$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa File: 7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa (raw, json) Hash identifier: YfIQB6Y4P4VngQM1M6vg/5Ykwvz3iO2KjPEi3hCU2WI= Subject key identifier: 3A:9C:73:2E:5F:76:14:0F:B7:52:83:AF:36:DB:2E:FF:81:63:EB:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1242FF10220A2B57F42012B3159D0B643452D19D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa Signing time: Sun 15 Feb 2026 00:21:41 +0000 ROA not before: Sun 15 Feb 2026 00:21:41 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:42:ff:10:22:0a:2b:57:f4:20:12:b3:15:9d:0b:64:34:52:d1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:21:41 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=14134d8e9db55ddd97e513b3ec1a73a2f5c9a44fd4a10cfebd1390492842e82e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:87:48:7d:79:27:2b:56:0e:a0:66:64:2e:5c: 52:8a:cd:0d:7f:bf:6b:86:e8:65:9f:a9:42:03:5e: ae:6c:52:78:fa:b1:cd:47:fc:64:9d:d8:82:b5:52: 93:2e:27:52:21:1e:91:05:6f:bf:81:bf:8d:1e:8e: d3:d1:53:81:f3:af:65:f0:8a:c7:7c:18:f8:ca:f5: 6d:5b:4a:03:b1:d9:56:59:a1:c9:18:99:b2:14:4f: d6:26:64:d8:68:e6:66:77:2e:8b:7a:45:42:cf:07: 73:f8:cb:04:ac:d0:28:4c:08:01:43:0c:d4:95:46: 86:98:80:d3:aa:87:b9:d4:a6:6a:6d:43:e1:7e:12: 54:f5:bb:3e:81:0b:c0:a6:d7:59:5f:cc:2b:e0:15: 1d:aa:4d:09:a7:67:81:fd:1b:0f:72:e7:b4:aa:55: ee:b9:bb:64:82:e0:83:67:2c:53:93:8c:ca:c9:4e: 22:ea:b9:c6:d1:d5:c3:2a:4f:9f:39:05:1b:34:f4: 58:6d:a1:c4:b5:fc:b2:bc:53:95:f3:3b:5f:0f:fa: b0:f5:ba:02:86:67:c8:74:c6:b7:e0:9d:d7:cc:ae: 45:d5:13:9d:a8:89:96:84:8b:d0:c5:ff:ee:1a:c2: 7a:4e:80:f5:93:74:ff:01:cc:8a:9d:62:87:2f:94: 83:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9C:73:2E:5F:76:14:0F:B7:52:83:AF:36:DB:2E:FF:81:63:EB:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.0.0/21 Signature Algorithm: sha256WithRSAEncryption 85:d6:36:1c:92:82:5f:77:38:97:84:7d:8c:58:36:31:6b:ef: 25:32:97:b3:de:aa:52:90:b4:71:73:ff:7c:a2:98:25:a3:03: 1f:7e:f3:5c:b1:4c:e2:64:b2:0a:dc:e4:49:f4:96:ce:0d:9b: df:2b:96:d2:68:07:a4:e3:de:d1:3a:70:22:aa:ed:2c:e3:1b: ae:2d:f2:ae:8e:03:0c:f7:18:4f:83:82:3e:95:9e:7a:0c:fb: 96:a1:44:22:29:7d:7e:44:05:d4:4e:59:b8:2b:04:18:f1:27: 85:61:6c:ea:8b:78:4c:fa:79:81:be:d3:93:73:11:91:e8:8e: 00:04:75:47:8f:f6:9d:b3:89:a3:5a:b1:0f:9c:24:03:80:85: 31:0a:cb:e3:58:a3:d8:0e:bc:78:3f:d6:72:4b:cf:f1:97:29: 0e:99:0b:0d:f1:6c:36:13:6f:5e:c9:79:18:7c:55:ae:50:41: 65:3e:fe:bb:30:29:81:e7:88:21:58:5f:67:2b:16:40:ff:4c: 54:56:a3:07:dc:06:8a:90:eb:26:6d:12:3c:03:bb:28:53:c4: fb:c6:2b:3e:f3:41:cb:7a:c1:80:9e:fa:1a:be:67:9e:d7:3e: 09:0a:e6:80:ec:bb:20:e5:cb:cc:9f:2c:0b:32:6a:b0:d3:2f: ca:14:6b:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEkL/ECIKK1f0IBKzFZ0LZDRS0Z0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAyMTQxWhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDEzNGQ4ZTlkYjU1ZGRkOTdlNTEzYjNlYzFhNzNhMmY1 YzlhNDRmZDRhMTBjZmViZDEzOTA0OTI4NDJlODJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjh0h9eScrVg6gZmQuXFKKzQ1/v2uG6GWfqUIDXq5sUnj6 sc1H/GSd2IK1UpMuJ1IhHpEFb7+Bv40ejtPRU4Hzr2Xwisd8GPjK9W1bSgOx2VZZ ockYmbIUT9YmZNho5mZ3Lot6RULPB3P4ywSs0ChMCAFDDNSVRoaYgNOqh7nUpmpt Q+F+ElT1uz6BC8Cm11lfzCvgFR2qTQmnZ4H9Gw9y57SqVe65u2SC4INnLFOTjMrJ TiLqucbR1cMqT585BRs09FhtocS1/LK8U5XzO18P+rD1ugKGZ8h0xrfgndfMrkXV E52oiZaEi9DF/+4awnpOgPWTdP8BzIqdYocvlIPlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOpxzLl92FA+3UoOvNtsu/4Fj6+owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkZDJkOTYwLWQyNGMtNDNmZS1iMDk3LWVlZDNiMDU4OWVhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjlgAwDQYJKoZIhvcNAQELBQADggEBAIXWNhySgl93OJeEfYxYNjFr7yUy l7PeqlKQtHFz/3yimCWjAx9+81yxTOJksgrc5En0ls4Nm98rltJoB6Tj3tE6cCKq 7SzjG64t8q6OAwz3GE+Dgj6VnnoM+5ahRCIpfX5EBdROWbgrBBjxJ4VhbOqLeEz6 eYG+05NzEZHojgAEdUeP9p2ziaNasQ+cJAOAhTEKy+NYo9gOvHg/1nJLz/GXKQ6Z Cw3xbDYTb17JeRh8Va5QQWU+/rswKYHniCFYX2crFkD/TFRWowfcBoqQ6yZtEjwD uyhTxPvGKz7zQct6wYCe+hq+Z57XPgkK5oDsuyDly8yfLAsyarDTL8oUa5A= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:19 2026 by rpki-client