$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa File: 59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa (raw, json) Hash identifier: +nqWk6PCVSK9JBjmKz3ecCpfTsH9xDFr89JTzen+iR0= Subject key identifier: 2A:F1:87:79:6B:11:08:A7:BE:54:F0:C3:3C:D2:12:96:27:4A:0B:B9 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 72B2E7CF5E921B19E5211328FD75C88D55014F0D Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa Signing time: Sat 28 Feb 2026 00:50:40 +0000 ROA not before: Sat 28 Feb 2026 00:50:40 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b2:e7:cf:5e:92:1b:19:e5:21:13:28:fd:75:c8:8d:55:01:4f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Feb 28 00:50:40 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=b6b96bc0cd249fa051ffae07e45721ce5c365dd673acc29d4a94020f397fdff4, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:7d:46:ba:a7:82:c0:eb:88:db:32:50:2b: 9f:9a:de:fe:c2:b8:55:c6:a6:a1:19:cc:c1:8b:ff: b1:e2:b8:5d:f0:a9:da:25:93:ba:85:21:dd:e0:cd: f7:71:23:99:f9:e3:50:21:d5:b0:55:a3:56:35:5f: be:fd:87:f7:49:d6:69:e0:ef:ec:8d:88:dd:85:7f: 1a:b5:0a:f0:bd:11:14:04:0e:9f:a8:21:55:f3:da: 25:a0:f2:07:68:b8:9f:4e:3d:5b:f0:4f:58:88:8f: b6:78:70:6c:2b:bf:59:2a:86:b6:53:06:67:cc:be: d0:d7:04:b6:a8:9b:6e:2a:5b:11:74:f7:3b:77:e2: 11:b5:e8:7c:b6:8e:e9:10:ab:bb:0b:d2:53:94:2f: 01:f6:c1:98:b6:ac:2f:a8:9b:3f:95:61:b3:66:b8: 07:91:87:63:3f:1a:00:70:02:bd:c0:a4:f7:6d:ad: db:1f:a1:f9:ac:50:1a:bd:04:cd:0a:55:9c:82:d8: ef:97:90:5c:78:00:8c:3c:70:74:1b:68:ca:7f:42: d9:87:90:11:37:5a:fc:85:4d:35:5d:a6:82:0a:7b: ed:16:45:b5:ae:1e:c4:be:e2:21:05:5d:53:de:ed: 8c:ec:b0:89:51:14:a1:b8:e6:54:5b:0d:1b:d1:7f: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F1:87:79:6B:11:08:A7:BE:54:F0:C3:3C:D2:12:96:27:4A:0B:B9 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.4.0/22 Signature Algorithm: sha256WithRSAEncryption 29:cc:b0:2c:20:0b:d0:5d:f6:06:a1:a7:35:12:ab:76:cf:e3: e2:92:2d:ed:b9:11:78:d3:45:85:7a:88:47:27:0e:2f:0e:ef: 2f:43:9c:6c:55:e0:cd:8c:31:fb:ca:2d:0d:87:2c:61:d9:e0: 49:30:64:39:c9:53:6e:8f:13:4b:3c:1d:6e:f2:77:e4:bc:89: 92:57:92:92:fe:0b:f7:ff:64:27:e9:1d:4b:ef:68:a4:71:fe: 61:2a:17:c4:25:13:f3:81:b0:23:6b:3e:49:0b:1c:65:30:06: c1:91:ce:ed:fc:e8:08:1e:5c:06:43:83:47:74:6d:4d:36:0b: 42:7c:57:22:08:ea:4d:27:75:10:b4:f2:a4:67:54:76:c9:32: 5b:82:8c:ab:63:ec:43:af:5e:28:ef:ba:6b:58:d0:e1:da:7b: 12:54:55:92:a1:b9:c3:3d:2e:4b:6f:4d:fb:d0:a3:55:72:21: f5:e0:f7:0c:14:f8:29:39:5b:67:fb:c3:64:b2:0f:27:2e:66: f1:7b:1c:3e:c7:b9:df:f3:cc:ca:b5:40:65:18:39:70:1d:22: 3c:b6:7d:80:57:8e:1d:6a:87:01:76:7a:5e:b0:ff:43:70:6f: bd:a0:61:ba:ce:36:4c:e7:4a:8a:d0:7c:fb:22:35:b8:ca:5a: 87:e7:88:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcrLnz16SGxnlIRMo/XXIjVUBTw0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwMjI4MDA1MDQwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmI5NmJjMGNkMjQ5ZmEwNTFmZmFlMDdlNDU3MjFjZTVj MzY1ZGQ2NzNhY2MyOWQ0YTk0MDIwZjM5N2ZkZmY0MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlo31GuqeCwOuI2zJQK5+a3v7CuFXGpqEZzMGL/7HiuF3w qdolk7qFId3gzfdxI5n541Ah1bBVo1Y1X779h/dJ1mng7+yNiN2Ffxq1CvC9ERQE Dp+oIVXz2iWg8gdouJ9OPVvwT1iIj7Z4cGwrv1kqhrZTBmfMvtDXBLaom24qWxF0 9zt34hG16Hy2jukQq7sL0lOULwH2wZi2rC+omz+VYbNmuAeRh2M/GgBwAr3ApPdt rdsfofmsUBq9BM0KVZyC2O+XkFx4AIw8cHQbaMp/QtmHkBE3WvyFTTVdpoIKe+0W RbWuHsS+4iEFXVPe7YzssIlRFKG45lRbDRvRf3r/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKvGHeWsRCKe+VPDDPNISlidKC7kwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzU5YjNhN2Q2LTI2ZDQtNDgwOS05YmI2LTU0ZDhlYWY4N2NmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgfwQwDQYJKoZIhvcNAQELBQADggEBACnMsCwgC9Bd9gahpzUSq3bP4+KS Le25EXjTRYV6iEcnDi8O7y9DnGxV4M2MMfvKLQ2HLGHZ4EkwZDnJU26PE0s8HW7y d+S8iZJXkpL+C/f/ZCfpHUvvaKRx/mEqF8QlE/OBsCNrPkkLHGUwBsGRzu386Age XAZDg0d0bU02C0J8VyII6k0ndRC08qRnVHbJMluCjKtj7EOvXijvumtY0OHaexJU VZKhucM9LktvTfvQo1VyIfXg9wwU+Ck5W2f7w2SyDycuZvF7HD7Hud/zzMq1QGUY OXAdIjy2fYBXjh1qhwF2el6w/0Nwb72gYbrONkznSorQfPsiNbjKWofniJU= -----END CERTIFICATE-----Generated at Sun Mar 1 23:35:34 2026 by rpki-client