$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa File: 3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa (raw, json) Hash identifier: kK8QqTiWvGm9rCWprzNvVt1F2Vvf1gGwRMb2Vncmtps= Subject key identifier: 06:C7:3F:43:0F:7B:EB:E5:17:9F:BE:76:7D:8F:1F:D0:E8:70:32:FA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 76401A817F6A4A139C212F722292D1A8CEEC4FCF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa Signing time: Sat 28 Feb 2026 04:50:05 +0000 ROA not before: Sat 28 Feb 2026 04:50:05 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c24::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:40:1a:81:7f:6a:4a:13:9c:21:2f:72:22:92:d1:a8:ce:ec:4f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:50:05 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=614df29051bf2ce38803a1ff5912e8d187267a240f3ccec20f6f57ab618d32f3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:13:43:83:75:9d:4a:5d:96:03:b4:db:be: 16:13:71:7d:43:c5:50:cb:43:31:08:a7:1d:cd:d5: fe:70:45:5d:04:7a:07:d8:bc:b6:00:60:63:5d:ca: ea:e0:aa:b0:7d:64:29:04:cb:4b:25:90:8f:27:5d: bd:be:73:be:61:bf:29:bc:76:71:9a:83:86:40:bd: bc:cd:7f:ef:a0:9b:b5:88:35:58:54:b8:f0:27:62: 1f:bb:b0:9f:d3:b0:5b:e5:b4:97:6b:6f:7c:5c:13: 3b:3d:0c:99:9a:b7:4d:3a:0a:5f:83:26:4e:75:09: 65:25:10:e1:ae:51:e7:ed:31:f9:42:92:b9:bc:87: 4c:a7:8f:b3:9e:bf:78:12:e9:de:2a:93:92:e7:2f: 39:22:48:70:86:52:29:1c:9d:e2:6b:36:2b:2c:2c: 2b:f5:5a:ad:0f:e6:48:f7:e4:07:3f:c1:13:6c:10: 4e:f5:91:f6:0a:9c:d9:0b:b6:2f:24:23:2d:8e:05: 29:18:f1:dd:81:4c:09:d8:0a:5b:7f:77:7e:ce:50: 24:9a:7c:bc:5c:f4:3e:99:82:19:92:22:38:fd:12: bc:0b:a8:bf:2c:8b:90:06:67:3e:05:70:2a:fc:7b: 97:2a:3d:28:6a:7d:5b:ce:e0:a6:97:c3:ff:a7:88: 68:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C7:3F:43:0F:7B:EB:E5:17:9F:BE:76:7D:8F:1F:D0:E8:70:32:FA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c24::/46 Signature Algorithm: sha256WithRSAEncryption 43:11:ce:bf:71:30:f3:1a:a0:d6:f0:33:d7:5a:bc:9b:e5:ee: 9a:28:36:68:95:38:4a:f7:5b:95:74:ba:7a:69:37:11:16:9c: 44:a8:f6:26:76:b5:e7:e2:1e:bb:c1:88:7b:86:f4:fc:74:79: 4a:f2:77:4a:b0:42:1f:90:0b:33:80:7d:c1:2c:89:b9:d8:12: f4:e9:54:e4:91:93:b0:5b:86:cf:55:8d:d0:13:cf:e7:58:72: 53:57:2e:18:0b:8e:82:66:84:4f:4c:03:3c:1d:f6:c7:eb:f7: 7e:f2:5c:e7:d7:17:7e:dd:17:78:fb:fb:d2:3b:84:54:3a:9d: 79:4e:51:01:80:f6:30:b7:d8:c9:d6:83:32:9e:01:17:14:79: f1:c3:ff:d4:49:4c:b1:b9:34:3b:6d:48:0b:75:05:49:2a:e1: fa:19:79:df:41:1b:8f:87:26:c0:6f:57:7f:5b:27:cc:da:67: 12:d5:1d:ee:77:7e:91:d3:bf:63:e4:11:40:ac:06:af:4c:c9: c9:12:ae:cf:ca:05:4f:ae:27:07:2f:28:b9:ad:17:df:cb:76: 84:39:e7:71:a2:8d:72:01:dc:5f:53:5a:bb:82:e1:83:c5:1c: 65:87:c7:4d:8c:a7:8e:a0:ce:9c:26:95:8b:32:e6:f9:0c:1b: 29:10:e4:44 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdkAagX9qShOcIS9yIpLRqM7sT88wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQ1MDA1WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTRkZjI5MDUxYmYyY2UzODgwM2ExZmY1OTEyZThkMTg3 MjY3YTI0MGYzY2NlYzIwZjZmNTdhYjYxOGQzMmYzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm6hNDg3WdSl2WA7TbvhYTcX1DxVDLQzEIpx3N1f5wRV0E egfYvLYAYGNdyurgqrB9ZCkEy0slkI8nXb2+c75hvym8dnGag4ZAvbzNf++gm7WI NVhUuPAnYh+7sJ/TsFvltJdrb3xcEzs9DJmat006Cl+DJk51CWUlEOGuUeftMflC krm8h0ynj7Oev3gS6d4qk5LnLzkiSHCGUikcneJrNissLCv1Wq0P5kj35Ac/wRNs EE71kfYKnNkLti8kIy2OBSkY8d2BTAnYClt/d37OUCSafLxc9D6ZghmSIjj9ErwL qL8si5AGZz4FcCr8e5cqPShqfVvO4KaXw/+niGhtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBsc/Qw976+UXn752fY8f0OhwMvowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzNkOTFmZDk1LTE5OWQtNDFkZC05YjY3LWRiNzQ5NWNlM2QxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImBZzADCQwDQYJKoZIhvcNAQELBQADggEBAEMRzr9xMPMaoNbwM9davJvl 7pooNmiVOEr3W5V0unppNxEWnESo9iZ2tefiHrvBiHuG9Px0eUryd0qwQh+QCzOA fcEsibnYEvTpVOSRk7Bbhs9VjdATz+dYclNXLhgLjoJmhE9MAzwd9sfr937yXOfX F37dF3j7+9I7hFQ6nXlOUQGA9jC32MnWgzKeARcUefHD/9RJTLG5NDttSAt1BUkq 4foZed9BG4+HJsBvV39bJ8zaZxLVHe53fpHTv2PkEUCsBq9MyckSrs/KBU+uJwcv KLmtF9/LdoQ553GijXIB3F9TWruC4YPFHGWHx02Mp46gzpwmlYsy5vkMGykQ5EQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:10:02 2026 by rpki-client