$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/e96975a7-11bb-4200-823e-7366c8ecefda.roa File: e96975a7-11bb-4200-823e-7366c8ecefda.roa (raw, json) Hash identifier: t0C8DH7fveXLI155u8lQedEhJjtF0MUeIPPCxB7QtvM= Subject key identifier: B4:23:62:AD:6F:A2:0A:43:35:DA:18:48:84:9B:6C:6C:2D:AE:9C:E7 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 3697B8746F6D6159DA1484F0DFC5B7D4D552171B Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/e96975a7-11bb-4200-823e-7366c8ecefda.roa Signing time: Sun 02 Aug 2026 00:00:22 +0000 ROA not before: Sun 02 Aug 2026 00:00:22 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:97:b8:74:6f:6d:61:59:da:14:84:f0:df:c5:b7:d4:d5:52:17:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Aug 2 00:00:22 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=d7438c9403f37855c1d13f9364a803d95dc58ead9721795d61d1f4ec7d225962, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:68:60:c5:57:c5:90:12:25:a5:b0:50:0c:5e: b4:35:b9:cb:02:ee:db:0b:a4:ac:6d:d4:19:3b:6d: ea:47:78:74:f9:47:1d:3e:3b:8c:1b:22:ff:ce:87: 8e:95:a3:20:e4:98:51:fd:79:44:20:b3:7a:17:34: 52:ee:7d:d4:79:f5:00:45:38:e2:e3:56:62:66:c4: 8d:2c:43:55:f8:18:a4:e2:14:52:c4:5e:18:51:8d: 00:c5:40:cc:bf:7d:48:36:e0:6a:a9:99:65:5d:8d: 13:49:c8:d7:01:7d:1c:50:90:a9:fe:1e:58:2b:89: 3a:c6:5d:db:56:02:98:d5:99:0d:c4:d5:4c:81:ab: d3:f8:6f:17:1d:c6:63:58:46:ac:db:d3:5d:87:11: 75:27:9d:c6:9e:bb:d9:7a:50:5b:d5:df:5e:29:a9: b1:ee:b9:37:58:44:1b:d5:d2:95:26:ac:d2:d8:4b: 62:2f:f6:e3:cc:60:fd:53:c2:82:fa:9d:94:cd:a7: 64:f4:72:47:6c:42:08:3c:42:2c:e8:8b:6d:59:a6: a9:f5:d0:2e:9a:0b:0c:08:8c:6e:aa:a9:f2:83:a9: c0:df:c2:87:ca:7b:74:9c:8e:f9:9d:92:f5:94:7e: 56:02:38:93:79:53:ce:a5:a8:30:b4:9d:77:1c:69: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:23:62:AD:6F:A2:0A:43:35:DA:18:48:84:9B:6C:6C:2D:AE:9C:E7 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/e96975a7-11bb-4200-823e-7366c8ecefda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:f00::/40 Signature Algorithm: sha256WithRSAEncryption 4f:36:99:db:c6:e5:d7:cd:df:a9:88:14:78:8c:5d:6e:0a:80: 29:f3:22:91:64:c4:20:04:ad:14:29:b6:a1:78:26:db:5f:e7: 72:30:e6:3b:0c:5a:1d:dc:cd:d5:31:ca:7a:12:0b:3c:f7:38: e4:9f:16:6d:b9:2a:d3:15:fd:aa:7e:f4:1c:67:e4:32:ee:38: 68:d3:07:14:fe:89:b4:d7:84:37:5e:bc:78:53:c8:48:63:d9: d4:fb:c7:22:9b:5e:d8:4e:14:73:57:bb:b7:51:8e:49:70:e0: 89:b8:a1:9e:4b:e1:af:44:69:92:a5:98:bf:8d:7e:b6:5c:db: 61:b1:1e:5d:83:95:70:31:6f:ed:76:fb:85:d2:dd:92:79:02: e8:e5:f5:d6:a9:f2:b6:c5:63:9b:fd:2b:3d:63:11:47:92:24: de:c5:2a:a1:d5:bb:d6:b7:31:98:bb:7a:50:dd:5c:23:dd:1e: 69:de:47:20:c6:5f:f5:1a:50:db:14:1b:07:4d:e3:54:50:de: dc:ce:23:0d:21:e9:37:bf:d3:ff:d7:9c:e8:9c:93:ca:08:97: 08:4b:f3:f8:e7:e5:81:49:91:12:30:90:45:20:f4:1f:5b:1b: 10:97:2e:36:7d:51:05:ea:5c:4a:96:5f:f9:d4:30:29:b0:b5: f5:77:a3:6f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNpe4dG9tYVnaFITw38W31NVSFxswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwODAyMDAwMDIyWhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzQzOGM5NDAzZjM3ODU1YzFkMTNmOTM2NGE4MDNkOTVk YzU4ZWFkOTcyMTc5NWQ2MWQxZjRlYzdkMjI1OTYyMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnaGDFV8WQEiWlsFAMXrQ1ucsC7tsLpKxt1Bk7bepHeHT5 Rx0+O4wbIv/Oh46VoyDkmFH9eUQgs3oXNFLufdR59QBFOOLjVmJmxI0sQ1X4GKTi FFLEXhhRjQDFQMy/fUg24GqpmWVdjRNJyNcBfRxQkKn+HlgriTrGXdtWApjVmQ3E 1UyBq9P4bxcdxmNYRqzb012HEXUnncaeu9l6UFvV314pqbHuuTdYRBvV0pUmrNLY S2Iv9uPMYP1TwoL6nZTNp2T0ckdsQgg8Qizoi21Zpqn10C6aCwwIjG6qqfKDqcDf wofKe3ScjvmdkvWUflYCOJN5U86lqDC0nXccaToZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUtCNirW+iCkM12hhIhJtsbC2unOcwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2U5Njk3NWE3LTExYmItNDIwMC04MjNlLTczNjZjOGVjZWZkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOADzANBgkqhkiG9w0BAQsFAAOCAQEATzaZ28bl183fqYgUeIxdbgqA KfMikWTEIAStFCm2oXgm21/ncjDmOwxaHdzN1THKehILPPc45J8Wbbkq0xX9qn70 HGfkMu44aNMHFP6JtNeEN168eFPISGPZ1PvHIpte2E4Uc1e7t1GOSXDgibihnkvh r0RpkqWYv41+tlzbYbEeXYOVcDFv7Xb7hdLdknkC6OX11qnytsVjm/0rPWMRR5Ik 3sUqodW71rcxmLt6UN1cI90ead5HIMZf9RpQ2xQbB03jVFDe3M4jDSHpN7/T/9ec 6JyTygiXCEvz+OflgUmREjCQRSD0H1sbEJcuNn1RBepcSpZf+dQwKbC19Xejbw== -----END CERTIFICATE-----Generated at Fri Aug 21 00:14:39 2026 by rpki-client