$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/cf325009-c50d-4796-a313-0222d295cd1a.roa File: cf325009-c50d-4796-a313-0222d295cd1a.roa (raw, json) Hash identifier: JtOTGKJ7JoqthjcPzQwEoFQ/LmFTnO0LHhSCbCuOJBU= Subject key identifier: 51:13:2B:7E:34:EF:6E:A0:F3:84:82:11:00:8B:DB:01:B1:F7:E2:0E Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 3319BD530759EE46D44B05C43EA110412F1C2067 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/cf325009-c50d-4796-a313-0222d295cd1a.roa Signing time: Sun 02 Aug 2026 00:00:26 +0000 ROA not before: Sun 02 Aug 2026 00:00:26 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:19:bd:53:07:59:ee:46:d4:4b:05:c4:3e:a1:10:41:2f:1c:20:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Aug 2 00:00:26 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=0c20f44507ebc72be7a538eefb417a4f9c2d214f9e74d81e8b52e2f9bb7a4d59, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:ed:ed:5b:89:17:5f:15:ec:7a:54:87:b7: 66:44:79:c2:96:1a:27:32:80:65:07:71:ec:68:02: a6:8c:22:34:43:56:30:10:7d:95:c9:66:0d:e9:4e: 02:5c:5f:b1:22:c0:e7:9e:15:46:a5:4e:3c:51:15: 40:4e:66:2f:f8:56:ac:ae:ba:17:25:1b:ec:a9:a9: 19:20:d0:25:bd:d9:58:12:e4:3a:ef:b1:35:27:cb: 74:3a:ca:c5:91:54:78:b9:61:ab:2b:76:3e:a4:7f: 49:3e:0d:8d:6a:9d:04:ed:3d:97:06:30:0c:b4:ea: a1:d1:ac:12:31:39:9c:bb:20:90:f7:db:42:fd:6a: 9c:d7:d6:49:ec:1c:86:ed:17:f4:1d:33:99:4e:4a: 61:30:90:fc:ac:ea:07:11:7e:23:85:7a:ef:05:3e: 28:b9:8e:00:cd:42:91:dc:f3:76:29:8d:00:6c:e0: 48:b3:f0:30:9b:72:dc:56:a2:ce:8b:cf:d8:87:3f: 0a:59:0d:b8:5e:d3:20:a8:2e:53:b8:0a:05:a4:e5: 7e:63:df:d7:fd:ac:54:26:0e:c8:44:40:75:3e:f9: ba:d5:4e:bf:e0:85:ad:d9:79:92:ff:76:08:b8:22: 80:63:2c:1f:06:62:30:b2:2a:3a:17:f9:10:a5:18: ae:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:13:2B:7E:34:EF:6E:A0:F3:84:82:11:00:8B:DB:01:B1:F7:E2:0E X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/cf325009-c50d-4796-a313-0222d295cd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1200::/40 Signature Algorithm: sha256WithRSAEncryption 9b:f8:3f:4f:1f:46:5e:b8:da:ce:44:35:ce:42:dc:e8:44:94: 7b:c6:13:0b:b8:50:d0:1e:88:5a:53:f4:ca:64:91:18:0c:79: 6a:fd:da:d0:ea:15:fd:a8:39:ff:06:1f:bb:aa:a4:2d:ea:13: dc:0f:e1:cc:b1:e7:43:ec:48:c8:14:3c:58:59:1d:93:b0:ca: 38:ee:a3:c4:d5:3e:90:c1:40:e1:52:78:3a:ab:a4:96:f2:61: 28:78:a4:3b:02:bc:fe:eb:b5:ef:b4:88:d8:08:86:9e:fd:29: 11:88:86:bd:79:a2:9b:7c:99:31:0a:c9:83:ea:cc:59:c3:9c: 9f:d1:41:79:d6:84:93:ae:70:74:0b:24:da:09:cb:b9:8d:ad: 48:b5:84:df:12:8d:ab:82:db:ba:08:e2:c6:99:ba:a5:59:fc: d3:b2:84:f7:08:fb:74:69:f9:c3:bd:79:fd:c7:b7:a2:04:ec: 05:f2:3b:a4:9a:80:31:7b:d3:8b:01:df:7b:0f:7f:a8:03:6e: e3:85:1e:f7:aa:84:32:d2:a9:cd:3f:44:9f:c4:55:c0:a5:e6: 7f:30:ab:cb:10:a5:f9:1a:d2:24:df:4e:a2:04:82:a3:f5:d1: 6d:ea:c8:12:b2:89:7c:df:e7:88:e4:bc:c4:62:01:7b:02:44: 04:52:51:d0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMxm9UwdZ7kbUSwXEPqEQQS8cIGcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwODAyMDAwMDI2WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzIwZjQ0NTA3ZWJjNzJiZTdhNTM4ZWVmYjQxN2E0Zjlj MmQyMTRmOWU3NGQ4MWU4YjUyZTJmOWJiN2E0ZDU5MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHSu3tW4kXXxXselSHt2ZEecKWGicygGUHcexoAqaMIjRD VjAQfZXJZg3pTgJcX7EiwOeeFUalTjxRFUBOZi/4VqyuuhclG+ypqRkg0CW92VgS 5DrvsTUny3Q6ysWRVHi5Yasrdj6kf0k+DY1qnQTtPZcGMAy06qHRrBIxOZy7IJD3 20L9apzX1knsHIbtF/QdM5lOSmEwkPys6gcRfiOFeu8FPii5jgDNQpHc83YpjQBs 4Eiz8DCbctxWos6Lz9iHPwpZDbhe0yCoLlO4CgWk5X5j39f9rFQmDshEQHU++brV Tr/gha3ZeZL/dgi4IoBjLB8GYjCyKjoX+RClGK4DAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUURMrfjTvbqDzhIIRAIvbAbH34g4wHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2NmMzI1MDA5LWM1MGQtNDc5Ni1hMzEzLTAyMjJkMjk1Y2QxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAEjANBgkqhkiG9w0BAQsFAAOCAQEAm/g/Tx9GXrjazkQ1zkLc6ESU e8YTC7hQ0B6IWlP0ymSRGAx5av3a0OoV/ag5/wYfu6qkLeoT3A/hzLHnQ+xIyBQ8 WFkdk7DKOO6jxNU+kMFA4VJ4OquklvJhKHikOwK8/uu177SI2AiGnv0pEYiGvXmi m3yZMQrJg+rMWcOcn9FBedaEk65wdAsk2gnLuY2tSLWE3xKNq4Lbugjixpm6pVn8 07KE9wj7dGn5w715/ce3ogTsBfI7pJqAMXvTiwHfew9/qANu44Ue96qEMtKpzT9E n8RVwKXmfzCryxCl+RrSJN9OogSCo/XRberIErKJfN/niOS8xGIBewJEBFJR0A== -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:33 2026 by rpki-client