$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d5ce7767-3172-436e-b61f-86a9d4f8994d.roa File: d5ce7767-3172-436e-b61f-86a9d4f8994d.roa (raw, json) Hash identifier: gJHaT5KckAYlIUJwl1JHSEriKj1Nw6j1QLTrMoJqJAU= Subject key identifier: 33:AE:B7:B6:EE:5F:F6:ED:ED:5A:A4:51:4E:58:BB:E3:6B:80:3C:94 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 1CD3AB938CD660910EC5C003478316C7BE7C87E2 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d5ce7767-3172-436e-b61f-86a9d4f8994d.roa Signing time: Thu 14 May 2026 19:47:09 +0000 ROA not before: Thu 14 May 2026 19:47:09 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d3:ab:93:8c:d6:60:91:0e:c5:c0:03:47:83:16:c7:be:7c:87:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 19:47:09 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=643c7a2d1a183780eea14c6b37bd68ffc55c1259734cf538ff3289ba924eb0a4, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:12:14:df:4e:ce:6a:1d:10:76:00:3b:94:8e: 82:d9:41:08:a6:90:c8:3d:97:97:3f:84:23:30:b7: d3:2b:ba:25:ef:85:82:8f:b5:8e:a0:39:44:48:ef: 40:47:45:c8:44:24:e8:31:56:5b:37:5a:8a:0a:ef: 59:51:20:eb:07:f9:0b:91:b7:e2:50:14:71:7e:0c: 4a:c2:40:c6:69:39:ae:c8:50:2a:95:02:89:9a:ab: b2:02:3a:16:49:fc:f0:b4:21:f7:52:78:41:e9:6d: 6e:64:0d:5a:c9:4b:47:51:12:b6:f2:0c:3b:83:41: a4:af:69:12:44:ed:9d:ec:ea:b7:7b:61:8a:e6:93: 72:41:88:af:52:2d:65:b0:11:b6:c2:64:55:f3:bd: 3f:9e:6e:66:aa:32:71:00:31:9c:ff:bd:74:b1:57: 9d:c2:53:97:af:48:8e:8e:84:48:2d:c4:2a:11:85: bb:5a:96:10:4f:dd:0e:a2:e1:52:4c:dd:91:58:65: 61:4f:dc:34:03:aa:4c:67:0f:2e:91:f1:b3:30:05: f7:bd:61:c3:27:7b:44:58:6b:63:a7:0c:e3:13:fc: 9c:95:fd:50:20:1c:72:a0:37:bc:e3:6f:ed:ec:19: f3:6a:86:e3:9f:13:ec:e4:77:3a:e0:3e:04:20:8d: a2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AE:B7:B6:EE:5F:F6:ED:ED:5A:A4:51:4E:58:BB:E3:6B:80:3C:94 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d5ce7767-3172-436e-b61f-86a9d4f8994d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1800::/40 Signature Algorithm: sha256WithRSAEncryption 18:d2:65:02:f5:f9:c1:71:a4:3a:2d:7e:2e:b6:dd:6a:36:31: 92:aa:c5:1b:5c:ce:7a:c2:d1:78:9a:f1:95:90:95:66:91:9a: 40:4d:0b:c7:da:1e:20:ec:8d:2c:2f:ca:5c:4c:e5:1e:09:a4: 88:b7:bf:37:2c:3c:3a:0a:7c:71:d4:f0:cb:04:e8:61:05:5d: 48:63:74:63:9d:eb:ce:83:f8:ca:7a:24:f0:c2:43:a1:4e:bd: 7f:94:51:6b:67:e6:21:52:e0:a5:fc:a0:63:90:54:10:fe:1f: 6f:f7:2e:7c:5f:d6:ad:40:53:7f:fc:34:34:75:e7:d3:19:51: 8a:44:c2:21:30:27:7d:51:1a:55:11:43:69:91:d5:6a:6d:09: 9b:39:77:49:84:59:6e:25:5f:df:81:ec:b0:14:c4:30:4f:77: 63:dd:87:42:1e:87:43:6d:05:c5:63:c0:bc:b6:e4:24:ad:33: 6a:f4:48:09:73:14:70:1f:ce:6d:58:fd:84:2f:1d:3b:54:8f: c4:6b:eb:1a:ce:09:39:c2:bf:87:33:0e:34:66:9f:c6:6d:c9: ac:f8:5c:8b:33:24:37:3a:51:22:5a:fd:fa:3f:88:cb:39:e4: 78:dd:fc:09:d6:d1:22:c5:12:66:e0:b1:b6:34:25:e0:91:66: f2:fd:e9:20 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHNOrk4zWYJEOxcADR4MWx758h+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MTk0NzA5WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDNjN2EyZDFhMTgzNzgwZWVhMTRjNmIzN2JkNjhmZmM1 NWMxMjU5NzM0Y2Y1MzhmZjMyODliYTkyNGViMGE0MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGEhTfTs5qHRB2ADuUjoLZQQimkMg9l5c/hCMwt9MruiXv hYKPtY6gOURI70BHRchEJOgxVls3WooK71lRIOsH+QuRt+JQFHF+DErCQMZpOa7I UCqVAomaq7ICOhZJ/PC0IfdSeEHpbW5kDVrJS0dRErbyDDuDQaSvaRJE7Z3s6rd7 YYrmk3JBiK9SLWWwEbbCZFXzvT+ebmaqMnEAMZz/vXSxV53CU5evSI6OhEgtxCoR hbtalhBP3Q6i4VJM3ZFYZWFP3DQDqkxnDy6R8bMwBfe9YcMne0RYa2OnDOMT/JyV /VAgHHKgN7zjb+3sGfNqhuOfE+zkdzrgPgQgjaJxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUM663tu5f9u3tWqRRTli742uAPJQwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2Q1Y2U3NzY3LTMxNzItNDM2ZS1iNjFmLTg2YTlkNGY4OTk0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAGDANBgkqhkiG9w0BAQsFAAOCAQEAGNJlAvX5wXGkOi1+LrbdajYx kqrFG1zOesLReJrxlZCVZpGaQE0Lx9oeIOyNLC/KXEzlHgmkiLe/Nyw8Ogp8cdTw ywToYQVdSGN0Y53rzoP4ynok8MJDoU69f5RRa2fmIVLgpfygY5BUEP4fb/cufF/W rUBTf/w0NHXn0xlRikTCITAnfVEaVRFDaZHVam0Jmzl3SYRZbiVf34HssBTEME93 Y92HQh6HQ20FxWPAvLbkJK0zavRICXMUcB/ObVj9hC8dO1SPxGvrGs4JOcK/hzMO NGafxm3JrPhcizMkNzpRIlr9+j+IyznkeN38CdbRIsUSZuCxtjQl4JFm8v3pIA== -----END CERTIFICATE-----Generated at Fri May 22 16:04:25 2026 by rpki-client