$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/426694d3-1d25-4b91-8c8e-a25d6bb68d3a.roa File: 426694d3-1d25-4b91-8c8e-a25d6bb68d3a.roa (raw, json) Hash identifier: zDJivsjUVR/FDE9RVR8gOpjFvBLF39uUwOa8GzUJU5E= Subject key identifier: 51:A0:E9:92:83:64:C0:F6:92:59:7D:90:C6:63:6C:F3:A8:84:CB:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71E3889EFF8F260A71F6961A77ACF3E2F5183E98 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/426694d3-1d25-4b91-8c8e-a25d6bb68d3a.roa Signing time: Sun 15 Feb 2026 00:00:29 +0000 ROA not before: Sun 15 Feb 2026 00:00:29 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e3:88:9e:ff:8f:26:0a:71:f6:96:1a:77:ac:f3:e2:f5:18:3e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:00:29 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=1a68d472d044e992b33680ae515ff7b8b68284b71b9228b984bc4dbcf799f87b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:0d:55:3a:43:42:38:02:0a:cb:15:72:09: 8a:cb:dd:3c:9d:1b:38:43:b8:80:9b:19:5f:e7:75: ee:35:0c:a6:51:e3:f9:4a:8e:f5:14:ac:d7:2e:7a: d0:ca:bb:3d:2c:b6:39:62:c5:ad:2c:58:7c:b1:66: af:6f:fe:9c:55:83:64:4c:57:ec:64:26:56:7a:24: 47:4b:56:7e:17:1c:11:94:7b:e4:eb:07:97:96:1d: ba:a2:c2:72:3e:8e:5d:a6:d7:66:5f:c0:03:07:f2: 30:36:37:f2:d9:cd:96:78:2f:cf:87:50:d4:4f:2e: 02:7b:85:76:ef:30:03:45:f5:16:cf:11:2d:f3:0f: ae:62:94:d3:57:fe:32:77:f4:df:4a:c5:69:ac:7b: 60:c4:52:57:0c:37:00:30:84:02:0d:5f:24:17:b6: 09:e1:4d:32:c0:f9:5a:7f:ad:55:19:09:ed:55:bf: 5d:af:99:c9:95:1a:39:ab:2e:5e:3c:b0:00:20:64: c2:3c:d5:03:e7:7d:02:d2:b5:c8:3c:66:c7:9f:0e: c9:8d:cc:bf:23:f9:20:42:c6:ae:d7:ba:2b:3c:64: 24:a5:35:35:a3:c1:30:9e:d2:52:75:96:cd:be:e9: bd:a7:67:24:f0:af:25:13:19:fd:ef:4d:f3:aa:88: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A0:E9:92:83:64:C0:F6:92:59:7D:90:C6:63:6C:F3:A8:84:CB:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/426694d3-1d25-4b91-8c8e-a25d6bb68d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.16.0/23 Signature Algorithm: sha256WithRSAEncryption cf:e0:81:33:ed:9c:ca:8a:f9:9a:67:18:0f:8c:49:ba:0e:72: 51:36:aa:00:3c:b5:e9:8d:6e:b6:d3:c6:e6:00:8c:5b:4b:a5: 25:68:0d:65:82:a1:2c:6f:9d:cd:ef:df:21:59:98:75:4d:34: 0d:ce:e0:7d:c4:82:94:11:19:bf:ae:94:2b:c8:95:96:74:c9: d2:a7:76:50:b1:9e:9a:92:76:00:31:dd:ce:8e:56:b9:d9:d6: d3:1b:ea:07:36:b6:b0:24:2a:06:b4:25:34:7b:63:56:cc:1d: 3e:34:7d:b7:5c:ec:f4:a9:3c:dd:d0:34:49:df:21:a3:1f:e8: f0:e8:9f:a7:f1:ab:b4:da:7a:ae:52:39:0e:fb:74:a6:36:cd: 93:a8:f8:1b:f9:6e:fc:38:ab:fa:8e:61:09:38:44:54:76:08: fa:01:28:5a:48:87:01:71:c5:b7:f4:59:4a:9d:45:8b:c2:47: 25:3c:e6:3a:00:eb:6f:30:37:ea:a8:89:8a:97:ab:4e:27:05: a6:4d:98:5d:d4:2d:0e:d7:1c:0a:be:a6:52:66:1b:46:bd:d5: 16:80:53:8f:16:1c:ad:54:fd:46:cb:04:ba:cf:cf:77:24:8f: 59:e6:3c:05:c7:43:c7:ac:8d:33:a7:2d:60:a0:df:d3:79:9d: e4:4c:ce:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUceOInv+PJgpx9pYad6zz4vUYPpgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAwMDI5WhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTY4ZDQ3MmQwNDRlOTkyYjMzNjgwYWU1MTVmZjdiOGI2 ODI4NGI3MWI5MjI4Yjk4NGJjNGRiY2Y3OTlmODdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvsg1VOkNCOAIKyxVyCYrL3TydGzhDuICbGV/nde41DKZR 4/lKjvUUrNcuetDKuz0stjlixa0sWHyxZq9v/pxVg2RMV+xkJlZ6JEdLVn4XHBGU e+TrB5eWHbqiwnI+jl2m12ZfwAMH8jA2N/LZzZZ4L8+HUNRPLgJ7hXbvMANF9RbP ES3zD65ilNNX/jJ39N9KxWmse2DEUlcMNwAwhAINXyQXtgnhTTLA+Vp/rVUZCe1V v12vmcmVGjmrLl48sAAgZMI81QPnfQLStcg8ZsefDsmNzL8j+SBCxq7Xuis8ZCSl NTWjwTCe0lJ1ls2+6b2nZyTwryUTGf3vTfOqiK9RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUaDpkoNkwPaSWX2QxmNs86iEyykwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyNjY5NGQzLTFkMjUtNGI5MS04YzhlLWEyNWQ2YmI2OGQzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjlhAwDQYJKoZIhvcNAQELBQADggEBAM/ggTPtnMqK+ZpnGA+MSboOclE2 qgA8temNbrbTxuYAjFtLpSVoDWWCoSxvnc3v3yFZmHVNNA3O4H3EgpQRGb+ulCvI lZZ0ydKndlCxnpqSdgAx3c6OVrnZ1tMb6gc2trAkKga0JTR7Y1bMHT40fbdc7PSp PN3QNEnfIaMf6PDon6fxq7Taeq5SOQ77dKY2zZOo+Bv5bvw4q/qOYQk4RFR2CPoB KFpIhwFxxbf0WUqdRYvCRyU85joA628wN+qoiYqXq04nBaZNmF3ULQ7XHAq+plJm G0a91RaAU48WHK1U/UbLBLrPz3ckj1nmPAXHQ8esjTOnLWCg39N5neRMzkA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:07 2026 by rpki-client