$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa File: 02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa (raw, json) Hash identifier: bmz3Epv+DHKC8Pprv234ZmAJdWS69KmQQVDUksGEtkg= Subject key identifier: A7:7E:2E:24:F1:B1:91:D5:1D:D1:C4:6A:C8:CB:36:95:6C:C1:04:20 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4020DCC518DA0BA092AA80FA5CE71FC41EEAA32C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa Signing time: Tue 17 Feb 2026 02:30:20 +0000 ROA not before: Tue 17 Feb 2026 02:30:20 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:20:dc:c5:18:da:0b:a0:92:aa:80:fa:5c:e7:1f:c4:1e:ea:a3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 17 02:30:20 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=784348808f0a81d2cff34f10d51e97c009fd157288044e357f79a47fe6412cb4, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:d7:5a:c7:40:d3:d4:12:7b:35:47:03:27: 02:7d:b3:ca:72:d8:8a:b8:ed:59:63:3b:6c:dc:55: 06:b6:99:98:39:11:68:73:8b:67:52:3e:74:14:0f: 70:ea:4a:64:52:82:cd:db:53:a6:72:87:dc:85:67: 59:40:5e:5d:22:e7:04:20:18:94:eb:c8:36:0d:c5: e6:49:ec:c5:97:66:bf:b8:f7:00:af:a6:72:8b:f1: be:7a:b7:57:32:e0:79:b4:d9:f0:b7:4f:9b:00:dc: bb:37:cd:f0:ae:79:62:f5:42:2d:e0:c5:26:98:d8: 38:b4:73:90:0b:fb:cd:93:fc:29:fb:6e:b8:ca:18: 93:40:d0:3b:de:33:dd:38:cb:bc:05:3c:13:0d:77: 96:a8:06:61:a3:72:b7:13:26:aa:9c:33:7c:4b:ff: 5c:b7:d3:dc:f0:c9:ff:7a:0e:6f:c6:51:05:7d:72: f4:8b:eb:18:1d:65:a2:6b:98:c0:2f:07:8a:73:77: 9f:37:32:cf:f5:ad:83:33:f4:b6:a8:7c:f2:24:8b: 00:4d:94:07:a0:54:ad:cf:4e:2e:48:09:89:87:62: 9e:fc:ef:e0:e0:39:34:47:0b:2d:6f:91:13:25:77: 8a:a4:e9:ff:db:44:17:53:3b:55:5c:c8:e6:cb:8c: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7E:2E:24:F1:B1:91:D5:1D:D1:C4:6A:C8:CB:36:95:6C:C1:04:20 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/02dd0cf1-fdbe-4766-ad6f-3102791e6256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c05::/48 Signature Algorithm: sha256WithRSAEncryption 04:18:97:56:05:9d:e5:bc:09:46:88:f9:70:3f:3a:92:86:9b: fd:eb:dc:28:01:86:16:6a:59:1f:4a:85:29:73:45:55:2c:3d: f9:95:53:e3:06:9a:ab:93:a6:fc:a5:94:81:c7:53:29:08:47: 7b:a5:de:6c:70:06:3b:93:fe:f3:a0:3d:e2:e5:9c:ba:80:1e: 93:ac:13:fc:1c:47:31:7e:47:ed:f0:b3:05:73:b3:45:b4:90: b2:c6:f3:53:2b:04:ec:d8:47:15:79:97:72:7e:23:c3:8b:92: 8d:61:a8:d8:be:5a:5d:cc:2d:a5:ee:b7:61:7b:31:f6:16:a5: f5:72:e0:fa:77:c4:0e:7d:36:79:48:26:9b:bc:c5:d0:c7:8a: 9c:e8:5c:17:92:dd:99:e6:04:ff:64:db:12:5d:63:27:29:83: 88:45:0a:cf:b9:20:7c:ed:19:21:33:82:69:bc:d2:03:2e:a8: 22:49:14:74:06:e9:6d:9d:2a:47:e1:03:67:ac:9d:06:a5:ae: 41:3d:28:a8:0a:17:fe:85:c8:2f:79:4f:45:ea:f7:4f:a0:22: 21:39:f8:9f:b3:b2:88:19:73:93:db:74:9a:f2:e2:fe:d6:a6: a5:80:f1:cb:8e:b8:eb:41:54:1d:78:0e:f7:fc:32:5e:4e:a9: a1:6f:36:bb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQCDcxRjaC6CSqoD6XOcfxB7qoywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjE3MDIzMDIwWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODQzNDg4MDhmMGE4MWQyY2ZmMzRmMTBkNTFlOTdjMDA5 ZmQxNTcyODgwNDRlMzU3Zjc5YTQ3ZmU2NDEyY2I0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1W9dax0DT1BJ7NUcDJwJ9s8py2Iq47VljO2zcVQa2mZg5 EWhzi2dSPnQUD3DqSmRSgs3bU6Zyh9yFZ1lAXl0i5wQgGJTryDYNxeZJ7MWXZr+4 9wCvpnKL8b56t1cy4Hm02fC3T5sA3Ls3zfCueWL1Qi3gxSaY2Di0c5AL+82T/Cn7 brjKGJNA0DveM904y7wFPBMNd5aoBmGjcrcTJqqcM3xL/1y309zwyf96Dm/GUQV9 cvSL6xgdZaJrmMAvB4pzd583Ms/1rYMz9LaofPIkiwBNlAegVK3PTi5ICYmHYp78 7+DgOTRHCy1vkRMld4qk6f/bRBdTO1VcyObLjDTrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUp34uJPGxkdUd0cRqyMs2lWzBBCAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzAyZGQwY2YxLWZkYmUtNDc2Ni1hZDZmLTMxMDI3OTFlNjI1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAUwDQYJKoZIhvcNAQELBQADggEBAAQYl1YFneW8CUaI+XA/OpKG m/3r3CgBhhZqWR9KhSlzRVUsPfmVU+MGmquTpvyllIHHUykIR3ul3mxwBjuT/vOg PeLlnLqAHpOsE/wcRzF+R+3wswVzs0W0kLLG81MrBOzYRxV5l3J+I8OLko1hqNi+ Wl3MLaXut2F7MfYWpfVy4Pp3xA59NnlIJpu8xdDHipzoXBeS3ZnmBP9k2xJdYycp g4hFCs+5IHztGSEzgmm80gMuqCJJFHQG6W2dKkfhA2esnQalrkE9KKgKF/6FyC95 T0Xq90+gIiE5+J+zsogZc5PbdJry4v7WpqWA8cuOuOtBVB14Dvf8Ml5OqaFvNrs= -----END CERTIFICATE-----Generated at Mon Mar 2 03:48:35 2026 by rpki-client