$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5a85156-56d9-44fe-b845-5494537aa440.roa File: b5a85156-56d9-44fe-b845-5494537aa440.roa (raw, json) Hash identifier: VjbxS7D5o5O8csPkvZ0Iz0pMggjf3o1siFr0KqW0rqw= Subject key identifier: 75:09:FF:D6:29:C5:CB:CB:9E:E1:8B:75:D3:E1:62:C6:9B:79:0B:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 047DD80301C0364954A9DC07E0EDB4376CC00DD9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5a85156-56d9-44fe-b845-5494537aa440.roa Signing time: Tue 10 Feb 2026 00:20:47 +0000 ROA not before: Tue 10 Feb 2026 00:20:47 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7d:d8:03:01:c0:36:49:54:a9:dc:07:e0:ed:b4:37:6c:c0:0d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:20:47 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=a739579b92fa06cff68be592f47ba46a63f5813bf8037f7684477a079cd4852e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:36:c6:d2:0a:c0:d0:e6:1f:80:1d:c2:4a: 35:97:31:65:49:51:27:d9:5b:95:9b:b5:4e:99:6a: fb:a7:8e:b1:f7:18:fe:2f:9c:bc:5b:5c:80:56:d6: 48:0a:d7:2d:22:a3:83:84:e8:35:8b:21:0a:56:b1: c7:94:8d:b6:ad:9a:45:75:05:48:f5:cf:22:52:33: ee:49:2e:ba:ab:98:65:dd:fe:8e:15:67:d8:5a:98: fb:d1:f1:6b:9b:91:95:71:16:95:54:ec:3e:d7:bf: ab:ea:98:63:fa:00:fe:7b:3f:83:49:2b:b0:c6:94: 31:8d:74:7b:7d:53:f8:fe:3b:69:88:ea:bb:ef:6d: ed:4b:bf:10:2d:5b:ff:c6:5d:43:10:71:7f:dc:4b: f0:1f:7d:ac:46:c9:39:80:91:d6:9a:12:d3:05:31: 92:48:42:35:d7:c3:94:ba:d1:da:e4:15:be:cf:8c: 13:fe:42:89:51:95:5d:95:1d:22:d4:ed:e8:e1:32: c2:5d:06:f6:1e:d4:79:27:56:fa:b8:67:d0:cc:2b: 91:a4:86:17:52:ff:a1:cf:af:b5:d0:bc:a4:44:12: be:c5:3d:2d:47:7c:94:81:f9:44:49:ac:99:33:c9: f0:e2:d4:3d:72:da:4e:c0:22:50:95:c5:85:04:36: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:09:FF:D6:29:C5:CB:CB:9E:E1:8B:75:D3:E1:62:C6:9B:79:0B:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5a85156-56d9-44fe-b845-5494537aa440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.234.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:df:2a:a8:66:b0:79:50:ec:e2:b5:0a:d6:9d:83:1c:52:56: 47:61:ea:51:09:21:63:06:f3:13:bd:dd:b9:0c:c4:1d:9d:45: de:3e:42:99:56:9a:84:04:1e:84:a2:e7:b4:05:00:a3:83:9d: 24:8e:25:7f:ec:39:c1:96:ac:d2:d0:7e:9e:5c:ec:67:c1:59: 68:06:51:83:65:26:b7:90:27:c4:8d:78:25:50:bd:3b:33:df: e2:6d:b4:ce:8e:7b:15:83:67:37:9a:9a:68:a4:65:8b:43:3f: 0d:6d:83:71:b5:8f:32:9e:e5:87:ec:0f:bb:db:94:ab:73:05: 3c:cc:dc:12:6e:4e:17:0b:14:0b:b4:39:75:4b:f5:fd:b6:2d: 12:61:cb:9d:a7:4c:f0:bf:42:2a:94:e6:0d:da:63:ed:04:90: 55:24:81:d4:ac:ba:6b:12:f9:37:49:b7:60:e8:ea:16:7e:70: 10:28:64:09:ec:8c:cd:b6:e9:83:be:f2:6d:28:c9:1b:41:b9: 33:bb:87:04:22:88:fc:0a:70:9b:5b:a0:82:ee:90:14:27:d1: 63:3a:d9:ea:a1:3f:a0:ec:4b:57:e2:dc:9e:50:da:57:4c:ad: a8:ef:94:c6:2b:d4:1a:ab:67:32:1f:df:10:26:ea:1b:1e:88: eb:ec:7c:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBH3YAwHANklUqdwH4O20N2zADdkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAyMDQ3WhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzM5NTc5YjkyZmEwNmNmZjY4YmU1OTJmNDdiYTQ2YTYz ZjU4MTNiZjgwMzdmNzY4NDQ3N2EwNzljZDQ4NTJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIFDbG0grA0OYfgB3CSjWXMWVJUSfZW5WbtU6ZavunjrH3 GP4vnLxbXIBW1kgK1y0io4OE6DWLIQpWsceUjbatmkV1BUj1zyJSM+5JLrqrmGXd /o4VZ9hamPvR8WubkZVxFpVU7D7Xv6vqmGP6AP57P4NJK7DGlDGNdHt9U/j+O2mI 6rvvbe1LvxAtW//GXUMQcX/cS/AffaxGyTmAkdaaEtMFMZJIQjXXw5S60drkFb7P jBP+QolRlV2VHSLU7ejhMsJdBvYe1HknVvq4Z9DMK5GkhhdS/6HPr7XQvKREEr7F PS1HfJSB+URJrJkzyfDi1D1y2k7AIlCVxYUENm+pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdQn/1inFy8ue4Yt10+Fixpt5C6kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1YTg1MTU2LTU2ZDktNDRmZS1iODQ1LTU0OTQ1MzdhYTQ0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTeowDQYJKoZIhvcNAQELBQADggEBADvfKqhmsHlQ7OK1CtadgxxSVkdh 6lEJIWMG8xO93bkMxB2dRd4+QplWmoQEHoSi57QFAKODnSSOJX/sOcGWrNLQfp5c 7GfBWWgGUYNlJreQJ8SNeCVQvTsz3+JttM6OexWDZzeammikZYtDPw1tg3G1jzKe 5YfsD7vblKtzBTzM3BJuThcLFAu0OXVL9f22LRJhy52nTPC/QiqU5g3aY+0EkFUk gdSsumsS+TdJt2Do6hZ+cBAoZAnsjM226YO+8m0oyRtBuTO7hwQiiPwKcJtboILu kBQn0WM62eqhP6DsS1fi3J5Q2ldMrajvlMYr1BqrZzIf3xAm6hseiOvsfCs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:05:23 2026 by rpki-client