$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c70296e2-c595-4a95-bc2e-ae2732ee3188.roa File: c70296e2-c595-4a95-bc2e-ae2732ee3188.roa (raw, json) Hash identifier: gQmgPmdHxgulJp4z/kAWEbw5f7iPqux9+Z0YhTgF6JU= Subject key identifier: 98:6E:8F:B3:62:AA:B2:EF:6B:55:08:BB:E6:AE:35:2E:B9:C7:5C:45 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6A4E1338E0A78F8EB273849EF2C4410C7CF20806 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c70296e2-c595-4a95-bc2e-ae2732ee3188.roa Signing time: Sat 28 Feb 2026 04:40:06 +0000 ROA not before: Sat 28 Feb 2026 04:40:06 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:397::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4e:13:38:e0:a7:8f:8e:b2:73:84:9e:f2:c4:41:0c:7c:f2:08:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:40:06 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=bc36a950c6f7667ea9cb1da4f6631e87dbe6b91cce133fe6719bd8d116abea04, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:f5:ee:c6:4e:74:c9:b0:aa:c9:08:87:31: ab:86:63:1f:ab:83:96:d5:b5:bf:d8:6c:eb:e8:ec: 8d:92:48:bd:94:4c:9c:bd:d0:bf:6b:cc:c9:80:da: 54:bf:00:9b:8a:8d:75:f7:e5:e6:ee:0d:84:e1:e7: 74:48:1a:95:db:80:ea:37:67:c1:7a:1a:ca:30:a6: ce:8b:c4:5e:9c:f1:21:50:9c:f6:c8:02:3d:48:5d: 62:00:7b:4a:ec:d7:ee:83:d2:4b:bc:f6:3b:ad:bc: a0:6e:e9:ce:1a:ca:8b:0e:bc:b7:fa:fa:ca:b2:5d: 7e:ab:6f:99:74:6d:21:e4:85:dd:2c:a7:7a:01:6b: 4e:7a:44:73:a1:92:fb:63:70:ff:94:a0:c7:da:9d: fc:9b:d2:4f:11:bb:1e:36:35:0d:0b:97:26:40:6c: 7d:87:8c:9a:ac:b7:b2:6f:c8:95:47:a6:d1:a2:e1: 45:8a:f8:f0:d4:cd:62:1c:2a:0a:bc:e9:3d:60:77: 9f:a8:6c:63:51:51:ac:4b:2c:9f:a7:80:7f:64:39: 51:dc:84:6d:92:1d:e8:04:60:01:fb:1a:a5:94:11: 88:52:61:eb:b0:47:84:f8:cd:df:ee:9e:9a:f1:0c: e2:a3:0c:5b:ec:76:1a:a7:02:e9:58:43:45:af:d7: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6E:8F:B3:62:AA:B2:EF:6B:55:08:BB:E6:AE:35:2E:B9:C7:5C:45 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c70296e2-c595-4a95-bc2e-ae2732ee3188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:397::/48 Signature Algorithm: sha256WithRSAEncryption 50:15:99:90:47:06:9e:ba:5f:76:09:29:f1:89:a4:5c:89:9a: 9c:b7:bc:12:27:13:69:2a:dc:57:13:7b:9d:0c:f7:01:22:fa: a6:ba:6c:f1:a0:37:3a:15:be:73:eb:b8:73:ac:69:01:3c:e3: 2b:13:ef:20:bb:14:0d:be:9b:72:6e:50:ff:5a:8b:fd:3e:0e: cc:f7:33:da:60:59:58:00:ae:15:af:e7:7e:9b:27:de:33:9c: 6b:b3:f9:1d:f3:b3:0b:b4:d9:ca:6c:23:75:1e:e8:dc:5f:2e: c5:fd:da:5f:69:f7:66:bd:a0:06:33:4d:e0:65:2f:8c:bf:e3: 48:b0:d6:4a:d9:1f:eb:f2:b3:7c:ac:c9:16:c0:b4:71:ac:b5: de:e3:9d:d8:7d:ab:1b:cb:44:4c:bd:2c:96:dd:d9:50:4b:dc: fe:77:51:6a:f1:50:73:b4:26:3f:a8:67:d4:85:d1:26:ce:4b: 72:e9:ad:12:eb:37:fb:fa:2d:a9:66:1d:a7:c7:a6:48:23:e0: 87:9b:e6:2b:9c:90:5b:bc:d0:fa:e3:30:dc:5e:df:02:e4:72: d3:32:10:ff:d1:43:34:23:88:d3:d9:0d:43:15:9a:af:58:01: 03:10:02:33:5f:29:71:c3:9d:a7:84:fd:35:cd:22:2a:d9:ed: be:2a:16:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUak4TOOCnj46yc4Se8sRBDHzyCAYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQ0MDA2WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzM2YTk1MGM2Zjc2NjdlYTljYjFkYTRmNjYzMWU4N2Ri ZTZiOTFjY2UxMzNmZTY3MTliZDhkMTE2YWJlYTA0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0o/Xuxk50ybCqyQiHMauGYx+rg5bVtb/YbOvo7I2SSL2U TJy90L9rzMmA2lS/AJuKjXX35ebuDYTh53RIGpXbgOo3Z8F6Gsowps6LxF6c8SFQ nPbIAj1IXWIAe0rs1+6D0ku89jutvKBu6c4ayosOvLf6+sqyXX6rb5l0bSHkhd0s p3oBa056RHOhkvtjcP+UoMfanfyb0k8Rux42NQ0LlyZAbH2HjJqst7JvyJVHptGi 4UWK+PDUzWIcKgq86T1gd5+obGNRUaxLLJ+ngH9kOVHchG2SHegEYAH7GqWUEYhS YeuwR4T4zd/unprxDOKjDFvsdhqnAulYQ0Wv17ITAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmG6Ps2Kqsu9rVQi75q41LrnHXEUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M3MDI5NmUyLWM1OTUtNGE5NS1iYzJlLWFlMjczMmVlMzE4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5cwDQYJKoZIhvcNAQELBQADggEBAFAVmZBHBp66X3YJKfGJpFyJ mpy3vBInE2kq3FcTe50M9wEi+qa6bPGgNzoVvnPruHOsaQE84ysT7yC7FA2+m3Ju UP9ai/0+Dsz3M9pgWVgArhWv536bJ94znGuz+R3zswu02cpsI3Ue6NxfLsX92l9p 92a9oAYzTeBlL4y/40iw1krZH+vys3ysyRbAtHGstd7jndh9qxvLREy9LJbd2VBL 3P53UWrxUHO0Jj+oZ9SF0SbOS3LprRLrN/v6LalmHafHpkgj4Ieb5iuckFu80Prj MNxe3wLkctMyEP/RQzQjiNPZDUMVmq9YAQMQAjNfKXHDnaeE/TXNIirZ7b4qFnM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:35:36 2026 by rpki-client