$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa File: 259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa (raw, json) Hash identifier: LQtoumnQ+1zv/qpL9LLjftssH7+JYFq7+v5VWUPug0E= Subject key identifier: C2:2D:61:7C:0E:D6:59:DB:C9:43:B5:1D:E0:5A:40:2F:E4:E6:09:27 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1CBE50424262D2030C639B36ADD82D1D0E3507AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa Signing time: Fri 06 Feb 2026 00:10:41 +0000 ROA not before: Fri 06 Feb 2026 00:10:41 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 98.88.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:be:50:42:42:62:d2:03:0c:63:9b:36:ad:d8:2d:1d:0e:35:07:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:10:41 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=e1bc12a66dd95559ac4719be8be181dff4c78d4602714730a78ffaf1ae8e6e7f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:53:25:c5:76:f2:b9:23:07:74:fd:70:fb: 49:b4:53:cc:5c:10:8e:3c:7c:07:db:67:92:ad:2a: c0:68:dd:3b:af:46:9c:4f:cf:83:36:d8:a7:2f:d1: 0b:c6:61:cd:4c:7e:b7:56:84:c8:d4:d6:83:41:de: 1d:12:95:7a:99:e5:ca:31:0b:ad:65:d5:8c:62:cf: 9d:47:40:19:d3:8d:92:ab:cc:c5:47:ed:fe:fc:bb: df:4d:91:9d:f2:0c:f5:98:72:38:46:64:f6:85:d4: 05:c7:cf:e7:a8:78:c6:fe:70:d6:94:c3:e1:14:97: 5b:97:82:53:07:55:aa:77:ad:c1:04:28:26:94:aa: f7:fe:3a:63:a5:05:c3:62:5d:16:e4:26:48:1b:f5: 17:23:f2:fd:91:3c:e2:24:b2:f2:5f:3c:ad:41:cd: c9:6c:c2:cc:29:ec:20:e3:fa:48:f2:ce:fb:8a:ee: a5:e2:8e:0d:02:36:82:12:89:c0:4b:b5:0e:3f:2f: a8:c0:4a:2f:36:26:19:a4:26:f2:53:b0:b0:23:57: b9:7d:5b:bf:17:ba:f3:80:7a:ba:33:89:a7:ae:3a: 4d:11:bb:cf:52:63:6d:06:90:9c:e0:e1:3e:cb:95: 17:2a:d0:84:04:19:45:98:ca:79:b1:75:41:c5:6a: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2D:61:7C:0E:D6:59:DB:C9:43:B5:1D:E0:5A:40:2F:E4:E6:09:27 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.88.0.0/13 Signature Algorithm: sha256WithRSAEncryption 68:69:a9:dd:7a:b2:5f:79:f2:76:9a:16:72:58:95:39:27:47: dd:b1:8a:a2:52:6d:2f:27:1e:04:9f:de:42:af:e6:02:6a:a1: cf:dd:c8:95:36:a1:5a:4c:66:ca:9b:2a:ac:10:d2:12:0a:cb: cf:ac:6d:98:df:c1:74:8d:ba:9b:0d:1e:2c:c7:65:67:9b:36: ef:1a:64:a0:8d:5b:79:a4:34:05:b7:0e:34:76:fa:cf:84:75: b4:b8:d9:12:ae:95:b7:00:fb:3e:95:54:83:a8:71:f4:a6:bb: a3:02:d5:cf:f2:64:e4:f4:33:b1:09:f3:b6:2a:97:0c:55:6d: d1:9c:e4:16:0b:91:25:62:71:71:1e:44:b7:3e:d6:78:c8:3a: 06:e9:ad:8c:44:21:b5:32:bf:94:75:ae:63:7b:d0:e3:0f:57: 3e:ee:49:01:65:6b:9b:d1:85:23:56:5a:65:ef:ad:2e:31:5a: db:2c:b6:64:97:62:1a:0f:5a:48:1f:6d:cc:30:51:3a:64:d4: 05:5a:6d:65:63:8b:c7:83:2e:c6:b1:d4:84:da:71:7a:76:cb: a3:a7:1b:38:c9:6f:32:54:08:77:f5:ac:09:5f:c5:11:ef:ea: 3b:f2:9d:2d:da:a4:9a:e3:36:4e:9f:5d:78:e4:57:40:7b:fe: 76:52:48:7f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHL5QQkJi0gMMY5s2rdgtHQ41B64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAxMDQxWhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMWJjMTJhNjZkZDk1NTU5YWM0NzE5YmU4YmUxODFkZmY0 Yzc4ZDQ2MDI3MTQ3MzBhNzhmZmFmMWFlOGU2ZTdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWDFMlxXbyuSMHdP1w+0m0U8xcEI48fAfbZ5KtKsBo3Tuv RpxPz4M22Kcv0QvGYc1MfrdWhMjU1oNB3h0SlXqZ5coxC61l1Yxiz51HQBnTjZKr zMVH7f78u99NkZ3yDPWYcjhGZPaF1AXHz+eoeMb+cNaUw+EUl1uXglMHVap3rcEE KCaUqvf+OmOlBcNiXRbkJkgb9Rcj8v2RPOIksvJfPK1Bzclswswp7CDj+kjyzvuK 7qXijg0CNoISicBLtQ4/L6jASi82JhmkJvJTsLAjV7l9W78XuvOAeroziaeuOk0R u89SY20GkJzg4T7LlRcq0IQEGUWYynmxdUHFaqRpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwi1hfA7WWdvJQ7Ud4FpAL+TmCScwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1OWQ3N2M4LWIwNzItNGQ3YS1iYzMzLWFjNWVmMWZhZGZlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNiWDANBgkqhkiG9w0BAQsFAAOCAQEAaGmp3XqyX3nydpoWcliVOSdH3bGK olJtLyceBJ/eQq/mAmqhz93IlTahWkxmypsqrBDSEgrLz6xtmN/BdI26mw0eLMdl Z5s27xpkoI1beaQ0BbcONHb6z4R1tLjZEq6VtwD7PpVUg6hx9Ka7owLVz/Jk5PQz sQnztiqXDFVt0ZzkFguRJWJxcR5Etz7WeMg6BumtjEQhtTK/lHWuY3vQ4w9XPu5J AWVrm9GFI1ZaZe+tLjFa2yy2ZJdiGg9aSB9tzDBROmTUBVptZWOLx4MuxrHUhNpx enbLo6cbOMlvMlQId/WsCV/FEe/qO/KdLdqkmuM2Tp9deORXQHv+dlJIfw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:08:18 2026 by rpki-client