$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa File: b2a4ddb8-c852-4876-b718-a984606f10af.roa (raw, json) Hash identifier: w0hr/K1ofxNuLxi/SvSJJLtLsKJGSLq0+IyhurjoqBE= Subject key identifier: 1E:10:1B:08:79:2F:1B:C0:57:3D:D4:3D:93:AB:89:F7:08:6F:54:E3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 24A539B6CD3ACE73818FCB4546033D9774993B2F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa Signing time: Tue 17 Feb 2026 02:40:13 +0000 ROA not before: Tue 17 Feb 2026 02:40:13 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a5:39:b6:cd:3a:ce:73:81:8f:cb:45:46:03:3d:97:74:99:3b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 17 02:40:13 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=2f621c9257510f917b1257a4f02cf4d1c9b53c1ec3e0869b60f80c7d93305393, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:d9:ec:d3:ff:80:9c:9d:91:07:de:1a:0d: b9:09:9f:a5:5e:f6:25:f2:59:55:8d:86:1a:a0:2a: d4:07:d0:51:cb:76:ed:55:62:6a:c2:a7:32:bb:36: 12:d7:2d:d1:25:7b:a4:6d:5c:77:d2:25:0d:fd:21: db:28:7b:14:c1:ba:83:c1:69:d7:47:a9:a0:50:af: ce:44:b9:cf:df:17:23:22:9c:03:fd:42:71:a2:ae: 2b:ae:10:64:26:4a:87:39:f2:fa:41:6b:fb:31:d5: ce:83:0e:24:5e:08:1a:5d:f6:08:53:60:03:60:9d: fe:43:1c:fc:5e:b1:1b:f9:f7:f8:62:41:6a:25:fc: 92:16:5f:cb:d5:76:3e:a0:26:8d:77:0f:12:c3:53: 19:a1:6b:af:37:73:5f:47:39:64:4d:36:38:75:f6: 80:b7:85:e5:b1:93:f8:93:4f:55:0a:17:9b:2f:05: 9e:4b:61:be:7a:1d:4b:77:3b:a9:2d:b7:82:c6:b7: f2:9b:22:96:91:0e:ed:15:95:74:ad:86:4d:7a:13: 13:a6:a1:78:48:9d:a1:46:6a:c3:82:46:75:90:f9: a7:6e:97:85:59:ea:92:88:54:2a:1a:d6:3c:c3:84: de:71:cb:6f:d5:bf:76:28:a8:16:ba:7d:31:ac:cd: 76:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:10:1B:08:79:2F:1B:C0:57:3D:D4:3D:93:AB:89:F7:08:6F:54:E3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0c::/48 Signature Algorithm: sha256WithRSAEncryption 18:24:10:40:25:0c:d9:96:cc:59:9b:b9:21:bf:bc:2c:0f:47: 63:d0:a7:4c:1e:86:0c:3d:42:3f:fe:31:9c:71:fb:38:bf:72: 34:a6:78:f3:e4:6c:bd:f6:66:33:15:5b:ec:64:c7:df:a9:01: 3d:cf:64:5f:43:2a:56:47:ac:e1:27:c5:1f:58:67:f2:0f:19: 0f:42:92:ca:f0:72:5c:e8:ca:0c:be:6e:c2:e7:12:d4:ca:cb: 55:de:88:6d:2c:97:13:f4:d6:1a:8b:25:94:80:43:be:63:96: a0:a1:b1:fd:f8:f4:f5:1c:23:d5:41:d6:4d:75:7a:87:7b:8c: 05:73:dd:69:0f:5d:2c:ad:c3:70:c0:f4:da:ea:5d:18:64:01: 58:ca:2a:7b:11:46:59:a8:d7:a9:ca:48:c5:1d:2c:0a:eb:e7: 7b:99:3b:97:72:90:66:5c:0b:7e:37:ac:8c:a7:da:12:90:a1: 5e:d0:d7:fc:cd:58:3b:36:e9:bd:10:bd:c0:a7:8a:64:66:45: d8:9c:44:98:2e:0a:2b:d2:4a:64:8f:94:e7:15:a1:4d:d3:a2: 09:41:7b:13:dc:ef:66:f8:54:90:ba:39:18:2c:76:4a:05:b5: a9:f4:b8:19:49:bc:84:39:49:cd:47:74:c1:d3:53:60:13:9a: 98:75:6b:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJKU5ts06znOBj8tFRgM9l3SZOy8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjE3MDI0MDEzWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjYyMWM5MjU3NTEwZjkxN2IxMjU3YTRmMDJjZjRkMWM5 YjUzYzFlYzNlMDg2OWI2MGY4MGM3ZDkzMzA1MzkzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9lNns0/+AnJ2RB94aDbkJn6Ve9iXyWVWNhhqgKtQH0FHL du1VYmrCpzK7NhLXLdEle6RtXHfSJQ39IdsoexTBuoPBaddHqaBQr85Euc/fFyMi nAP9QnGiriuuEGQmSoc58vpBa/sx1c6DDiReCBpd9ghTYANgnf5DHPxesRv59/hi QWol/JIWX8vVdj6gJo13DxLDUxmha683c19HOWRNNjh19oC3heWxk/iTT1UKF5sv BZ5LYb56HUt3O6ktt4LGt/KbIpaRDu0VlXSthk16ExOmoXhInaFGasOCRnWQ+adu l4VZ6pKIVCoa1jzDhN5xy2/Vv3YoqBa6fTGszXa7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHhAbCHkvG8BXPdQ9k6uJ9whvVOMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IyYTRkZGI4LWM4NTItNDg3Ni1iNzE4LWE5ODQ2MDZmMTBhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBABgkEEAlDNmWzFmbuSG/vCwP R2PQp0wehgw9Qj/+MZxx+zi/cjSmePPkbL32ZjMVW+xkx9+pAT3PZF9DKlZHrOEn xR9YZ/IPGQ9Cksrwclzoygy+bsLnEtTKy1XeiG0slxP01hqLJZSAQ75jlqChsf34 9PUcI9VB1k11eod7jAVz3WkPXSytw3DA9NrqXRhkAVjKKnsRRlmo16nKSMUdLArr 53uZO5dykGZcC343rIyn2hKQoV7Q1/zNWDs26b0QvcCnimRmRdicRJguCivSSmSP lOcVoU3ToglBexPc72b4VJC6ORgsdkoFtan0uBlJvIQ5Sc1HdMHTU2ATmph1ax0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:10:05 2026 by rpki-client