$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/cf325009-c50d-4796-a313-0222d295cd1a.roa File: cf325009-c50d-4796-a313-0222d295cd1a.roa (raw, json) Hash identifier: ztovRzDyK8fbnnNAjJB1LGTuoEmH7H5zZ1zOZzQu3PI= Subject key identifier: DD:7A:E4:27:DD:E7:33:55:D0:51:B9:F9:01:27:BC:B2:13:1C:03:DA Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 637CF66A0F6A5C7D6F92D69DDE33E549ED349E01 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/cf325009-c50d-4796-a313-0222d295cd1a.roa Signing time: Thu 14 May 2026 21:47:18 +0000 ROA not before: Thu 14 May 2026 21:47:18 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7c:f6:6a:0f:6a:5c:7d:6f:92:d6:9d:de:33:e5:49:ed:34:9e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 21:47:18 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=d754c54bb91c29f90a7c276144bf7ae97353a77f1de93f217cc519ee3694b8ab, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:e0:98:09:36:b0:90:09:9f:6b:dd:fe:8d: 1c:a8:5e:c9:4c:af:b4:db:b0:b0:e4:90:59:dc:c7: eb:13:82:01:64:a1:34:7b:a7:00:67:7e:06:b4:4a: 8e:f2:b8:60:a0:89:22:b0:54:da:d5:ae:e3:79:c3: ce:ae:13:f3:2b:10:cc:ce:8b:5b:c7:8b:3d:c2:23: 81:b5:55:fc:aa:7e:d0:e7:08:d0:80:ab:9b:a7:9b: 1e:92:5b:c5:fd:cf:24:48:e1:51:5f:ad:44:ba:de: a2:ac:41:96:a4:15:7c:bc:e7:6f:64:d5:05:6f:1d: 0d:02:5d:5d:2f:7d:fa:ac:45:66:66:8f:5b:85:ef: 00:62:2a:5b:4a:7f:68:1c:4f:5a:b7:d8:6a:c2:5c: 2e:4d:11:f5:19:b7:41:92:b0:7d:3f:2d:16:65:89: 3b:a2:25:72:28:10:4a:b0:5f:90:24:b5:49:71:9d: 95:79:a5:a1:1e:66:1e:57:3d:98:25:01:9d:a0:5f: d8:c3:68:ee:0b:c7:f6:ec:1f:b2:71:18:ac:89:d7: fb:df:da:c7:29:63:b6:25:13:a0:30:2f:31:f8:46: 5f:47:81:11:4f:09:9e:97:41:49:d9:ca:02:e8:54: ab:d1:d0:31:71:78:48:80:f8:0f:fd:de:22:f7:4f: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7A:E4:27:DD:E7:33:55:D0:51:B9:F9:01:27:BC:B2:13:1C:03:DA X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/cf325009-c50d-4796-a313-0222d295cd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1200::/40 Signature Algorithm: sha256WithRSAEncryption 85:3e:5e:f5:c0:42:13:03:84:db:7e:28:93:0d:6a:10:e1:63: de:0f:74:3a:60:dc:8a:62:b1:cf:b7:de:88:41:a6:5a:ba:95: a6:95:6b:88:c4:7a:23:1f:18:ee:2b:ff:34:3b:0b:d1:37:60: 80:50:2f:cf:bc:2e:df:f9:f8:ce:05:c1:68:5a:67:ea:d9:bb: 06:2f:54:81:62:cb:9e:f6:d8:e3:3f:4c:b5:91:4f:ff:0e:cd: 15:2d:ac:b1:35:e9:d8:9f:d2:b3:97:18:0f:09:00:17:6a:23: a3:86:11:f3:db:2e:7f:6c:86:80:11:42:55:ff:dc:ed:8b:b3: f7:83:21:06:ac:51:1c:5d:c5:b6:33:12:d3:5e:a7:31:25:72: 70:e5:3f:46:33:b3:5f:4b:31:9f:ca:52:ff:be:46:12:c7:2c: 69:87:d6:f0:03:42:50:fb:4f:15:cc:b7:c7:71:0d:3d:23:6f: f8:28:e9:43:22:04:4a:e4:13:71:20:dc:21:dd:e1:2c:61:27: 66:c5:9d:9f:16:52:52:56:a1:05:eb:a5:f7:7a:51:6d:07:0c: f6:91:0d:2a:2f:99:05:7d:22:96:67:ae:8e:23:94:46:2f:ef: a3:c4:a0:51:c1:9c:2a:19:5d:5a:7e:1a:c5:bf:5c:f5:4d:80: bb:10:c3:ac -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUY3z2ag9qXH1vktad3jPlSe00ngEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzE4WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzU0YzU0YmI5MWMyOWY5MGE3YzI3NjE0NGJmN2FlOTcz NTNhNzdmMWRlOTNmMjE3Y2M1MTllZTM2OTRiOGFiMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgAOCYCTawkAmfa93+jRyoXslMr7TbsLDkkFncx+sTggFk oTR7pwBnfga0So7yuGCgiSKwVNrVruN5w86uE/MrEMzOi1vHiz3CI4G1VfyqftDn CNCAq5unmx6SW8X9zyRI4VFfrUS63qKsQZakFXy8529k1QVvHQ0CXV0vffqsRWZm j1uF7wBiKltKf2gcT1q32GrCXC5NEfUZt0GSsH0/LRZliTuiJXIoEEqwX5AktUlx nZV5paEeZh5XPZglAZ2gX9jDaO4Lx/bsH7JxGKyJ1/vf2scpY7YlE6AwLzH4Rl9H gRFPCZ6XQUnZygLoVKvR0DFxeEiA+A/93iL3T41pAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3XrkJ93nM1XQUbn5ASe8shMcA9owHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2NmMzI1MDA5LWM1MGQtNDc5Ni1hMzEzLTAyMjJkMjk1Y2QxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAEjANBgkqhkiG9w0BAQsFAAOCAQEAhT5e9cBCEwOE234okw1qEOFj 3g90OmDcimKxz7feiEGmWrqVppVriMR6Ix8Y7iv/NDsL0TdggFAvz7wu3/n4zgXB aFpn6tm7Bi9UgWLLnvbY4z9MtZFP/w7NFS2ssTXp2J/Ss5cYDwkAF2ojo4YR89su f2yGgBFCVf/c7Yuz94MhBqxRHF3FtjMS016nMSVycOU/RjOzX0sxn8pS/75GEscs aYfW8ANCUPtPFcy3x3ENPSNv+CjpQyIESuQTcSDcId3hLGEnZsWdnxZSUlahBeul 93pRbQcM9pENKi+ZBX0ilmeujiOURi/vo8SgUcGcKhldWn4axb9c9U2AuxDDrA== -----END CERTIFICATE-----Generated at Fri May 22 16:04:27 2026 by rpki-client