$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/f108432b-786e-45b5-8c00-a6aae2025e2f.roa File: f108432b-786e-45b5-8c00-a6aae2025e2f.roa (raw, json) Hash identifier: 5W68SKzO/88qroloZcovWGAB/NqPm7HgsOyIzJtcAro= Subject key identifier: A1:FB:15:11:A3:FB:CE:39:26:15:16:B1:21:80:EB:FA:2D:32:7A:D2 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 75DB12384A5C6F17E823F894DDB4C5EFC1C3A47A Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/f108432b-786e-45b5-8c00-a6aae2025e2f.roa Signing time: Thu 14 May 2026 21:47:25 +0000 ROA not before: Thu 14 May 2026 21:47:25 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:db:12:38:4a:5c:6f:17:e8:23:f8:94:dd:b4:c5:ef:c1:c3:a4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: May 14 21:47:25 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=439b42f3cff28c329c92ed418a0cca49073d6f56b6112cfe2b80ac55a5679591, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:5c:b7:86:8f:a6:b1:70:f1:e4:79:c7:fe: 05:2a:21:b5:8f:4c:d7:47:22:99:c4:78:60:da:a1: 16:6d:35:02:99:28:3a:3c:ea:43:bd:4c:78:e6:3a: b3:13:54:f3:5c:e1:9f:b1:4c:65:61:ff:fd:bf:7d: 6c:14:a3:31:f9:d3:c9:ef:75:38:58:39:86:4d:1e: 3f:28:19:6b:32:9c:9c:c1:91:4a:04:1b:06:6a:56: 51:c0:5f:a9:b7:8b:ee:91:31:62:8b:0c:40:6a:db: 72:da:4b:63:90:9d:02:85:9f:7a:50:fa:8e:38:90: 43:98:73:15:aa:7b:f1:75:79:85:a2:1e:b7:12:77: 29:2b:7b:54:c0:56:e0:69:d4:64:e4:93:36:54:93: e0:e3:57:1a:dc:ab:f7:86:a8:32:cf:00:22:40:96: 4f:23:a0:3b:bb:12:78:87:82:21:db:f9:a2:e1:4b: 86:94:b4:90:06:d0:5b:07:67:67:c2:45:e5:a4:7f: 32:14:f2:d8:be:85:81:bd:b3:c6:cd:db:3c:6d:88: 0f:bb:12:d3:39:e0:2a:00:b3:59:c2:78:22:a8:e7: 1c:bc:20:84:2f:84:6d:b8:2c:c5:8d:04:65:df:2a: 52:6b:bd:55:8c:ac:b2:6c:29:fc:0f:84:1e:62:dc: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FB:15:11:A3:FB:CE:39:26:15:16:B1:21:80:EB:FA:2D:32:7A:D2 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/f108432b-786e-45b5-8c00-a6aae2025e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:600::/40 Signature Algorithm: sha256WithRSAEncryption 52:2a:8f:18:ab:0f:81:ec:4c:fa:ab:f4:5f:e4:b3:e8:ee:4b: 06:a1:1c:e2:8e:3c:52:22:46:88:df:74:fa:b1:79:1b:67:ce: 8d:27:4b:8c:0f:46:b9:25:ef:b1:71:3b:79:71:f4:a6:ed:0d: 1f:f8:c7:63:00:1e:2d:2c:61:5c:52:74:18:a3:72:be:94:32: fc:e6:b5:aa:df:c7:06:44:b9:28:16:c1:a4:3f:b2:52:9e:33: a7:a4:4a:37:24:98:16:33:dc:41:0b:5b:d6:b7:98:41:5f:08: a7:ef:6d:86:01:84:4e:a7:ac:42:2b:d4:90:b4:e2:b3:3a:46: 0a:0d:06:80:48:6d:6d:6e:aa:d4:45:75:8e:72:60:8c:c0:e5: ec:4b:b7:12:c8:63:4a:42:dc:04:b3:85:12:3b:84:ce:95:8f: 7a:27:76:27:ac:43:50:8b:78:be:f1:5b:73:f4:92:b6:3d:53: 00:d7:73:78:6d:96:b7:22:17:b6:1f:44:94:1e:99:26:60:13: b7:0f:cb:6d:06:e7:4c:27:bd:10:58:da:7c:51:b5:58:50:35: c6:65:4e:f8:61:7a:82:94:c6:c8:0c:28:6a:e2:c1:82:5a:f9: e4:a6:b9:ce:17:12:24:4b:a4:c6:f0:0c:91:2c:40:a0:ab:cb: f5:0a:5a:a2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUddsSOEpcbxfoI/iU3bTF78HDpHowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MjE0NzI1WhcNMjYwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzliNDJmM2NmZjI4YzMyOWM5MmVkNDE4YTBjY2E0OTA3 M2Q2ZjU2YjYxMTJjZmUyYjgwYWM1NWE1Njc5NTkxMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBWFy3ho+msXDx5HnH/gUqIbWPTNdHIpnEeGDaoRZtNQKZ KDo86kO9THjmOrMTVPNc4Z+xTGVh//2/fWwUozH508nvdThYOYZNHj8oGWsynJzB kUoEGwZqVlHAX6m3i+6RMWKLDEBq23LaS2OQnQKFn3pQ+o44kEOYcxWqe/F1eYWi HrcSdykre1TAVuBp1GTkkzZUk+DjVxrcq/eGqDLPACJAlk8joDu7EniHgiHb+aLh S4aUtJAG0FsHZ2fCReWkfzIU8ti+hYG9s8bN2zxtiA+7EtM54CoAs1nCeCKo5xy8 IIQvhG24LMWNBGXfKlJrvVWMrLJsKfwPhB5i3FcNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUofsVEaP7zjkmFRaxIYDr+i0yetIwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2YxMDg0MzJiLTc4NmUtNDViNS04YzAwLWE2YWFlMjAyNWUyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOABjANBgkqhkiG9w0BAQsFAAOCAQEAUiqPGKsPgexM+qv0X+Sz6O5L BqEc4o48UiJGiN90+rF5G2fOjSdLjA9GuSXvsXE7eXH0pu0NH/jHYwAeLSxhXFJ0 GKNyvpQy/Oa1qt/HBkS5KBbBpD+yUp4zp6RKNySYFjPcQQtb1reYQV8Ip+9thgGE TqesQivUkLTiszpGCg0GgEhtbW6q1EV1jnJgjMDl7Eu3EshjSkLcBLOFEjuEzpWP eid2J6xDUIt4vvFbc/SStj1TANdzeG2WtyIXth9ElB6ZJmATtw/LbQbnTCe9EFja fFG1WFA1xmVO+GF6gpTGyAwoauLBglr55Ka5zhcSJEukxvAMkSxAoKvL9Qpaog== -----END CERTIFICATE-----Generated at Fri May 22 16:04:28 2026 by rpki-client