$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa File: 5ab304f6-e1e5-467a-88a2-103320530506.roa (raw, json) Hash identifier: TsDyuNi9vshSB0Pk6poNqCQCDUKGWzQrP46IarqG6W8= Subject key identifier: 5F:20:4A:79:E2:87:3E:DC:09:FA:33:67:BA:57:62:B6:F1:83:B3:C8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4456C37C72797D8971C91199A33D1053494AED9B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa Signing time: Sat 28 Feb 2026 04:30:37 +0000 ROA not before: Sat 28 Feb 2026 04:30:37 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:627::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:56:c3:7c:72:79:7d:89:71:c9:11:99:a3:3d:10:53:49:4a:ed:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:30:37 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=a2f2d3ace36639e8feaa1ec3b64113bdbbf461966fea33cec0f3c4ff98b747fd, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:65:c8:11:fc:26:b6:2c:34:6d:48:8e:a0: b0:00:b7:e4:83:f1:6b:8a:dc:1c:88:d9:ec:b1:52: 0a:e2:43:56:9b:43:fa:5c:8f:35:98:06:46:66:40: 65:b4:33:4c:ae:47:e8:f8:cb:66:ad:84:d2:ed:f0: 41:40:d4:0b:d8:3d:08:32:72:53:ab:9a:f4:72:ad: a2:90:d4:58:29:bd:58:50:33:8a:3b:33:6a:44:28: d2:b9:7e:0f:e3:17:77:51:15:25:56:8e:0e:d7:38: 21:79:f0:87:c6:a6:b2:e0:d0:2a:2a:6d:04:b5:c4: f6:30:c8:f1:35:92:57:60:7b:40:74:94:2f:e4:a6: b6:24:17:ba:bf:df:9e:ed:69:e7:6b:c5:8d:c9:e9: 6d:89:71:0b:02:d1:04:ac:26:88:98:1a:6a:cd:83: b8:e9:d1:c0:9f:f7:93:2a:02:2b:8b:99:50:b9:fa: 57:47:cd:28:23:1e:83:87:f6:98:c3:97:9d:1d:76: f9:1d:af:5f:bc:de:f1:27:a9:e1:ff:6d:7b:b7:db: 92:02:b2:d6:5b:b9:3a:50:bd:b6:fd:88:e3:3d:a1: 35:dc:8c:81:43:c2:70:3d:dd:5e:b5:a3:df:56:cb: 95:7c:1e:78:2b:6c:b7:58:c5:e9:92:63:41:ac:db: 16:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:20:4A:79:E2:87:3E:DC:09:FA:33:67:BA:57:62:B6:F1:83:B3:C8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:627::/48 Signature Algorithm: sha256WithRSAEncryption 9e:07:5e:d7:21:77:a8:fb:3a:c7:fd:33:03:e2:a3:4f:27:f8: 69:71:1b:cf:e9:29:64:0e:bf:b7:52:d0:54:b0:c2:95:52:34: d4:7f:88:5c:27:25:8c:77:1c:b9:92:8a:1a:fd:20:c7:ab:68: 81:e1:81:47:85:c8:1d:56:4f:ba:54:21:55:f5:f7:4f:48:9c: 6b:80:82:70:77:4d:e5:43:7a:e2:91:48:d1:b9:4c:55:a9:53: d8:ff:b4:48:d6:b8:42:da:7d:10:5c:a6:14:9a:e3:81:2a:af: 53:c7:a7:76:29:36:34:90:52:b6:06:5b:48:1a:5c:80:ee:d3: 9e:5d:68:5e:7e:c3:eb:c6:fa:29:1e:b3:4f:cd:96:51:0c:f1: 46:b4:96:19:16:8d:22:5a:22:cb:2b:f7:6c:74:94:f9:83:3a: a5:79:95:f7:dd:8a:8f:57:de:f1:d0:96:2a:47:32:81:34:90: 14:f8:b8:c7:95:f1:93:6b:4b:6b:4e:46:09:0b:15:f6:50:04: cf:89:66:e5:83:bc:52:a6:b9:f2:2d:d7:02:26:ba:6e:b4:7a: db:19:cb:8c:04:41:46:32:35:75:ce:79:fe:40:36:10:e3:db: c9:dc:84:7d:55:a2:54:6f:5b:a9:52:d2:47:2f:65:1e:5c:16: 25:9c:32:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURFbDfHJ5fYlxyRGZoz0QU0lK7ZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQzMDM3WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmYyZDNhY2UzNjYzOWU4ZmVhYTFlYzNiNjQxMTNiZGJi ZjQ2MTk2NmZlYTMzY2VjMGYzYzRmZjk4Yjc0N2ZkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7J2XIEfwmtiw0bUiOoLAAt+SD8WuK3ByI2eyxUgriQ1ab Q/pcjzWYBkZmQGW0M0yuR+j4y2athNLt8EFA1AvYPQgyclOrmvRyraKQ1FgpvVhQ M4o7M2pEKNK5fg/jF3dRFSVWjg7XOCF58IfGprLg0CoqbQS1xPYwyPE1kldge0B0 lC/kprYkF7q/357taedrxY3J6W2JcQsC0QSsJoiYGmrNg7jp0cCf95MqAiuLmVC5 +ldHzSgjHoOH9pjDl50ddvkdr1+83vEnqeH/bXu325ICstZbuTpQvbb9iOM9oTXc jIFDwnA93V61o99Wy5V8HngrbLdYxemSY0Gs2xaRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXyBKeeKHPtwJ+jNnulditvGDs8gwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVhYjMwNGY2LWUxZTUtNDY3YS04OGEyLTEwMzMyMDUzMDUwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABicwDQYJKoZIhvcNAQELBQADggEBAJ4HXtchd6j7Osf9MwPio08n +GlxG8/pKWQOv7dS0FSwwpVSNNR/iFwnJYx3HLmSihr9IMeraIHhgUeFyB1WT7pU IVX1909InGuAgnB3TeVDeuKRSNG5TFWpU9j/tEjWuELafRBcphSa44Eqr1PHp3Yp NjSQUrYGW0gaXIDu055daF5+w+vG+ikes0/NllEM8Ua0lhkWjSJaIssr92x0lPmD OqV5lffdio9X3vHQlipHMoE0kBT4uMeV8ZNrS2tORgkLFfZQBM+JZuWDvFKmufIt 1wImum60etsZy4wEQUYyNXXOef5ANhDj28nchH1VolRvW6lS0kcvZR5cFiWcMrI= -----END CERTIFICATE-----Generated at Sun Mar 1 21:49:45 2026 by rpki-client