$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7b2f542a-49cc-42f3-a6ae-1252405dcba0.roa File: 7b2f542a-49cc-42f3-a6ae-1252405dcba0.roa (raw, json) Hash identifier: zj6Qt9wtOT/M4l29rQ+dVAbPVMKaRql6bGNRx+LVwAA= Subject key identifier: 23:FE:FA:4C:16:4B:64:1E:60:5D:7D:99:56:22:83:EB:80:D1:69:A1 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 399D42F9E7F76A52C0DB06F00A5E1A3AC3394A65 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7b2f542a-49cc-42f3-a6ae-1252405dcba0.roa Signing time: Thu 14 May 2026 21:47:22 +0000 ROA not before: Thu 14 May 2026 21:47:22 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9d:42:f9:e7:f7:6a:52:c0:db:06:f0:0a:5e:1a:3a:c3:39:4a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 21:47:22 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=7a0fddfa2b9afabc72481b2b8d71d14b465ef9df9ab283c5a8d70326334082a7, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:98:8d:0c:98:78:5e:ab:ca:b2:8f:55:7d:6a: 36:9a:a1:e1:a0:29:b8:6f:6a:13:f0:74:9b:41:44: 65:4c:18:93:64:68:f7:18:4a:11:d3:71:90:13:81: 2e:c8:00:0b:56:e0:cd:e9:e2:e9:ac:e7:74:d8:6f: 16:63:3b:05:17:bd:24:37:eb:5d:d8:f4:f2:b1:07: 97:bd:a8:66:75:b1:2e:83:32:c9:36:a4:b8:db:f9: 2c:82:df:a5:01:ed:fa:d1:43:20:f4:a4:73:cb:ca: e8:56:6b:98:79:41:91:38:1b:c8:a8:29:a7:8c:20: 0f:92:8e:8b:8f:ff:0a:bd:7a:e1:5b:79:6d:aa:3a: a2:d0:25:e0:48:fb:ad:d4:77:47:e9:28:03:7c:ab: 91:62:a7:22:af:93:5f:91:58:db:9c:45:7f:66:2c: d0:3d:b1:ae:8f:d2:21:e0:91:68:06:10:ab:dc:fc: 90:40:86:53:b0:74:81:46:1d:c4:d2:a2:7e:a6:20: 0a:fb:b5:44:d5:4f:fb:61:9c:f3:a9:7a:06:63:eb: 0c:b4:05:75:16:12:64:4b:59:7f:30:3b:10:a0:5e: 8a:02:69:5e:e7:04:43:df:40:d7:fd:69:40:8b:29: f6:1a:f0:66:5b:be:f9:cc:ee:2a:b1:a4:05:76:5d: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FE:FA:4C:16:4B:64:1E:60:5D:7D:99:56:22:83:EB:80:D1:69:A1 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7b2f542a-49cc-42f3-a6ae-1252405dcba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1d00::/40 Signature Algorithm: sha256WithRSAEncryption 97:de:de:65:43:53:7a:67:11:9e:4d:22:9d:e7:a6:69:e4:06: 61:cf:56:a7:8b:4b:d6:38:ae:a4:d0:99:8e:16:8a:67:3d:bc: 13:ef:dc:bd:9a:8d:7f:b5:58:25:21:ae:84:93:9d:7c:60:4d: c6:a9:34:1e:4b:eb:ec:8f:42:ff:91:59:c9:d7:d2:67:a1:f5: 37:96:16:a9:c9:fc:c2:96:67:9b:95:58:17:d5:5c:44:3a:60: ff:fe:54:8f:be:e6:c6:87:e9:91:d6:0a:a2:98:af:a4:c9:63: 56:42:fa:8b:47:24:46:78:be:3d:ae:dd:6c:c3:2e:b4:db:3f: 9d:0a:22:14:6f:60:52:66:88:37:f0:f9:ad:5d:ce:8f:80:7d: c2:a6:fd:7b:6c:e8:fa:57:40:a9:88:2e:59:f2:02:b1:c2:32: 1f:7d:7b:af:1b:6f:a1:15:04:6f:3a:ff:99:54:51:d5:15:49: e9:fd:9a:c9:e5:41:8a:26:bc:de:ad:a6:87:87:2d:a4:d2:07: e3:cf:3f:80:8f:4e:69:cb:c0:03:38:61:6b:9d:eb:0b:34:23: ea:04:c9:0a:0a:4f:94:1e:b3:5d:5a:32:5f:45:82:f4:4b:3c: fa:54:4d:eb:d3:cd:f3:a0:cd:9e:1d:80:e0:4b:d5:b9:f9:7c: ee:21:c1:f5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOZ1C+ef3alLA2wbwCl4aOsM5SmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzIyWhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTBmZGRmYTJiOWFmYWJjNzI0ODFiMmI4ZDcxZDE0YjQ2 NWVmOWRmOWFiMjgzYzVhOGQ3MDMyNjMzNDA4MmE3MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqmI0MmHheq8qyj1V9ajaaoeGgKbhvahPwdJtBRGVMGJNk aPcYShHTcZATgS7IAAtW4M3p4ums53TYbxZjOwUXvSQ3613Y9PKxB5e9qGZ1sS6D Msk2pLjb+SyC36UB7frRQyD0pHPLyuhWa5h5QZE4G8ioKaeMIA+SjouP/wq9euFb eW2qOqLQJeBI+63Ud0fpKAN8q5FipyKvk1+RWNucRX9mLNA9sa6P0iHgkWgGEKvc /JBAhlOwdIFGHcTSon6mIAr7tUTVT/thnPOpegZj6wy0BXUWEmRLWX8wOxCgXooC aV7nBEPfQNf9aUCLKfYa8GZbvvnM7iqxpAV2XRoNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUI/76TBZLZB5gXX2ZViKD64DRaaEwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzdiMmY1NDJhLTQ5Y2MtNDJmMy1hNmFlLTEyNTI0MDVkY2JhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAHTANBgkqhkiG9w0BAQsFAAOCAQEAl97eZUNTemcRnk0ineemaeQG Yc9Wp4tL1jiupNCZjhaKZz28E+/cvZqNf7VYJSGuhJOdfGBNxqk0Hkvr7I9C/5FZ ydfSZ6H1N5YWqcn8wpZnm5VYF9VcRDpg//5Uj77mxofpkdYKopivpMljVkL6i0ck Rni+Pa7dbMMutNs/nQoiFG9gUmaIN/D5rV3Oj4B9wqb9e2zo+ldAqYguWfICscIy H317rxtvoRUEbzr/mVRR1RVJ6f2ayeVBiia83q2mh4ctpNIH488/gI9OacvAAzhh a53rCzQj6gTJCgpPlB6zXVoyX0WC9Es8+lRN69PN86DNnh2A4EvVufl87iHB9Q== -----END CERTIFICATE-----Generated at Fri May 22 16:04:27 2026 by rpki-client