$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a99bb631-adbf-4d7f-98df-c2f2c0ce7ebe.roa File: a99bb631-adbf-4d7f-98df-c2f2c0ce7ebe.roa (raw, json) Hash identifier: g2RCOri0KU3XPbDFXt7+lEb7f09UpjOALnhNiTwDNmA= Subject key identifier: 97:09:E1:60:50:08:82:A1:47:28:83:E8:7F:C3:83:35:0F:30:F2:55 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 59ED0BB432200EF371A4A542E0ADB2E0EF9CA541 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a99bb631-adbf-4d7f-98df-c2f2c0ce7ebe.roa Signing time: Sat 28 Feb 2026 04:31:00 +0000 ROA not before: Sat 28 Feb 2026 04:31:00 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:396::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ed:0b:b4:32:20:0e:f3:71:a4:a5:42:e0:ad:b2:e0:ef:9c:a5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:31:00 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=b8dc7d2d19a56e850ef852a615856c3e6353e8b14343343ad3038c2392700094, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:b7:ce:0e:38:42:b6:0f:93:1c:8e:f0:03: 96:9c:f1:3f:61:6b:66:c4:07:30:b4:e8:73:19:9b: 98:f2:88:8a:f3:bf:78:41:8e:eb:40:c4:dc:44:1f: d3:02:55:4d:ef:2b:fe:e2:70:8a:4f:82:9a:f2:af: 0d:15:5b:c1:d4:0a:6c:57:39:f6:cc:90:be:cc:8f: 9a:27:2c:9c:83:10:5b:63:eb:8b:0d:42:bc:2c:96: f3:df:d3:18:31:3c:01:f7:70:60:03:df:16:e7:81: a1:d6:a1:25:84:bf:ff:1b:d2:44:48:fe:56:3d:89: b7:fe:a5:41:fe:d5:9b:35:42:56:32:37:31:b7:f4: c2:17:36:ae:bc:cf:34:32:3c:ce:2b:15:e6:9d:6c: 7d:8d:3c:30:cd:03:09:e6:9e:e1:45:7c:88:82:e2: 54:4d:c8:4e:1d:84:7d:8c:fc:c3:a5:68:02:39:d5: 70:78:03:52:32:47:8f:b5:00:da:2a:52:68:f6:d2: 08:7d:8b:5c:c4:8c:28:19:3f:c3:60:af:28:75:d3: 50:fc:e1:24:cf:74:4e:6d:fd:57:df:ca:28:ee:30: b3:37:0e:6d:46:11:4a:4f:f6:80:7d:3f:b7:4c:36: e9:c1:f0:d1:43:f4:af:2f:c2:8a:a3:d6:ce:cf:cb: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:09:E1:60:50:08:82:A1:47:28:83:E8:7F:C3:83:35:0F:30:F2:55 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a99bb631-adbf-4d7f-98df-c2f2c0ce7ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:396::/48 Signature Algorithm: sha256WithRSAEncryption 81:55:46:37:50:a0:ce:eb:7d:d1:82:b4:aa:d6:f5:a8:33:b2: d5:9d:5e:88:3e:b0:a5:45:bf:99:d0:f2:90:71:54:08:a1:58: 69:b2:3c:23:d9:ee:bf:fa:5f:33:85:4e:ce:8b:8d:37:4f:c2: 41:7f:ad:a7:b3:36:8b:d3:e9:b8:be:60:35:83:27:e7:b2:ba: a6:1a:63:c8:a9:d4:ec:e2:95:1d:f4:b2:c5:80:37:3f:59:b2: 2e:05:42:ee:c2:8b:d7:6e:ba:dc:d8:6c:51:0c:93:33:5b:16: 9b:9c:d7:2c:f5:7a:fc:f0:4e:78:26:74:44:af:f9:3f:5a:48: 98:08:87:62:40:63:3a:48:85:ef:54:6d:c7:cb:c7:c6:23:34: eb:c4:53:76:b6:cd:ce:cb:2d:45:ff:9a:cc:4c:26:84:a9:89: 31:bb:af:e6:c9:78:be:10:10:cd:03:b8:e5:98:46:e3:c2:16: e3:83:fa:70:9c:f4:5e:86:05:b2:ec:63:f5:48:f9:6b:de:24: 9d:8c:b4:42:be:7b:8d:c5:52:36:f9:7c:63:3c:65:49:68:8b: 92:86:52:d7:e9:1e:17:7e:c6:35:2e:e5:89:fb:a8:88:bb:cb: 0f:89:e6:e3:c7:72:b7:c2:e8:fa:6b:47:2e:f1:51:e3:5a:66: 56:4d:63:53 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWe0LtDIgDvNxpKVC4K2y4O+cpUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQzMTAwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGRjN2QyZDE5YTU2ZTg1MGVmODUyYTYxNTg1NmMzZTYz NTNlOGIxNDM0MzM0M2FkMzAzOGMyMzkyNzAwMDk0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuorfODjhCtg+THI7wA5ac8T9ha2bEBzC06HMZm5jyiIrz v3hBjutAxNxEH9MCVU3vK/7icIpPgpryrw0VW8HUCmxXOfbMkL7Mj5onLJyDEFtj 64sNQrwslvPf0xgxPAH3cGAD3xbngaHWoSWEv/8b0kRI/lY9ibf+pUH+1Zs1QlYy NzG39MIXNq68zzQyPM4rFeadbH2NPDDNAwnmnuFFfIiC4lRNyE4dhH2M/MOlaAI5 1XB4A1IyR4+1ANoqUmj20gh9i1zEjCgZP8Ngryh101D84STPdE5t/VffyijuMLM3 Dm1GEUpP9oB9P7dMNunB8NFD9K8vwoqj1s7Pywj3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlwnhYFAIgqFHKIPof8ODNQ8w8lUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E5OWJiNjMxLWFkYmYtNGQ3Zi05OGRmLWMyZjJjMGNlN2ViZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5YwDQYJKoZIhvcNAQELBQADggEBAIFVRjdQoM7rfdGCtKrW9agz stWdXog+sKVFv5nQ8pBxVAihWGmyPCPZ7r/6XzOFTs6LjTdPwkF/raezNovT6bi+ YDWDJ+eyuqYaY8ip1OzilR30ssWANz9Zsi4FQu7Ci9duutzYbFEMkzNbFpuc1yz1 evzwTngmdESv+T9aSJgIh2JAYzpIhe9UbcfLx8YjNOvEU3a2zc7LLUX/msxMJoSp iTG7r+bJeL4QEM0DuOWYRuPCFuOD+nCc9F6GBbLsY/VI+WveJJ2MtEK+e43FUjb5 fGM8ZUloi5KGUtfpHhd+xjUu5Yn7qIi7yw+J5uPHcrfC6PprRy7xUeNaZlZNY1M= -----END CERTIFICATE-----Generated at Mon Mar 2 02:10:16 2026 by rpki-client