$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7cf5be84-157a-4f26-8b9a-935b4781605a.roa File: 7cf5be84-157a-4f26-8b9a-935b4781605a.roa (raw, json) Hash identifier: V95087kgDnrm9/R0i9eZjoo0EkZ/ShxRs8QR4aBzer4= Subject key identifier: CD:58:47:7F:52:19:32:A1:DC:D0:72:2B:A1:33:0E:DD:3F:42:0E:05 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 4D2E22DD7AFDAB9500F7C2261B1810A1EF9C80D6 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7cf5be84-157a-4f26-8b9a-935b4781605a.roa Signing time: Tue 28 Jul 2026 19:32:07 +0000 ROA not before: Tue 28 Jul 2026 19:32:07 +0000 ROA not after: Mon 26 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2e:22:dd:7a:fd:ab:95:00:f7:c2:26:1b:18:10:a1:ef:9c:80:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Jul 28 19:32:07 2026 GMT Not After : Oct 26 23:59:59 2026 GMT Subject: serialNumber=8e6505189b41d3b42274e6ed3bf0aea22da7d74e284168b69898924a7d7cbd7e, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:75:de:11:50:b4:77:28:3a:c1:b7:11:6e: 17:b1:53:06:0f:63:ac:11:38:2d:04:d4:2c:df:f1: fa:59:ca:12:05:76:5f:c8:f2:2d:3f:4d:fa:31:8b: f4:a4:10:53:e1:8e:22:78:52:0f:f2:ab:a9:b0:53: 28:8d:23:21:e0:a5:dd:d0:76:43:18:d7:a6:45:5b: dd:f4:a8:21:d1:38:4f:58:88:af:bc:38:b6:67:58: 5e:3c:82:fa:bf:88:51:20:68:23:47:7b:27:d5:b8: d0:b0:4c:0f:1c:0e:d9:66:c7:83:25:17:18:49:4e: 63:16:7a:84:5e:89:e2:88:06:3c:c0:71:a8:50:84: 9f:d1:e2:8e:35:1d:7f:8d:38:f7:0b:2d:77:03:b1: f1:65:8b:da:8a:46:d3:b6:17:2a:9b:31:b7:ee:57: 6e:63:c9:5a:f7:a7:0a:28:6a:77:07:00:88:90:7c: 43:54:bf:96:39:72:db:4b:8a:bb:61:c1:d7:4b:3c: 51:71:e5:ae:03:03:20:c0:b9:4a:ed:b0:74:ad:8f: 6d:17:29:1a:b1:f9:13:17:5c:dd:b2:56:77:92:50: f7:60:ea:cb:60:9f:df:ce:2d:16:52:72:cb:05:b3: 50:f6:ec:84:c0:c4:4c:67:b4:41:b6:94:40:75:1f: cc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:58:47:7F:52:19:32:A1:DC:D0:72:2B:A1:33:0E:DD:3F:42:0E:05 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7cf5be84-157a-4f26-8b9a-935b4781605a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1000::/40 Signature Algorithm: sha256WithRSAEncryption 8d:bd:c4:49:ad:d1:83:a9:76:e6:a3:40:12:5c:c4:b6:3c:5e: 37:90:ef:ad:e8:7d:03:63:a8:74:8f:0c:84:d6:86:9f:04:e5: cd:f3:5f:6a:8d:ef:f2:47:b0:52:8a:65:2c:d9:0f:33:79:e2: 23:0c:f5:c9:db:81:3e:ca:8a:f2:b8:41:82:1d:53:4d:90:fb: 2d:f6:51:9c:f6:47:2f:1d:5b:be:71:26:9d:7c:1a:47:e3:32: 4c:16:10:9b:aa:fc:81:5c:5b:6a:01:e6:9d:e5:2f:50:ae:82: 0d:76:01:4b:94:e5:75:36:ea:1b:00:91:02:b9:96:81:3d:58: 26:36:91:bc:3b:12:64:cb:3d:6b:cb:01:04:50:a6:25:d8:30: c1:74:86:c1:74:e9:5b:b3:86:6f:c4:d5:ae:7c:b1:79:82:82: ba:f7:bc:1d:bc:ed:e2:88:47:70:2e:f6:7d:7a:21:6f:93:ee: fb:80:cd:ee:b4:b2:39:cb:b8:2a:0c:70:52:bf:26:7e:b5:86: 2f:57:34:68:eb:fd:4a:1c:0c:ef:3e:a0:02:3b:2f:59:e1:a0: 40:98:cb:ea:98:7d:b9:22:61:c8:0c:06:95:67:7d:1c:a8:1d: 20:88:58:83:52:a6:13:ab:c4:91:84:98:a3:df:87:e8:e0:ae: 06:6a:f3:7a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTS4i3Xr9q5UA98ImGxgQoe+cgNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNzI4MTkzMjA3WhcNMjYxMDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTY1MDUxODliNDFkM2I0MjI3NGU2ZWQzYmYwYWVhMjJk YTdkNzRlMjg0MTY4YjY5ODk4OTI0YTdkN2NiZDdlMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEVnXeEVC0dyg6wbcRbhexUwYPY6wROC0E1Czf8fpZyhIF dl/I8i0/Tfoxi/SkEFPhjiJ4Ug/yq6mwUyiNIyHgpd3QdkMY16ZFW930qCHROE9Y iK+8OLZnWF48gvq/iFEgaCNHeyfVuNCwTA8cDtlmx4MlFxhJTmMWeoReieKIBjzA cahQhJ/R4o41HX+NOPcLLXcDsfFli9qKRtO2FyqbMbfuV25jyVr3pwooancHAIiQ fENUv5Y5cttLirthwddLPFFx5a4DAyDAuUrtsHStj20XKRqx+RMXXN2yVneSUPdg 6stgn9/OLRZScssFs1D27ITAxExntEG2lEB1H8yNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzVhHf1IZMqHc0HIroTMO3T9CDgUwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzdjZjViZTg0LTE1N2EtNGYyNi04YjlhLTkzNWI0NzgxNjA1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAEDANBgkqhkiG9w0BAQsFAAOCAQEAjb3ESa3Rg6l25qNAElzEtjxe N5Dvreh9A2OodI8MhNaGnwTlzfNfao3v8kewUoplLNkPM3niIwz1yduBPsqK8rhB gh1TTZD7LfZRnPZHLx1bvnEmnXwaR+MyTBYQm6r8gVxbagHmneUvUK6CDXYBS5Tl dTbqGwCRArmWgT1YJjaRvDsSZMs9a8sBBFCmJdgwwXSGwXTpW7OGb8TVrnyxeYKC uve8Hbzt4ohHcC72fXohb5Pu+4DN7rSyOcu4KgxwUr8mfrWGL1c0aOv9ShwM7z6g AjsvWeGgQJjL6ph9uSJhyAwGlWd9HKgdIIhYg1KmE6vEkYSYo9+H6OCuBmrzeg== -----END CERTIFICATE-----Generated at Wed Jul 29 04:13:46 2026 by rpki-client