$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa File: 9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa (raw, json) Hash identifier: WK4L14PQ04Cl2gJFvRBJy2MYmg6oXPdU6EfzzgY2fsw= Subject key identifier: DC:96:5C:5B:C4:69:9A:1F:A4:25:F8:8B:E6:49:E0:7F:24:44:92:B2 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 4ECEE87127F0FC53827BEEBE731ACBD6DEC6AA35 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa Signing time: Sun 02 Aug 2026 00:00:11 +0000 ROA not before: Sun 02 Aug 2026 00:00:11 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ce:e8:71:27:f0:fc:53:82:7b:ee:be:73:1a:cb:d6:de:c6:aa:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Aug 2 00:00:11 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=9613d82c2e01b6dd3ce9dabf865a7c3071bcf88c6465ad9abd634fe115acec76, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:0f:53:f2:4f:fa:37:85:40:ff:6f:09:0e: 83:97:a3:a6:18:13:47:ab:c6:63:c5:2d:9a:26:2b: 4d:db:e2:6f:75:9d:05:77:95:ef:65:22:3f:3c:36: e5:35:62:e2:03:67:0e:aa:3f:0e:4d:48:cb:fc:21: 1e:60:d8:80:fe:df:4a:6e:11:f2:01:21:9d:50:63: 7f:d0:89:f6:0e:21:de:a7:e1:50:be:93:88:1c:1c: c0:e5:2a:05:21:05:d0:c1:83:9e:b9:85:47:41:f7: af:5f:d2:26:42:19:ab:cf:c9:bd:5e:4a:0f:79:92: be:61:5e:80:5f:19:a6:30:7d:a7:b9:1b:82:21:96: ef:47:7e:93:12:55:bb:01:a8:37:74:fd:8a:8d:df: 1a:b6:9b:db:2c:c6:12:10:79:7f:ac:c0:48:f3:7a: 9c:26:aa:ff:41:d4:88:50:21:c1:8d:92:58:9a:5d: 34:7e:fb:38:c6:2c:89:11:df:15:96:17:1b:79:fb: b2:b1:63:d5:7f:81:2f:08:2e:02:f6:00:57:14:b1: f4:cc:29:ca:62:1d:0f:03:68:48:7d:0f:d3:84:1b: ac:2e:2b:17:a4:07:b5:25:de:52:1a:68:1f:f8:61: 0c:40:20:86:bf:f8:da:93:a9:5a:f3:c6:1e:15:70: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:96:5C:5B:C4:69:9A:1F:A4:25:F8:8B:E6:49:E0:7F:24:44:92:B2 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1600::/40 Signature Algorithm: sha256WithRSAEncryption a3:26:69:86:3e:e2:ee:de:f4:3d:75:17:a1:bc:dd:b0:8f:8d: 04:9f:3a:cb:87:ea:27:a1:42:dc:b0:0b:2f:8b:ce:ac:e9:cb: 4b:47:1b:80:a1:ca:9e:5a:6e:e6:20:c2:65:46:e5:b5:fe:f0: a5:05:13:3f:0c:6e:41:a4:cc:be:3f:06:4e:c5:f2:65:60:46: 83:76:5c:e5:ed:3c:37:a0:06:b7:93:82:fa:66:a8:7a:09:1a: 97:07:1c:ed:71:ed:38:fb:0f:6a:2a:8d:c8:f5:b4:2e:ae:b1: c1:53:7d:a9:43:91:4d:fb:07:02:6d:46:f2:84:a0:ef:60:97: 00:14:5a:66:12:68:0a:09:63:94:aa:ae:29:84:d8:2f:d3:88: a4:50:e7:f2:ff:ec:e8:f6:e2:fe:3d:ad:42:e0:29:98:a6:fd: a1:25:d5:8b:8a:5b:ab:32:e0:1e:67:ce:d2:f7:e6:23:e9:e7: cc:fb:15:74:f4:36:41:b6:60:55:3f:6d:24:d9:ea:c5:70:f2: 73:08:01:10:5a:c7:ea:8c:85:12:15:63:7b:73:de:68:06:e7: e9:15:86:57:41:e2:43:b0:48:91:78:3a:1f:ef:55:78:f0:3c: 6c:eb:ca:70:51:f0:23:6e:72:4f:3c:d6:15:10:7f:e9:4f:98: 05:b5:65:03 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTs7ocSfw/FOCe+6+cxrL1t7GqjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwODAyMDAwMDExWhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjEzZDgyYzJlMDFiNmRkM2NlOWRhYmY4NjVhN2MzMDcx YmNmODhjNjQ2NWFkOWFiZDYzNGZlMTE1YWNlYzc2MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ/g9T8k/6N4VA/28JDoOXo6YYE0erxmPFLZomK03b4m91 nQV3le9lIj88NuU1YuIDZw6qPw5NSMv8IR5g2ID+30puEfIBIZ1QY3/QifYOId6n 4VC+k4gcHMDlKgUhBdDBg565hUdB969f0iZCGavPyb1eSg95kr5hXoBfGaYwfae5 G4Ihlu9HfpMSVbsBqDd0/YqN3xq2m9ssxhIQeX+swEjzepwmqv9B1IhQIcGNklia XTR++zjGLIkR3xWWFxt5+7KxY9V/gS8ILgL2AFcUsfTMKcpiHQ8DaEh9D9OEG6wu KxekB7Ul3lIaaB/4YQxAIIa/+NqTqVrzxh4VcJnjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3JZcW8Rpmh+kJfiL5kngfyREkrIwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzk0MjlhZjQxLTVjYTgtNGZjOS05YjE0LWJmMmE2Y2E1MjViNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAFjANBgkqhkiG9w0BAQsFAAOCAQEAoyZphj7i7t70PXUXobzdsI+N BJ86y4fqJ6FC3LALL4vOrOnLS0cbgKHKnlpu5iDCZUbltf7wpQUTPwxuQaTMvj8G TsXyZWBGg3Zc5e08N6AGt5OC+maoegkalwcc7XHtOPsPaiqNyPW0Lq6xwVN9qUOR TfsHAm1G8oSg72CXABRaZhJoCgljlKquKYTYL9OIpFDn8v/s6Pbi/j2tQuApmKb9 oSXVi4pbqzLgHmfO0vfmI+nnzPsVdPQ2QbZgVT9tJNnqxXDycwgBEFrH6oyFEhVj e3PeaAbn6RWGV0HiQ7BIkXg6H+9VePA8bOvKcFHwI25yTzzWFRB/6U+YBbVlAw== -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:37 2026 by rpki-client