$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/25b4b762-234e-4d63-9f1b-49bdd82029e1.roa File: 25b4b762-234e-4d63-9f1b-49bdd82029e1.roa (raw, json) Hash identifier: 874VFfwdJMNbjaqI+9xIrNDpMWre8wpUfhCL4smFSnw= Subject key identifier: C2:77:EA:AF:08:98:6C:37:A8:88:D9:C8:71:B5:38:F9:35:EB:2E:95 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 420CDCF60EAEF15A79CDEB90FE5D80C2E961EC12 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/25b4b762-234e-4d63-9f1b-49bdd82029e1.roa Signing time: Sat 28 Feb 2026 04:50:22 +0000 ROA not before: Sat 28 Feb 2026 04:50:22 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:386::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0c:dc:f6:0e:ae:f1:5a:79:cd:eb:90:fe:5d:80:c2:e9:61:ec:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:50:22 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=b6dd5cbdc2967f650b964172c5cf15919b6c96c15f6b578dbb14371c1024eb31, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:dd:43:ec:9d:9a:56:16:54:80:b2:27:fd:05: e0:95:33:c1:33:f3:5b:52:9a:93:0c:c2:65:46:a4: 49:ae:ac:2c:af:09:7f:c6:33:45:8a:66:d4:46:5a: d6:8d:e4:60:8e:a0:05:18:9f:88:4e:94:c5:18:f3: 39:b8:0c:10:67:e3:45:f6:0d:aa:77:37:f4:d3:d3: 66:d1:59:c8:5c:31:ec:41:29:3a:80:0d:f9:1a:f4: 94:cf:8f:1e:08:74:2a:f1:e4:c3:25:78:9c:34:69: 5e:75:17:49:55:72:09:96:ae:d4:3d:b9:37:f2:01: 2a:c8:58:59:99:ff:df:3f:f5:e1:04:6d:84:31:3f: cd:98:0b:42:76:69:85:54:c7:e9:5f:7e:29:64:20: c2:77:97:1c:41:f5:68:31:9f:06:0b:c0:78:a7:cf: 02:5b:8a:d5:0d:20:be:5c:7f:47:b5:41:65:75:bd: 8c:19:38:cf:e9:0f:7f:9e:1b:a3:97:15:8f:4d:d8: a3:bf:84:1f:41:37:2a:68:7b:d1:98:0e:21:0b:18: 5a:0a:62:8d:ec:6b:ec:1e:19:9c:ac:f2:e6:b7:c8: 26:65:4b:6a:88:4c:02:b2:71:46:b4:b5:20:b3:11: 6a:3e:b0:1f:1e:c3:a5:6f:82:22:cc:7b:b7:6f:9e: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:77:EA:AF:08:98:6C:37:A8:88:D9:C8:71:B5:38:F9:35:EB:2E:95 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/25b4b762-234e-4d63-9f1b-49bdd82029e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:386::/48 Signature Algorithm: sha256WithRSAEncryption 07:88:7c:21:70:e9:31:20:1a:85:4b:b9:2f:6c:22:df:2a:53: 2f:0d:ac:a6:f4:c2:1d:e4:e1:c7:47:27:4e:53:e8:dc:99:5c: bb:2e:d5:c8:1c:67:86:43:81:82:8c:f1:94:7c:c3:a1:a0:28: 57:3b:a0:dd:43:21:c5:52:57:84:dd:11:cb:98:77:00:7f:62: 27:72:89:a3:96:70:f2:20:9c:fc:6c:23:4f:fd:67:9e:cd:9d: 1b:fc:48:25:65:7b:92:c5:42:4d:68:ec:02:37:b0:c5:83:3a: cf:e9:27:dd:2b:4f:5a:1c:17:80:4e:1b:85:91:c6:8c:34:ea: d8:45:3a:35:a1:f8:17:65:8c:d2:e9:dc:6e:5b:e1:ec:ef:5d: 9c:2e:cd:1d:bd:a9:85:db:4a:0f:91:a2:13:91:12:b1:77:f1: 1b:a1:8b:b4:9d:72:11:51:13:0f:9c:66:26:f9:87:f8:a5:e5: 2b:ee:d6:0f:a3:5d:a0:08:4d:5f:78:d0:7f:1a:25:08:4c:d5: e2:5b:0f:51:f2:bf:60:02:52:e5:c3:f9:27:63:85:7b:ba:54: e3:45:98:ae:70:92:10:a4:f6:7e:bb:0c:84:0e:6a:96:cd:3e: 69:7b:b6:df:b7:17:b3:28:d5:f2:5d:03:1d:fe:9d:87:06:19: 7b:4b:76:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQgzc9g6u8Vp5zeuQ/l2Awulh7BIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQ1MDIyWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmRkNWNiZGMyOTY3ZjY1MGI5NjQxNzJjNWNmMTU5MTli NmM5NmMxNWY2YjU3OGRiYjE0MzcxYzEwMjRlYjMxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD33UPsnZpWFlSAsif9BeCVM8Ez81tSmpMMwmVGpEmurCyv CX/GM0WKZtRGWtaN5GCOoAUYn4hOlMUY8zm4DBBn40X2Dap3N/TT02bRWchcMexB KTqADfka9JTPjx4IdCrx5MMleJw0aV51F0lVcgmWrtQ9uTfyASrIWFmZ/98/9eEE bYQxP82YC0J2aYVUx+lffilkIMJ3lxxB9WgxnwYLwHinzwJbitUNIL5cf0e1QWV1 vYwZOM/pD3+eG6OXFY9N2KO/hB9BNypoe9GYDiELGFoKYo3sa+weGZys8ua3yCZl S2qITAKycUa0tSCzEWo+sB8ew6VvgiLMe7dvnsN9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwnfqrwiYbDeoiNnIcbU4+TXrLpUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI1YjRiNzYyLTIzNGUtNGQ2My05ZjFiLTQ5YmRkODIwMjllMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4YwDQYJKoZIhvcNAQELBQADggEBAAeIfCFw6TEgGoVLuS9sIt8q Uy8NrKb0wh3k4cdHJ05T6NyZXLsu1cgcZ4ZDgYKM8ZR8w6GgKFc7oN1DIcVSV4Td EcuYdwB/YidyiaOWcPIgnPxsI0/9Z57NnRv8SCVle5LFQk1o7AI3sMWDOs/pJ90r T1ocF4BOG4WRxow06thFOjWh+BdljNLp3G5b4ezvXZwuzR29qYXbSg+RohORErF3 8Ruhi7SdchFREw+cZib5h/il5Svu1g+jXaAITV940H8aJQhM1eJbD1Hyv2ACUuXD +SdjhXu6VONFmK5wkhCk9n67DIQOapbNPml7tt+3F7Mo1fJdAx3+nYcGGXtLdpY= -----END CERTIFICATE-----Generated at Sun Mar 1 21:52:32 2026 by rpki-client