$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d9e0f0b1-d6d1-422d-a664-0486c785db4d.roa File: d9e0f0b1-d6d1-422d-a664-0486c785db4d.roa (raw, json) Hash identifier: 8Q5NKedfOG79bjB/q+DJXJFH/YJdR72LSAkkl22KUFQ= Subject key identifier: D1:6A:2F:08:83:7D:7F:7E:86:CE:90:8F:76:BB:8D:23:64:C1:2E:A9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 76ED60C286B2E38EC3E0C25ED5EB7F5537C66D0B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d9e0f0b1-d6d1-422d-a664-0486c785db4d.roa Signing time: Fri 06 Feb 2026 00:30:13 +0000 ROA not before: Fri 06 Feb 2026 00:30:13 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ed:60:c2:86:b2:e3:8e:c3:e0:c2:5e:d5:eb:7f:55:37:c6:6d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 6 00:30:13 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=3f7cce3a33b2651eae53b2dc8666ef577ede95d544c994fa481b73f926294ef3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:35:3e:ae:32:3e:99:66:08:c5:52:ce:85: 49:c4:90:14:2c:a9:64:26:0b:ae:0e:5e:e3:2c:d3: cc:2d:5c:db:4c:27:54:90:3f:03:1d:b1:a3:00:04: c2:4e:c2:d0:7c:88:f5:fd:2a:12:5c:86:0e:67:7d: b8:b2:a4:09:c6:1c:d0:db:f5:49:2e:8a:31:82:9b: e5:3c:0b:e2:0a:01:5a:8e:d1:5e:29:ce:6c:d3:88: 45:f5:1b:16:51:5b:c0:55:5f:0e:a3:70:b8:a2:66: 1e:e7:6b:7e:03:f3:a6:0b:a4:32:4b:73:f9:a4:b9: c6:78:14:44:f9:04:c3:f3:22:03:65:7f:50:79:16: 39:d3:f6:ce:85:b0:49:51:a4:d1:c4:89:4c:aa:3c: 96:1b:28:e8:d2:61:69:6d:68:f2:c4:d2:d9:09:27: 65:0d:84:11:d7:d0:1b:e9:d8:a6:18:ec:a4:3d:13: 1c:a8:af:57:7b:ce:4c:b2:df:d9:1e:82:96:cb:e1: 47:b6:61:0d:2e:6d:e6:37:12:20:ad:2d:58:88:e1: 45:17:f8:d5:4c:25:de:81:47:a1:96:3f:2e:75:8a: d7:28:eb:fa:90:7e:df:f0:5d:32:cf:ba:13:c9:a5: 41:74:35:78:50:e0:ad:65:9c:c2:e2:f0:e7:e9:d9: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6A:2F:08:83:7D:7F:7E:86:CE:90:8F:76:BB:8D:23:64:C1:2E:A9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d9e0f0b1-d6d1-422d-a664-0486c785db4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b4::/48 Signature Algorithm: sha256WithRSAEncryption 3a:e0:db:47:ff:5b:1b:c3:06:3d:96:3c:e3:8a:3d:1b:3f:35: 43:3f:5d:1a:3d:6e:50:0d:31:e3:ac:57:df:27:8f:93:10:83: e0:a7:9d:62:a0:94:2a:b2:34:3e:c6:25:8a:e9:6b:55:5e:53: ed:42:9f:26:93:3e:2e:d0:3e:f9:75:42:2e:ad:ca:7b:20:ca: 95:a1:de:0f:38:30:62:92:df:a7:dd:cb:ad:f5:6f:fc:5b:df: 56:6a:1f:98:ba:af:77:d9:4f:43:59:3c:04:2a:06:45:e0:42: 38:30:21:8d:05:ff:2e:2a:5b:fc:bf:6a:98:ce:cb:d8:21:97: 65:2b:fa:fa:f5:81:51:c8:a9:9d:72:92:62:8c:79:e2:9f:b7: 3f:05:dd:17:fe:5e:17:70:b5:ec:e5:34:96:e7:90:34:af:bf: 3b:34:34:43:69:eb:dd:d6:7e:77:8e:c4:22:4a:eb:6e:96:dd: b5:e8:90:58:41:a9:a5:d0:88:90:45:e9:45:66:0c:48:eb:05: 16:b4:54:de:e5:38:b6:58:a5:27:df:8c:42:ce:cf:cd:c8:ab: f0:71:71:ff:2c:1e:6f:84:b1:97:91:5f:2a:5b:97:8f:fc:74: 20:29:37:59:80:4e:f1:ba:77:4f:0d:0d:ef:b0:89:82:c7:e7: 06:fb:79:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdu1gwoay447D4MJe1et/VTfGbQswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjA2MDAzMDEzWhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjdjY2UzYTMzYjI2NTFlYWU1M2IyZGM4NjY2ZWY1Nzdl ZGU5NWQ1NDRjOTk0ZmE0ODFiNzNmOTI2Mjk0ZWYzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaHzU+rjI+mWYIxVLOhUnEkBQsqWQmC64OXuMs08wtXNtM J1SQPwMdsaMABMJOwtB8iPX9KhJchg5nfbiypAnGHNDb9UkuijGCm+U8C+IKAVqO 0V4pzmzTiEX1GxZRW8BVXw6jcLiiZh7na34D86YLpDJLc/mkucZ4FET5BMPzIgNl f1B5FjnT9s6FsElRpNHEiUyqPJYbKOjSYWltaPLE0tkJJ2UNhBHX0Bvp2KYY7KQ9 Exyor1d7zkyy39kegpbL4Ue2YQ0ubeY3EiCtLViI4UUX+NVMJd6BR6GWPy51itco 6/qQft/wXTLPuhPJpUF0NXhQ4K1lnMLi8Ofp2UJxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0WovCIN9f36GzpCPdruNI2TBLqkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q5ZTBmMGIxLWQ2ZDEtNDIyZC1hNjY0LTA0ODZjNzg1ZGI0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA7QwDQYJKoZIhvcNAQELBQADggEBADrg20f/WxvDBj2WPOOKPRs/ NUM/XRo9blANMeOsV98nj5MQg+CnnWKglCqyND7GJYrpa1VeU+1CnyaTPi7QPvl1 Qi6tynsgypWh3g84MGKS36fdy631b/xb31ZqH5i6r3fZT0NZPAQqBkXgQjgwIY0F /y4qW/y/apjOy9ghl2Ur+vr1gVHIqZ1ykmKMeeKftz8F3Rf+XhdwtezlNJbnkDSv vzs0NENp693WfneOxCJK626W3bXokFhBqaXQiJBF6UVmDEjrBRa0VN7lOLZYpSff jELOz83Iq/Bxcf8sHm+EsZeRXypbl4/8dCApN1mATvG6d08NDe+wiYLH5wb7eck= -----END CERTIFICATE-----Generated at Mon Mar 2 02:09:55 2026 by rpki-client