$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa File: 0ec55b55-70d8-4c9a-a949-98332400c54c.roa (raw, json) Hash identifier: AvvO2xu9ATaTRn1JkETZ4kjl5fwE1r21uQg7GofsalQ= Subject key identifier: 7B:B4:19:44:BA:AE:54:C2:57:34:54:E8:D3:E6:EC:FD:2D:68:22:0B Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 5A1A426607E560052D147C791D6B15F01BFD77A7 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa Signing time: Sat 28 Feb 2026 00:00:04 +0000 ROA not before: Sat 28 Feb 2026 00:00:04 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1a:42:66:07:e5:60:05:2d:14:7c:79:1d:6b:15:f0:1b:fd:77:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Feb 28 00:00:04 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=4da426425f6046db4f967c23ba3bfa899ba457f39fcf73b93fb730ea90fe5769, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:ac:d6:9f:71:a1:60:d9:9f:01:af:3d:9f: fe:aa:43:8b:69:81:ac:b2:db:3e:8a:9c:4e:47:5e: de:45:32:7a:b4:bb:6d:a8:02:b9:a2:f2:13:8c:c3: f1:56:16:b2:79:f7:4d:c0:ba:18:a9:6d:b4:2d:1f: f7:cc:9f:d2:b4:ef:b6:b4:9a:61:49:c4:30:e7:18: 0e:75:fb:34:3b:d0:01:a7:e5:fb:7a:28:37:35:79: 1f:10:d0:41:78:de:6f:0f:54:f9:c0:f2:64:56:80: cc:8e:52:60:ce:bd:10:25:25:b6:ae:c3:e4:85:7d: 6a:03:4b:0e:3f:97:1f:b3:ba:f7:68:ab:87:1b:ea: 56:59:41:ba:32:38:82:80:77:71:6b:cc:94:14:05: 31:f6:ba:30:1a:0d:8e:3e:ef:6e:b5:3f:6a:15:47: 47:7b:15:da:6a:9e:32:4f:5d:7c:72:b2:b5:04:43: 27:65:c8:30:d6:bf:0e:6c:ae:83:9d:af:72:20:0b: ba:05:ed:e3:6b:0f:a9:9a:8d:41:4c:c5:91:48:15: 38:ec:b0:58:59:a7:51:e2:3f:3a:17:9e:b8:e6:3a: 3d:4f:3d:f7:3b:03:48:27:be:42:b3:f7:c5:d1:aa: 12:58:c1:87:e7:a0:32:47:ee:69:29:5b:dc:94:39: 7f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B4:19:44:BA:AE:54:C2:57:34:54:E8:D3:E6:EC:FD:2D:68:22:0B X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/0ec55b55-70d8-4c9a-a949-98332400c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/48 Signature Algorithm: sha256WithRSAEncryption 6f:3c:84:c5:d5:b0:40:67:10:08:d3:52:1b:80:00:55:ab:de: 82:1e:09:d5:50:95:f2:9d:16:34:cb:5b:69:90:13:b4:1d:2d: 1a:10:f0:a0:f0:ad:f6:c7:b9:f5:bc:cb:53:a9:6b:a2:36:9a: b8:38:a9:a6:ac:c4:2b:33:05:fe:86:15:e5:3b:6d:d8:71:04: 16:99:06:bd:4d:3a:ea:33:00:54:24:17:aa:58:dc:f9:5c:bc: 52:42:9c:be:23:fc:1e:fa:2b:c6:69:da:84:9a:71:04:b3:3d: 8b:64:4a:03:fe:e9:b4:bd:70:1a:1a:f6:4e:05:94:86:6e:82: fd:cb:7f:87:5c:4f:73:95:92:d6:fa:6e:cf:54:7e:30:32:d6: 37:a8:35:df:ae:88:84:4e:9a:33:cf:8c:2d:9d:12:28:f9:37: 5d:16:33:67:27:6e:1b:fb:dc:97:e8:a3:14:7d:2d:c3:f2:cc: ad:2d:14:ef:3b:d8:0d:21:df:d4:15:b7:87:2d:9c:8a:fe:b2: f7:3b:08:09:67:a2:1a:fc:2b:3a:7f:2a:ec:9f:9b:58:89:6e: 05:0e:aa:77:39:20:85:06:1a:2a:02:99:29:42:1c:40:b6:aa: dc:d4:16:62:b9:dc:35:41:c5:06:87:75:e5:4f:e9:15:57:c9: 41:48:b8:45 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWhpCZgflYAUtFHx5HWsV8Bv9d6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjYwMjI4MDAwMDA0WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGE0MjY0MjVmNjA0NmRiNGY5NjdjMjNiYTNiZmE4OTli YTQ1N2YzOWZjZjczYjkzZmI3MzBlYTkwZmU1NzY5MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLbazWn3GhYNmfAa89n/6qQ4tpgayy2z6KnE5HXt5FMnq0 u22oArmi8hOMw/FWFrJ5903AuhipbbQtH/fMn9K077a0mmFJxDDnGA51+zQ70AGn 5ft6KDc1eR8Q0EF43m8PVPnA8mRWgMyOUmDOvRAlJbauw+SFfWoDSw4/lx+zuvdo q4cb6lZZQboyOIKAd3FrzJQUBTH2ujAaDY4+7261P2oVR0d7FdpqnjJPXXxysrUE QydlyDDWvw5sroOdr3IgC7oF7eNrD6majUFMxZFIFTjssFhZp1HiPzoXnrjmOj1P Pfc7A0gnvkKz98XRqhJYwYfnoDJH7mkpW9yUOX9dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUe7QZRLquVMJXNFTo0+bs/S1oIgswHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjLzBlYzU1YjU1LTcwZDgtNGM5YS1hOTQ5LTk4MzMyNDAwYzU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAG88hMXVsEBnEAjTUhuAAFWr 3oIeCdVQlfKdFjTLW2mQE7QdLRoQ8KDwrfbHufW8y1Opa6I2mrg4qaasxCszBf6G FeU7bdhxBBaZBr1NOuozAFQkF6pY3PlcvFJCnL4j/B76K8Zp2oSacQSzPYtkSgP+ 6bS9cBoa9k4FlIZugv3Lf4dcT3OVktb6bs9UfjAy1jeoNd+uiIROmjPPjC2dEij5 N10WM2cnbhv73JfooxR9LcPyzK0tFO872A0h39QVt4ctnIr+svc7CAlnohr8Kzp/ Kuyfm1iJbgUOqnc5IIUGGioCmSlCHEC2qtzUFmK53DVBxQaHdeVP6RVXyUFIuEU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:44 2026 by rpki-client