$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89338d8b-8f81-4ddb-b184-90f1c5ca54ee.roa File: 89338d8b-8f81-4ddb-b184-90f1c5ca54ee.roa (raw, json) Hash identifier: rmHQ1wwQqKL1VJlbouCp2aaAxaeDriFweFUBxwynjhY= Subject key identifier: D5:FA:0A:77:C3:EF:9F:9F:67:9B:39:D1:AA:3E:78:36:9F:BC:F0:A6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 264A94309C8783CE7975FD6FD9C71B046006D0A3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89338d8b-8f81-4ddb-b184-90f1c5ca54ee.roa Signing time: Sat 28 Feb 2026 04:50:06 +0000 ROA not before: Sat 28 Feb 2026 04:50:06 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c24::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4a:94:30:9c:87:83:ce:79:75:fd:6f:d9:c7:1b:04:60:06:d0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:50:06 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=26ef78621a78b802b8d741b73b87a846a5ee30e9cae4f755f78e0ec23a49801d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:ad:c6:f1:c1:b7:07:f5:a4:d9:ea:2b:8c: 18:90:e8:dd:8b:47:b2:57:89:9d:a5:4d:c8:50:8d: 70:42:e1:aa:62:20:8b:76:74:e8:ec:91:45:13:94: 35:6f:d0:b8:9a:8b:d8:de:07:8e:61:cb:a5:f8:ae: af:61:9a:44:87:6f:1a:38:e8:09:9e:58:62:49:16: 0e:79:29:70:7b:3c:4e:7d:43:db:8c:89:c3:09:c3: a0:24:ec:bd:f8:f5:c8:c8:6f:42:50:fe:70:d3:72: 44:a8:52:82:19:fb:5f:19:c8:06:27:b1:b0:41:91: c4:20:6a:d8:f6:10:32:0d:5f:84:cc:5d:92:d3:5c: b6:14:a1:c0:0f:f6:eb:4d:fa:c5:73:10:e7:64:67: 54:f5:bc:36:9c:0c:12:45:0b:c5:b1:35:7f:79:97: b7:18:b3:84:0e:29:05:ba:35:90:f6:c6:e1:8e:d3: 88:1f:7a:c3:01:96:de:12:d6:dd:3b:1d:19:fa:be: 6b:7d:33:8c:25:cf:1d:18:99:5c:74:b3:a8:2f:ad: 7b:69:cf:90:90:14:10:09:9e:2c:61:f1:9b:62:ea: cb:c1:49:cd:8e:51:4a:b4:67:29:16:03:aa:fe:2c: e3:8c:bb:62:39:62:c6:5b:fb:07:a5:7f:d9:29:37: c2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FA:0A:77:C3:EF:9F:9F:67:9B:39:D1:AA:3E:78:36:9F:BC:F0:A6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89338d8b-8f81-4ddb-b184-90f1c5ca54ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c24::/46 Signature Algorithm: sha256WithRSAEncryption 5c:ec:6f:ea:ad:f3:01:af:4c:26:04:de:ad:6b:7d:91:f7:40: 02:cf:11:3d:84:b8:38:fb:93:b1:94:0c:1e:42:22:14:db:d0: 3d:24:12:04:a2:67:5d:cd:43:84:7b:7e:9f:f2:b6:e2:a1:41: 69:41:76:5d:0c:12:d4:e1:36:be:05:ca:94:1a:cf:c3:5b:95: a6:b4:28:4c:f2:4d:f1:e5:b0:b7:51:ae:17:84:66:2f:d3:2d: d9:09:2d:3f:08:70:4c:f8:da:58:37:c5:98:a5:57:32:19:10: e2:7f:50:7e:40:92:5d:08:4a:81:c4:d6:3c:fb:c4:ee:5b:33: a4:d3:02:1c:a8:c5:6a:f1:56:ab:f7:ec:8f:9c:eb:19:00:06: 96:89:b3:a9:8c:77:d3:cf:51:87:f0:95:f2:83:ad:4b:90:5e: 8e:b6:a9:e0:89:a2:8f:3e:6f:f5:8e:df:58:75:7c:9c:24:71: a5:49:ee:f4:46:12:44:83:90:b3:34:24:b5:6d:3c:24:b7:c4: 5b:d4:bb:a8:5e:b9:66:8f:3e:46:6d:88:24:f4:32:74:56:a7: e1:c4:5f:38:5e:2f:c1:c1:f3:cc:13:fd:46:5f:5c:dc:15:d8: 64:6d:eb:b4:cb:6c:c6:10:46:70:20:10:ed:2d:12:f8:8b:ea: 69:77:4d:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJkqUMJyHg855df1v2ccbBGAG0KMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQ1MDA2WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmVmNzg2MjFhNzhiODAyYjhkNzQxYjczYjg3YTg0NmE1 ZWUzMGU5Y2FlNGY3NTVmNzhlMGVjMjNhNDk4MDFkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDasa3G8cG3B/Wk2eorjBiQ6N2LR7JXiZ2lTchQjXBC4api IIt2dOjskUUTlDVv0Liai9jeB45hy6X4rq9hmkSHbxo46AmeWGJJFg55KXB7PE59 Q9uMicMJw6Ak7L349cjIb0JQ/nDTckSoUoIZ+18ZyAYnsbBBkcQgatj2EDINX4TM XZLTXLYUocAP9utN+sVzEOdkZ1T1vDacDBJFC8WxNX95l7cYs4QOKQW6NZD2xuGO 04gfesMBlt4S1t07HRn6vmt9M4wlzx0YmVx0s6gvrXtpz5CQFBAJnixh8Zti6svB Sc2OUUq0ZykWA6r+LOOMu2I5YsZb+welf9kpN8L1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1foKd8Pvn59nmznRqj54Np+88KYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg5MzM4ZDhiLThmODEtNGRkYi1iMTg0LTkwZjFjNWNhNTRlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImBZzADCQwDQYJKoZIhvcNAQELBQADggEBAFzsb+qt8wGvTCYE3q1rfZH3 QALPET2EuDj7k7GUDB5CIhTb0D0kEgSiZ13NQ4R7fp/ytuKhQWlBdl0MEtThNr4F ypQaz8Nblaa0KEzyTfHlsLdRrheEZi/TLdkJLT8IcEz42lg3xZilVzIZEOJ/UH5A kl0ISoHE1jz7xO5bM6TTAhyoxWrxVqv37I+c6xkABpaJs6mMd9PPUYfwlfKDrUuQ Xo62qeCJoo8+b/WO31h1fJwkcaVJ7vRGEkSDkLM0JLVtPCS3xFvUu6heuWaPPkZt iCT0MnRWp+HEXzheL8HB88wT/UZfXNwV2GRt67TLbMYQRnAgEO0tEviL6ml3TR0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:09:58 2026 by rpki-client