$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0ca2746d-3202-41d0-813a-04560f31627d.roa File: 0ca2746d-3202-41d0-813a-04560f31627d.roa (raw, json) Hash identifier: 8RLYtM8M6Bb45zhlfbB7SFTPxytDFovwwP8cKaTJitI= Subject key identifier: B8:DD:B5:08:EA:37:B0:2D:E1:5A:93:1B:51:C9:FC:0A:EC:E4:46:CA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 310C3CFB894BF8B8E1BBED52D6D21B241ACDE08B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0ca2746d-3202-41d0-813a-04560f31627d.roa Signing time: Tue 17 Feb 2026 02:30:19 +0000 ROA not before: Tue 17 Feb 2026 02:30:19 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0c:3c:fb:89:4b:f8:b8:e1:bb:ed:52:d6:d2:1b:24:1a:cd:e0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 17 02:30:19 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=d332968623ac0ca4c7b82a610e3fa87e059cc67fed58095acc0f2c0de2716113, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:fa:7a:00:f0:06:e9:bf:61:2f:2f:b7:5a: 11:4a:1f:d5:2a:00:15:41:44:6d:d8:67:9e:9a:b1: 77:3c:4d:65:dc:f1:09:19:d6:e1:27:72:98:d7:9d: b3:bf:ce:b3:87:df:fb:b3:fa:18:80:90:5e:2f:ed: 6f:90:14:69:d7:63:e7:ac:98:7c:76:b8:0f:ea:12: 16:ec:2a:e0:4f:68:91:3e:78:e3:8d:c7:56:2b:30: 52:47:25:6a:6a:92:54:c0:40:ed:14:82:b0:bd:0d: aa:c3:13:d6:9e:27:3d:0a:dc:fb:ba:8a:b9:70:55: 42:a4:9f:88:81:20:8c:06:cc:8c:2c:df:be:9c:34: 6d:c3:98:58:cb:aa:4f:28:c8:ef:b8:4d:fd:1d:7d: 16:d4:07:87:9f:ac:23:8a:dc:ba:5f:dc:5f:52:78: f3:49:de:2c:e1:33:32:51:64:a9:65:a4:78:33:d5: e0:f4:d0:92:27:54:c4:6e:43:23:16:c8:2c:dc:28: 28:e1:e8:61:48:4f:fd:ea:e9:1f:e8:32:7c:74:79: 88:81:ac:f8:07:54:79:61:03:0f:fd:1f:f0:03:8e: d5:56:8d:30:82:34:1b:97:a6:15:8f:b1:85:c0:db: 1b:90:84:1b:63:b6:4c:b2:52:97:15:a1:44:7f:0c: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DD:B5:08:EA:37:B0:2D:E1:5A:93:1B:51:C9:FC:0A:EC:E4:46:CA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0ca2746d-3202-41d0-813a-04560f31627d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c10::/48 Signature Algorithm: sha256WithRSAEncryption 65:60:09:76:4d:20:ea:25:3f:d6:35:fa:ee:07:89:75:e5:01: 0f:a7:50:2d:87:b6:ef:73:f0:39:10:ed:b7:a5:a1:85:a2:ac: cd:f6:4d:7e:be:ce:1c:b5:e6:c7:01:aa:d2:13:b3:82:2b:0c: 3a:b5:67:b8:ac:37:6a:0a:f7:d6:ea:8e:9a:0a:89:a6:08:3f: 59:cf:35:eb:7c:13:73:07:2e:0f:0c:70:e8:9d:36:5e:75:ac: 24:b5:e5:1a:bc:7c:30:82:e1:e5:46:c3:52:0e:ec:e5:db:46: 54:24:a2:45:5c:3e:85:5b:fd:20:a5:9a:ad:3a:1d:c0:2d:27: b7:b6:d0:bc:43:ad:f2:f1:01:37:01:31:6b:a0:97:49:3a:08: 73:f1:f3:c4:84:9c:b4:24:4d:21:6f:0f:dd:99:9b:99:5d:ae: 4d:ad:ad:3b:ef:1b:41:5e:d8:4d:ba:13:97:42:a5:66:11:bc: e5:6a:7a:04:e5:d1:62:3f:0c:9d:4e:32:d4:9c:a1:7a:22:71: 83:4c:c4:58:9b:68:67:20:99:2e:26:7b:e2:a1:62:f6:67:fc: 5c:0c:5a:33:c7:39:8e:ca:bb:8b:a2:c0:bc:3f:5a:4c:e2:d3: 0b:25:fb:f9:84:45:a8:8a:e8:12:49:2a:f7:c5:f5:35:04:f7: 05:60:5f:51 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMQw8+4lL+Ljhu+1S1tIbJBrN4IswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjE3MDIzMDE5WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzMyOTY4NjIzYWMwY2E0YzdiODJhNjEwZTNmYTg3ZTA1 OWNjNjdmZWQ1ODA5NWFjYzBmMmMwZGUyNzE2MTEzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkwfp6APAG6b9hLy+3WhFKH9UqABVBRG3YZ56asXc8TWXc 8QkZ1uEncpjXnbO/zrOH3/uz+hiAkF4v7W+QFGnXY+esmHx2uA/qEhbsKuBPaJE+ eOONx1YrMFJHJWpqklTAQO0UgrC9DarDE9aeJz0K3Pu6irlwVUKkn4iBIIwGzIws 376cNG3DmFjLqk8oyO+4Tf0dfRbUB4efrCOK3Lpf3F9SePNJ3izhMzJRZKllpHgz 1eD00JInVMRuQyMWyCzcKCjh6GFIT/3q6R/oMnx0eYiBrPgHVHlhAw/9H/ADjtVW jTCCNBuXphWPsYXA2xuQhBtjtkyyUpcVoUR/DLyTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuN21COo3sC3hWpMbUcn8CuzkRsowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBjYTI3NDZkLTMyMDItNDFkMC04MTNhLTA0NTYwZjMxNjI3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBAwDQYJKoZIhvcNAQELBQADggEBAGVgCXZNIOolP9Y1+u4HiXXl AQ+nUC2Htu9z8DkQ7beloYWirM32TX6+zhy15scBqtITs4IrDDq1Z7isN2oK99bq jpoKiaYIP1nPNet8E3MHLg8McOidNl51rCS15Rq8fDCC4eVGw1IO7OXbRlQkokVc PoVb/SClmq06HcAtJ7e20LxDrfLxATcBMWugl0k6CHPx88SEnLQkTSFvD92Zm5ld rk2trTvvG0Fe2E26E5dCpWYRvOVqegTl0WI/DJ1OMtScoXoicYNMxFibaGcgmS4m e+KhYvZn/FwMWjPHOY7Ku4uiwLw/Wkzi0wsl+/mERaiK6BJJKvfF9TUE9wVgX1E= -----END CERTIFICATE-----Generated at Sun Mar 1 23:38:07 2026 by rpki-client