$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/b5d7160c-f3c0-4d0f-aca3-c8a32e2e3dca.roa File: b5d7160c-f3c0-4d0f-aca3-c8a32e2e3dca.roa (raw, json) Hash identifier: hjT4AV+PiEcaHcsoqvG4TJWV9nfkK0/TTpHYLioh9z4= Subject key identifier: 93:41:50:C4:A9:5E:47:59:C3:D7:72:5D:2F:63:A6:AC:7F:0B:AC:11 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 3D5D7DCB77576CBDAF9B9CCBF82E82415CB82776 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/b5d7160c-f3c0-4d0f-aca3-c8a32e2e3dca.roa Signing time: Sun 02 Aug 2026 00:00:05 +0000 ROA not before: Sun 02 Aug 2026 00:00:05 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5d:7d:cb:77:57:6c:bd:af:9b:9c:cb:f8:2e:82:41:5c:b8:27:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Aug 2 00:00:05 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=acaa6265a7500b95e58f0f33c2e98dc825744c79bf8c45571d99df98839e7da5, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:4d:ea:78:c4:f7:f3:b5:a5:24:4f:1b:ea: 03:41:01:68:14:9f:1f:d1:a6:7e:c0:db:67:04:45: 1c:6d:48:f7:b0:a9:c1:14:47:96:16:9e:c3:b9:da: 25:f1:7d:36:c2:48:d7:fa:26:eb:1e:bb:cf:dc:f1: 5c:96:95:c4:ae:cc:ba:db:71:f9:83:d4:d4:a2:1b: 6b:33:74:09:fe:47:09:94:72:16:58:60:4a:2d:cf: dd:df:5b:2f:0c:3a:00:21:9e:4f:15:5e:18:35:e9: 21:8b:b5:16:33:a4:52:ed:90:a2:63:4a:ba:d1:6b: 71:2d:9c:b3:67:7c:ad:73:4c:c4:d4:0d:7b:b0:b1: da:e7:f9:52:b4:f1:db:6c:52:52:ab:35:47:a8:25: 01:26:b6:84:66:cc:62:b0:43:57:f9:33:2c:38:ff: 3b:1c:3d:76:96:b5:0f:9a:f2:a1:bb:27:8c:a2:f3: f0:9c:d0:f9:df:50:95:99:44:c7:58:97:51:5f:2e: 15:49:d5:c8:26:30:a9:96:78:1f:f8:5d:52:a2:bd: 12:e4:86:7a:01:0a:d3:4d:0a:0e:47:ae:15:f6:72: a3:dd:73:78:08:fe:59:de:42:d5:e1:6a:ff:71:c5: ec:b5:30:49:cc:68:89:a9:9a:e7:65:c0:d2:e8:a5: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:41:50:C4:A9:5E:47:59:C3:D7:72:5D:2F:63:A6:AC:7F:0B:AC:11 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/b5d7160c-f3c0-4d0f-aca3-c8a32e2e3dca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:b00::/40 Signature Algorithm: sha256WithRSAEncryption 42:68:6b:8d:ed:27:d4:ed:65:13:cc:4f:6b:62:c5:f7:42:d2: c1:d5:22:ac:d9:69:24:b4:5e:0c:fc:22:a1:36:30:b8:43:e9: 93:83:26:c4:78:18:f6:ac:d4:b4:76:4f:b4:89:be:8d:e7:cd: 55:21:ce:94:79:4f:69:e3:75:74:06:d1:84:c6:e1:17:48:65: 01:76:3e:d4:11:19:b4:f9:34:64:83:4c:85:c8:9e:00:89:31: a9:d0:cf:14:67:de:8a:5f:f8:5f:de:82:2e:9d:eb:33:2e:e2: 1a:61:68:48:af:5f:c4:1b:7e:2a:67:07:13:95:84:e1:cf:f4: 91:a2:21:2a:bc:de:ad:26:eb:ec:93:bc:8a:45:3e:b4:d8:42: 3d:3c:4d:8e:68:b7:66:df:81:c5:4a:dd:56:17:7f:99:94:6c: ac:3a:1e:19:38:be:bd:3e:64:ff:fa:d5:90:c3:20:bb:d2:7f: cf:f6:98:77:b7:3f:33:d8:6c:9e:98:37:25:27:a8:b2:3a:80: 17:7b:6b:4e:34:1a:af:d8:d2:c4:1c:a9:3c:11:5b:c3:20:7b: e1:56:13:49:9c:6c:42:f8:47:9b:cb:f2:f6:86:6c:4f:ae:85: f0:57:89:54:a4:04:8c:ef:67:b5:78:2f:3b:54:11:2d:fa:dc: ba:00:80:5e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPV19y3dXbL2vm5zL+C6CQVy4J3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwODAyMDAwMDA1WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhY2FhNjI2NWE3NTAwYjk1ZTU4ZjBmMzNjMmU5OGRjODI1 NzQ0Yzc5YmY4YzQ1NTcxZDk5ZGY5ODgzOWU3ZGE1MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRwk3qeMT387WlJE8b6gNBAWgUnx/Rpn7A22cERRxtSPew qcEUR5YWnsO52iXxfTbCSNf6Juseu8/c8VyWlcSuzLrbcfmD1NSiG2szdAn+RwmU chZYYEotz93fWy8MOgAhnk8VXhg16SGLtRYzpFLtkKJjSrrRa3EtnLNnfK1zTMTU DXuwsdrn+VK08dtsUlKrNUeoJQEmtoRmzGKwQ1f5Myw4/zscPXaWtQ+a8qG7J4yi 8/Cc0PnfUJWZRMdYl1FfLhVJ1cgmMKmWeB/4XVKivRLkhnoBCtNNCg5HrhX2cqPd c3gI/lneQtXhav9xxey1MEnMaImpmudlwNLopXTbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUk0FQxKleR1nD13JdL2OmrH8LrBEwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2I1ZDcxNjBjLWYzYzAtNGQwZi1hY2EzLWM4YTMyZTJlM2RjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOACzANBgkqhkiG9w0BAQsFAAOCAQEAQmhrje0n1O1lE8xPa2LF90LS wdUirNlpJLReDPwioTYwuEPpk4MmxHgY9qzUtHZPtIm+jefNVSHOlHlPaeN1dAbR hMbhF0hlAXY+1BEZtPk0ZINMhcieAIkxqdDPFGfeil/4X96CLp3rMy7iGmFoSK9f xBt+KmcHE5WE4c/0kaIhKrzerSbr7JO8ikU+tNhCPTxNjmi3Zt+BxUrdVhd/mZRs rDoeGTi+vT5k//rVkMMgu9J/z/aYd7c/M9hsnpg3JSeosjqAF3trTjQar9jSxByp PBFbwyB74VYTSZxsQvhHm8vy9oZsT66F8FeJVKQEjO9ntXgvO1QRLfrcugCAXg== -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:38 2026 by rpki-client