$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa File: 4dac6043-34e0-4357-a5ac-4587a0261982.roa (raw, json) Hash identifier: 1eKsFzrwWdPKUZ3lCzAIsg9n70xCBiUumn/+vqoU2IQ= Subject key identifier: 89:01:11:E7:34:48:D1:14:71:38:63:BC:9B:E9:33:79:00:D2:FC:3F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 46B890731A2195AC7326294853F077762D30C58E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa Signing time: Sat 28 Feb 2026 04:30:59 +0000 ROA not before: Sat 28 Feb 2026 04:30:59 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:396::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b8:90:73:1a:21:95:ac:73:26:29:48:53:f0:77:76:2d:30:c5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:30:59 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=57031df1ba5b6d400bad901ec8ffa86d7f8d884eaa6b8814d9dc529ebe08e227, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d9:c2:f1:27:06:ce:53:01:41:25:67:c7:6c: 6b:49:3b:0d:a7:67:43:9e:7f:65:c5:fb:f5:4e:98: 75:58:c0:c7:b1:be:81:fa:3a:6b:d8:76:73:7a:84: 30:88:64:9c:06:ca:82:eb:8b:5e:d4:08:65:e2:f9: 0f:cd:d9:81:86:21:1f:5e:a0:ec:9d:27:06:25:60: 76:c8:c9:58:a9:6f:39:74:34:bc:99:14:78:da:d1: b6:f8:af:ed:e2:04:f7:1c:3a:d1:6a:5c:3e:03:1f: b7:0e:19:f3:75:4b:1f:a9:39:d9:3e:41:fc:5e:9a: c5:a1:b0:f0:83:54:c7:ed:13:00:c8:d8:d9:a5:c2: 33:5a:a9:b4:39:f9:d4:e7:8e:5f:67:12:5d:a3:93: f6:b5:49:22:e3:52:7e:4d:99:7a:2b:fb:38:a3:6f: 1f:15:62:3b:07:5c:ad:d8:84:51:78:87:88:db:0a: 35:1e:69:d0:b5:10:f0:80:c1:4f:a2:1a:98:ba:c6: 93:0e:a7:49:ac:5a:75:3e:63:1b:58:b1:3f:a3:06: fb:93:6b:f9:31:45:dc:e6:9f:d8:16:d5:47:16:1f: f2:3c:bf:b8:9b:5b:20:25:6d:d2:51:f3:81:f8:2e: ce:eb:b5:48:80:1d:61:90:8d:77:b5:67:2b:f0:e2: c1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:01:11:E7:34:48:D1:14:71:38:63:BC:9B:E9:33:79:00:D2:FC:3F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:396::/48 Signature Algorithm: sha256WithRSAEncryption 48:60:d1:99:81:b3:d7:94:be:4a:94:11:8c:6d:a2:3f:fd:f5: 21:c6:ae:8b:33:d0:44:a0:a7:14:c9:a3:35:33:f2:0d:06:6d: 54:67:d6:36:c6:cf:1e:12:c1:d5:7e:8d:63:6c:f7:6b:2e:3d: 9a:5a:21:34:4c:cc:95:83:52:78:d0:f7:c3:4e:48:50:69:4a: d6:a0:7c:56:8e:d8:a1:8b:33:c1:53:f5:55:d0:f5:db:f0:a3: 3a:5d:4d:38:22:44:f5:d9:0a:4b:17:75:2a:a5:8d:a5:99:d4: 2d:eb:f5:a9:8c:01:47:52:5a:a7:35:7c:40:26:3a:a1:ed:e4: 5c:38:ee:b4:50:a4:51:c6:34:bb:51:ca:5d:71:29:da:1b:81: b3:ae:a4:2b:9f:a9:ec:ba:96:47:bf:40:67:18:1e:5d:e6:67: cb:b4:07:5e:f9:cf:b3:38:ee:18:c0:fe:57:f6:4c:b0:6e:1f: c1:a5:23:dd:19:48:87:01:22:11:5b:7c:af:27:29:88:5c:96: da:d5:d9:a0:78:5e:36:56:e1:be:9a:33:06:2c:b4:a5:28:f5: 51:05:a9:24:ac:34:12:5a:37:08:55:76:d0:b8:f7:ed:63:66: 3f:e3:a5:35:e8:e0:21:89:06:5e:28:20:96:a2:aa:cd:00:a0: a7:a5:a2:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURriQcxohlaxzJilIU/B3di0wxY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQzMDU5WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzAzMWRmMWJhNWI2ZDQwMGJhZDkwMWVjOGZmYTg2ZDdm OGQ4ODRlYWE2Yjg4MTRkOWRjNTI5ZWJlMDhlMjI3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDp2cLxJwbOUwFBJWfHbGtJOw2nZ0Oef2XF+/VOmHVYwMex voH6OmvYdnN6hDCIZJwGyoLri17UCGXi+Q/N2YGGIR9eoOydJwYlYHbIyVipbzl0 NLyZFHja0bb4r+3iBPccOtFqXD4DH7cOGfN1Sx+pOdk+QfxemsWhsPCDVMftEwDI 2NmlwjNaqbQ5+dTnjl9nEl2jk/a1SSLjUn5NmXor+zijbx8VYjsHXK3YhFF4h4jb CjUeadC1EPCAwU+iGpi6xpMOp0msWnU+YxtYsT+jBvuTa/kxRdzmn9gW1UcWH/I8 v7ibWyAlbdJR84H4Ls7rtUiAHWGQjXe1Zyvw4sFfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiQER5zRI0RRxOGO8m+kzeQDS/D8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkYWM2MDQzLTM0ZTAtNDM1Ny1hNWFjLTQ1ODdhMDI2MTk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5YwDQYJKoZIhvcNAQELBQADggEBAEhg0ZmBs9eUvkqUEYxtoj/9 9SHGrosz0ESgpxTJozUz8g0GbVRn1jbGzx4SwdV+jWNs92suPZpaITRMzJWDUnjQ 98NOSFBpStagfFaO2KGLM8FT9VXQ9dvwozpdTTgiRPXZCksXdSqljaWZ1C3r9amM AUdSWqc1fEAmOqHt5Fw47rRQpFHGNLtRyl1xKdobgbOupCufqey6lke/QGcYHl3m Z8u0B175z7M47hjA/lf2TLBuH8GlI90ZSIcBIhFbfK8nKYhcltrV2aB4XjZW4b6a MwYstKUo9VEFqSSsNBJaNwhVdtC49+1jZj/jpTXo4CGJBl4oIJaiqs0AoKelohM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:34:42 2026 by rpki-client