$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2f58edf4-8151-47b8-89e2-6b3e4b2fcf01.roa File: 2f58edf4-8151-47b8-89e2-6b3e4b2fcf01.roa (raw, json) Hash identifier: 2mls8ODF/a6jcVyMW9rJl3YB9v5RGHfeWbPv8Bz+zDo= Subject key identifier: 63:CA:A1:DE:0B:FC:C1:0A:38:AC:D7:6A:F9:02:36:6F:5A:AE:B6:45 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 09C419701FBD98095EE771F630D94F244C70E1EA Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2f58edf4-8151-47b8-89e2-6b3e4b2fcf01.roa Signing time: Tue 28 Jul 2026 19:32:08 +0000 ROA not before: Tue 28 Jul 2026 19:32:08 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c4:19:70:1f:bd:98:09:5e:e7:71:f6:30:d9:4f:24:4c:70:e1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Jul 28 19:32:08 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=bca1d4c117c73023f8b56c73ae7fb5644926d95e9873e015d9ec554e5b1b15a2, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:9c:fc:ee:9b:0b:1c:05:58:3a:5c:fb:9f: 0f:dd:e7:5b:83:09:57:71:4b:38:d7:75:b7:54:4c: f4:61:50:4c:7a:33:b2:28:2b:a0:46:b0:f7:7d:ef: 6d:1f:63:5e:f9:5f:ab:d3:07:54:9c:56:78:23:ca: f2:39:dc:7c:65:43:ab:30:8d:44:5a:4b:9c:5d:b8: 40:97:ee:49:ad:3b:b0:a3:9c:af:f9:78:40:b2:17: 51:37:18:dd:45:c3:e7:e9:81:cb:05:7e:b8:96:3e: 65:0f:13:43:6b:bc:35:b0:ee:2a:06:d0:be:28:a8: 0e:c0:58:33:7f:e1:e3:53:5b:80:0b:c8:15:77:58: 56:56:bd:b3:b7:dd:96:74:c5:ef:c5:78:cd:fb:c9: d0:66:8f:94:40:84:11:01:e9:84:b1:a3:0a:17:a1: 98:48:ce:22:3c:3f:f6:1c:12:72:0f:5f:75:82:81: 8f:71:09:7a:b9:df:8e:3f:d9:b7:8c:c9:f9:60:20: a5:0a:26:3e:2f:b9:5d:be:70:91:f9:6f:9f:22:60: 27:e1:11:1c:b4:5c:15:54:41:f3:4e:a7:30:73:ee: b1:ac:70:a2:b0:18:ba:57:aa:59:f8:04:75:57:ce: cb:bf:ee:95:2b:56:4c:c0:6d:f3:fc:41:e9:17:78: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CA:A1:DE:0B:FC:C1:0A:38:AC:D7:6A:F9:02:36:6F:5A:AE:B6:45 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/2f58edf4-8151-47b8-89e2-6b3e4b2fcf01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1000::/44 Signature Algorithm: sha256WithRSAEncryption 83:5c:de:7f:b7:eb:33:41:16:fd:4c:0d:85:c8:ff:cd:43:2d: df:65:69:ae:ee:1b:63:01:d0:35:4f:a8:91:a9:99:f0:4a:bd: e4:de:2e:fa:38:3c:5d:1c:60:fe:70:d2:e8:87:66:26:cc:a1: 3e:a9:19:70:c5:c3:db:74:fa:f1:3f:bd:11:01:9f:4f:04:b8: f1:6b:b1:94:44:b5:e5:0a:1c:d0:cc:83:40:36:6c:ca:f8:94: 65:06:d1:af:c5:da:0e:a6:50:32:c2:91:67:e2:e0:d3:5f:7f: c3:d0:6a:14:9b:47:f5:1d:a4:5e:0b:13:19:31:4b:9f:de:5a: 9c:33:01:e3:90:6f:1e:fe:41:b4:d2:91:3a:ef:fa:cc:dd:1c: ec:73:61:81:58:b5:1a:82:d9:e2:0e:89:bb:a1:c4:a7:82:2b: a2:2e:f5:b5:5a:69:d7:0f:a3:6e:c8:a8:18:82:28:35:8a:9b: 56:4d:d8:3b:3b:56:e5:81:8e:3b:68:5d:34:f3:6b:4b:bb:ad: 93:91:3f:22:be:d1:cc:38:9a:0f:b1:2f:03:0a:23:08:9e:dc: 45:00:22:a3:b3:de:e0:8d:e5:b4:02:33:d7:58:f6:4c:fc:70: 19:42:32:65:4d:81:c5:ee:a4:d5:f6:f2:26:d4:93:0d:b4:5b: 3a:06:2e:4e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCcQZcB+9mAle53H2MNlPJExw4eowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNzI4MTkzMjA4WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2ExZDRjMTE3YzczMDIzZjhiNTZjNzNhZTdmYjU2NDQ5 MjZkOTVlOTg3M2UwMTVkOWVjNTU0ZTViMWIxNWEyMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxj5z87psLHAVYOlz7nw/d51uDCVdxSzjXdbdUTPRhUEx6 M7IoK6BGsPd9720fY175X6vTB1ScVngjyvI53HxlQ6swjURaS5xduECX7kmtO7Cj nK/5eECyF1E3GN1Fw+fpgcsFfriWPmUPE0NrvDWw7ioG0L4oqA7AWDN/4eNTW4AL yBV3WFZWvbO33ZZ0xe/FeM37ydBmj5RAhBEB6YSxowoXoZhIziI8P/YcEnIPX3WC gY9xCXq5344/2beMyflgIKUKJj4vuV2+cJH5b58iYCfhERy0XBVUQfNOpzBz7rGs cKKwGLpXqln4BHVXzsu/7pUrVkzAbfP8QekXeGUzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUY8qh3gv8wQo4rNdq+QI2b1qutkUwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzJmNThlZGY0LTgxNTEtNDdiOC04OWUyLTZiM2U0YjJmY2YwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBYOAEAAwDQYJKoZIhvcNAQELBQADggEBAINc3n+36zNBFv1MDYXI/81D Ld9laa7uG2MB0DVPqJGpmfBKveTeLvo4PF0cYP5w0uiHZibMoT6pGXDFw9t0+vE/ vREBn08EuPFrsZREteUKHNDMg0A2bMr4lGUG0a/F2g6mUDLCkWfi4NNff8PQahSb R/UdpF4LExkxS5/eWpwzAeOQbx7+QbTSkTrv+szdHOxzYYFYtRqC2eIOibuhxKeC K6Iu9bVaadcPo27IqBiCKDWKm1ZN2Ds7VuWBjjtoXTTza0u7rZORPyK+0cw4mg+x LwMKIwie3EUAIqOz3uCN5bQCM9dY9kz8cBlCMmVNgcXupNX28ibUkw20WzoGLk4= -----END CERTIFICATE-----Generated at Wed Jul 29 04:13:50 2026 by rpki-client