$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02990819-f2e0-4de8-bb2a-00a87a7262dd.roa File: 02990819-f2e0-4de8-bb2a-00a87a7262dd.roa (raw, json) Hash identifier: w6gebFlDRECztDoKInJAomr3dfEPD9JfF3NmnRPknEs= Subject key identifier: 62:E7:5E:91:A8:26:C5:9A:8E:EC:A5:FC:28:85:28:C8:3F:63:20:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3486259E2735145B30FDC1E68187288D4074290A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02990819-f2e0-4de8-bb2a-00a87a7262dd.roa Signing time: Wed 18 Feb 2026 00:11:16 +0000 ROA not before: Wed 18 Feb 2026 00:11:16 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 121.95.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:86:25:9e:27:35:14:5b:30:fd:c1:e6:81:87:28:8d:40:74:29:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:11:16 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=2829ac35f85692fbc96ce9e28db33f268b9f991e4bdecbe32e42c6642466f095, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7d:e9:6c:bd:d5:02:9c:12:40:ce:a5:ed:ee: 91:6e:07:bd:2f:1c:ee:fe:2d:9b:50:1b:77:3c:4b: 27:c6:6a:a9:c4:4b:7e:06:a1:fa:e1:5a:19:68:6a: 57:c9:3f:7e:79:76:e7:c6:b1:2b:31:0a:cd:97:95: 00:96:23:06:bc:ce:62:9b:d7:54:38:0e:a8:a7:a8: 2a:79:59:38:6e:b8:b2:f5:b1:1e:80:52:40:8f:64: 93:d1:28:d7:c4:02:a2:69:a9:dd:84:3a:aa:dc:b4: 38:c3:56:a5:7e:e0:ca:8f:c9:d3:13:d7:c7:0a:45: a0:46:f0:75:da:b0:6b:c0:ce:0c:f2:9d:4d:5d:bc: 70:f7:cb:3d:27:e3:2e:12:59:99:4e:4a:8a:32:62: 47:a3:b7:52:0d:4f:11:77:48:6d:d4:78:b6:f3:8c: 46:1e:bf:b5:03:92:19:ca:9e:1e:1c:1f:b3:af:47: 96:ed:80:5b:8f:04:be:fa:c8:a2:57:ff:dc:92:aa: d2:df:5d:f4:74:87:ce:d0:89:d8:c3:7c:bc:ec:e1: f8:b7:68:d3:34:02:80:c2:a2:c2:82:5f:35:eb:76: 7b:bb:f0:84:d8:82:17:c7:48:19:e3:4a:97:fa:dc: cb:d3:3f:cb:44:91:6f:3d:79:bb:b0:a7:3a:5c:69: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E7:5E:91:A8:26:C5:9A:8E:EC:A5:FC:28:85:28:C8:3F:63:20:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02990819-f2e0-4de8-bb2a-00a87a7262dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.95.0.0/18 Signature Algorithm: sha256WithRSAEncryption d5:5b:88:ce:75:51:f2:88:96:1a:bf:0e:f9:2d:e4:93:ca:c1: f7:fe:0c:54:6d:40:e2:90:95:d1:09:88:af:32:11:a6:14:15: bd:88:54:7b:fc:50:16:80:f3:ca:a8:70:dc:4a:90:35:a6:1f: 99:55:9c:40:72:41:db:f6:59:f4:62:a1:1f:49:75:02:75:d8: 60:63:c7:7c:53:eb:46:1f:1a:7a:c2:96:e2:5f:33:bb:64:d1: b3:22:1c:75:1a:1c:ca:c2:32:a4:bd:a0:59:a4:fc:5b:f5:0f: 7d:22:91:ff:72:6a:f5:b3:44:a2:0a:43:81:0f:9f:c5:02:e3: 1c:ac:3b:f0:33:44:b2:ef:09:a5:9d:a0:a7:a5:7b:5e:14:12: 73:af:eb:78:66:78:91:d8:b6:c1:c2:2b:5a:d9:09:cc:4d:3d: 4d:af:06:a3:dd:71:fb:3f:f9:5d:66:5d:d1:6b:21:4a:90:5b: 27:a2:5c:46:16:2f:d7:ad:d1:06:8c:f1:00:08:9c:42:94:cd: 46:2d:a1:d8:04:08:57:a9:e7:2e:14:02:9c:6f:20:27:6b:31: 6f:cd:90:65:a7:32:8c:d5:db:58:d6:61:2a:06:83:5b:a4:51: 8a:23:e7:de:0e:92:f9:7e:28:99:f4:28:83:b1:07:3c:54:e8: 31:b7:7a:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNIYlnic1FFsw/cHmgYcojUB0KQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAxMTE2WhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODI5YWMzNWY4NTY5MmZiYzk2Y2U5ZTI4ZGIzM2YyNjhi OWY5OTFlNGJkZWNiZTMyZTQyYzY2NDI0NjZmMDk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZfelsvdUCnBJAzqXt7pFuB70vHO7+LZtQG3c8SyfGaqnE S34GofrhWhloalfJP355dufGsSsxCs2XlQCWIwa8zmKb11Q4DqinqCp5WThuuLL1 sR6AUkCPZJPRKNfEAqJpqd2EOqrctDjDVqV+4MqPydMT18cKRaBG8HXasGvAzgzy nU1dvHD3yz0n4y4SWZlOSooyYkejt1INTxF3SG3UeLbzjEYev7UDkhnKnh4cH7Ov R5btgFuPBL76yKJX/9ySqtLfXfR0h87QidjDfLzs4fi3aNM0AoDCosKCXzXrdnu7 8ITYghfHSBnjSpf63MvTP8tEkW89ebuwpzpcafRNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYudekagmxZqO7KX8KIUoyD9jINwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyOTkwODE5LWYyZTAtNGRlOC1iYjJhLTAwYTg3YTcyNjJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ5XwAwDQYJKoZIhvcNAQELBQADggEBANVbiM51UfKIlhq/Dvkt5JPKwff+ DFRtQOKQldEJiK8yEaYUFb2IVHv8UBaA88qocNxKkDWmH5lVnEByQdv2WfRioR9J dQJ12GBjx3xT60YfGnrCluJfM7tk0bMiHHUaHMrCMqS9oFmk/Fv1D30ikf9yavWz RKIKQ4EPn8UC4xysO/AzRLLvCaWdoKele14UEnOv63hmeJHYtsHCK1rZCcxNPU2v BqPdcfs/+V1mXdFrIUqQWyeiXEYWL9et0QaM8QAInEKUzUYtodgECFep5y4UApxv ICdrMW/NkGWnMozV21jWYSoGg1ukUYoj594Okvl+KJn0KIOxBzxU6DG3eo0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:20:06 2026 by rpki-client