$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa File: d50b4be5-b548-4743-92e1-1e17267f722d.roa (raw, json) Hash identifier: AaDfyllOOEZxlU+JinYXBoaKvm2bCueV7ul2UO+mK/I= Subject key identifier: 59:9B:0C:E6:A7:C1:26:5D:14:CB:5C:25:F0:D1:5C:3A:DD:4C:1E:24 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 68744AA233EB0B5BA9B685A30A96312A96D508F0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa Signing time: Sat 28 Feb 2026 04:41:04 +0000 ROA not before: Sat 28 Feb 2026 04:41:04 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:548::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:74:4a:a2:33:eb:0b:5b:a9:b6:85:a3:0a:96:31:2a:96:d5:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:41:04 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=9e616dc1917b9c0ba5c9cf41e20fae21271875e460e08d872b46e5d11a7d044e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:a1:f8:71:cc:42:0f:f1:8d:64:5d:d8:60: 37:cc:36:a3:68:22:db:e5:28:b1:2c:4a:4a:09:60: 66:16:9d:5e:7f:af:ee:c8:2d:ad:db:0c:dc:69:4f: 36:8c:76:9d:46:28:79:08:bd:b8:1c:a9:97:30:45: 7f:31:61:b7:46:42:62:99:83:15:df:1f:d9:ca:47: 2c:66:96:d9:30:1e:f0:63:5d:5d:95:c1:02:0f:27: 53:af:02:bf:54:6b:e0:07:2a:1e:30:d6:62:a3:ae: 60:df:83:3d:85:97:01:c0:7c:ba:65:65:d0:c4:dd: 68:fb:e6:e4:32:c8:aa:87:77:a8:b2:f8:4b:a2:ad: a5:6e:d4:b6:a5:94:c2:e6:c6:11:95:a5:37:d4:40: e0:2b:6a:60:ec:53:b4:e6:e0:3c:82:ec:db:72:26: f3:06:11:db:01:1c:4a:18:12:5a:fa:b4:24:96:02: ce:5c:5f:91:bf:e8:7c:64:20:b3:db:36:e7:1c:96: 52:05:c6:e0:d8:db:1d:e6:44:19:7c:92:38:8a:c4: 25:df:f3:66:5c:1d:5c:4e:f0:38:df:ec:79:61:67: 73:06:dc:f0:ec:7a:aa:da:0b:1b:a4:83:83:db:62: 41:ef:f0:5d:0b:7c:ed:56:e4:86:3a:58:a3:c3:7b: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9B:0C:E6:A7:C1:26:5D:14:CB:5C:25:F0:D1:5C:3A:DD:4C:1E:24 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:548::/48 Signature Algorithm: sha256WithRSAEncryption aa:52:f1:e5:73:74:64:78:1f:89:63:9d:7e:63:df:ce:4b:f4: 68:e7:7a:e0:05:83:26:32:9e:7f:ea:46:f7:91:2f:23:c8:95: 60:f8:26:15:a7:ee:08:1f:ac:23:da:e9:a9:ec:e1:cc:2f:1f: 29:b2:cc:c7:04:d2:5d:cf:3a:51:d3:e4:64:9b:d1:e9:3f:b7: 4d:97:d2:77:7d:8f:06:a0:a9:89:9e:89:11:76:ab:15:6a:ab: df:f4:be:1e:5c:b1:ce:4b:29:5f:e7:df:a6:c7:d6:7a:c3:e7: 57:a6:8f:25:95:ee:4d:27:a0:2c:96:bf:14:44:9c:e3:cd:6c: 27:d9:13:77:ce:7f:37:b0:47:8a:6d:55:c8:2d:50:a1:29:b4: 8f:34:1f:2e:06:8a:7f:d9:70:57:04:84:cf:de:d4:d6:c4:a9: 09:4f:65:ad:69:a5:5f:77:fc:ea:3c:a7:4c:46:0a:69:d8:53: 50:54:bf:e1:82:55:41:ea:28:8d:54:57:e6:81:d5:de:6e:d4: 1f:b4:94:66:c6:7d:57:10:15:d3:5d:d9:31:49:bc:e6:9d:ad: 42:13:ac:23:ac:44:12:c5:fb:89:4a:3b:7a:1d:de:cf:96:b8: 21:57:d4:b1:8d:e0:f1:d2:91:33:12:c7:49:9a:d1:72:da:c1: 40:a7:d7:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaHRKojPrC1uptoWjCpYxKpbVCPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQ0MTA0WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTYxNmRjMTkxN2I5YzBiYTVjOWNmNDFlMjBmYWUyMTI3 MTg3NWU0NjBlMDhkODcyYjQ2ZTVkMTFhN2QwNDRlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpcqH4ccxCD/GNZF3YYDfMNqNoItvlKLEsSkoJYGYWnV5/ r+7ILa3bDNxpTzaMdp1GKHkIvbgcqZcwRX8xYbdGQmKZgxXfH9nKRyxmltkwHvBj XV2VwQIPJ1OvAr9Ua+AHKh4w1mKjrmDfgz2FlwHAfLplZdDE3Wj75uQyyKqHd6iy +EuiraVu1LallMLmxhGVpTfUQOAramDsU7Tm4DyC7NtyJvMGEdsBHEoYElr6tCSW As5cX5G/6HxkILPbNuccllIFxuDY2x3mRBl8kjiKxCXf82ZcHVxO8Djf7HlhZ3MG 3PDseqraCxukg4PbYkHv8F0LfO1W5IY6WKPDe5NbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWZsM5qfBJl0Uy1wl8NFcOt1MHiQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q1MGI0YmU1LWI1NDgtNDc0My05MmUxLTFlMTcyNjdmNzIyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUgwDQYJKoZIhvcNAQELBQADggEBAKpS8eVzdGR4H4ljnX5j385L 9GjneuAFgyYynn/qRveRLyPIlWD4JhWn7ggfrCPa6ans4cwvHymyzMcE0l3POlHT 5GSb0ek/t02X0nd9jwagqYmeiRF2qxVqq9/0vh5csc5LKV/n36bH1nrD51emjyWV 7k0noCyWvxREnOPNbCfZE3fOfzewR4ptVcgtUKEptI80Hy4Gin/ZcFcEhM/e1NbE qQlPZa1ppV93/Oo8p0xGCmnYU1BUv+GCVUHqKI1UV+aB1d5u1B+0lGbGfVcQFdNd 2TFJvOadrUITrCOsRBLF+4lKO3od3s+WuCFX1LGN4PHSkTMSx0ma0XLawUCn1+g= -----END CERTIFICATE-----Generated at Sun Mar 1 23:39:36 2026 by rpki-client