$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00a5e67e-d81d-4547-b011-580d41cad494.roa File: 00a5e67e-d81d-4547-b011-580d41cad494.roa (raw, json) Hash identifier: 5zCqrY0y/rtJO0jzxg768NjP1FUqatk1F17LZMU5cMQ= Subject key identifier: CB:47:BA:C9:27:10:2D:FC:90:8B:90:EA:96:AC:C3:18:E7:6D:F2:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D47318D96705B5DD8F08DFBFF3F7B6AE141AD50 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00a5e67e-d81d-4547-b011-580d41cad494.roa Signing time: Tue 10 Feb 2026 00:31:13 +0000 ROA not before: Tue 10 Feb 2026 00:31:13 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:47:31:8d:96:70:5b:5d:d8:f0:8d:fb:ff:3f:7b:6a:e1:41:ad:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:31:13 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=1650ccef92a9c4e6a64985e3fc3c89544e40786d09d00a718c306ab79a217b18, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:00:5a:57:cb:10:62:8b:8c:9b:69:c1:34: 4b:77:24:58:c4:c9:f2:66:7e:a6:a5:0e:46:e4:ff: b5:6e:ca:48:de:b5:79:41:90:18:71:6a:10:73:a7: 08:31:c9:4e:e0:6c:4b:7a:c6:81:eb:f9:80:00:1e: 14:09:fd:ee:74:30:ff:df:fe:4c:9f:83:a8:10:0e: 3e:30:df:2f:03:88:e1:02:6a:2d:a1:37:3b:65:c9: bb:1b:fc:0f:09:3c:99:3a:51:ab:e0:21:6b:0f:64: bc:e3:b7:20:2a:fb:ca:6e:1d:3a:ed:7f:33:46:b3: 3b:49:be:25:d4:27:77:59:fa:28:60:92:4d:01:04: cd:8c:46:65:da:ae:ba:d8:82:8d:be:44:43:9d:34: 86:db:37:9e:a1:cb:8c:57:0b:23:a7:93:38:42:08: 65:f9:31:a7:ae:8d:ae:bb:c7:a7:ac:1d:80:0c:b1: 75:32:a2:a1:f9:63:fd:50:28:71:a5:4d:c4:64:52: 47:80:db:53:63:de:86:3e:e1:80:9b:58:21:e6:0f: 0f:1a:f6:c0:f3:00:37:49:ad:62:2a:ac:7e:e2:3e: 20:dc:9f:d5:83:ad:8d:c0:f7:2a:e4:55:d2:cf:4f: d0:43:bd:b8:99:e9:7e:06:64:5b:53:5f:42:7f:e4: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:47:BA:C9:27:10:2D:FC:90:8B:90:EA:96:AC:C3:18:E7:6D:F2:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00a5e67e-d81d-4547-b011-580d41cad494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.243.0/24 Signature Algorithm: sha256WithRSAEncryption 15:50:61:30:16:d0:1d:95:6c:12:1c:f2:da:49:b9:39:79:9d: 6c:58:a4:2e:75:1f:74:41:8e:b4:7e:56:5c:7c:62:2b:ec:4c: 16:08:3e:76:2c:4e:f9:26:96:78:60:b8:fe:d4:e6:62:5b:c7: c5:d1:0a:27:52:5c:78:99:bd:85:ad:5f:65:a0:d8:97:ca:7e: a5:06:30:39:02:ec:73:3e:11:ee:7e:0f:6e:6a:b2:17:54:ed: d5:8b:f5:3a:d7:6f:dd:55:3b:cd:fd:75:da:21:67:9e:21:52: 93:55:b3:98:c7:0e:cf:3c:42:7c:9a:c1:fb:25:97:20:93:52: c0:96:70:f8:20:90:da:db:fe:85:53:a6:49:82:8d:33:25:39: f9:74:f9:6c:a7:8e:f4:9a:27:7b:d6:fd:95:0f:34:06:3a:59: 69:f5:df:1e:76:c2:1e:65:f2:93:4f:44:af:c5:ab:c8:ec:2a: b9:fd:04:ed:f6:31:f7:84:80:64:9f:8a:ba:11:66:51:c3:e1: c7:c7:eb:ef:b4:fc:cb:ac:0a:0e:a7:d0:7a:55:23:fc:cd:b5: 50:97:93:81:da:a6:5c:d4:da:92:45:23:50:17:2e:11:73:1f: ca:d9:f0:37:3b:69:5e:37:9a:bf:b8:69:0a:f8:d5:ba:38:ff: 9a:14:1c:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXUcxjZZwW13Y8I37/z97auFBrVAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAzMTEzWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjUwY2NlZjkyYTljNGU2YTY0OTg1ZTNmYzNjODk1NDRl NDA3ODZkMDlkMDBhNzE4YzMwNmFiNzlhMjE3YjE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLRgBaV8sQYouMm2nBNEt3JFjEyfJmfqalDkbk/7Vuykje tXlBkBhxahBzpwgxyU7gbEt6xoHr+YAAHhQJ/e50MP/f/kyfg6gQDj4w3y8DiOEC ai2hNztlybsb/A8JPJk6UavgIWsPZLzjtyAq+8puHTrtfzNGsztJviXUJ3dZ+ihg kk0BBM2MRmXarrrYgo2+REOdNIbbN56hy4xXCyOnkzhCCGX5Maeuja67x6esHYAM sXUyoqH5Y/1QKHGlTcRkUkeA21Nj3oY+4YCbWCHmDw8a9sDzADdJrWIqrH7iPiDc n9WDrY3A9yrkVdLPT9BDvbiZ6X4GZFtTX0J/5HiZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy0e6yScQLfyQi5DqlqzDGOdt8rYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAwYTVlNjdlLWQ4MWQtNDU0Ny1iMDExLTU4MGQ0MWNhZDQ5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTfMwDQYJKoZIhvcNAQELBQADggEBABVQYTAW0B2VbBIc8tpJuTl5nWxY pC51H3RBjrR+Vlx8YivsTBYIPnYsTvkmlnhguP7U5mJbx8XRCidSXHiZvYWtX2Wg 2JfKfqUGMDkC7HM+Ee5+D25qshdU7dWL9TrXb91VO839ddohZ54hUpNVs5jHDs88 QnyawfsllyCTUsCWcPggkNrb/oVTpkmCjTMlOfl0+WynjvSaJ3vW/ZUPNAY6WWn1 3x52wh5l8pNPRK/Fq8jsKrn9BO32MfeEgGSfiroRZlHD4cfH6++0/MusCg6n0HpV I/zNtVCXk4HaplzU2pJFI1AXLhFzH8rZ8Dc7aV43mr+4aQr41bo4/5oUHLc= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:09 2026 by rpki-client