$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa File: 1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa (raw, json) Hash identifier: T0OPNpWfMa73Uci4n0E2yicr28rdaCeaUot5ZYzSjjg= Subject key identifier: 35:49:2E:60:90:18:69:C1:DE:71:1F:D2:D7:BE:D8:A6:B5:4F:29:11 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5E982009EC2014C3BD832C3225F890BD70968EA1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa Signing time: Sat 28 Feb 2026 04:31:02 +0000 ROA not before: Sat 28 Feb 2026 04:31:02 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:f03e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:98:20:09:ec:20:14:c3:bd:83:2c:32:25:f8:90:bd:70:96:8e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:31:02 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=d64e07e271779703f9c66d270fa1a4e3f099b36991606af37584cf38d47affc3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:3a:28:90:a7:33:00:5d:05:8b:24:a2:77: 34:42:3d:fa:5c:cc:26:f2:9b:62:65:35:57:38:3b: c7:94:8d:41:5c:38:3d:19:df:f2:fc:34:4b:41:b1: 08:0c:98:3f:15:3d:c0:e6:b9:41:c5:ce:b0:be:9c: a3:f2:be:f8:b5:e7:90:24:09:29:8c:e3:6a:ce:4f: c0:2e:4d:84:e9:2f:e4:1a:ec:ea:0e:aa:12:ba:92: 30:ab:c1:3b:19:80:58:d9:fa:58:9d:29:1b:9e:51: 96:d0:a9:42:8f:e2:51:6a:5c:2e:9a:49:55:7b:2e: 94:9d:5e:ec:50:db:16:d0:89:bb:37:42:6c:bc:e3: 61:bc:f3:38:fb:71:6d:89:de:52:87:c3:79:c0:5e: 86:d7:a7:ed:3a:ee:11:7b:93:94:29:1a:9f:ed:73: d4:8b:b3:88:77:49:f7:60:c7:6a:7b:18:82:b4:86: 1c:cf:ec:8d:60:ab:51:8d:ea:51:9f:1c:1a:7b:53: 45:d5:9a:cb:7e:2a:92:1f:08:b1:1e:4f:7a:23:1b: 4e:74:30:84:ee:14:81:10:ce:fc:b4:62:bc:9c:91: 65:92:23:a9:ce:15:21:75:3c:51:e5:aa:6f:9a:cb: c9:70:ed:92:0e:29:e0:c2:62:4d:74:3e:32:fc:c4: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:49:2E:60:90:18:69:C1:DE:71:1F:D2:D7:BE:D8:A6:B5:4F:29:11 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03e::/48 Signature Algorithm: sha256WithRSAEncryption 3b:e8:8c:55:e5:75:f3:ed:b5:3a:ca:60:12:cb:16:04:c7:cd: 95:a4:0c:94:1b:8a:2e:f7:d2:d8:d7:5f:69:3c:02:36:81:de: 79:d9:de:08:17:34:89:7a:4b:90:8e:a4:af:bd:65:b7:4f:6d: 4f:70:8c:3d:cf:3a:e3:20:0a:6b:54:0d:ae:ce:4e:cd:2a:df: 04:4b:46:d6:10:21:ae:a5:3a:d0:7a:b8:33:24:a6:3a:48:03: e3:1c:1b:c9:3e:d6:55:7b:7e:41:a2:e5:42:c9:95:d1:d9:4d: 28:e1:67:79:c1:3f:e4:ce:ee:6f:d6:0d:e0:3b:26:d9:89:02: d2:02:d9:06:34:ff:92:59:02:2d:c4:b3:a9:5e:a6:26:aa:f2: 2b:c2:f2:25:96:3a:dc:4e:02:e6:82:8a:15:13:64:41:dc:ec: d4:92:7b:03:09:86:f7:f5:7f:72:28:97:f7:18:7a:e7:f9:8a: 4d:59:37:be:d0:f5:a0:4f:66:1d:89:ea:3c:08:01:cb:fc:f9: 3e:ae:6a:9e:de:af:4a:f6:3b:5f:da:66:1f:61:54:b1:a0:e2: e7:0c:eb:6e:06:60:65:1e:b7:25:b2:cd:12:04:7a:04:44:56: 79:34:03:bf:0d:d0:08:e9:bc:d1:5e:35:f4:4b:f6:0a:eb:dd: d5:c9:d2:0f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXpggCewgFMO9gywyJfiQvXCWjqEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQzMTAyWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjRlMDdlMjcxNzc5NzAzZjljNjZkMjcwZmExYTRlM2Yw OTliMzY5OTE2MDZhZjM3NTg0Y2YzOGQ0N2FmZmMzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5cTookKczAF0FiySidzRCPfpczCbym2JlNVc4O8eUjUFc OD0Z3/L8NEtBsQgMmD8VPcDmuUHFzrC+nKPyvvi155AkCSmM42rOT8AuTYTpL+Qa 7OoOqhK6kjCrwTsZgFjZ+lidKRueUZbQqUKP4lFqXC6aSVV7LpSdXuxQ2xbQibs3 Qmy842G88zj7cW2J3lKHw3nAXobXp+067hF7k5QpGp/tc9SLs4h3Sfdgx2p7GIK0 hhzP7I1gq1GN6lGfHBp7U0XVmst+KpIfCLEeT3ojG050MITuFIEQzvy0YryckWWS I6nOFSF1PFHlqm+ay8lw7ZIOKeDCYk10PjL8xAoVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNUkuYJAYacHecR/S177YprVPKREwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFmZGQxZjVkLWNhMmEtNDBiNy04NTE2LThlOGI3NGUwZWFjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D4wDQYJKoZIhvcNAQELBQADggEBADvojFXldfPttTrKYBLLFgTH zZWkDJQbii730tjXX2k8AjaB3nnZ3ggXNIl6S5COpK+9ZbdPbU9wjD3POuMgCmtU Da7OTs0q3wRLRtYQIa6lOtB6uDMkpjpIA+McG8k+1lV7fkGi5ULJldHZTSjhZ3nB P+TO7m/WDeA7JtmJAtIC2QY0/5JZAi3Es6lepiaq8ivC8iWWOtxOAuaCihUTZEHc 7NSSewMJhvf1f3Iol/cYeuf5ik1ZN77Q9aBPZh2J6jwIAcv8+T6uap7er0r2O1/a Zh9hVLGg4ucM624GYGUetyWyzRIEegREVnk0A78N0AjpvNFeNfRL9grr3dXJ0g8= -----END CERTIFICATE-----Generated at Mon Mar 2 03:02:18 2026 by rpki-client