$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f02d3a40-b034-4d92-872a-57ed67af80de.roa File: f02d3a40-b034-4d92-872a-57ed67af80de.roa (raw, json) Hash identifier: I5GXMGvrq7tunuHRnGSbncToPI+WgrcxDMsaH2gy8Os= Subject key identifier: 1D:C7:F2:9A:E1:67:B4:F4:94:DF:0C:8D:8F:22:6B:E9:B6:6C:31:67 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4BEC538B1E5031933BDE95AE01205DCA3EAFD881 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f02d3a40-b034-4d92-872a-57ed67af80de.roa Signing time: Sat 28 Feb 2026 04:30:37 +0000 ROA not before: Sat 28 Feb 2026 04:30:37 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ec:53:8b:1e:50:31:93:3b:de:95:ae:01:20:5d:ca:3e:af:d8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 28 04:30:37 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=41d03b263986f1995882fd9ff029fe5c3c37552a20c2bd41c62681b0789986c6, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:7f:3d:a3:2e:8c:24:32:9d:d9:71:de:4c: c5:d3:97:43:8f:39:74:a9:25:a4:f2:6d:5d:ce:bc: 66:2e:8e:ef:67:e9:ca:f2:e1:71:22:32:25:e9:ca: a3:1d:12:61:c7:c8:d4:6b:a6:6d:e0:83:ea:67:38: b8:2c:4c:20:14:33:96:bf:88:d6:e2:eb:00:29:62: ce:ff:d1:7d:c2:9f:b7:56:7c:60:65:e0:63:12:de: 4b:ee:7b:3d:66:95:64:4d:46:60:9e:90:38:10:94: 20:d9:b0:c2:bb:8d:6f:6d:df:a8:48:fe:ee:fa:da: 29:52:a8:e5:8a:f8:90:54:3c:7c:4f:f5:96:c4:f8: 6f:77:50:4f:bf:6a:fe:55:d3:9e:05:71:dc:72:e7: 7b:56:6d:b4:f5:2d:05:24:93:e8:18:da:53:a0:8e: d5:ef:d1:91:c4:45:d2:29:69:4a:02:a1:0a:f5:cf: 71:e0:5d:cb:2b:d7:e6:e1:d4:7a:ea:2b:2c:f7:9b: 8e:bb:fc:70:d3:e9:0f:ac:7a:70:33:f5:42:4d:45: 55:5d:dd:3d:45:91:8c:6f:fe:ba:07:b2:32:5d:cd: 3d:b0:03:21:66:8f:25:aa:77:df:38:4f:8b:7a:62: 98:fd:2a:a6:e5:70:e8:23:b1:a0:33:fb:23:77:a4: 84:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C7:F2:9A:E1:67:B4:F4:94:DF:0C:8D:8F:22:6B:E9:B6:6C:31:67 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f02d3a40-b034-4d92-872a-57ed67af80de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 14:ae:9c:4c:ee:78:b9:00:c5:0f:84:26:c6:1b:75:16:f5:17: 56:b2:15:1e:ff:e5:1d:47:fc:cc:b1:ab:f5:0b:8d:ee:5f:22: 2d:ee:fa:6a:a6:88:a2:b0:f0:bb:95:8a:fd:9e:88:ef:f6:c1: 15:b6:ba:77:3a:25:e4:cc:26:df:0a:a6:99:8a:30:6b:d2:1d: ed:18:00:7b:51:55:58:4b:40:2d:db:cd:b6:f5:f8:92:b5:17: 08:fb:9a:3f:f3:4e:26:35:1c:d6:c8:f6:f6:61:12:89:9c:e3: 09:2f:65:ea:3f:d6:69:70:a5:df:5f:0c:79:a1:32:a1:51:e2: c8:6b:05:af:ba:71:c5:06:31:d9:5e:64:67:7a:20:82:6e:c5: 8a:0a:df:79:88:7d:48:e3:85:82:01:e3:ee:e5:52:82:36:bf: 2f:df:30:7e:f2:2b:3c:db:fc:c4:2e:65:2a:fc:a6:2d:cf:85: a8:95:76:86:ee:5d:6f:3b:26:14:26:59:fc:76:47:9a:31:1d: 88:6d:b7:83:fa:72:8b:3e:fa:34:e1:d2:43:39:84:27:5c:31: ee:49:72:7c:f8:f8:64:5a:05:b8:b4:1b:cf:f0:81:f1:2c:f8: 94:ce:7c:49:d4:71:e7:31:19:96:0b:3a:ef:b7:a0:68:a5:d6: 9e:e2:99:45 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS+xTix5QMZM73pWuASBdyj6v2IEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQzMDM3WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWQwM2IyNjM5ODZmMTk5NTg4MmZkOWZmMDI5ZmU1YzNj Mzc1NTJhMjBjMmJkNDFjNjI2ODFiMDc4OTk4NmM2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCreX89oy6MJDKd2XHeTMXTl0OPOXSpJaTybV3OvGYuju9n 6cry4XEiMiXpyqMdEmHHyNRrpm3gg+pnOLgsTCAUM5a/iNbi6wApYs7/0X3Cn7dW fGBl4GMS3kvuez1mlWRNRmCekDgQlCDZsMK7jW9t36hI/u762ilSqOWK+JBUPHxP 9ZbE+G93UE+/av5V054Fcdxy53tWbbT1LQUkk+gY2lOgjtXv0ZHERdIpaUoCoQr1 z3HgXcsr1+bh1HrqKyz3m467/HDT6Q+senAz9UJNRVVd3T1FkYxv/roHsjJdzT2w AyFmjyWqd984T4t6Ypj9KqblcOgjsaAz+yN3pIS1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHcfymuFntPSU3wyNjyJr6bZsMWcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YwMmQzYTQwLWIwMzQtNGQ5Mi04NzJhLTU3ZWQ2N2FmODBkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBABSunEzueLkAxQ+EJsYbdRb1 F1ayFR7/5R1H/Myxq/ULje5fIi3u+mqmiKKw8LuViv2eiO/2wRW2unc6JeTMJt8K ppmKMGvSHe0YAHtRVVhLQC3bzbb1+JK1Fwj7mj/zTiY1HNbI9vZhEomc4wkvZeo/ 1mlwpd9fDHmhMqFR4shrBa+6ccUGMdleZGd6IIJuxYoK33mIfUjjhYIB4+7lUoI2 vy/fMH7yKzzb/MQuZSr8pi3PhaiVdobuXW87JhQmWfx2R5oxHYhtt4P6cos++jTh 0kM5hCdcMe5Jcnz4+GRaBbi0G8/wgfEs+JTOfEnUcecxGZYLOu+3oGil1p7imUU= -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:35 2026 by rpki-client