$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3870e4ea-48ad-4bbd-a2bb-d643d1b032d5.roa File: 3870e4ea-48ad-4bbd-a2bb-d643d1b032d5.roa (raw, json) Hash identifier: pSZ2oUT9z1SFPddCSmLP3MQg1kK82UAf9/iR3R6z2jk= Subject key identifier: 1B:66:E4:28:3B:F8:C1:71:42:65:AE:1F:84:15:A8:94:66:6C:61:E5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4F38405BC90C8526531B1AA10DDA424D17EC92CC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3870e4ea-48ad-4bbd-a2bb-d643d1b032d5.roa Signing time: Wed 25 Feb 2026 00:20:07 +0000 ROA not before: Wed 25 Feb 2026 00:20:07 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:38:40:5b:c9:0c:85:26:53:1b:1a:a1:0d:da:42:4d:17:ec:92:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 25 00:20:07 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=98143568132018216cb9f1c4df2095d0f375a323581dbad14f653f1a352fb6b5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:04:f0:6a:ee:55:36:63:e0:cf:03:af:f5: 5c:87:5d:37:5d:07:4f:c1:23:a3:0a:fd:59:9a:23: 7d:fe:7a:18:7d:44:c4:a4:e6:98:e9:93:3d:a6:83: 84:e2:78:f9:2c:40:67:1f:85:f8:f1:e4:71:8c:07: 5a:16:b3:83:2d:eb:50:a1:ee:e8:a7:c1:28:e5:cb: c9:5f:a6:b5:2d:00:82:71:00:5b:28:d3:e5:cf:94: 01:ce:3f:dd:47:d2:a5:11:aa:0e:42:35:36:43:8a: f3:62:f6:a1:c5:9e:d6:c4:6e:57:20:d9:b8:ba:6d: 9e:90:9f:ba:38:b1:79:33:be:91:2a:49:5f:0c:05: d0:13:9c:c5:02:71:95:80:b3:f2:5a:fc:55:0d:47: 3c:e9:02:bd:2c:af:ed:0d:e1:f5:92:79:69:72:54: 4c:61:2d:ba:25:7a:44:4d:24:4a:60:61:df:9e:36: 70:cf:c0:b6:19:18:48:ce:9a:5e:36:94:f5:24:f3: fe:86:91:15:b3:2a:78:a6:37:54:2b:7e:24:18:69: 18:f3:52:b7:66:33:76:cb:be:f8:bb:b0:53:40:94: 7c:e0:4f:39:99:a5:8f:91:87:e5:8f:20:ef:45:21: e6:14:e1:04:d7:69:ed:c1:da:c7:d7:c7:88:4a:34: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:66:E4:28:3B:F8:C1:71:42:65:AE:1F:84:15:A8:94:66:6C:61:E5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3870e4ea-48ad-4bbd-a2bb-d643d1b032d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3d4::/48 Signature Algorithm: sha256WithRSAEncryption 92:57:68:59:6d:e1:85:cd:53:5f:ea:4e:ce:bf:2f:21:b7:30: 5b:89:a6:20:38:3b:dc:70:f9:57:90:e5:b0:64:88:f3:af:9a: 3b:8f:1d:fa:7a:89:b8:4e:4d:d9:f0:34:5d:22:59:d5:16:e7: f3:7a:7d:10:d6:64:c6:f3:cc:cf:66:de:a6:2a:41:4c:51:e5: 1c:2d:06:3e:ec:5a:5a:36:ec:a1:6f:61:56:64:6b:89:13:9b: 1c:13:f0:6a:0d:40:2e:60:00:59:23:67:fe:c8:9b:cf:9b:c6: c6:d1:72:f6:41:b1:62:a4:39:d3:30:fd:22:55:78:00:26:e8: ce:5c:48:7b:93:40:4a:af:77:db:67:73:53:2d:2a:cc:c5:1e: 68:f3:98:64:57:76:28:7e:39:8a:65:e8:65:0d:a5:fb:ae:06: e7:e1:29:c4:f5:3e:c8:31:95:76:18:0e:da:0e:f5:01:77:30: 4f:de:c9:9e:92:32:68:18:06:d9:e1:e9:5e:88:ae:f8:7e:c0: 8b:35:1b:3b:08:d4:7d:8c:3f:65:18:5f:88:4e:bd:be:8b:c8: 79:26:94:c2:3b:d0:92:e5:73:8e:d8:2c:3f:95:60:57:70:29: 8a:9d:5d:aa:ab:a0:c3:df:d7:1a:2a:88:59:5d:ee:ee:74:3d: 27:bb:43:f2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTzhAW8kMhSZTGxqhDdpCTRfskswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI1MDAyMDA3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODE0MzU2ODEzMjAxODIxNmNiOWYxYzRkZjIwOTVkMGYz NzVhMzIzNTgxZGJhZDE0ZjY1M2YxYTM1MmZiNmI1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFygTwau5VNmPgzwOv9VyHXTddB0/BI6MK/VmaI33+ehh9 RMSk5pjpkz2mg4TiePksQGcfhfjx5HGMB1oWs4Mt61Ch7uinwSjly8lfprUtAIJx AFso0+XPlAHOP91H0qURqg5CNTZDivNi9qHFntbEblcg2bi6bZ6Qn7o4sXkzvpEq SV8MBdATnMUCcZWAs/Ja/FUNRzzpAr0sr+0N4fWSeWlyVExhLbolekRNJEpgYd+e NnDPwLYZGEjOml42lPUk8/6GkRWzKnimN1QrfiQYaRjzUrdmM3bLvvi7sFNAlHzg TzmZpY+Rh+WPIO9FIeYU4QTXae3B2sfXx4hKNAc3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUG2bkKDv4wXFCZa4fhBWolGZsYeUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM4NzBlNGVhLTQ4YWQtNGJiZC1hMmJiLWQ2NDNkMWIwMzJkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA9QwDQYJKoZIhvcNAQELBQADggEBAJJXaFlt4YXNU1/qTs6/LyG3 MFuJpiA4O9xw+VeQ5bBkiPOvmjuPHfp6ibhOTdnwNF0iWdUW5/N6fRDWZMbzzM9m 3qYqQUxR5RwtBj7sWlo27KFvYVZka4kTmxwT8GoNQC5gAFkjZ/7Im8+bxsbRcvZB sWKkOdMw/SJVeAAm6M5cSHuTQEqvd9tnc1MtKszFHmjzmGRXdih+OYpl6GUNpfuu BufhKcT1PsgxlXYYDtoO9QF3ME/eyZ6SMmgYBtnh6V6Irvh+wIs1GzsI1H2MP2UY X4hOvb6LyHkmlMI70JLlc47YLD+VYFdwKYqdXaqroMPf1xoqiFld7u50PSe7Q/I= -----END CERTIFICATE-----Generated at Mon Mar 2 02:10:30 2026 by rpki-client