$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d1e840ec-30ae-4128-a18b-8d2420631c89.roa File: d1e840ec-30ae-4128-a18b-8d2420631c89.roa (raw, json) Hash identifier: 71g0OZbRIdDWCwTRwN4JyonyUybmQTpU1606A0h4msk= Subject key identifier: 14:21:BF:07:8D:6C:8C:4F:30:5C:E5:C7:C4:65:45:C8:0C:96:1B:DA Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 5CEA5A5FB07585322F1D1FCF9AFF46F7B65C47A7 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d1e840ec-30ae-4128-a18b-8d2420631c89.roa Signing time: Thu 14 May 2026 21:47:27 +0000 ROA not before: Thu 14 May 2026 21:47:27 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ea:5a:5f:b0:75:85:32:2f:1d:1f:cf:9a:ff:46:f7:b6:5c:47:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 21:47:27 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=7265319074743e0b621048310f30fbc4b6351f9fa7102e2fa081ab0edcbad35f, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:75:e7:13:cb:e9:14:89:69:e6:cd:d3:88:ee: 1b:9e:f0:02:a8:f2:8d:1f:bd:3a:f0:69:c0:8d:12: 57:28:1e:67:a0:ca:60:61:7e:07:bb:e8:54:30:76: c7:f2:7d:e8:59:88:db:34:e5:4e:bc:32:89:47:85: b4:69:69:fe:70:ce:cd:2d:b9:9d:65:de:42:0a:6c: 08:9d:34:4a:00:0e:69:7b:35:dc:0f:d7:95:6d:6f: 8a:48:e5:4e:2f:1c:52:41:c0:5d:26:29:1d:e0:05: 24:8d:e1:c3:d2:6f:7b:b2:7f:36:85:e9:26:54:d6: bf:89:59:30:1b:e0:40:23:41:28:19:c8:df:13:f8: 9e:3b:cb:7d:44:21:9c:5d:9c:e0:59:71:af:41:a6: 2f:f6:24:af:68:18:2f:64:61:30:e1:d3:46:35:51: 7f:91:4a:87:b6:5c:d3:dc:5c:71:0e:e9:2d:59:10: 46:9d:54:69:ce:9b:0d:23:38:dd:2f:07:22:ea:73: 1b:cd:45:0d:79:2b:f9:2d:39:88:8b:43:10:34:88: 39:63:fa:13:a3:81:a9:71:ef:c0:ad:1c:6a:92:f0: e2:a0:dc:1c:9b:c9:a1:24:c5:f1:f2:1a:17:13:81: e6:3b:bf:51:35:94:89:2c:e0:95:3f:59:41:71:ab: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:21:BF:07:8D:6C:8C:4F:30:5C:E5:C7:C4:65:45:C8:0C:96:1B:DA X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d1e840ec-30ae-4128-a18b-8d2420631c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:e00::/40 Signature Algorithm: sha256WithRSAEncryption 25:d7:e1:df:7f:08:6a:33:c6:cb:e6:b4:9e:38:89:45:ec:e0: 50:c1:00:2d:a0:de:bb:bc:c3:b9:55:e3:18:fc:51:a3:e9:c8: 0f:56:47:b6:e5:bb:b1:6a:07:56:1d:24:f5:5f:62:15:59:5b: c3:65:6b:4d:25:d3:3a:4c:58:99:aa:bc:6c:87:20:67:0b:9a: eb:94:aa:ab:e7:e9:a5:0d:b2:08:5f:2a:08:38:e0:72:3a:81: 52:66:cc:ad:7c:de:cd:6a:c6:96:a6:5f:d2:23:23:e2:7f:1c: 06:84:6c:bf:18:cd:23:eb:c5:1c:b4:e2:a5:0c:5a:6b:43:04: ea:1c:f0:60:58:8a:70:87:ca:9e:ee:52:53:e2:29:29:91:93: 0b:f8:be:6b:f0:61:0e:90:f5:8a:b7:b4:0a:9a:b1:68:a4:15: 23:be:b3:9b:cc:b9:f1:2d:1d:3c:36:d6:d2:d1:7c:85:2b:03: f9:6c:c6:47:0c:53:6a:dd:47:48:6a:2f:90:21:c1:79:0d:e7: 8f:b7:32:26:ca:6d:6a:31:30:a5:9c:01:92:13:04:99:fc:de: 98:bc:89:d0:0f:50:23:60:2a:0a:ce:ef:19:70:04:25:48:73: 66:95:6a:5e:60:d3:db:f7:12:bd:68:49:a6:33:db:f7:79:f4: e6:2c:88:4b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXOpaX7B1hTIvHR/Pmv9G97ZcR6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzI3WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjY1MzE5MDc0NzQzZTBiNjIxMDQ4MzEwZjMwZmJjNGI2 MzUxZjlmYTcxMDJlMmZhMDgxYWIwZWRjYmFkMzVmMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEdecTy+kUiWnmzdOI7hue8AKo8o0fvTrwacCNElcoHmeg ymBhfge76FQwdsfyfehZiNs05U68MolHhbRpaf5wzs0tuZ1l3kIKbAidNEoADml7 NdwP15Vtb4pI5U4vHFJBwF0mKR3gBSSN4cPSb3uyfzaF6SZU1r+JWTAb4EAjQSgZ yN8T+J47y31EIZxdnOBZca9Bpi/2JK9oGC9kYTDh00Y1UX+RSoe2XNPcXHEO6S1Z EEadVGnOmw0jON0vByLqcxvNRQ15K/ktOYiLQxA0iDlj+hOjgalx78CtHGqS8OKg 3BybyaEkxfHyGhcTgeY7v1E1lIks4JU/WUFxq+/rAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUFCG/B41sjE8wXOXHxGVFyAyWG9owHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2QxZTg0MGVjLTMwYWUtNDEyOC1hMThiLThkMjQyMDYzMWM4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOADjANBgkqhkiG9w0BAQsFAAOCAQEAJdfh338IajPGy+a0njiJRezg UMEALaDeu7zDuVXjGPxRo+nID1ZHtuW7sWoHVh0k9V9iFVlbw2VrTSXTOkxYmaq8 bIcgZwua65Sqq+fppQ2yCF8qCDjgcjqBUmbMrXzezWrGlqZf0iMj4n8cBoRsvxjN I+vFHLTipQxaa0ME6hzwYFiKcIfKnu5SU+IpKZGTC/i+a/BhDpD1ire0CpqxaKQV I76zm8y58S0dPDbW0tF8hSsD+WzGRwxTat1HSGovkCHBeQ3nj7cyJsptajEwpZwB khMEmfzemLyJ0A9QI2AqCs7vGXAEJUhzZpVqXmDT2/cSvWhJpjPb93n05iyISw== -----END CERTIFICATE-----Generated at Fri May 22 16:04:23 2026 by rpki-client