$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ca254e2f-3f99-4af5-8da3-420a2d49095c.roa File: ca254e2f-3f99-4af5-8da3-420a2d49095c.roa (raw, json) Hash identifier: kJHI0awpFizaWPyXFJcFrIG9Pr9lqGNZ+bhEF8KihHQ= Subject key identifier: B9:2E:52:70:E5:35:EB:F6:15:9D:C7:3C:9E:33:FE:99:0D:22:15:CA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7BBDC34F4FACCEC43136245D17CB8FA066EBFFC4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ca254e2f-3f99-4af5-8da3-420a2d49095c.roa Signing time: Thu 26 Feb 2026 12:40:42 +0000 ROA not before: Thu 26 Feb 2026 12:40:42 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bd:c3:4f:4f:ac:ce:c4:31:36:24:5d:17:cb:8f:a0:66:eb:ff:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 26 12:40:42 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=52e796dbee3083b5602addd8ec6ff64b3aabc066958708bdf01fd2c8372807f0, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e3:66:53:54:94:c0:f0:83:d7:fc:4f:ab:31: bd:e0:bc:2c:6f:61:6c:1a:45:26:88:dd:c9:8d:75: 28:70:81:3e:0e:6b:48:b2:a8:3f:36:27:fb:47:16: ed:4c:8e:ef:cc:7f:32:8b:6c:a8:9b:de:d5:4b:a2: fd:d6:ea:33:64:a9:4a:35:4f:f7:aa:c3:98:4d:c2: 9d:ea:7f:d0:b8:c2:c8:56:a1:55:c2:47:92:73:1b: e1:0a:51:cd:f2:0d:4b:34:f6:34:da:5c:04:83:bd: 50:e8:11:95:2f:54:0a:53:f0:b4:ba:fa:cd:ec:92: c1:ff:56:fe:e8:df:3a:e6:ef:5a:f0:e8:53:29:9d: ff:45:09:00:4f:e5:da:4c:0a:87:46:28:22:ed:c7: fb:79:d0:2f:3d:11:f6:6c:aa:7e:14:b8:b8:8d:32: 76:20:29:1b:84:60:5c:32:2d:e3:13:79:62:5c:63: a6:7c:32:fe:dd:00:e6:80:fc:f5:6a:fc:5c:55:fd: 02:57:a2:60:73:7e:e7:a4:c8:c3:d2:05:09:71:2b: 2e:00:8c:56:99:d0:e2:02:56:aa:3c:c8:df:16:1e: 13:c4:00:0c:b0:31:df:30:14:65:95:d6:e9:ff:03: 4c:1f:86:54:ea:5c:b8:04:af:b9:81:01:da:9f:38: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2E:52:70:E5:35:EB:F6:15:9D:C7:3C:9E:33:FE:99:0D:22:15:CA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ca254e2f-3f99-4af5-8da3-420a2d49095c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d00::/40 Signature Algorithm: sha256WithRSAEncryption 7d:04:5f:79:7a:16:83:12:6e:f1:1c:fa:60:df:21:02:76:3a: d9:42:cd:fc:cb:0a:d4:56:8a:0a:0f:39:3b:44:7b:c5:2c:f4: c3:30:70:05:19:50:19:2b:4c:72:b6:dd:92:be:bf:34:89:e2: da:f5:58:42:be:3f:81:0c:78:84:b1:32:59:5d:09:8d:18:20: 07:da:a1:9a:7a:50:67:6e:fb:36:f7:c2:ac:0c:11:7b:05:8b: bb:74:4a:81:ea:a8:61:63:52:3d:37:25:af:45:78:97:9a:99: d4:2f:eb:4d:46:0c:41:67:eb:a5:9c:ce:ca:61:52:41:6b:07: 5a:0c:31:75:1b:8f:a1:e8:b2:10:8d:85:be:3a:30:09:95:e0: ef:1d:18:a2:ba:e8:6f:7c:54:20:17:6b:af:47:39:70:22:99: dd:38:03:38:2d:62:cf:dd:5a:00:76:6b:72:7f:af:34:3c:ce: 4a:4c:80:71:15:b0:db:cc:a0:e6:e4:b6:12:c3:7d:c7:b3:55: c1:8f:bc:2a:76:26:5b:59:67:10:92:e2:31:05:a7:9b:bf:77: 9e:58:c9:6a:51:11:d3:a8:a1:74:57:e6:57:36:9c:2e:ed:e2: 1c:1d:e8:dc:2d:d9:97:26:51:08:ba:86:88:a2:e3:14:cb:bb: be:3c:b8:cd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUe73DT0+szsQxNiRdF8uPoGbr/8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI2MTI0MDQyWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmU3OTZkYmVlMzA4M2I1NjAyYWRkZDhlYzZmZjY0YjNh YWJjMDY2OTU4NzA4YmRmMDFmZDJjODM3MjgwN2YwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCP42ZTVJTA8IPX/E+rMb3gvCxvYWwaRSaI3cmNdShwgT4O a0iyqD82J/tHFu1Mju/MfzKLbKib3tVLov3W6jNkqUo1T/eqw5hNwp3qf9C4wshW oVXCR5JzG+EKUc3yDUs09jTaXASDvVDoEZUvVApT8LS6+s3sksH/Vv7o3zrm71rw 6FMpnf9FCQBP5dpMCodGKCLtx/t50C89EfZsqn4UuLiNMnYgKRuEYFwyLeMTeWJc Y6Z8Mv7dAOaA/PVq/FxV/QJXomBzfuekyMPSBQlxKy4AjFaZ0OICVqo8yN8WHhPE AAywMd8wFGWV1un/A0wfhlTqXLgEr7mBAdqfOGQ7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuS5ScOU16/YVncc8njP+mQ0iFcowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NhMjU0ZTJmLTNmOTktNGFmNS04ZGEzLTQyMGEyZDQ5MDk1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEAfQRfeXoWgxJu8Rz6YN8hAnY6 2ULN/MsK1FaKCg85O0R7xSz0wzBwBRlQGStMcrbdkr6/NIni2vVYQr4/gQx4hLEy WV0JjRggB9qhmnpQZ277NvfCrAwRewWLu3RKgeqoYWNSPTclr0V4l5qZ1C/rTUYM QWfrpZzOymFSQWsHWgwxdRuPoeiyEI2FvjowCZXg7x0Yorrob3xUIBdrr0c5cCKZ 3TgDOC1iz91aAHZrcn+vNDzOSkyAcRWw28yg5uS2EsN9x7NVwY+8KnYmW1lnEJLi MQWnm793nljJalER06ihdFfmVzacLu3iHB3o3C3ZlyZRCLqGiKLjFMu7vjy4zQ== -----END CERTIFICATE-----Generated at Thu Feb 26 15:34:11 2026 by rpki-client