$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d3677318-abe3-4f23-813a-65606f96282c.roa File: d3677318-abe3-4f23-813a-65606f96282c.roa (raw, json) Hash identifier: gUYuAjnbfBJiLzSMrB4C3/PCnoUPDgFsI5Ms/pR8Xak= Subject key identifier: 96:4A:1D:DB:E8:BF:60:C7:9A:B0:EB:83:8F:D9:40:4E:3D:98:39:9C Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 17D78D054D5BA1AE0A87B2C50FFF123ABA9C9BDC Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d3677318-abe3-4f23-813a-65606f96282c.roa Signing time: Thu 14 May 2026 21:47:22 +0000 ROA not before: Thu 14 May 2026 21:47:22 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d7:8d:05:4d:5b:a1:ae:0a:87:b2:c5:0f:ff:12:3a:ba:9c:9b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 21:47:22 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=4ad47918996c5d41084efabd8c70dd7f77249ca6325442c8b91379aa67496506, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ce:26:6b:13:b2:c6:2a:11:d6:95:51:d3:e7: a0:fb:13:51:b8:c6:e5:e4:3b:b8:fb:c4:36:2c:34: 92:08:fc:1a:be:6f:4d:71:17:a8:7a:d1:52:3f:bb: 9b:42:e5:cd:59:2d:00:d3:c4:74:13:71:9e:58:b1: 9e:a1:b4:f3:21:c6:61:2a:15:58:2e:df:13:6f:09: d6:4f:0a:4b:2c:01:38:4d:ef:19:54:be:5c:fa:b8: 8f:7e:e2:2e:8b:dc:16:ed:97:08:3f:c8:31:b1:86: a2:b6:d6:45:f6:06:c4:91:ce:2e:9d:1a:09:e7:58: 04:b6:7c:0e:d5:0f:03:37:58:c3:1f:4b:a9:e6:e9: df:b7:97:df:e7:66:80:d9:fb:ad:d6:c5:0c:76:3d: 78:f4:ab:4f:32:b8:28:56:a8:a3:c2:de:9d:5a:f5: 93:4a:67:d8:99:e7:9e:71:b1:f6:90:3e:15:01:16: 7b:5b:28:75:90:b5:0a:82:64:21:66:c6:56:4f:2b: 94:72:55:a5:84:3b:03:4b:2a:47:1b:cc:1f:87:81: 48:aa:1a:e9:6a:04:bd:74:34:49:cc:c8:26:d9:4f: 22:8b:44:72:33:63:ce:4f:3f:69:c9:27:a9:e8:2e: b7:d6:19:f2:e3:d0:7b:b5:f4:3f:a4:e4:8c:7c:6d: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4A:1D:DB:E8:BF:60:C7:9A:B0:EB:83:8F:D9:40:4E:3D:98:39:9C X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d3677318-abe3-4f23-813a-65606f96282c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1e00::/40 Signature Algorithm: sha256WithRSAEncryption d0:9b:43:f0:6f:d6:0a:9e:83:1f:56:8b:0a:4b:28:bc:86:e7: d5:c5:41:2c:71:52:d9:27:43:94:10:7e:c4:e7:f7:45:c6:a9: 79:6c:ef:24:1a:6a:ca:75:5e:c0:02:a1:20:50:9f:81:e4:2b: 5f:d3:1e:1c:38:4f:db:8f:87:51:d4:17:55:92:69:0a:a1:29: 16:2f:52:58:9a:a5:2b:c2:bf:32:21:63:d1:ed:15:8d:13:6c: 11:cd:b4:07:89:ab:a1:8a:b1:9e:30:ad:ea:9e:b7:4e:e1:6e: af:5f:ab:57:3e:49:38:44:fa:a4:a0:97:b4:f6:48:d2:d8:08: 33:6d:39:95:00:65:d4:ee:4b:d3:fa:06:4d:9c:0b:74:28:e2: 30:d4:bd:d8:0a:33:b5:49:c6:7a:c5:19:9d:6f:0c:e6:33:ac: 6d:84:67:78:70:06:c4:6e:74:62:99:4a:7b:79:83:39:53:0b: a8:ea:b0:05:82:c9:d2:ac:45:cc:66:7a:8b:84:bd:0e:0b:1f: 26:68:f1:35:07:d1:bf:d8:3f:b3:98:4a:4e:2c:d1:30:c4:c6: 05:77:0b:8f:81:5b:f2:ab:28:43:90:0b:b2:54:c3:2b:b2:0e: 18:b0:1b:ba:36:8d:b7:35:9b:8d:aa:7a:6d:f5:a0:cb:93:25: 0d:71:5f:b3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUF9eNBU1boa4Kh7LFD/8SOrqcm9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzIyWhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWQ0NzkxODk5NmM1ZDQxMDg0ZWZhYmQ4YzcwZGQ3Zjc3 MjQ5Y2E2MzI1NDQyYzhiOTEzNzlhYTY3NDk2NTA2MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVziZrE7LGKhHWlVHT56D7E1G4xuXkO7j7xDYsNJII/Bq+ b01xF6h60VI/u5tC5c1ZLQDTxHQTcZ5YsZ6htPMhxmEqFVgu3xNvCdZPCkssAThN 7xlUvlz6uI9+4i6L3Bbtlwg/yDGxhqK21kX2BsSRzi6dGgnnWAS2fA7VDwM3WMMf S6nm6d+3l9/nZoDZ+63WxQx2PXj0q08yuChWqKPC3p1a9ZNKZ9iZ555xsfaQPhUB FntbKHWQtQqCZCFmxlZPK5RyVaWEOwNLKkcbzB+HgUiqGulqBL10NEnMyCbZTyKL RHIzY85PP2nJJ6noLrfWGfLj0Hu19D+k5Ix8bQZ/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlkod2+i/YMeasOuDj9lATj2YOZwwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2QzNjc3MzE4LWFiZTMtNGYyMy04MTNhLTY1NjA2Zjk2MjgyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAHjANBgkqhkiG9w0BAQsFAAOCAQEA0JtD8G/WCp6DH1aLCksovIbn 1cVBLHFS2SdDlBB+xOf3RcapeWzvJBpqynVewAKhIFCfgeQrX9MeHDhP24+HUdQX VZJpCqEpFi9SWJqlK8K/MiFj0e0VjRNsEc20B4mroYqxnjCt6p63TuFur1+rVz5J OET6pKCXtPZI0tgIM205lQBl1O5L0/oGTZwLdCjiMNS92AoztUnGesUZnW8M5jOs bYRneHAGxG50YplKe3mDOVMLqOqwBYLJ0qxFzGZ6i4S9DgsfJmjxNQfRv9g/s5hK TizRMMTGBXcLj4Fb8qsoQ5ALslTDK7IOGLAbujaNtzWbjap6bfWgy5MlDXFfsw== -----END CERTIFICATE-----Generated at Fri May 22 16:04:22 2026 by rpki-client