$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa File: 941f79ce-715f-49f4-a576-333c065d82c6.roa (raw, json) Hash identifier: i/w1k48VLlttnGBLsiCI3hYzRoo+G4HO0NeMG82kGGc= Subject key identifier: 0C:3B:E3:6A:2D:8B:2B:46:80:9A:79:E6:7C:71:A8:69:7C:01:31:35 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3E3BD418C651086D3A212947A54E4F77FAFA7C0E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa Signing time: Sat 28 Feb 2026 04:30:36 +0000 ROA not before: Sat 28 Feb 2026 04:30:36 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:3b:d4:18:c6:51:08:6d:3a:21:29:47:a5:4e:4f:77:fa:fa:7c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:30:36 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=00c546df8004a7f067def44c9fdd0d58f70e94179f0e7f97f31d4eead3b7a98a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:fc:cb:18:e6:18:d6:9f:94:f1:dd:ff:df: a2:a4:35:00:33:b9:b7:37:5f:f2:12:2e:bd:df:56: 9e:45:ab:ef:3a:cd:80:ec:7b:65:32:d3:50:eb:dc: 70:27:d4:2f:24:26:ff:65:0c:da:21:8e:34:63:de: 3d:19:20:b7:7c:76:fa:aa:74:39:a3:db:ee:57:7f: be:30:ab:b8:da:c5:ed:fe:06:bf:4a:62:6a:93:0e: 3d:c7:b5:92:43:4a:95:76:f2:bc:20:3f:57:31:66: 33:03:af:e4:e5:67:fd:70:90:28:02:a9:51:77:09: a1:d4:b0:7a:d2:ae:ec:25:aa:96:0e:53:34:ca:e6: 37:6a:66:44:e3:c5:bc:7f:1d:32:c8:08:cb:9c:9a: 6a:a4:71:26:c5:b1:10:72:db:39:db:43:9f:24:55: a8:ac:06:ae:58:46:71:10:46:08:ae:6c:6f:f0:84: c8:0d:f7:c5:5f:d4:20:03:3f:f0:c9:40:ae:c5:b0: 93:a8:f2:52:7d:29:d5:01:49:93:89:1a:d5:71:70: 99:6d:45:3b:ae:cf:04:3d:68:6f:99:0f:5e:b8:b2: d3:d0:8d:bf:42:a0:1c:30:4d:34:7e:b2:30:84:8f: 63:b0:fc:58:d7:ff:88:c8:6a:49:9a:2a:fd:45:b7: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3B:E3:6A:2D:8B:2B:46:80:9A:79:E6:7C:71:A8:69:7C:01:31:35 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 9c:82:04:1b:43:2c:68:e9:6f:fd:76:9a:0f:a3:24:53:23:49: a1:46:89:15:5a:fa:97:00:c5:6f:ea:43:db:92:d9:f9:41:ce: ef:cb:22:14:3e:1b:02:78:8a:04:60:30:19:7b:07:af:42:0f: f4:de:ce:44:f3:6c:4f:ce:d0:b6:83:b5:aa:d5:eb:2e:42:48: 96:8a:9c:91:70:4f:6d:11:6b:b8:61:d2:43:d7:84:47:cb:22: 10:f8:cf:03:9e:52:3c:3a:79:23:37:c6:56:c9:86:96:46:35: 8c:0c:9f:bc:9a:39:d3:2e:30:c2:b8:2b:89:6b:5e:2a:78:c5: 03:75:28:66:42:e5:1b:9b:d5:f2:1e:81:00:dd:e8:18:d9:12: 2c:4b:11:b9:38:83:d6:3b:6a:66:71:a2:22:3b:cb:9d:6b:af: 7e:11:64:96:6d:a4:6a:b7:4a:0d:c9:ac:7a:95:84:5e:b2:dd: ca:47:64:72:51:0c:16:6a:9b:74:f3:0c:87:23:9d:d6:78:e4: e8:8e:b8:c2:f6:c0:47:5b:e9:9c:61:a1:cb:64:f0:1d:42:f6: ec:6c:00:a9:82:21:68:4c:67:85:d5:b3:f8:ed:ba:9e:de:2f: 62:75:0c:5c:f8:ab:eb:75:64:98:a3:69:18:b2:78:c7:48:ff: 89:fa:f5:f3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPjvUGMZRCG06ISlHpU5Pd/r6fA4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQzMDM2WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGM1NDZkZjgwMDRhN2YwNjdkZWY0NGM5ZmRkMGQ1OGY3 MGU5NDE3OWYwZTdmOTdmMzFkNGVlYWQzYjdhOThhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5DfzLGOYY1p+U8d3/36KkNQAzubc3X/ISLr3fVp5Fq+86 zYDse2Uy01Dr3HAn1C8kJv9lDNohjjRj3j0ZILd8dvqqdDmj2+5Xf74wq7jaxe3+ Br9KYmqTDj3HtZJDSpV28rwgP1cxZjMDr+TlZ/1wkCgCqVF3CaHUsHrSruwlqpYO UzTK5jdqZkTjxbx/HTLICMucmmqkcSbFsRBy2znbQ58kVaisBq5YRnEQRgiubG/w hMgN98Vf1CADP/DJQK7FsJOo8lJ9KdUBSZOJGtVxcJltRTuuzwQ9aG+ZD164stPQ jb9CoBwwTTR+sjCEj2Ow/FjX/4jIakmaKv1FtyqfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDDvjai2LK0aAmnnmfHGoaXwBMTUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk0MWY3OWNlLTcxNWYtNDlmNC1hNTc2LTMzM2MwNjVkODJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBAJyCBBtDLGjpb/12mg+jJFMj SaFGiRVa+pcAxW/qQ9uS2flBzu/LIhQ+GwJ4igRgMBl7B69CD/TezkTzbE/O0LaD tarV6y5CSJaKnJFwT20Ra7hh0kPXhEfLIhD4zwOeUjw6eSM3xlbJhpZGNYwMn7ya OdMuMMK4K4lrXip4xQN1KGZC5Rub1fIegQDd6BjZEixLEbk4g9Y7amZxoiI7y51r r34RZJZtpGq3Sg3JrHqVhF6y3cpHZHJRDBZqm3TzDIcjndZ45OiOuML2wEdb6Zxh octk8B1C9uxsAKmCIWhMZ4XVs/jtup7eL2J1DFz4q+t1ZJijaRiyeMdI/4n69fM= -----END CERTIFICATE-----Generated at Mon Mar 2 03:48:33 2026 by rpki-client