$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bda389ba-82f7-473f-a337-f093368602cc.roa File: bda389ba-82f7-473f-a337-f093368602cc.roa (raw, json) Hash identifier: rZBNPJPefbEoUn1cDM11S3LhDdXN621ALIOoVUDlyY0= Subject key identifier: 24:F8:64:08:B9:4E:4C:B5:87:B8:9B:00:3E:5F:FF:7D:6B:AE:E6:BE Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 559881F8FE6561DF5A6DC708557196C789068FA4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bda389ba-82f7-473f-a337-f093368602cc.roa Signing time: Sat 28 Feb 2026 04:20:05 +0000 ROA not before: Sat 28 Feb 2026 04:20:05 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:307::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:98:81:f8:fe:65:61:df:5a:6d:c7:08:55:71:96:c7:89:06:8f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:20:05 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=d0fba40d496cdd70ed485a72e124c3dee652b4b11e072158c26c8538f7a56361, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ed:78:4e:26:4b:5b:b0:6b:1a:f3:e2:1f:ac: 2c:85:00:58:b5:88:06:7b:1f:e3:df:84:f6:3c:f6: c7:3d:e0:63:cc:d8:3d:0e:b1:79:c6:a7:95:d9:85: 85:20:de:aa:ba:ff:35:e4:42:ab:c6:0a:01:4a:ba: 8c:89:47:43:9b:5b:e3:6c:0b:d4:c1:25:d0:7e:1c: 29:c5:5c:e1:24:88:25:06:7f:36:a5:12:c0:c6:7d: 16:f5:05:80:4a:42:dd:26:a6:f0:49:45:b8:51:a6: a6:8d:32:e2:e6:2e:5c:77:a1:bb:f2:22:90:cd:f8: ad:78:a4:74:97:ab:69:16:74:01:0a:ab:27:bb:8f: cd:de:a7:3a:29:30:11:85:5a:a3:2a:22:f8:99:31: a9:b7:fc:32:40:34:2d:da:ec:c4:a4:66:98:ae:c6: 5a:05:8b:e7:b7:c9:31:d6:1e:e1:4b:a6:02:4a:a5: 99:24:38:d3:0c:fd:1a:e1:c7:bd:57:94:ec:e2:c4: c1:ed:1b:f6:32:10:8d:12:85:66:bc:aa:b8:2e:d0: a6:e0:84:b3:8f:04:fc:eb:c4:82:d8:4f:e4:99:11: 4b:73:1d:13:b5:65:f9:8e:49:d3:e6:88:59:5e:30: d2:d9:db:be:88:c2:30:7d:3c:95:44:3d:36:1d:26: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F8:64:08:B9:4E:4C:B5:87:B8:9B:00:3E:5F:FF:7D:6B:AE:E6:BE X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bda389ba-82f7-473f-a337-f093368602cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:307::/48 Signature Algorithm: sha256WithRSAEncryption 75:1f:85:9a:7d:51:9c:8e:06:77:43:64:db:b4:88:40:38:b5: 7f:b2:47:eb:d2:bb:94:14:d1:9c:d8:6c:62:6b:68:11:d2:4c: a6:de:4c:af:b0:e8:0b:90:b2:7f:ac:5b:54:40:ef:02:84:f4: e3:9c:89:7e:e8:ff:8e:da:4c:a1:f1:fb:13:93:9d:2a:76:c0: f9:04:80:92:4c:9b:a6:c0:34:ba:df:7b:06:4f:6d:00:79:b8: 43:32:0f:dc:d2:5d:7e:31:a0:56:15:b6:21:11:1c:f6:4f:79: e1:fd:97:7d:43:fc:0f:44:0f:1a:09:f6:27:57:d9:1b:73:7e: d9:46:c0:6c:61:6b:a2:19:83:08:96:8e:37:80:76:7f:75:23: 49:d1:de:39:9e:15:ba:d8:dd:6e:a7:76:87:94:d3:c2:bc:0b: 61:7d:5e:8d:53:db:87:a7:f1:54:31:e9:81:6c:43:2b:bc:a5: 15:f5:7a:7b:8c:95:94:f4:01:e5:61:9c:46:ce:1f:ca:e0:cd: 18:83:e1:bb:b0:68:3c:4d:f5:af:ac:7a:a8:b8:65:1c:78:ec: 4e:88:c9:5f:03:10:62:df:3d:ec:9e:b5:67:13:76:1a:46:ca: d1:43:fe:32:4d:c3:8e:17:cf:2b:45:cf:e0:c4:7c:a7:d4:01: e1:97:b6:9b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVZiB+P5lYd9abccIVXGWx4kGj6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQyMDA1WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGZiYTQwZDQ5NmNkZDcwZWQ0ODVhNzJlMTI0YzNkZWU2 NTJiNGIxMWUwNzIxNThjMjZjODUzOGY3YTU2MzYxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU7XhOJktbsGsa8+IfrCyFAFi1iAZ7H+PfhPY89sc94GPM 2D0OsXnGp5XZhYUg3qq6/zXkQqvGCgFKuoyJR0ObW+NsC9TBJdB+HCnFXOEkiCUG fzalEsDGfRb1BYBKQt0mpvBJRbhRpqaNMuLmLlx3obvyIpDN+K14pHSXq2kWdAEK qye7j83epzopMBGFWqMqIviZMam3/DJANC3a7MSkZpiuxloFi+e3yTHWHuFLpgJK pZkkONMM/Rrhx71XlOzixMHtG/YyEI0ShWa8qrgu0KbghLOPBPzrxILYT+SZEUtz HRO1ZfmOSdPmiFleMNLZ276IwjB9PJVEPTYdJuRXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJPhkCLlOTLWHuJsAPl//fWuu5r4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JkYTM4OWJhLTgyZjctNDczZi1hMzM3LWYwOTMzNjg2MDJjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwcwDQYJKoZIhvcNAQELBQADggEBAHUfhZp9UZyOBndDZNu0iEA4 tX+yR+vSu5QU0ZzYbGJraBHSTKbeTK+w6AuQsn+sW1RA7wKE9OOciX7o/47aTKHx +xOTnSp2wPkEgJJMm6bANLrfewZPbQB5uEMyD9zSXX4xoFYVtiERHPZPeeH9l31D /A9EDxoJ9idX2RtzftlGwGxha6IZgwiWjjeAdn91I0nR3jmeFbrY3W6ndoeU08K8 C2F9Xo1T24en8VQx6YFsQyu8pRX1enuMlZT0AeVhnEbOH8rgzRiD4buwaDxN9a+s eqi4ZRx47E6IyV8DEGLfPeyetWcTdhpGytFD/jJNw44XzytFz+DEfKfUAeGXtps= -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:37 2026 by rpki-client