$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a7b8f914-d037-4949-8226-c205b0af72c4.roa File: a7b8f914-d037-4949-8226-c205b0af72c4.roa (raw, json) Hash identifier: WYTSVWy9lWVZmIPPDPw1SNw4oQID+91mChStIbzMMeo= Subject key identifier: FA:5A:B4:6C:CE:32:88:F6:94:A3:C4:96:10:8A:3C:12:60:08:0A:19 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 46A43BA775634886160A6C33A8748DB718B5254F Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a7b8f914-d037-4949-8226-c205b0af72c4.roa Signing time: Thu 14 May 2026 21:47:18 +0000 ROA not before: Thu 14 May 2026 21:47:18 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a4:3b:a7:75:63:48:86:16:0a:6c:33:a8:74:8d:b7:18:b5:25:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 21:47:18 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=47f74a712cbdc13e30198218ab86b4e2d2e3705f9fd1ee4abebc19bf26811ed4, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:48:2d:7c:83:0e:11:c7:f8:45:77:90:54: 92:f6:e5:d9:d9:51:24:01:ae:51:e3:73:ea:b7:9e: 54:a8:5c:5d:9f:14:28:27:bc:db:15:50:30:eb:8e: 88:21:d2:b0:fc:41:ed:1a:1c:4c:38:6c:0c:e9:b7: 89:40:6c:37:f6:7e:da:d3:87:f1:93:37:20:18:ed: 77:0c:18:37:7d:11:82:0a:4b:c5:c8:80:3c:b8:50: 51:82:57:4c:ec:b9:af:02:30:c9:5d:99:02:fd:6d: 56:a3:1d:30:00:3f:71:74:17:b9:b9:5c:26:e9:af: bf:9f:41:e5:d0:98:89:3c:ee:ab:63:88:43:63:58: 33:db:47:b7:0d:66:90:b2:e7:70:1b:c2:0a:7e:5b: c9:3c:32:df:7d:61:51:2f:37:31:4a:05:4d:3e:fc: fa:8f:ee:62:7e:95:98:4a:2f:58:a4:93:92:79:6e: 1b:03:43:1a:3e:67:85:9e:33:67:9c:cb:99:d9:b4: cc:76:6b:05:f9:ac:7d:4f:d5:13:bb:b8:f7:02:f0: 2a:f9:f2:36:cd:93:93:23:d1:53:86:14:31:4c:05: 05:32:39:3d:42:05:2b:2d:73:1c:94:30:a0:54:40: 9c:a2:46:33:6b:70:ea:5b:a3:5c:cf:42:a2:b0:b6: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5A:B4:6C:CE:32:88:F6:94:A3:C4:96:10:8A:3C:12:60:08:0A:19 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a7b8f914-d037-4949-8226-c205b0af72c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1400::/40 Signature Algorithm: sha256WithRSAEncryption c6:6f:e1:eb:e9:7e:c9:bb:18:e7:ab:93:4f:60:2b:b8:71:0d: 25:ed:e3:8b:ec:d2:ad:a0:97:55:6e:52:a8:cc:6d:2e:c7:52: 80:88:01:19:89:6b:e0:07:1a:28:b8:b5:3d:42:b0:98:60:81: 1b:55:db:f8:e4:74:ff:14:0d:d2:da:91:25:bd:13:2b:5a:12: cd:98:f1:51:88:97:8e:04:1c:db:8a:4d:48:43:c5:ca:4b:5b: 6b:df:67:7f:4c:25:81:13:66:b0:3b:84:78:2b:11:5f:80:1c: 90:d2:d9:64:f3:a3:47:9b:bf:be:eb:c6:a2:90:07:82:63:67: c0:89:d5:d0:f6:77:04:b0:9d:06:b8:9d:ff:aa:1e:23:85:09: 58:92:5f:43:0d:83:3f:c9:86:41:17:ad:d6:31:c7:b0:71:d3: 6d:de:1a:51:f8:ce:f7:0b:e9:35:57:3c:00:f1:94:59:1e:7c: dc:b7:3c:b0:b9:5d:b1:80:e6:e9:49:3e:3c:f7:f6:dc:a8:c5: 23:56:59:04:18:46:b6:55:1b:79:17:53:b5:25:2c:e2:c5:11: 7f:16:eb:17:51:2f:c9:82:94:6c:f3:4f:63:ed:e5:61:d6:3e: d4:de:72:24:40:39:8a:e6:67:91:c2:4f:f1:fb:5c:fb:8c:b9: 8d:1e:1e:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURqQ7p3VjSIYWCmwzqHSNtxi1JU8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzE4WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2Y3NGE3MTJjYmRjMTNlMzAxOTgyMThhYjg2YjRlMmQy ZTM3MDVmOWZkMWVlNGFiZWJjMTliZjI2ODExZWQ0MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzUUgtfIMOEcf4RXeQVJL25dnZUSQBrlHjc+q3nlSoXF2f FCgnvNsVUDDrjogh0rD8Qe0aHEw4bAzpt4lAbDf2ftrTh/GTNyAY7XcMGDd9EYIK S8XIgDy4UFGCV0zsua8CMMldmQL9bVajHTAAP3F0F7m5XCbpr7+fQeXQmIk87qtj iENjWDPbR7cNZpCy53Abwgp+W8k8Mt99YVEvNzFKBU0+/PqP7mJ+lZhKL1ikk5J5 bhsDQxo+Z4WeM2ecy5nZtMx2awX5rH1P1RO7uPcC8Cr58jbNk5Mj0VOGFDFMBQUy OT1CBSstcxyUMKBUQJyiRjNrcOpbo1zPQqKwtryDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+lq0bM4yiPaUo8SWEIo8EmAIChkwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2E3YjhmOTE0LWQwMzctNDk0OS04MjI2LWMyMDViMGFmNzJjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAFDANBgkqhkiG9w0BAQsFAAOCAQEAxm/h6+l+ybsY56uTT2AruHEN Je3ji+zSraCXVW5SqMxtLsdSgIgBGYlr4AcaKLi1PUKwmGCBG1Xb+OR0/xQN0tqR Jb0TK1oSzZjxUYiXjgQc24pNSEPFyktba99nf0wlgRNmsDuEeCsRX4AckNLZZPOj R5u/vuvGopAHgmNnwInV0PZ3BLCdBrid/6oeI4UJWJJfQw2DP8mGQRet1jHHsHHT bd4aUfjO9wvpNVc8APGUWR583Lc8sLldsYDm6Uk+PPf23KjFI1ZZBBhGtlUbeRdT tSUs4sURfxbrF1EvyYKUbPNPY+3lYdY+1N5yJEA5iuZnkcJP8ftc+4y5jR4e/A== -----END CERTIFICATE-----Generated at Fri May 22 16:04:20 2026 by rpki-client