$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/00a20eb1-4ba3-4e14-b587-1b2f0ebdc6ec.roa File: 00a20eb1-4ba3-4e14-b587-1b2f0ebdc6ec.roa (raw, json) Hash identifier: fTmFWP52LFZthhYeBrjJ+isTwO6RpxwVQL5C2D17emk= Subject key identifier: D5:32:DC:83:3B:46:E0:B0:06:A2:0E:E3:52:DD:B6:3A:B0:9E:67:74 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 28A9604117E0B775DADE2606970C3138FF53E3CE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/00a20eb1-4ba3-4e14-b587-1b2f0ebdc6ec.roa Signing time: Tue 17 Feb 2026 02:50:53 +0000 ROA not before: Tue 17 Feb 2026 02:50:53 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a9:60:41:17:e0:b7:75:da:de:26:06:97:0c:31:38:ff:53:e3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 17 02:50:53 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=0aa67f430b60ceadd8cbeeafcf201214e5e1876e041fb90f2813bd30d1514b75, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:d5:f2:67:4f:cd:46:c6:c4:ad:d8:04:64: 6d:4b:67:8d:d9:8e:6b:58:d4:f2:48:53:7e:18:08: c5:ef:98:f8:3f:33:29:7a:62:ef:ec:f1:44:ca:fe: 5e:89:32:45:7c:64:36:ab:c3:4b:40:78:63:3b:5a: 1e:1f:44:34:46:49:25:07:b6:7a:1e:89:bd:22:cd: 6f:b8:8c:0e:33:e5:ec:e3:4b:89:e3:a6:ee:1e:b0: 63:03:3a:c7:84:7d:70:13:f7:0c:fb:ba:2a:a3:7a: 7d:f6:2e:85:46:35:00:69:73:dc:7d:88:37:9d:28: 05:fc:4b:91:9b:72:60:f7:5e:76:a8:ba:49:e5:97: 03:d3:61:f3:4c:31:79:e7:d7:40:ed:3d:71:74:32: 45:4e:3c:1e:0b:6d:fa:38:89:c0:c9:32:2f:f1:c1: d7:ef:e0:8b:b0:d5:c2:4a:88:c5:9f:2e:00:fd:87: 64:cb:e1:99:c3:da:d5:9c:97:2c:42:1f:f9:0b:5a: f6:ff:85:39:28:df:a9:72:b4:0a:c6:12:e3:87:43: 78:98:19:31:35:d9:33:c0:a7:16:ae:b9:c5:89:36: 58:37:51:b7:e7:5f:3e:2d:a9:bd:0f:92:8a:a9:44: 9b:e7:84:b5:f8:ca:a8:b2:05:52:d1:2d:88:1d:6e: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:32:DC:83:3B:46:E0:B0:06:A2:0E:E3:52:DD:B6:3A:B0:9E:67:74 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/00a20eb1-4ba3-4e14-b587-1b2f0ebdc6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c14::/48 Signature Algorithm: sha256WithRSAEncryption 91:a0:68:16:07:1a:75:94:de:13:5d:8b:2b:ef:e4:c8:9f:31: 8f:b0:a1:65:63:15:26:74:a7:40:3a:ab:ed:d6:5a:50:5a:03: c0:b7:94:8f:4e:42:39:be:c6:06:36:50:fd:ae:91:c5:97:f2: 0d:e4:13:63:9c:62:1b:30:13:79:c0:00:be:70:5c:76:92:1d: 86:83:99:67:17:0d:82:bc:77:9f:23:a4:2f:cb:47:7a:24:b4: c2:39:f5:f6:23:39:8e:99:6c:1b:1a:c8:18:9f:08:b9:c1:ed: 1d:fb:19:6d:4f:25:1e:f2:bc:91:da:fb:83:de:a7:d4:eb:1e: 7d:e8:af:dc:16:7e:df:8d:56:61:e9:f9:be:19:61:fc:86:fe: 93:62:62:78:b7:39:0e:43:ed:6a:42:9e:19:54:a2:5c:bd:7a: ba:56:48:be:d6:4e:f7:81:7e:4b:fc:1f:d2:d2:6d:05:77:d7: 3d:51:80:1e:6a:c0:ad:3c:21:eb:2c:81:be:bb:4d:e4:65:dc: 8f:a0:66:9e:27:a1:15:55:69:0e:d0:3c:1b:ef:02:84:ec:bc: a5:fd:ed:a4:00:1c:64:bf:c1:e6:7b:48:22:13:c3:6c:a8:fb: e1:2b:65:87:d6:7a:c0:22:28:4c:c1:bb:17:4c:94:ad:82:20: 05:2d:83:9d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKKlgQRfgt3Xa3iYGlwwxOP9T484wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjE3MDI1MDUzWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWE2N2Y0MzBiNjBjZWFkZDhjYmVlYWZjZjIwMTIxNGU1 ZTE4NzZlMDQxZmI5MGYyODEzYmQzMGQxNTE0Yjc1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyldXyZ0/NRsbErdgEZG1LZ43ZjmtY1PJIU34YCMXvmPg/ Myl6Yu/s8UTK/l6JMkV8ZDarw0tAeGM7Wh4fRDRGSSUHtnoeib0izW+4jA4z5ezj S4njpu4esGMDOseEfXAT9wz7uiqjen32LoVGNQBpc9x9iDedKAX8S5GbcmD3Xnao uknllwPTYfNMMXnn10DtPXF0MkVOPB4Lbfo4icDJMi/xwdfv4Iuw1cJKiMWfLgD9 h2TL4ZnD2tWclyxCH/kLWvb/hTko36lytArGEuOHQ3iYGTE12TPApxauucWJNlg3 UbfnXz4tqb0PkoqpRJvnhLX4yqiyBVLRLYgdbuDnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1TLcgztG4LAGog7jUt22OrCeZ3QwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzAwYTIwZWIxLTRiYTMtNGUxNC1iNTg3LTFiMmYwZWJkYzZlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBQwDQYJKoZIhvcNAQELBQADggEBAJGgaBYHGnWU3hNdiyvv5Mif MY+woWVjFSZ0p0A6q+3WWlBaA8C3lI9OQjm+xgY2UP2ukcWX8g3kE2OcYhswE3nA AL5wXHaSHYaDmWcXDYK8d58jpC/LR3oktMI59fYjOY6ZbBsayBifCLnB7R37GW1P JR7yvJHa+4Pep9TrHn3or9wWft+NVmHp+b4ZYfyG/pNiYni3OQ5D7WpCnhlUoly9 erpWSL7WTveBfkv8H9LSbQV31z1RgB5qwK08Iessgb67TeRl3I+gZp4noRVVaQ7Q PBvvAoTsvKX97aQAHGS/weZ7SCITw2yo++ErZYfWesAiKEzBuxdMlK2CIAUtg50= -----END CERTIFICATE-----Generated at Mon Mar 2 02:10:36 2026 by rpki-client