$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa File: b2adff31-40d2-4cca-afbd-993e0bc90554.roa (raw, json) Hash identifier: Xui8tTYPeWr88+9u25CYdSLSMPN4Zbymmshv1YbrPkc= Subject key identifier: 89:41:24:6A:3C:C3:6B:18:54:CE:19:21:5E:30:0D:87:45:90:84:00 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3C1243EA41739A5DEEF73F7B924ABDA2F95DA7CE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa Signing time: Sat 28 Feb 2026 04:50:24 +0000 ROA not before: Sat 28 Feb 2026 04:50:24 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:54b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:12:43:ea:41:73:9a:5d:ee:f7:3f:7b:92:4a:bd:a2:f9:5d:a7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:50:24 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=e15d37596c712668b341eb6cda10f681e4f00aa678ccfeb890f3c2c55a243143, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:e0:52:08:38:af:69:ae:b5:2c:7c:37:ab: df:af:c6:82:4f:9b:0c:5d:eb:47:71:6c:09:5d:81: fe:24:a2:84:94:4c:9b:0a:c3:1f:bc:ed:09:69:24: b9:f3:d9:24:6b:c8:d3:84:1b:d2:6b:8a:69:1d:27: 29:4d:81:c3:11:7a:8a:9f:7c:70:26:d8:a6:64:75: eb:76:72:82:80:ec:df:24:bb:97:9f:cd:91:3c:85: d8:9f:48:ba:61:ec:d5:8e:dc:f8:fd:0f:a4:01:ee: 21:2d:2f:8c:4a:8c:31:3f:13:4a:42:cc:3b:37:f0: f9:84:6e:46:8b:98:a8:b5:13:58:f7:ec:b1:a9:8f: ce:cf:b2:b4:27:a5:28:bd:e3:0f:f9:d6:01:33:37: 37:17:a4:32:6f:13:3f:71:7d:b7:cd:96:f0:20:0e: c4:93:98:a1:29:b4:22:9a:79:03:e6:30:14:40:64: bd:7e:e4:df:27:87:90:89:ad:a3:1f:bb:ef:8d:ec: c6:87:a3:55:ed:e5:81:50:58:b4:cc:00:09:8a:09: 90:62:38:42:27:12:d0:34:0c:18:a8:ba:e8:44:39: 2d:05:a5:c3:78:64:0d:95:e8:00:94:20:95:9f:fb: a8:f8:de:09:a9:11:ee:25:6b:cb:d4:33:4b:49:cf: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:41:24:6A:3C:C3:6B:18:54:CE:19:21:5E:30:0D:87:45:90:84:00 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2adff31-40d2-4cca-afbd-993e0bc90554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:54b::/48 Signature Algorithm: sha256WithRSAEncryption 24:cb:5a:05:50:9b:6b:be:14:e5:97:b7:51:e8:c1:75:66:f7: 4e:e6:6b:40:36:34:43:47:9f:b8:ea:7c:81:ce:77:bb:db:33: 33:48:19:62:bc:43:0e:b7:6b:55:95:1c:96:db:d7:72:40:b0: 25:13:86:15:c2:eb:3a:b0:00:a5:a4:91:60:1d:d0:aa:46:f4: c5:e4:1b:0c:81:ee:d2:74:fc:67:92:5d:89:c4:5d:08:e1:4c: e5:9d:85:49:b6:91:e9:3b:67:60:cb:58:44:ac:35:f0:2b:dd: ce:d4:87:f0:af:28:a8:17:6b:9f:b7:bd:ff:0b:4b:ae:76:48: d4:58:99:5d:80:26:f5:d6:35:97:be:04:8e:42:d5:95:57:20: 6a:e2:e1:b9:6f:55:f3:ad:ae:46:c3:dc:7c:60:9c:ed:87:32: 01:f0:bd:95:b1:9f:3a:f9:92:a7:0f:4c:4f:16:93:b4:44:d6: f4:2d:cd:1f:d8:76:92:84:9c:43:ea:67:65:21:d6:1c:5f:e3: 56:0a:3b:15:1d:af:11:a3:3a:45:2a:c9:8d:6e:60:93:19:54: 62:f7:94:bc:bf:f9:5d:e6:89:fd:85:a0:a7:1d:cd:a2:bf:b0: 98:45:b4:b5:b7:d1:7c:68:b7:d0:4f:ca:87:ad:87:ba:0d:ed: 95:6a:fc:91 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPBJD6kFzml3u9z97kkq9ovldp84wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQ1MDI0WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTVkMzc1OTZjNzEyNjY4YjM0MWViNmNkYTEwZjY4MWU0 ZjAwYWE2NzhjY2ZlYjg5MGYzYzJjNTVhMjQzMTQzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLhOBSCDivaa61LHw3q9+vxoJPmwxd60dxbAldgf4kooSU TJsKwx+87QlpJLnz2SRryNOEG9JrimkdJylNgcMReoqffHAm2KZkdet2coKA7N8k u5efzZE8hdifSLph7NWO3Pj9D6QB7iEtL4xKjDE/E0pCzDs38PmEbkaLmKi1E1j3 7LGpj87PsrQnpSi94w/51gEzNzcXpDJvEz9xfbfNlvAgDsSTmKEptCKaeQPmMBRA ZL1+5N8nh5CJraMfu++N7MaHo1Xt5YFQWLTMAAmKCZBiOEInEtA0DBiouuhEOS0F pcN4ZA2V6ACUIJWf+6j43gmpEe4la8vUM0tJz0eLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiUEkajzDaxhUzhkhXjANh0WQhAAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IyYWRmZjMxLTQwZDItNGNjYS1hZmJkLTk5M2UwYmM5MDU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUswDQYJKoZIhvcNAQELBQADggEBACTLWgVQm2u+FOWXt1HowXVm 907ma0A2NENHn7jqfIHOd7vbMzNIGWK8Qw63a1WVHJbb13JAsCUThhXC6zqwAKWk kWAd0KpG9MXkGwyB7tJ0/GeSXYnEXQjhTOWdhUm2kek7Z2DLWESsNfAr3c7Uh/Cv KKgXa5+3vf8LS652SNRYmV2AJvXWNZe+BI5C1ZVXIGri4blvVfOtrkbD3HxgnO2H MgHwvZWxnzr5kqcPTE8Wk7RE1vQtzR/YdpKEnEPqZ2Uh1hxf41YKOxUdrxGjOkUq yY1uYJMZVGL3lLy/+V3mif2FoKcdzaK/sJhFtLW30Xxot9BPyoeth7oN7ZVq/JE= -----END CERTIFICATE-----Generated at Mon Mar 2 01:07:47 2026 by rpki-client