$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/dba60bb4-eebc-46f9-a66b-81c9587f4946.roa File: dba60bb4-eebc-46f9-a66b-81c9587f4946.roa (raw, json) Hash identifier: K1WU1j81KXTpnwKpEpegy7wzNTRMI88mH+yNLyPNk38= Subject key identifier: BF:54:66:C4:C9:B9:9A:38:05:2A:5B:D2:9D:56:EC:42:4E:A5:B4:A8 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 1C4FA3008B8467DC4DEDFCA895A15C582D5F546B Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/dba60bb4-eebc-46f9-a66b-81c9587f4946.roa Signing time: Thu 14 May 2026 19:47:09 +0000 ROA not before: Thu 14 May 2026 19:47:09 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4f:a3:00:8b:84:67:dc:4d:ed:fc:a8:95:a1:5c:58:2d:5f:54:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 19:47:09 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=d264adcee6bde5ab3f69fc889cc19e84d2924bb6bf235a05935f58b59c8c3ebf, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:53:92:50:7c:09:d5:1e:66:60:30:95:de:0d: f4:b1:46:4d:09:e7:07:c2:79:d4:09:80:43:8a:64: 12:ba:fc:f8:56:66:fd:eb:ca:64:bc:06:57:b8:a8: 4d:44:1e:6e:c7:79:6a:fc:75:99:33:9d:78:8e:3b: 76:a2:7c:26:12:3b:e6:47:92:62:14:61:27:ba:ad: 0d:94:92:00:7b:26:71:b6:9a:aa:3c:2f:6a:a2:a4: 37:60:cb:13:be:0c:73:37:56:27:7f:97:b3:79:21: 04:c0:90:6c:9c:04:b9:12:8d:73:22:9f:14:12:ac: c8:80:c8:dd:7d:a9:9b:03:67:41:42:48:52:3c:a0: 2e:05:d9:55:89:8e:2a:4f:89:7d:a1:0a:07:9d:e6: 33:39:23:81:e1:dd:81:da:49:94:8e:0a:0a:76:4f: 35:54:b8:d8:9d:bc:ad:06:7c:85:10:c6:52:2a:32: ae:54:69:b0:45:ee:6c:6a:0f:1d:7d:d7:f7:8a:67: 30:41:02:60:1a:b5:72:24:f7:c3:fb:3d:ba:11:3b: 06:52:d2:6b:df:db:03:57:8e:e4:ac:b4:24:19:4c: cd:79:e2:74:a2:8b:1a:22:89:e5:96:2a:2a:4f:6d: a5:e7:eb:1e:54:89:25:cc:e3:bd:c2:9f:dc:b3:00: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:54:66:C4:C9:B9:9A:38:05:2A:5B:D2:9D:56:EC:42:4E:A5:B4:A8 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/dba60bb4-eebc-46f9-a66b-81c9587f4946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:800::/40 Signature Algorithm: sha256WithRSAEncryption 5a:41:69:6a:58:ef:dd:22:27:97:d0:4c:28:bf:cb:ed:21:a9: 2c:3b:0c:a2:ee:aa:3a:24:32:c5:3b:1a:d3:2f:0c:a1:3d:21: 96:b4:62:10:8e:99:04:7b:e1:ca:8b:3b:b9:66:c4:50:4e:a6: f3:ae:37:37:64:58:ff:7e:4a:58:99:b0:ca:12:74:eb:db:a8: 7c:57:b8:a5:89:1c:4b:f8:55:a7:b2:35:95:15:40:97:0e:18: 22:22:a3:13:80:ee:85:f8:1a:bd:72:98:ae:43:48:65:8c:3f: d8:38:a7:65:f1:15:1e:b2:c2:ba:66:63:51:69:b3:1b:29:d9: ad:0c:63:db:f4:a6:01:cb:ae:68:f7:f9:fa:6b:de:d4:4e:29: 8d:e7:fa:44:95:42:3d:73:2a:a7:e0:9e:f1:1e:c9:44:e4:7e: e6:0f:c2:d8:05:8c:45:df:f8:86:b1:fd:3f:ba:08:90:a2:13: 9d:6e:5d:6e:5d:e3:85:2e:1c:5c:00:cc:01:0d:d8:a8:55:cf: 54:cd:c9:79:9e:97:6a:a5:ed:5b:e8:46:86:06:b1:3f:e6:82: 4a:b9:ad:d4:2c:84:80:2b:db:b6:d9:d7:17:20:bd:9d:ae:0a: 31:7d:d8:6b:7f:fb:02:c1:e7:75:17:2d:49:9d:20:ab:36:40: cf:71:79:9f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHE+jAIuEZ9xN7fyolaFcWC1fVGswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MTk0NzA5WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjY0YWRjZWU2YmRlNWFiM2Y2OWZjODg5Y2MxOWU4NGQy OTI0YmI2YmYyMzVhMDU5MzVmNThiNTljOGMzZWJmMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcU5JQfAnVHmZgMJXeDfSxRk0J5wfCedQJgEOKZBK6/PhW Zv3rymS8Ble4qE1EHm7HeWr8dZkznXiOO3aifCYSO+ZHkmIUYSe6rQ2UkgB7JnG2 mqo8L2qipDdgyxO+DHM3Vid/l7N5IQTAkGycBLkSjXMinxQSrMiAyN19qZsDZ0FC SFI8oC4F2VWJjipPiX2hCged5jM5I4Hh3YHaSZSOCgp2TzVUuNidvK0GfIUQxlIq Mq5UabBF7mxqDx191/eKZzBBAmAatXIk98P7PboROwZS0mvf2wNXjuSstCQZTM15 4nSiixoiieWWKipPbaXn6x5UiSXM473Cn9yzAB5zAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUv1RmxMm5mjgFKlvSnVbsQk6ltKgwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2RiYTYwYmI0LWVlYmMtNDZmOS1hNjZiLTgxYzk1ODdmNDk0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOACDANBgkqhkiG9w0BAQsFAAOCAQEAWkFpaljv3SInl9BMKL/L7SGp LDsMou6qOiQyxTsa0y8MoT0hlrRiEI6ZBHvhyos7uWbEUE6m8643N2RY/35KWJmw yhJ069uofFe4pYkcS/hVp7I1lRVAlw4YIiKjE4DuhfgavXKYrkNIZYw/2DinZfEV HrLCumZjUWmzGynZrQxj2/SmAcuuaPf5+mve1E4pjef6RJVCPXMqp+Ce8R7JROR+ 5g/C2AWMRd/4hrH9P7oIkKITnW5dbl3jhS4cXADMAQ3YqFXPVM3JeZ6XaqXtW+hG hgaxP+aCSrmt1CyEgCvbttnXFyC9na4KMX3Ya3/7AsHndRctSZ0gqzZAz3F5nw== -----END CERTIFICATE-----Generated at Fri May 22 16:04:26 2026 by rpki-client