$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa File: 5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa (raw, json) Hash identifier: Evsv61rrPdblOltKmNv+srrbC2VzBHYT4RZ/M8p7ihw= Subject key identifier: CA:4D:CF:24:87:F4:5D:9E:3F:A1:47:D4:16:EF:35:25:17:68:A4:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2581A3C6A85ACC23DCA9395821BBE8A26B7496A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa Signing time: Tue 10 Feb 2026 01:01:20 +0000 ROA not before: Tue 10 Feb 2026 01:01:20 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:81:a3:c6:a8:5a:cc:23:dc:a9:39:58:21:bb:e8:a2:6b:74:96:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 01:01:20 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=c2ac9407d1cabc17bfa6ecf2ffe2eb8fb3595feec1f0be8b64d1786e367cb5a4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:c2:cd:93:65:0d:85:6c:1f:e0:99:01:bd: 1f:15:12:b0:f4:dc:6b:d5:9e:25:cc:a6:99:22:83: f8:52:3b:91:bc:ca:36:05:83:bd:b4:71:6e:da:2b: 13:31:b3:fa:5e:16:95:fe:d5:36:28:89:d3:6c:2e: 99:a3:e3:61:b2:84:b6:9b:a4:0a:a6:63:5c:bd:a6: 3b:8b:0c:6e:03:c5:cb:6e:58:2b:42:4b:93:18:cf: e5:ab:df:ce:87:db:c5:f2:9f:ab:7e:fd:1c:0e:a5: 10:86:17:9c:a0:fa:2f:77:2d:02:58:db:d9:77:67: b2:ca:aa:42:a9:f4:f9:94:2a:c5:4c:1d:43:10:11: dc:cf:6d:55:21:2b:08:cb:6e:b9:ac:81:66:9d:a8: 7a:c5:b5:52:a3:a2:b4:9e:1a:5c:97:89:97:b9:6e: 71:36:d7:84:b0:d2:64:ab:90:94:79:84:25:c2:23: f1:8f:60:50:c8:35:c3:41:08:0c:26:63:70:82:ca: 9a:54:56:52:5f:bc:65:cd:c9:f3:3a:f7:0c:79:39: 54:41:5a:fa:5b:c3:7f:a4:22:cd:66:1c:c4:a5:cd: 0b:c1:7c:f0:bc:31:e0:64:5e:8e:f7:fc:90:f7:82: 7c:1f:a1:86:32:c6:cd:87:b2:1d:a4:04:57:3f:9f: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4D:CF:24:87:F4:5D:9E:3F:A1:47:D4:16:EF:35:25:17:68:A4:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bdb2025-7181-439f-8bd8-d1091c1f8d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.249.0/24 Signature Algorithm: sha256WithRSAEncryption 42:ba:29:df:0b:80:c0:e0:86:55:b2:b7:1d:f5:db:dc:31:43: 1b:07:91:a9:2b:d2:fb:8a:bd:f7:70:c8:71:6f:f9:d3:2f:d1: da:d4:c8:77:8e:f8:50:b4:33:74:2f:27:57:26:aa:0d:28:d4: 87:f6:df:04:e0:67:8b:c7:c9:a7:94:1d:56:19:d4:1a:04:78: ef:89:f1:03:b3:8b:b1:3a:5b:82:db:70:2a:e5:e0:8b:51:d1: a3:88:e4:c4:98:9a:64:70:15:2b:b5:17:de:97:55:a2:e9:50: ac:24:54:12:a8:21:3b:36:b1:05:0a:5d:f5:df:06:6d:71:1c: c1:f3:66:40:47:5e:92:8f:96:be:d5:f2:6d:2d:87:f2:03:61: d0:cd:c9:ff:45:48:56:cf:d6:b6:2e:a5:14:84:9b:84:fd:6a: da:5b:1c:d0:ce:24:8d:71:e5:49:2c:65:30:64:a0:bf:7b:96: 44:e3:0a:7f:eb:f8:ce:ad:54:37:b0:5c:6c:ad:d0:8d:2d:95: 1e:e2:74:09:b2:d3:46:24:46:c0:d3:4d:85:5e:47:ed:b8:1e: 05:b8:3a:94:e4:05:69:15:36:8a:54:00:af:81:41:f0:91:d3: fd:32:5d:93:bc:ba:b1:85:9b:4c:99:d5:62:f6:24:c0:29:5c: 9e:c7:4d:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJYGjxqhazCPcqTlYIbvoomt0lqkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDEwMTIwWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmFjOTQwN2QxY2FiYzE3YmZhNmVjZjJmZmUyZWI4ZmIz NTk1ZmVlYzFmMGJlOGI2NGQxNzg2ZTM2N2NiNWE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtX8LNk2UNhWwf4JkBvR8VErD03GvVniXMppkig/hSO5G8 yjYFg720cW7aKxMxs/peFpX+1TYoidNsLpmj42GyhLabpAqmY1y9pjuLDG4Dxctu WCtCS5MYz+Wr386H28Xyn6t+/RwOpRCGF5yg+i93LQJY29l3Z7LKqkKp9PmUKsVM HUMQEdzPbVUhKwjLbrmsgWadqHrFtVKjorSeGlyXiZe5bnE214Sw0mSrkJR5hCXC I/GPYFDINcNBCAwmY3CCyppUVlJfvGXNyfM69wx5OVRBWvpbw3+kIs1mHMSlzQvB fPC8MeBkXo73/JD3gnwfoYYyxs2Hsh2kBFc/n3PdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyk3PJIf0XZ4/oUfUFu81JRdopCkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViZGIyMDI1LTcxODEtNDM5Zi04YmQ4LWQxMDkxYzFmOGQ3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTfkwDQYJKoZIhvcNAQELBQADggEBAEK6Kd8LgMDghlWytx3129wxQxsH kakr0vuKvfdwyHFv+dMv0drUyHeO+FC0M3QvJ1cmqg0o1If23wTgZ4vHyaeUHVYZ 1BoEeO+J8QOzi7E6W4LbcCrl4ItR0aOI5MSYmmRwFSu1F96XVaLpUKwkVBKoITs2 sQUKXfXfBm1xHMHzZkBHXpKPlr7V8m0th/IDYdDNyf9FSFbP1rYupRSEm4T9atpb HNDOJI1x5UksZTBkoL97lkTjCn/r+M6tVDewXGyt0I0tlR7idAmy00YkRsDTTYVe R+24HgW4OpTkBWkVNopUAK+BQfCR0/0yXZO8urGFm0yZ1WL2JMApXJ7HTW0= -----END CERTIFICATE-----Generated at Mon Mar 2 01:49:12 2026 by rpki-client