$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa File: 4644ff0b-fedf-419f-93c4-1665a93ad50b.roa (raw, json) Hash identifier: 2O7lxstu2mgbS2VYgR0uAmfk/lst1FE8O+pdjnCsP8E= Subject key identifier: EA:E9:AF:7E:AE:BC:30:7B:EA:49:38:3B:5A:D2:1D:39:C8:30:16:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 448081A47F303903BC1F6DE11EE7AFC5076D8862 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa Signing time: Sun 15 Feb 2026 00:20:05 +0000 ROA not before: Sun 15 Feb 2026 00:20:05 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:80:81:a4:7f:30:39:03:bc:1f:6d:e1:1e:e7:af:c5:07:6d:88:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:20:05 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=713dd9c6a157b8e3d624a84d7a0d2553efc75d653b00aae3d6eee784c615240b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:5a:08:63:fd:81:40:25:e7:34:1c:2f:04: 7d:69:1e:6c:9c:71:89:82:4b:ef:ad:0f:eb:58:e5: 2c:68:05:b9:55:32:2f:fc:2b:42:08:c8:c9:78:b6: f4:73:91:e9:94:f4:e4:5d:9d:f0:ee:1e:75:83:be: 03:c0:39:75:5f:a0:ca:65:30:85:37:0a:e9:fd:8b: d3:2a:7d:41:98:9c:8b:7e:29:18:36:88:0d:ac:40: 93:fc:92:d6:20:f1:86:39:75:6c:c2:8f:b0:62:a4: 22:a2:a9:53:ab:38:c7:75:4b:3f:ed:95:4f:28:8c: 0b:38:11:24:06:b1:45:db:7c:81:eb:5f:05:8f:2a: be:9d:5d:8b:a3:c1:67:bf:64:9d:56:12:14:ed:2b: c3:d2:45:bc:c6:13:97:a9:c9:5e:fe:5b:27:b1:b1: 4d:af:2b:d1:0c:99:26:a9:03:f1:8f:65:4b:36:0e: c9:5b:96:3b:be:31:be:ff:c6:23:ab:aa:15:0c:2d: b3:5a:7a:19:73:a0:64:4f:f6:69:32:a9:62:47:b0: b3:5a:65:b0:61:d8:2c:68:ff:63:fe:b6:bb:2c:35: 3a:db:31:7f:31:44:ea:4c:d9:e9:ec:4e:e0:d2:d0: 5f:26:26:7c:35:76:38:f8:d8:8e:59:27:00:f1:a4: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:AF:7E:AE:BC:30:7B:EA:49:38:3B:5A:D2:1D:39:C8:30:16:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4644ff0b-fedf-419f-93c4-1665a93ad50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.80.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:16:92:a0:84:3c:83:a1:55:03:49:c5:4c:7e:6c:43:06:7e: f1:b4:7b:50:11:f1:29:59:6d:08:e1:d6:2e:a0:22:5d:1b:a5: 50:4e:3e:06:35:97:3d:81:d6:65:df:f8:c9:fa:c4:5c:70:d5: 5c:31:94:9d:46:fc:0a:97:62:32:64:5c:93:4a:18:f6:06:82: 1c:32:d4:e2:81:b7:93:0d:81:69:53:64:86:7d:92:05:fb:77: cf:24:41:48:6a:29:d3:38:8d:05:dc:8a:c0:b7:36:d8:88:62: fa:90:31:aa:5d:70:d0:9c:f6:e3:26:b6:b5:1c:1e:6c:73:94: 2d:61:1f:55:bc:96:c3:9c:65:22:a3:a8:41:0b:01:b0:d3:dd: a3:aa:bb:1c:e0:b7:9b:fa:df:5f:7e:62:61:38:4b:2f:6d:0f: 9b:10:9a:71:bd:a2:f3:a2:e3:68:47:cc:21:07:94:91:b6:1f: 7a:65:31:b9:21:06:d1:ae:f6:49:fe:92:d3:2b:74:d8:5f:82: 77:8a:c2:07:57:8f:25:33:76:94:12:27:dd:72:3d:5b:be:0e: 1a:bb:1f:37:96:5f:d1:74:29:a5:b3:e4:7e:1a:93:eb:45:4f: e4:ef:ae:db:4c:16:9a:bc:ff:b1:85:3b:10:80:5d:92:b6:97: cd:1f:e7:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURICBpH8wOQO8H23hHuevxQdtiGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAyMDA1WhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTNkZDljNmExNTdiOGUzZDYyNGE4NGQ3YTBkMjU1M2Vm Yzc1ZDY1M2IwMGFhZTNkNmVlZTc4NGM2MTUyNDBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkploIY/2BQCXnNBwvBH1pHmyccYmCS++tD+tY5SxoBblV Mi/8K0IIyMl4tvRzkemU9ORdnfDuHnWDvgPAOXVfoMplMIU3Cun9i9MqfUGYnIt+ KRg2iA2sQJP8ktYg8YY5dWzCj7BipCKiqVOrOMd1Sz/tlU8ojAs4ESQGsUXbfIHr XwWPKr6dXYujwWe/ZJ1WEhTtK8PSRbzGE5epyV7+WyexsU2vK9EMmSapA/GPZUs2 Dslblju+Mb7/xiOrqhUMLbNaehlzoGRP9mkyqWJHsLNaZbBh2Cxo/2P+trssNTrb MX8xROpM2ensTuDS0F8mJnw1djj42I5ZJwDxpHafAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6umvfq68MHvqSTg7WtIdOcgwFlAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NDRmZjBiLWZlZGYtNDE5Zi05M2M0LTE2NjVhOTNhZDUwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjl1AwDQYJKoZIhvcNAQELBQADggEBACwWkqCEPIOhVQNJxUx+bEMGfvG0 e1AR8SlZbQjh1i6gIl0bpVBOPgY1lz2B1mXf+Mn6xFxw1VwxlJ1G/AqXYjJkXJNK GPYGghwy1OKBt5MNgWlTZIZ9kgX7d88kQUhqKdM4jQXcisC3NtiIYvqQMapdcNCc 9uMmtrUcHmxzlC1hH1W8lsOcZSKjqEELAbDT3aOquxzgt5v6319+YmE4Sy9tD5sQ mnG9ovOi42hHzCEHlJG2H3plMbkhBtGu9kn+ktMrdNhfgneKwgdXjyUzdpQSJ91y PVu+Dhq7HzeWX9F0KaWz5H4ak+tFT+TvrttMFpq8/7GFOxCAXZK2l80f50c= -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:36 2026 by rpki-client