$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa File: 8f960b0d-c291-490f-aff5-abe964221bd2.roa (raw, json) Hash identifier: jBT10a56wbR78W2DdcDXzzprjq6UNUkvxaFRFcR1WbE= Subject key identifier: BB:0E:77:C7:A3:8D:1A:C5:A7:79:0A:47:45:F1:F0:AA:C5:3F:A6:63 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 66383D6C72D071716078FD0D34918FC01A39E848 Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa Signing time: Sun 15 Feb 2026 00:00:07 +0000 ROA not before: Sun 15 Feb 2026 00:00:07 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2620:108:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:38:3d:6c:72:d0:71:71:60:78:fd:0d:34:91:8f:c0:1a:39:e8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Feb 15 00:00:07 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=a999ec732ba877ca6f1940ace07dabe8703c629efff8d95e8b62b0b43146899d, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:22:e6:fe:38:97:a8:78:73:c8:da:49:0a: 6c:fb:d8:e1:62:a6:ab:ca:7c:f2:e8:48:25:bb:63: bb:83:e7:eb:12:bf:de:32:5d:99:cb:b0:c8:10:8b: 03:2b:ca:5c:95:d3:f3:90:eb:bb:ad:e9:a5:eb:91: 2b:37:f5:1d:1e:28:7e:86:ee:70:00:76:01:7e:75: cb:fb:74:f5:e1:e8:ee:70:39:e1:c0:93:94:1e:4a: 9b:66:2b:bc:86:06:09:1a:5f:a8:bf:33:d3:1f:a6: 33:dc:5c:96:92:e9:a1:ca:26:d6:81:c2:c9:c3:71: 3d:1a:b0:73:92:ce:05:02:f0:4c:c9:6d:cf:65:54: 6f:37:64:59:c8:5d:b4:5c:2d:85:8b:43:1e:12:08: aa:04:78:7e:ff:70:2c:52:00:bc:5d:3c:93:32:48: 6e:24:54:1c:b2:82:f2:ad:6d:e5:ce:89:2b:0e:32: d0:2b:e8:ce:65:16:4a:b4:c9:2a:30:20:df:65:5c: d5:50:50:57:48:3a:b0:cb:e9:92:20:48:f1:11:e1: c1:e8:5d:31:1f:a0:e0:fe:75:e2:f3:f1:2b:89:0e: a7:cc:43:37:b5:bc:6d:b8:db:e2:96:ef:ac:4a:6e: 62:e9:0b:29:e9:8f:3a:0b:c5:bb:72:3f:63:8f:5d: 18:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:77:C7:A3:8D:1A:C5:A7:79:0A:47:45:F1:F0:AA:C5:3F:A6:63 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:108:7000::/44 Signature Algorithm: sha256WithRSAEncryption 99:95:ef:88:8f:1e:49:1a:64:6b:2a:45:7f:af:fc:ee:6c:66: 83:42:97:31:8e:8b:1f:02:c5:20:f0:9b:5a:02:f7:46:d0:ed: fa:08:dc:49:18:83:6e:43:90:79:23:2a:ad:65:37:90:30:61: ab:e8:20:68:e3:28:06:4b:bd:21:ad:77:e9:a4:8e:28:83:70: 01:69:21:5b:6a:f6:36:2c:ad:6c:53:24:86:9c:d5:96:85:d1: c8:a0:64:54:4d:e1:16:ae:62:22:d3:4b:45:73:3e:5b:71:9e: 93:70:cb:09:01:7a:e6:03:e0:a7:51:f8:40:a3:3f:ce:7e:45: 67:df:3b:2b:61:f2:61:18:95:bc:3b:cd:af:d7:ed:08:c5:aa: e3:a7:ab:6e:ba:3d:c9:62:cb:e7:25:12:0e:28:19:1a:aa:b5: 13:7c:4e:d6:b7:76:bb:99:70:46:15:2d:a1:15:5f:55:b2:e9: 8d:6d:37:bd:38:b9:a8:23:89:7f:26:2f:99:77:f6:63:61:b5: c8:f0:af:32:f3:6d:ff:65:13:48:99:27:c3:18:14:a1:fe:01: b0:f2:13:8e:43:52:5d:3e:fc:4f:b2:1b:85:4a:23:81:65:f5: a8:03:0d:61:59:ce:f9:f5:37:a5:ea:ea:03:87:56:ec:64:ac: a5:c0:21:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZjg9bHLQcXFgeP0NNJGPwBo56EgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjYwMjE1MDAwMDA3WhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTk5ZWM3MzJiYTg3N2NhNmYxOTQwYWNlMDdkYWJlODcw M2M2MjllZmZmOGQ5NWU4YjYyYjBiNDMxNDY4OTlkMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE2iLm/jiXqHhzyNpJCmz72OFipqvKfPLoSCW7Y7uD5+sS v94yXZnLsMgQiwMrylyV0/OQ67ut6aXrkSs39R0eKH6G7nAAdgF+dcv7dPXh6O5w OeHAk5QeSptmK7yGBgkaX6i/M9MfpjPcXJaS6aHKJtaBwsnDcT0asHOSzgUC8EzJ bc9lVG83ZFnIXbRcLYWLQx4SCKoEeH7/cCxSALxdPJMySG4kVByygvKtbeXOiSsO MtAr6M5lFkq0ySowIN9lXNVQUFdIOrDL6ZIgSPER4cHoXTEfoOD+deLz8SuJDqfM Qze1vG242+KW76xKbmLpCynpjzoLxbtyP2OPXRidAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuw53x6ONGsWneQpHRfHwqsU/pmMwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzhmOTYwYjBkLWMyOTEtNDkwZi1hZmY1LWFiZTk2NDIyMWJkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEIcAAwDQYJKoZIhvcNAQELBQADggEBAJmV74iPHkkaZGsqRX+v/O5s ZoNClzGOix8CxSDwm1oC90bQ7foI3EkYg25DkHkjKq1lN5AwYavoIGjjKAZLvSGt d+mkjiiDcAFpIVtq9jYsrWxTJIac1ZaF0cigZFRN4RauYiLTS0VzPltxnpNwywkB euYD4KdR+ECjP85+RWffOyth8mEYlbw7za/X7QjFquOnq266Pcliy+clEg4oGRqq tRN8Tta3druZcEYVLaEVX1Wy6Y1tN704uagjiX8mL5l39mNhtcjwrzLzbf9lE0iZ J8MYFKH+AbDyE45DUl0+/E+yG4VKI4Fl9agDDWFZzvn1N6Xq6gOHVuxkrKXAIWY= -----END CERTIFICATE-----Generated at Mon Mar 2 01:26:46 2026 by rpki-client