$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa File: 6c4df158-4435-4ebb-ac08-61aded4b3360.roa (raw, json) Hash identifier: KJtTbR2xjEAlc3yN4irRfryFZwMOWXrEN/1SHMexQCc= Subject key identifier: 3A:CB:5A:0C:E8:D5:57:74:85:04:DC:DC:16:5D:BF:52:91:51:29:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66A7962B4849361D3E3E0330C65BC2F58B82B7A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa Signing time: Sun 01 Mar 2026 00:00:08 +0000 ROA not before: Sun 01 Mar 2026 00:00:08 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a7:96:2b:48:49:36:1d:3e:3e:03:30:c6:5b:c2:f5:8b:82:b7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:00:08 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=1b8bc4f7f50881109c0f02bf5eb5f63e204277818941d69ac882fe2ef1c848d1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:ce:21:65:be:13:bc:27:26:37:14:d0:b1: 6c:a2:16:d3:e3:ab:d5:84:b0:25:40:c9:e1:e6:88: 51:69:cb:e1:56:55:1e:f2:d4:bd:9f:67:ab:a9:3e: 3c:89:d9:83:3a:3e:01:13:ae:e8:30:9c:63:d7:d6: 05:34:91:95:22:51:ec:5e:a2:c1:4f:d5:04:ef:f3: 36:66:f5:03:d8:91:81:ef:27:9d:09:88:79:2c:41: 52:ff:66:40:cd:e4:8a:c5:5d:e2:b3:04:da:46:98: 6c:af:ef:7f:de:85:f0:e5:91:8c:69:c3:11:bb:a1: c4:c7:b8:da:db:45:21:2d:16:b0:de:65:c2:09:2e: 01:cb:32:44:5d:4b:0d:f9:a2:39:80:45:16:03:00: 28:13:cf:27:90:65:e8:42:c4:92:cb:70:9c:d6:28: 16:54:f2:ce:4e:53:26:3c:25:f3:2f:53:17:e6:7d: b3:6a:bf:a9:34:6a:8b:0a:f3:ef:cf:e7:9c:f9:36: b9:5e:91:9a:5c:ca:a6:7d:e5:af:19:f2:68:59:36: 42:c6:83:db:59:55:84:3b:2f:a4:c4:5e:a7:5a:5b: c0:8e:5c:33:a3:bb:40:91:c4:88:d9:97:9c:a5:37: 45:50:fd:1c:a4:20:48:9a:ec:de:a0:6f:3d:4a:96: e4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CB:5A:0C:E8:D5:57:74:85:04:DC:DC:16:5D:BF:52:91:51:29:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.147.0/24 Signature Algorithm: sha256WithRSAEncryption 11:15:e9:9e:7d:4c:b6:8b:b4:e7:14:d6:74:fe:5d:78:6d:05: 6a:db:cf:9b:3b:6c:0a:05:21:6d:78:25:4b:bd:fa:21:25:a3: 04:67:55:3a:d2:74:e9:8c:e4:c1:e9:cf:8a:94:ac:1c:3e:d5: da:1a:fb:20:73:de:81:a2:21:89:8b:b2:92:a6:8c:18:1c:b1: ac:ac:2e:64:ac:fc:e0:df:e4:0f:3f:3c:fa:17:70:b3:44:fc: 98:28:2f:3d:0e:01:fc:00:6e:7e:ac:f6:5d:22:7a:dd:4e:47: 90:13:1d:08:aa:0e:b4:56:85:88:f3:f3:8e:93:d3:b8:c1:f0: de:3f:cb:17:95:1d:ee:11:f5:aa:1a:d3:c2:ed:5a:49:2d:01: e0:62:49:da:3e:6e:32:13:9a:a3:de:15:6f:4c:61:01:f7:ea: 28:f6:de:f6:6b:c6:ee:fd:ef:4d:1d:cf:61:f9:44:ac:28:5e: 14:08:47:57:d8:9d:db:55:a4:04:b6:c8:d2:85:b3:06:50:56: 68:d5:cd:bf:ad:64:40:5c:8e:61:9d:db:6b:40:39:71:70:72: 6a:60:dd:19:54:05:be:e5:79:5e:51:b5:96:ff:3e:a5:9c:61: 4c:a7:1a:80:a0:aa:30:6b:bd:27:fb:6d:27:b6:c9:6d:a3:c8: 9d:28:33:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZqeWK0hJNh0+PgMwxlvC9YuCt6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAwMDA4WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjhiYzRmN2Y1MDg4MTEwOWMwZjAyYmY1ZWI1ZjYzZTIw NDI3NzgxODk0MWQ2OWFjODgyZmUyZWYxYzg0OGQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLRs4hZb4TvCcmNxTQsWyiFtPjq9WEsCVAyeHmiFFpy+FW VR7y1L2fZ6upPjyJ2YM6PgETrugwnGPX1gU0kZUiUexeosFP1QTv8zZm9QPYkYHv J50JiHksQVL/ZkDN5IrFXeKzBNpGmGyv73/ehfDlkYxpwxG7ocTHuNrbRSEtFrDe ZcIJLgHLMkRdSw35ojmARRYDACgTzyeQZehCxJLLcJzWKBZU8s5OUyY8JfMvUxfm fbNqv6k0aosK8+/P55z5NrlekZpcyqZ95a8Z8mhZNkLGg9tZVYQ7L6TEXqdaW8CO XDOju0CRxIjZl5ylN0VQ/RykIEia7N6gbz1KluTXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOstaDOjVV3SFBNzcFl2/UpFRKWowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjNGRmMTU4LTQ0MzUtNGViYi1hYzA4LTYxYWRlZDRiMzM2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTZMwDQYJKoZIhvcNAQELBQADggEBABEV6Z59TLaLtOcU1nT+XXhtBWrb z5s7bAoFIW14JUu9+iElowRnVTrSdOmM5MHpz4qUrBw+1doa+yBz3oGiIYmLspKm jBgcsaysLmSs/ODf5A8/PPoXcLNE/JgoLz0OAfwAbn6s9l0iet1OR5ATHQiqDrRW hYjz846T07jB8N4/yxeVHe4R9aoa08LtWkktAeBiSdo+bjITmqPeFW9MYQH36ij2 3vZrxu79700dz2H5RKwoXhQIR1fYndtVpAS2yNKFswZQVmjVzb+tZEBcjmGd22tA OXFwcmpg3RlUBb7leV5RtZb/PqWcYUynGoCgqjBrvSf7bSe2yW2jyJ0oMzQ= -----END CERTIFICATE-----Generated at Mon Mar 2 00:14:36 2026 by rpki-client