$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/678066e0-03a6-406e-b58e-3b184eb2e030.roa File: 678066e0-03a6-406e-b58e-3b184eb2e030.roa (raw, json) Hash identifier: 0Hi+38i4QnROzFpAajIeXrWrMSteuo59awzhKb13buw= Subject key identifier: 98:B0:38:F4:55:95:70:A2:A7:58:EC:E5:DF:7A:29:67:8A:54:C7:AB Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 473B0B374CA80C194BCFC9B96B0F06A41D1F5493 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/678066e0-03a6-406e-b58e-3b184eb2e030.roa Signing time: Sun 02 Aug 2026 00:00:24 +0000 ROA not before: Sun 02 Aug 2026 00:00:24 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3b:0b:37:4c:a8:0c:19:4b:cf:c9:b9:6b:0f:06:a4:1d:1f:54:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Aug 2 00:00:24 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=f2aeedc73dc1a519279a88ea5008685dd9f397bf25d6e5c71f50a394ac392665, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:fa:12:bd:6c:f2:19:07:eb:2a:67:40:fb: a5:34:e8:08:b0:2a:b3:bd:2f:05:74:77:a4:2b:e3: 0d:a2:9c:80:03:0d:54:c8:77:49:0a:93:f9:b5:b1: 02:3d:af:47:6b:58:65:2d:17:39:9a:8a:17:60:00: 97:38:2e:ed:b4:fa:d8:ce:06:d2:0c:fa:a1:0e:b7: c1:24:19:41:bc:47:ba:a6:b6:31:d1:fd:90:ab:f6: a4:af:f4:7b:1f:3e:f5:ec:a7:01:63:df:64:67:a5: 88:07:fa:19:cd:1d:9d:b1:f6:bb:5d:23:9c:cb:1c: e3:d4:3b:dc:d5:dc:02:a5:c9:17:2b:db:c0:3b:3a: 0d:d9:84:4b:85:5c:da:66:b0:34:7f:fa:ca:ff:52: c4:2a:c4:12:38:6b:fb:9e:69:b3:4f:2c:20:c5:e9: cf:88:1e:5e:c2:9c:bf:56:7d:7b:71:ec:9a:f5:a1: 20:bc:17:47:ef:b3:45:73:a8:0e:86:f8:27:23:10: ae:f2:e4:c1:6b:61:5d:6d:be:bb:97:ac:81:76:19: af:70:f4:33:88:0c:53:13:50:87:63:b4:86:f8:05: 28:65:b5:ed:18:ac:4b:1f:f5:ed:73:33:bb:5a:cd: 0c:e0:fb:23:e7:a6:ff:d3:77:b7:92:7d:4d:26:98: 33:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B0:38:F4:55:95:70:A2:A7:58:EC:E5:DF:7A:29:67:8A:54:C7:AB X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/678066e0-03a6-406e-b58e-3b184eb2e030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:400::/40 Signature Algorithm: sha256WithRSAEncryption 67:c2:8b:a2:34:bc:dc:f7:64:c8:46:a0:ef:8f:74:8e:fc:27: c6:72:25:7e:21:9c:44:39:13:9a:2c:49:a5:3f:cb:01:59:f1: c8:8f:2b:30:5e:cc:bd:78:5d:7f:87:da:c4:ab:a4:bc:97:cc: e1:e8:fd:31:0f:49:45:08:ed:21:43:ee:fc:ec:07:ac:78:91: 85:cc:66:0f:42:c1:4f:7d:b3:1b:9e:7c:26:14:a7:2b:06:5a: c2:8d:38:7b:d8:38:4d:e7:48:6c:56:5f:fa:10:e3:eb:37:15: 22:0f:bb:9a:a4:9a:b5:b1:67:4f:85:97:05:72:fe:ea:04:b3: ee:8f:9e:49:1d:63:b1:09:19:79:48:63:c5:31:34:24:f6:36: 7a:9e:13:5d:bb:31:72:da:f1:a4:e9:9b:1a:ac:81:4e:77:60: 31:57:b3:ae:0d:44:54:ab:ea:59:7e:79:6f:a3:6b:d2:6f:08: 2b:15:01:59:36:04:f8:b5:d0:9f:86:a8:3f:49:6a:f5:4d:2a: 27:1e:91:f7:b1:9b:42:64:9b:5c:5a:0a:83:cd:9c:df:4a:b8: 2c:47:92:db:35:a0:40:8e:fe:c7:b7:fc:1c:fb:d5:e0:4f:7d: 89:f7:75:c4:83:2a:c5:21:8d:8e:55:64:09:8d:4a:e4:20:30: 37:24:8e:94 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURzsLN0yoDBlLz8m5aw8GpB0fVJMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwODAyMDAwMDI0WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmFlZWRjNzNkYzFhNTE5Mjc5YTg4ZWE1MDA4Njg1ZGQ5 ZjM5N2JmMjVkNmU1YzcxZjUwYTM5NGFjMzkyNjY1MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0cfoSvWzyGQfrKmdA+6U06AiwKrO9LwV0d6Qr4w2inIAD DVTId0kKk/m1sQI9r0drWGUtFzmaihdgAJc4Lu20+tjOBtIM+qEOt8EkGUG8R7qm tjHR/ZCr9qSv9HsfPvXspwFj32RnpYgH+hnNHZ2x9rtdI5zLHOPUO9zV3AKlyRcr 28A7Og3ZhEuFXNpmsDR/+sr/UsQqxBI4a/ueabNPLCDF6c+IHl7CnL9WfXtx7Jr1 oSC8F0fvs0VzqA6G+CcjEK7y5MFrYV1tvruXrIF2Ga9w9DOIDFMTUIdjtIb4BShl te0YrEsf9e1zM7tazQzg+yPnpv/Td7eSfU0mmDMjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmLA49FWVcKKnWOzl33opZ4pUx6swHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzY3ODA2NmUwLTAzYTYtNDA2ZS1iNThlLTNiMTg0ZWIyZTAzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOABDANBgkqhkiG9w0BAQsFAAOCAQEAZ8KLojS83PdkyEag7490jvwn xnIlfiGcRDkTmixJpT/LAVnxyI8rMF7MvXhdf4faxKukvJfM4ej9MQ9JRQjtIUPu /OwHrHiRhcxmD0LBT32zG558JhSnKwZawo04e9g4TedIbFZf+hDj6zcVIg+7mqSa tbFnT4WXBXL+6gSz7o+eSR1jsQkZeUhjxTE0JPY2ep4TXbsxctrxpOmbGqyBTndg MVezrg1EVKvqWX55b6Nr0m8IKxUBWTYE+LXQn4aoP0lq9U0qJx6R97GbQmSbXFoK g82c30q4LEeS2zWgQI7+x7f8HPvV4E99ifd1xIMqxSGNjlVkCY1K5CAwNySOlA== -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:33 2026 by rpki-client