$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a7b8f914-d037-4949-8226-c205b0af72c4.roa File: a7b8f914-d037-4949-8226-c205b0af72c4.roa (raw, json) Hash identifier: Mfc5H6IB0ZBv+tSKLrt8foqdx6+TgR58vXDXmGHxhbk= Subject key identifier: 9E:20:40:93:66:B1:76:6F:88:08:20:82:8A:82:4A:3E:0F:E3:F4:E2 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 2953CFF1D70AC61282DBD47A24AC1E6F12C16238 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a7b8f914-d037-4949-8226-c205b0af72c4.roa Signing time: Sun 02 Aug 2026 00:00:24 +0000 ROA not before: Sun 02 Aug 2026 00:00:24 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:53:cf:f1:d7:0a:c6:12:82:db:d4:7a:24:ac:1e:6f:12:c1:62:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Aug 2 00:00:24 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=c194bbf1d2ec6a5e8534301e81ae799e07635e6d729f7a6275dfe41a32f247dd, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:62:23:af:36:2f:23:52:85:c4:2a:9d:98: 6e:fc:06:14:84:b7:63:ac:df:07:11:b0:95:fb:dd: 03:88:98:eb:28:c3:f7:da:cc:8f:67:48:3e:d1:5c: 27:4c:82:80:b3:10:9c:f2:0a:c5:3c:84:b5:1e:15: 74:fc:15:69:c5:00:e7:e2:8a:1f:fb:ff:05:6e:b5: c9:fa:7c:d3:d4:96:c2:36:46:17:1d:61:cb:30:96: d5:68:cb:9d:4e:c1:82:5c:0b:d1:73:ab:86:06:22: 29:0b:4c:59:b1:ad:50:bd:3d:aa:1b:63:e8:0a:65: 6d:74:f3:70:3a:3b:67:7b:b0:b6:28:87:b3:44:e8: 23:5b:f8:6f:10:2c:0c:94:8c:d4:e9:8d:c4:5d:b2: 42:92:62:ca:f8:fa:fe:0e:5b:a3:48:eb:b6:81:40: 00:12:3a:27:28:7d:9a:97:a2:77:a1:01:f7:67:09: 19:41:79:05:07:f3:25:f1:64:36:55:64:f3:bc:f9: dc:7b:c1:e8:48:0c:95:68:9c:be:2e:3a:3a:b2:db: 5d:fe:64:fc:db:9a:07:b4:5c:7e:e0:fa:a7:b7:6f: c4:d8:3d:c1:11:b9:6a:76:8e:df:a9:33:f3:9c:ea: 64:1f:2f:4a:32:0f:83:3a:1a:20:1b:02:34:2f:fc: 3f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:20:40:93:66:B1:76:6F:88:08:20:82:8A:82:4A:3E:0F:E3:F4:E2 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a7b8f914-d037-4949-8226-c205b0af72c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1400::/40 Signature Algorithm: sha256WithRSAEncryption b3:66:32:e3:cb:60:76:d3:a0:ca:54:a9:5f:6a:69:d5:d4:9a: 92:9c:2b:7b:b2:51:a2:3c:0f:72:68:e4:f3:de:51:a7:91:ec: 95:a3:ec:7c:60:6e:20:ff:a8:1a:c8:18:69:f2:e8:da:d1:17: e5:b4:bd:5d:f2:2d:07:65:eb:a0:01:ec:ac:fa:07:34:fb:df: 05:f9:4e:9b:3c:f4:b0:7c:4e:12:08:6e:79:8f:5f:11:c0:ff: fa:63:63:97:7f:9c:88:b3:d3:df:8d:89:ab:ae:8a:0f:44:23: c0:e9:e3:38:c2:6e:fe:ff:de:fc:1e:02:f2:85:c9:d2:63:c9: 7e:64:78:0e:84:1c:d4:a4:0c:13:c8:33:d0:68:9b:9f:0f:c4: 3e:88:76:2c:f9:ba:ba:9e:aa:10:3a:be:8e:6f:53:35:d3:18: 6a:2f:38:6b:db:1c:00:e7:ed:b2:c6:03:f6:2c:77:ca:eb:90: 3c:e9:3b:ad:ef:6e:e1:23:3b:96:ac:70:00:d0:5a:04:28:4e: 79:f9:ab:e0:9e:93:5c:30:7b:cc:30:9c:69:de:62:55:86:5a: 47:42:22:9f:59:f2:f9:cd:19:e9:42:cb:bc:e7:09:78:e1:1c: dd:62:cf:f6:c7:6e:4d:88:46:98:e0:63:83:b1:a4:90:3d:3f: 7d:8e:84:29 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKVPP8dcKxhKC29R6JKwebxLBYjgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwODAyMDAwMDI0WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTk0YmJmMWQyZWM2YTVlODUzNDMwMWU4MWFlNzk5ZTA3 NjM1ZTZkNzI5ZjdhNjI3NWRmZTQxYTMyZjI0N2RkMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCloWIjrzYvI1KFxCqdmG78BhSEt2Os3wcRsJX73QOImOso w/fazI9nSD7RXCdMgoCzEJzyCsU8hLUeFXT8FWnFAOfiih/7/wVutcn6fNPUlsI2 RhcdYcswltVoy51OwYJcC9Fzq4YGIikLTFmxrVC9PaobY+gKZW1083A6O2d7sLYo h7NE6CNb+G8QLAyUjNTpjcRdskKSYsr4+v4OW6NI67aBQAASOicofZqXonehAfdn CRlBeQUH8yXxZDZVZPO8+dx7wehIDJVonL4uOjqy213+ZPzbmge0XH7g+qe3b8TY PcERuWp2jt+pM/Oc6mQfL0oyD4M6GiAbAjQv/D+9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUniBAk2axdm+ICCCCioJKPg/j9OIwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2E3YjhmOTE0LWQwMzctNDk0OS04MjI2LWMyMDViMGFmNzJjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAFDANBgkqhkiG9w0BAQsFAAOCAQEAs2Yy48tgdtOgylSpX2pp1dSa kpwre7JRojwPcmjk895Rp5HslaPsfGBuIP+oGsgYafLo2tEX5bS9XfItB2XroAHs rPoHNPvfBflOmzz0sHxOEghueY9fEcD/+mNjl3+ciLPT342Jq66KD0QjwOnjOMJu /v/e/B4C8oXJ0mPJfmR4DoQc1KQME8gz0Gibnw/EPoh2LPm6up6qEDq+jm9TNdMY ai84a9scAOftssYD9ix3yuuQPOk7re9u4SM7lqxwANBaBChOefmr4J6TXDB7zDCc ad5iVYZaR0Iin1ny+c0Z6ULLvOcJeOEc3WLP9sduTYhGmOBjg7GkkD0/fY6EKQ== -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:22 2026 by rpki-client