$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3d9044a-c6b2-44b1-b812-a2d260b87f4f.roa File: b3d9044a-c6b2-44b1-b812-a2d260b87f4f.roa (raw, json) Hash identifier: G7SRwzNQCHaNTbBL2KMftsl+8hiPUVjXHfC5RlO5kfY= Subject key identifier: 9D:19:E5:54:D4:37:3E:7C:16:B6:9D:C4:3B:22:BA:63:C8:0A:B4:AB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 159655DB46E71AC4045F9C1793341E8F2F08C4AB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3d9044a-c6b2-44b1-b812-a2d260b87f4f.roa Signing time: Sat 28 Feb 2026 04:41:05 +0000 ROA not before: Sat 28 Feb 2026 04:41:05 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:548::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:96:55:db:46:e7:1a:c4:04:5f:9c:17:93:34:1e:8f:2f:08:c4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:41:05 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=f4679007dbc83ea2a996b47f27e14ab1ad77dd2a44535dd75d19f5ed7b45bd7d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:6a:d7:9b:f4:0a:b0:9f:d1:a8:51:5e:55: 06:35:fe:32:7c:7b:22:50:44:8d:d7:4f:84:e9:e4: d3:69:b7:34:36:5b:ec:60:aa:5d:7d:b8:c5:51:0b: 18:91:a8:6d:57:4f:a0:fb:64:6d:be:18:08:87:a1: 30:2a:0d:c1:5e:f7:a6:23:6a:ee:3d:df:e7:96:2c: 9e:ca:59:c6:eb:7a:e9:43:b5:77:06:d7:1e:56:84: 7e:eb:b3:89:24:b1:ad:87:76:ce:f8:5e:16:02:bb: 49:51:93:ce:c4:9a:f9:af:2a:71:5d:fb:df:d5:49: 6e:19:72:08:cd:5c:88:eb:2c:78:8b:79:8b:b2:c5: db:99:4e:de:1e:49:31:71:c4:3a:77:af:4b:31:bd: 94:3b:2f:32:d5:be:95:82:7f:77:a4:20:af:82:4c: 29:e1:29:ef:ef:3a:b2:a8:0a:95:2e:30:27:2a:22: 78:7e:f7:b7:30:84:49:2c:b4:24:86:c5:8d:c9:91: 6a:52:71:e3:59:de:67:ed:8d:6d:26:3d:b6:34:21: 10:34:b1:65:1d:bf:9e:9f:ab:04:89:f7:ce:17:11: a8:c0:27:a6:95:c8:18:10:cc:ff:ac:ba:43:df:71: a9:81:e4:90:f2:b2:98:b2:6f:69:4a:63:a3:76:f5: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:19:E5:54:D4:37:3E:7C:16:B6:9D:C4:3B:22:BA:63:C8:0A:B4:AB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3d9044a-c6b2-44b1-b812-a2d260b87f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:548::/48 Signature Algorithm: sha256WithRSAEncryption a5:3a:03:21:86:f5:6e:42:6f:e9:1a:91:a5:0b:17:41:df:2f: 88:66:69:46:c0:07:56:93:87:80:2d:b0:df:ed:84:0d:8b:d7: fd:0d:e3:67:7d:9f:ac:8c:96:bd:85:2e:60:0a:4f:49:c5:09: a6:34:0e:7a:ab:3d:80:f0:3e:4f:1c:76:4d:e7:45:f4:4a:21: 1a:15:f9:e4:f9:6a:9f:3c:8a:02:b0:a3:07:35:70:3d:27:95: db:d2:19:b1:40:14:4d:5e:c0:e5:ed:56:94:99:2f:1a:59:6b: 76:10:5b:e5:b0:d0:26:47:b2:92:e2:e9:7f:48:70:9c:2c:3a: 46:d8:4e:d6:c5:44:8f:d0:c3:10:a7:24:d2:c1:cf:46:b0:ab: 71:a0:14:8b:7a:d7:b2:df:07:bc:66:66:8d:ad:87:32:6a:eb: 03:f9:35:47:a8:33:a9:30:d4:35:dc:42:95:03:bd:c6:35:16: f3:9f:a4:f4:e0:ad:f8:40:58:2d:8b:d6:4e:06:95:7e:b2:a6: aa:3b:9a:20:01:f8:85:9b:b0:7f:a9:d2:af:55:5f:2d:28:77: 34:ed:96:1d:df:34:77:36:b0:8b:35:5b:45:8f:86:75:62:0a: c5:c0:c8:9b:76:6f:66:9d:36:cd:13:27:92:14:e4:e9:10:23: 0d:92:6a:11 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFZZV20bnGsQEX5wXkzQejy8IxKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQ0MTA1WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDY3OTAwN2RiYzgzZWEyYTk5NmI0N2YyN2UxNGFiMWFk NzdkZDJhNDQ1MzVkZDc1ZDE5ZjVlZDdiNDViZDdkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqpGrXm/QKsJ/RqFFeVQY1/jJ8eyJQRI3XT4Tp5NNptzQ2 W+xgql19uMVRCxiRqG1XT6D7ZG2+GAiHoTAqDcFe96Yjau493+eWLJ7KWcbreulD tXcG1x5WhH7rs4kksa2Hds74XhYCu0lRk87EmvmvKnFd+9/VSW4ZcgjNXIjrLHiL eYuyxduZTt4eSTFxxDp3r0sxvZQ7LzLVvpWCf3ekIK+CTCnhKe/vOrKoCpUuMCcq Inh+97cwhEkstCSGxY3JkWpSceNZ3mftjW0mPbY0IRA0sWUdv56fqwSJ984XEajA J6aVyBgQzP+sukPfcamB5JDyspiyb2lKY6N29d7zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnRnlVNQ3PnwWtp3EOyK6Y8gKtKswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IzZDkwNDRhLWM2YjItNDRiMS1iODEyLWEyZDI2MGI4N2Y0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUgwDQYJKoZIhvcNAQELBQADggEBAKU6AyGG9W5Cb+kakaULF0Hf L4hmaUbAB1aTh4AtsN/thA2L1/0N42d9n6yMlr2FLmAKT0nFCaY0DnqrPYDwPk8c dk3nRfRKIRoV+eT5ap88igKwowc1cD0nldvSGbFAFE1ewOXtVpSZLxpZa3YQW+Ww 0CZHspLi6X9IcJwsOkbYTtbFRI/QwxCnJNLBz0awq3GgFIt617LfB7xmZo2thzJq 6wP5NUeoM6kw1DXcQpUDvcY1FvOfpPTgrfhAWC2L1k4GlX6ypqo7miAB+IWbsH+p 0q9VXy0odzTtlh3fNHc2sIs1W0WPhnViCsXAyJt2b2adNs0TJ5IU5OkQIw2SahE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:38:11 2026 by rpki-client