$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa File: 9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa (raw, json) Hash identifier: dh+vlI8RSOmCGHBM1LNjfWPIFDzMopuNFRD7WDsZ0as= Subject key identifier: F2:02:5E:80:26:19:D7:AB:97:ED:22:FD:C3:A5:0D:FA:FB:79:AB:E2 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 01F05B1401744439D7460B103C489AB19FB55C88 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa Signing time: Sat 28 Feb 2026 00:50:44 +0000 ROA not before: Sat 28 Feb 2026 00:50:44 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f0:5b:14:01:74:44:39:d7:46:0b:10:3c:48:9a:b1:9f:b5:5c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Feb 28 00:50:44 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=560c71fc1425bf8b0d58a38e5016a6cccff59c374a9696de9a86e02a8dda0050, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:62:e4:6d:98:89:58:d5:9e:1a:37:fc:24: fb:c4:4c:37:7a:66:23:81:d2:c9:48:d2:f8:b5:c6: a0:22:7d:45:6e:23:67:47:fd:d4:8b:69:5a:a6:55: 82:07:20:96:7b:9f:47:58:7f:6e:4c:d0:da:ad:82: c8:c8:3f:f7:f5:03:f2:8a:46:e1:e4:07:33:af:75: f5:d8:2e:88:59:b5:2f:9c:c4:2d:db:31:17:c2:42: 80:73:71:f1:09:c5:81:60:bf:12:8d:f4:48:24:4d: ad:68:e2:73:74:b0:a4:2e:fe:f5:19:38:ff:25:7f: 26:b0:5e:75:08:1e:e9:6e:f1:53:4e:b0:0b:e7:fb: 1c:ca:93:e6:5e:ba:bd:79:52:2b:1d:98:85:d5:3f: 11:28:bd:85:d1:d7:86:a0:29:cc:48:3b:5e:dc:ee: 91:26:a6:1e:f0:f2:80:e3:db:b9:88:4b:b1:4a:64: 78:e1:4e:41:69:58:79:09:8f:1d:05:15:b7:6e:e1: ce:e8:c6:01:65:dd:7e:ec:39:09:39:fe:50:f9:a2: 85:16:00:14:15:29:a7:99:b6:99:31:43:cd:ee:3b: b5:60:fd:f7:9f:b7:fa:5f:ac:76:ec:59:b4:d3:03: f1:33:83:de:e9:d7:d7:f3:04:ff:4f:88:1c:8b:d4: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:02:5E:80:26:19:D7:AB:97:ED:22:FD:C3:A5:0D:FA:FB:79:AB:E2 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.2.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:2a:86:25:33:02:d6:89:9f:7e:c8:46:de:89:f3:0a:29:5d: ab:8d:ae:35:63:9a:05:66:94:39:36:ab:46:d2:f5:40:e5:6c: d2:08:ac:b9:cc:a6:d1:4f:e1:71:9e:c4:56:30:80:e0:2b:9f: 3c:d2:6b:61:50:b8:bc:19:ff:40:53:b6:4d:68:38:64:98:73: 79:20:1d:3e:53:aa:2e:a2:7f:52:b0:30:e2:88:8b:fc:28:07: c1:35:fc:2f:44:65:17:41:fe:55:d1:7b:c1:60:f4:e1:62:e8: b7:b4:f3:e9:2f:00:4f:64:8c:06:f3:1d:c9:92:85:8f:0e:b0: a5:d8:2b:34:5c:b8:7c:4f:ea:9f:ee:ab:05:ca:f0:7c:59:5a: f5:f6:1c:e4:60:9c:e3:c1:e1:3c:8e:1a:9f:e1:20:02:17:8d: 39:f0:b8:56:95:98:7e:e0:0f:a2:13:e4:ac:7a:bb:9a:3b:9b: dd:b8:62:00:53:6e:19:4d:1b:e5:08:89:32:3f:fe:2a:45:28: 63:c4:e9:b9:ee:0b:96:12:a2:b2:df:ed:70:79:a1:27:0d:e8: 27:23:a5:79:29:d1:fc:5c:4d:90:35:cf:70:05:dd:9e:1c:a1: 7c:b0:34:58:17:93:4d:5d:83:7b:f9:5a:dd:78:d6:04:30:14: bf:cb:87:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAfBbFAF0RDnXRgsQPEiasZ+1XIgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwMjI4MDA1MDQ0WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjBjNzFmYzE0MjViZjhiMGQ1OGEzOGU1MDE2YTZjY2Nm ZjU5YzM3NGE5Njk2ZGU5YTg2ZTAyYThkZGEwMDUwMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeVmLkbZiJWNWeGjf8JPvETDd6ZiOB0slI0vi1xqAifUVu I2dH/dSLaVqmVYIHIJZ7n0dYf25M0NqtgsjIP/f1A/KKRuHkBzOvdfXYLohZtS+c xC3bMRfCQoBzcfEJxYFgvxKN9EgkTa1o4nN0sKQu/vUZOP8lfyawXnUIHulu8VNO sAvn+xzKk+Zeur15UisdmIXVPxEovYXR14agKcxIO17c7pEmph7w8oDj27mIS7FK ZHjhTkFpWHkJjx0FFbdu4c7oxgFl3X7sOQk5/lD5ooUWABQVKaeZtpkxQ83uO7Vg /feft/pfrHbsWbTTA/Ezg97p19fzBP9PiByL1NG7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8gJegCYZ16uX7SL9w6UN+vt5q+IwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzllMWU0N2UwLTNiMmYtNDFhYy04MGFkLTliMDhkNDM1M2ZkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFgfwIwDQYJKoZIhvcNAQELBQADggEBAB4qhiUzAtaJn37IRt6J8wopXauN rjVjmgVmlDk2q0bS9UDlbNIIrLnMptFP4XGexFYwgOArnzzSa2FQuLwZ/0BTtk1o OGSYc3kgHT5Tqi6if1KwMOKIi/woB8E1/C9EZRdB/lXRe8Fg9OFi6Le08+kvAE9k jAbzHcmShY8OsKXYKzRcuHxP6p/uqwXK8HxZWvX2HORgnOPB4TyOGp/hIAIXjTnw uFaVmH7gD6IT5Kx6u5o7m924YgBTbhlNG+UIiTI//ipFKGPE6bnuC5YSorLf7XB5 oScN6CcjpXkp0fxcTZA1z3AF3Z4coXywNFgXk01dg3v5Wt141gQwFL/Lh2w= -----END CERTIFICATE-----Generated at Mon Mar 2 07:56:28 2026 by rpki-client