$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5664c850-a80d-4a7e-89b5-7e11c988b7e6.roa File: 5664c850-a80d-4a7e-89b5-7e11c988b7e6.roa (raw, json) Hash identifier: 9S1oFkyML9XJh7iLHHCAD148FrszkgfKB5Q/XlOUnUs= Subject key identifier: 75:33:03:20:F6:B6:2A:81:B0:FB:DC:D8:6B:43:E2:29:63:BF:19:F7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4BB8F59908503D4728E47C5109F2EDA85CCE1424 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5664c850-a80d-4a7e-89b5-7e11c988b7e6.roa Signing time: Sat 07 Feb 2026 00:00:32 +0000 ROA not before: Sat 07 Feb 2026 00:00:32 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b8:f5:99:08:50:3d:47:28:e4:7c:51:09:f2:ed:a8:5c:ce:14:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 7 00:00:32 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=b1e572a12a0a1f941d81dab0d78cffcb4798bc7c4c83dc1cc817b40ab880156d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:21:b3:12:cb:7f:f6:ba:2f:4f:95:2c:cf:05: 3b:89:03:51:21:db:44:ef:f3:37:aa:38:84:88:85: 60:1b:66:b1:9b:d2:9f:51:cc:f5:19:39:20:65:c7: e2:62:6e:3e:92:d1:2d:2e:eb:06:ed:b2:ad:35:0f: 9b:1e:d1:1d:9a:8e:9d:a4:ae:65:7e:42:2b:3c:21: f5:4f:e8:48:3e:7f:0b:dd:11:3e:08:8f:ae:e3:8a: e5:3a:d9:d4:30:28:18:6d:26:ca:18:6d:d2:0c:fc: 38:12:fe:8f:c0:8e:1e:47:d2:98:d9:4a:0a:c3:48: 93:e7:45:d8:c3:bb:a9:63:02:b4:da:d0:50:c2:60: 1b:5d:b8:6d:4c:68:61:80:55:0e:cf:a7:82:dd:27: 37:6f:63:cc:49:ed:8d:24:d2:c1:ef:b7:e3:e6:fd: 09:64:d9:61:77:b3:a5:45:df:b9:f3:d6:0e:cf:0a: 68:dd:9f:4b:9f:0c:d7:4c:61:4d:e6:ee:e3:a3:47: af:d7:f0:4c:4b:64:2e:33:83:c2:97:ed:e0:7a:cb: 5a:bd:c6:0e:93:b5:ce:6a:d7:20:dc:0e:5f:5d:2b: ed:4d:3f:68:24:13:9a:73:57:a3:6f:2c:c7:7e:a3: 52:e0:fe:6d:2f:51:a6:dd:1a:7d:7d:45:18:41:07: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:33:03:20:F6:B6:2A:81:B0:FB:DC:D8:6B:43:E2:29:63:BF:19:F7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5664c850-a80d-4a7e-89b5-7e11c988b7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c60::/44 Signature Algorithm: sha256WithRSAEncryption 52:49:67:c2:99:1c:69:26:91:48:89:e0:ca:1f:f2:a2:6a:48: f0:1d:7e:c5:55:05:52:6b:68:70:50:24:bd:82:08:f1:ce:b1: b4:68:84:b8:b6:41:9e:9f:17:d0:a3:b6:e1:0d:d0:aa:37:6d: cd:72:3c:ab:a1:a5:e0:2d:02:af:69:2c:d2:7a:82:3f:82:9a: d6:54:cc:62:48:2c:1e:12:83:28:52:b1:a8:be:3a:b6:9a:92: 92:e5:e2:45:2b:a5:64:11:b9:23:64:d1:a2:3d:57:2c:4c:b2: ba:bf:3b:5b:64:33:48:53:04:f3:8a:61:29:19:e0:cf:2e:47: c4:5b:0b:01:4c:79:6b:bc:88:ac:e8:bd:f8:34:cd:6f:30:7e: 54:2a:24:ae:53:e7:1d:c8:d0:56:4a:c0:fd:47:d4:8a:3c:ed: c4:d3:0d:16:e8:96:7c:9a:68:78:a7:17:eb:8e:84:bf:e1:8c: 12:b5:0f:b6:7d:da:0a:a2:a8:1d:46:ab:81:2d:f6:53:0d:6f: 13:bf:b0:d0:f7:ab:2f:81:38:7c:14:ac:ea:4e:6c:3d:c5:6c: 88:d8:e8:10:27:8c:b2:d0:d5:34:a2:f6:02:c7:80:74:c1:5a: 7e:68:d9:6f:79:92:b6:66:11:f8:c3:8b:4e:76:1b:a1:da:ff: 9c:28:66:00 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS7j1mQhQPUco5HxRCfLtqFzOFCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjA3MDAwMDMyWhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWU1NzJhMTJhMGExZjk0MWQ4MWRhYjBkNzhjZmZjYjQ3 OThiYzdjNGM4M2RjMWNjODE3YjQwYWI4ODAxNTZkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjIbMSy3/2ui9PlSzPBTuJA1Eh20Tv8zeqOISIhWAbZrGb 0p9RzPUZOSBlx+Jibj6S0S0u6wbtsq01D5se0R2ajp2krmV+Qis8IfVP6Eg+fwvd ET4Ij67jiuU62dQwKBhtJsoYbdIM/DgS/o/Ajh5H0pjZSgrDSJPnRdjDu6ljArTa 0FDCYBtduG1MaGGAVQ7Pp4LdJzdvY8xJ7Y0k0sHvt+Pm/Qlk2WF3s6VF37nz1g7P Cmjdn0ufDNdMYU3m7uOjR6/X8ExLZC4zg8KX7eB6y1q9xg6Ttc5q1yDcDl9dK+1N P2gkE5pzV6NvLMd+o1Lg/m0vUabdGn19RRhBB+zDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdTMDIPa2KoGw+9zYa0PiKWO/GfcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU2NjRjODUwLWE4MGQtNGE3ZS04OWI1LTdlMTFjOTg4YjdlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADGAwDQYJKoZIhvcNAQELBQADggEBAFJJZ8KZHGkmkUiJ4Mof8qJq SPAdfsVVBVJraHBQJL2CCPHOsbRohLi2QZ6fF9CjtuEN0Ko3bc1yPKuhpeAtAq9p LNJ6gj+CmtZUzGJILB4SgyhSsai+OraakpLl4kUrpWQRuSNk0aI9VyxMsrq/O1tk M0hTBPOKYSkZ4M8uR8RbCwFMeWu8iKzovfg0zW8wflQqJK5T5x3I0FZKwP1H1Io8 7cTTDRbolnyaaHinF+uOhL/hjBK1D7Z92gqiqB1Gq4Et9lMNbxO/sND3qy+BOHwU rOpObD3FbIjY6BAnjLLQ1TSi9gLHgHTBWn5o2W95krZmEfjDi052G6Ha/5woZgA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:48:21 2026 by rpki-client