$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/628b3bfb-40c5-4a5a-8456-0e9aa093b81d.roa File: 628b3bfb-40c5-4a5a-8456-0e9aa093b81d.roa (raw, json) Hash identifier: 5m7Ht0blVlSM8eLKXBBDbtvUglhZtPBSKiOGjQP0QQs= Subject key identifier: AC:55:67:04:0E:3C:4E:00:4B:C4:F3:10:BE:5F:33:3B:E7:06:15:32 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 43568A3167BC39FBCACC1291D3FA85D3C4A21D67 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/628b3bfb-40c5-4a5a-8456-0e9aa093b81d.roa Signing time: Tue 28 Jul 2026 17:02:04 +0000 ROA not before: Tue 28 Jul 2026 17:02:04 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:800::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:56:8a:31:67:bc:39:fb:ca:cc:12:91:d3:fa:85:d3:c4:a2:1d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Jul 28 17:02:04 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=f4fa098e29aa5c797d861d4c5f9942c59dd385110b2f2ec96775a922aaada09d, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:93:d3:e1:35:ad:f9:7e:2a:5c:38:b2:90: 3a:83:21:21:e2:e6:02:b1:60:7b:f3:65:18:13:f0: f0:fc:a3:41:2b:aa:19:19:0a:fa:5d:a4:49:fb:35: 74:54:ea:0e:8d:84:10:67:7f:e0:82:7f:8f:ae:a5: c9:fe:7e:42:27:0a:8a:bc:ad:cf:0f:73:b4:9f:5b: 9a:57:15:06:1f:b2:75:a0:f0:96:3e:96:f9:b6:ad: 9d:cf:19:99:2e:f7:9a:68:a8:77:b0:1c:39:da:42: 2d:3a:18:86:96:b6:7b:26:34:47:8e:3d:0b:c7:34: 65:3f:01:59:56:d4:a0:4f:18:9a:38:6b:9c:7a:89: cd:28:b1:e7:ad:39:9c:18:a5:36:57:10:ae:c9:86: fe:a0:07:46:58:4e:76:4e:4f:13:36:17:1c:e3:15: 49:0f:69:26:46:ab:8d:44:ca:f8:a8:c4:d6:a6:19: 0b:57:18:c9:8e:ff:87:72:40:f9:9f:88:86:89:d4: 73:11:31:d0:e7:6a:36:d5:d9:bb:41:09:bd:b4:fa: e0:51:4c:e7:67:71:a9:ec:ad:04:b6:0f:f3:47:ec: c1:75:0e:c6:a0:b8:da:43:d9:15:8e:cb:cd:77:78: 76:4c:81:db:d9:05:ca:aa:fa:09:70:e3:63:83:1f: 17:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:55:67:04:0E:3C:4E:00:4B:C4:F3:10:BE:5F:33:3B:E7:06:15:32 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/628b3bfb-40c5-4a5a-8456-0e9aa093b81d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:800::/44 Signature Algorithm: sha256WithRSAEncryption 86:68:08:05:e5:1e:6e:2d:20:47:98:06:35:8d:1a:43:a6:fd: a4:cd:65:36:ca:cf:c7:fc:f3:65:2e:92:51:15:41:05:78:60: 6b:97:7c:d5:a6:44:a1:f4:4c:18:20:1d:21:2c:6c:ba:0d:78: 45:48:15:ff:e8:27:ed:0c:6b:e4:82:3d:74:0a:60:40:21:5e: 44:cb:ac:ce:62:43:54:31:c6:64:4e:4a:df:a3:e4:5a:d1:58: ce:38:41:80:bc:e5:2f:19:66:1f:71:2f:69:9b:dc:44:5e:12: 66:56:8c:7d:bd:bf:08:18:35:f7:b4:b1:98:0f:c3:3b:32:28: 24:3d:e1:51:69:22:a9:0f:ad:80:e2:f3:ba:c3:10:32:5c:e7: ec:b1:b4:ab:7b:9e:41:99:40:b2:fb:33:5e:24:bf:75:a6:d9: ba:11:e8:4b:a0:41:10:67:90:28:81:53:df:90:7d:8e:a5:bf: d5:3a:41:aa:a1:1c:24:70:71:41:e5:f9:e4:16:22:42:6a:b0: d1:42:c3:38:49:f4:60:ef:60:1e:e1:b4:02:a1:f8:46:dc:f2: 34:8e:e5:f7:8e:9a:35:cb:95:9e:36:f2:36:d1:c1:84:cd:24: 04:22:66:4b:34:5a:1b:11:4f:e3:43:92:ad:e6:c0:9c:4c:e7: f0:1f:ec:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ1aKMWe8OfvKzBKR0/qF08SiHWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNzI4MTcwMjA0WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGZhMDk4ZTI5YWE1Yzc5N2Q4NjFkNGM1Zjk5NDJjNTlk ZDM4NTExMGIyZjJlYzk2Nzc1YTkyMmFhYWRhMDlkMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXG5PT4TWt+X4qXDiykDqDISHi5gKxYHvzZRgT8PD8o0Er qhkZCvpdpEn7NXRU6g6NhBBnf+CCf4+upcn+fkInCoq8rc8Pc7SfW5pXFQYfsnWg 8JY+lvm2rZ3PGZku95poqHewHDnaQi06GIaWtnsmNEeOPQvHNGU/AVlW1KBPGJo4 a5x6ic0oseetOZwYpTZXEK7Jhv6gB0ZYTnZOTxM2FxzjFUkPaSZGq41EyvioxNam GQtXGMmO/4dyQPmfiIaJ1HMRMdDnajbV2btBCb20+uBRTOdncansrQS2D/NH7MF1 DsaguNpD2RWOy813eHZMgdvZBcqq+glw42ODHxf7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrFVnBA48TgBLxPMQvl8zO+cGFTIwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzYyOGIzYmZiLTQwYzUtNGE1YS04NDU2LTBlOWFhMDkzYjgxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBYOACAAwDQYJKoZIhvcNAQELBQADggEBAIZoCAXlHm4tIEeYBjWNGkOm /aTNZTbKz8f882UuklEVQQV4YGuXfNWmRKH0TBggHSEsbLoNeEVIFf/oJ+0Ma+SC PXQKYEAhXkTLrM5iQ1QxxmROSt+j5FrRWM44QYC85S8ZZh9xL2mb3EReEmZWjH29 vwgYNfe0sZgPwzsyKCQ94VFpIqkPrYDi87rDEDJc5+yxtKt7nkGZQLL7M14kv3Wm 2boR6EugQRBnkCiBU9+QfY6lv9U6QaqhHCRwcUHl+eQWIkJqsNFCwzhJ9GDvYB7h tAKh+Ebc8jSO5feOmjXLlZ428jbRwYTNJAQiZks0WhsRT+NDkq3mwJxM5/Af7NI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:13:49 2026 by rpki-client