$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f5ab890-0b33-4f1f-a004-6f2779e23026.roa File: 1f5ab890-0b33-4f1f-a004-6f2779e23026.roa (raw, json) Hash identifier: oBIPvPwm0e/hbmuID5ExUPvx94Zof7YLYc3s+b89jRI= Subject key identifier: 45:83:E6:36:27:FA:96:EE:41:DF:4F:5E:E8:7F:15:C2:96:DA:7C:3D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 32AAACDA92423811DF50601FC86697EE4B68B9CF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f5ab890-0b33-4f1f-a004-6f2779e23026.roa Signing time: Tue 24 Feb 2026 00:20:08 +0000 ROA not before: Tue 24 Feb 2026 00:20:08 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:aa:ac:da:92:42:38:11:df:50:60:1f:c8:66:97:ee:4b:68:b9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 24 00:20:08 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=76f46a165c3251f6644f9074f156be71f3028e0e62626f2667c3e4ad048972b8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:24:dd:28:14:a9:aa:09:20:76:54:7b:e3: be:92:bc:eb:b0:61:53:84:49:0f:f8:64:aa:dd:2c: 81:60:52:c9:d7:86:7b:23:d9:9f:19:35:89:01:af: 05:be:2b:f3:f6:b5:d7:07:59:08:f4:7e:01:49:47: ea:b2:8e:81:e7:0c:c7:55:bb:1b:4f:95:38:5f:49: 7f:4e:95:14:16:38:5b:49:7b:81:4d:a9:2a:55:80: ba:dd:8b:8e:37:bb:6b:87:70:39:4e:ee:b4:c7:c6: 36:3c:d3:f9:25:13:a8:05:7f:2d:23:34:95:41:a4: c3:17:d0:71:fd:cd:63:cc:9c:e8:da:43:42:cd:b2: 20:3e:c8:87:bb:46:bd:98:89:9e:2f:e4:54:04:3a: cd:0c:3f:a0:46:85:0e:d2:99:30:92:ef:5d:51:13: 8a:61:ff:19:88:79:2c:9b:04:f3:65:83:3f:87:0b: f1:41:39:83:b2:f1:57:c4:38:b8:5e:20:c9:34:3a: c3:9c:73:a5:ac:e2:c1:6f:ae:7d:43:ec:b1:48:a8: a6:0f:d9:24:83:b0:db:8e:57:12:ea:06:59:4b:00: 27:09:dc:d1:05:d5:98:fd:ad:8b:0a:7e:20:5a:32: 73:f3:65:1b:37:8c:03:ee:81:13:d5:16:31:ce:18: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:83:E6:36:27:FA:96:EE:41:DF:4F:5E:E8:7F:15:C2:96:DA:7C:3D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1f5ab890-0b33-4f1f-a004-6f2779e23026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3cc::/48 Signature Algorithm: sha256WithRSAEncryption 42:17:fc:16:2e:6c:71:4d:74:1b:99:c7:d6:be:4c:f9:5b:71: f6:6f:73:b7:9b:f5:53:60:5a:68:d6:c2:5e:9e:27:d2:85:62: 3c:31:f0:91:57:92:ab:5b:f1:0b:52:08:ee:10:b1:5e:a6:eb: 3b:c7:d3:94:25:2e:e9:e8:cf:b4:0e:ff:77:e1:26:a3:31:8e: 05:02:7e:71:3c:89:48:35:43:3d:b2:7d:b5:ec:02:5f:ba:99: cf:ce:31:64:15:7f:40:5e:d7:06:37:fc:18:05:fa:be:9a:4f: 22:9a:b5:5e:74:6a:c7:a7:b2:6d:5c:8b:0d:89:2d:91:78:55: af:7b:70:22:5f:d5:b6:26:20:65:b4:28:2b:ea:68:ad:59:44: ce:fd:09:64:70:37:d6:7d:2b:2f:dd:4f:33:76:70:51:e1:b2: 05:22:46:35:17:f3:26:d4:bd:39:b9:c1:a4:7c:04:93:95:9a: 32:60:a7:a1:85:8e:dd:9e:41:29:fa:c5:38:5b:7c:c7:ca:ea: 47:bf:3e:cf:a0:a2:8c:0e:89:95:6a:f4:7c:26:2b:91:0b:a0: 23:ac:be:23:8e:3c:50:fc:ef:df:e3:a7:a2:d5:39:20:e1:fa: dd:d6:01:2e:94:a8:3c:87:f4:dc:eb:a8:22:2a:72:6a:ed:ca: 22:5e:5f:92 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMqqs2pJCOBHfUGAfyGaX7ktouc8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI0MDAyMDA4WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmY0NmExNjVjMzI1MWY2NjQ0ZjkwNzRmMTU2YmU3MWYz MDI4ZTBlNjI2MjZmMjY2N2MzZTRhZDA0ODk3MmI4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCynSTdKBSpqgkgdlR7476SvOuwYVOESQ/4ZKrdLIFgUsnX hnsj2Z8ZNYkBrwW+K/P2tdcHWQj0fgFJR+qyjoHnDMdVuxtPlThfSX9OlRQWOFtJ e4FNqSpVgLrdi443u2uHcDlO7rTHxjY80/klE6gFfy0jNJVBpMMX0HH9zWPMnOja Q0LNsiA+yIe7Rr2YiZ4v5FQEOs0MP6BGhQ7SmTCS711RE4ph/xmIeSybBPNlgz+H C/FBOYOy8VfEOLheIMk0OsOcc6Ws4sFvrn1D7LFIqKYP2SSDsNuOVxLqBllLACcJ 3NEF1Zj9rYsKfiBaMnPzZRs3jAPugRPVFjHOGKnlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURYPmNif6lu5B309e6H8VwpbafD0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFmNWFiODkwLTBiMzMtNGYxZi1hMDA0LTZmMjc3OWUyMzAyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8wwDQYJKoZIhvcNAQELBQADggEBAEIX/BYubHFNdBuZx9a+TPlb cfZvc7eb9VNgWmjWwl6eJ9KFYjwx8JFXkqtb8QtSCO4QsV6m6zvH05QlLunoz7QO /3fhJqMxjgUCfnE8iUg1Qz2yfbXsAl+6mc/OMWQVf0Be1wY3/BgF+r6aTyKatV50 asensm1ciw2JLZF4Va97cCJf1bYmIGW0KCvqaK1ZRM79CWRwN9Z9Ky/dTzN2cFHh sgUiRjUX8ybUvTm5waR8BJOVmjJgp6GFjt2eQSn6xThbfMfK6ke/Ps+goowOiZVq 9HwmK5ELoCOsviOOPFD879/jp6LVOSDh+t3WAS6UqDyH9NzrqCIqcmrtyiJeX5I= -----END CERTIFICATE-----Generated at Sun Mar 1 21:55:13 2026 by rpki-client