CD:90:D9:89:E1:0D:43:E2:7B:99:C5:CB:C3:C8:0C:C1:DC:7B:CC X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6585280b-21cf-4117-b60a-a89406148b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:2000::/40 Signature Algorithm: sha256WithRSAEncryption 5a:58:0f:1c:57:c6:db:2a:0b:8f:8e:0b:bc:72:f8:28:ba:99: 21:b3:45:a1:73:5f:9d:2b:16:ea:b8:80:8e:e0:ee:9e:1c:c6: b6:ea:b7:c9:42:8b:cc:8b:04:1e:33:b6:45:50:59:e2:50:fc: 86:2b:78:b4:e2:74:7d:97:a4:56:a4:92:be:12:cb:ed:14:66: 3d:6b:7a:79:58:6f:d3:08:8f:ec:a8:de:1c:da:94:b4:bd:36: 1b:0a:b8:1f:d0:0f:89:d2:2b:c9:87:1b:19:81:f7:5b:9d:75: 29:ae:99:7c:bf:af:54:4b:62:3b:7b:52:fb:0b:7f:f9:6f:3b: 67:5c:e6:8b:c1:cb:f7:63:64:de:ef:b4:4f:b6:0d:66:57:72: ad:8b:1f:7e:93:94:9f:b9:83:53:b6:f9:91:67:c2:cd:98:f7: e6:73:60:f0:29:3d:1d:e7:d7:ea:2a:5b:9e:2d:f1:9f:3d:82: 22:dc:36:65:5f:db:b6:e6:08:ba:87:55:b6:e6:42:33:e5:cc: ec:4c:d3:5f:90:29:8c:9d:5f:30:00:c6:b5:33:eb:48:4b:8d: 14:aa:96:e8:4e:34:5a:1b:55:62:27:33:9d:1c:7f:b6:4f:e8: 01:4e:4f:f0:2d:77:18:44:8d:f0:14:12:ec:cf:1f:b8:6d:16: 7d:b8:ff:c5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQShcZbrOMp31hczGSI+eX83u5vIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzIyWhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2M0YjVhZDQ5ZGQxMDBiZTQzYzVjNTYyY2UxZjMxMDFl NTAyY2FhNmY2OWM0NmE2ZGY5ZmU0ZTQ0OWVmNzJiMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6rxhJfIkCzPKHT3w1O6Hx1YtDG6zem0hpwONCBCitzOBF 3i//Mbjdf8PNyTxxqUGfR3Vf70bvSlk++zqSX3DiSSUsAdZYpBg4SOoeSdMNsPQo ZDoxPwfZUzxbj5KRLooLiTn2MorMGUGhPhqYs8a/MXqFl4uhPiZ8ybufRIw3opfm H/yb3jPhxgYbO7Z4wL61K4BKz/hkqda4W91XaPbXHB8prEXeFNIrB1GOvQEo9fTd V7o9Z9XmKQslo6R3itpGuQTlTtIzrqY0gJSdw9bH4ruKh6EzLdIKyYGi/flfhoRh OUdCgk+sswsHgHhpe956YKAd6hdr0qGEyQs07IwpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9c2Q2YnhDUPie5nFy8PIDMHce8wwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzY1ODUyODBiLTIxY2YtNDExNy1iNjBhLWE4OTQwNjE0OGIwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAIDANBgkqhkiG9w0BAQsFAAOCAQEAWlgPHFfG2yoLj44LvHL4KLqZ IbNFoXNfnSsW6riAjuDunhzGtuq3yUKLzIsEHjO2RVBZ4lD8hit4tOJ0fZekVqSS vhLL7RRmPWt6eVhv0wiP7KjeHNqUtL02Gwq4H9APidIryYcbGYH3W511Ka6ZfL+v VEtiO3tS+wt/+W87Z1zmi8HL92Nk3u+0T7YNZldyrYsffpOUn7mDU7b5kWfCzZj3 5nNg8Ck9HefX6ipbni3xnz2CItw2ZV/btuYIuodVtuZCM+XM7EzTX5ApjJ1fMADG tTPrSEuNFKqW6E40WhtVYicznRx/tk/oAU5P8C13GESN8BQS7M8fuG0Wfbj/xQ== -----END CERTIFICATE-----Generated at Fri May 22 16:04:26 2026 by rpki-client