$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa File: ba95c612-340c-484f-bd1b-02425457802a.roa (raw, json) Hash identifier: VN4nwnExn+fJs+pfkiLG+qLIpzTDBXNmcI1giJGi+rk= Subject key identifier: 99:A9:00:27:EE:85:67:1A:14:77:B2:35:0F:9D:80:CA:1A:01:5F:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11A25EE711C75EA27737E83D825822898579D3FA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa Signing time: Fri 06 Feb 2026 00:11:34 +0000 ROA not before: Fri 06 Feb 2026 00:11:34 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.200.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a2:5e:e7:11:c7:5e:a2:77:37:e8:3d:82:58:22:89:85:79:d3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:11:34 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=7cb678d39e58549229a8ea94070b26ecd335d8a11c1fd38b2dc958a9b9d63fa3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:cb:5e:e6:9e:9b:fa:33:2c:b0:94:84:ee: 40:1d:e1:02:93:bb:1f:e4:d1:d3:f6:b5:d0:5b:7f: b1:96:ae:5d:33:39:f1:ac:fe:5d:d8:e8:85:37:0d: 80:0d:01:25:92:2e:99:ec:b9:8a:e7:54:ef:4b:98: ba:25:1e:76:c0:66:e5:55:1f:72:28:25:af:63:25: 66:6f:5d:c7:1c:1e:9d:46:e3:96:26:66:a1:cc:47: a5:56:ae:c3:79:ae:e5:42:f9:01:34:94:5d:6f:94: 24:e9:e0:00:41:00:58:f6:e5:5f:09:ec:7d:6d:6e: 5d:87:cf:24:bf:38:44:b0:bb:20:73:24:56:ef:d1: fb:c0:73:3f:b5:19:f4:a6:4c:b7:a3:81:9d:26:26: f1:b1:c8:27:d3:fd:73:4b:ca:6c:14:c6:6e:24:a1: 11:2f:93:62:cc:b8:31:c5:89:2a:97:ea:5d:68:cd: 9d:3c:41:b2:16:7f:b3:db:b5:ab:fe:79:be:46:45: f2:f1:70:f0:ee:cc:9d:28:3e:84:45:d3:93:b4:bd: 64:2c:7b:02:53:13:a9:ae:8f:61:a7:1c:81:1d:47: 6a:4c:71:a6:e0:63:13:1e:b2:1f:e1:74:70:f1:b7: 9f:c3:d2:2e:fe:81:dd:a1:13:5a:34:26:95:2f:73: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A9:00:27:EE:85:67:1A:14:77:B2:35:0F:9D:80:CA:1A:01:5F:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 3f:78:a2:5f:fb:60:bc:d1:76:8c:25:30:d7:b3:46:07:f7:dd: 0a:0d:8b:d2:8b:b6:62:3e:ce:18:ae:07:da:30:69:f9:58:ca: 36:5b:d9:a5:45:ae:25:9d:f4:e6:97:a8:e3:cc:64:91:19:5b: 6a:d6:4e:64:b7:62:cd:7b:99:0f:97:a7:55:f3:9c:6d:68:4d: f1:6c:b2:9f:1c:44:5c:0c:b0:af:af:c3:26:ed:5f:3a:f1:11: 90:14:a4:66:3b:f8:f6:a1:94:c3:ea:e8:bf:f5:a3:82:5a:1e: d6:73:6c:3d:9e:87:c8:c3:19:ee:c5:de:88:43:e5:80:70:58: 2a:ab:90:f0:7e:78:d5:5c:db:7f:14:f6:98:7f:15:b1:82:a3: 2a:c0:4a:b7:85:37:cf:8f:2c:72:85:21:b9:2b:84:c4:6a:00: f0:70:0b:7d:a1:59:25:8c:8f:ed:9a:f6:5a:07:16:6c:e4:a7: cd:2b:bc:3e:ef:3c:85:c8:40:9f:07:08:91:63:40:e8:0d:42: 6d:3f:c3:1d:ef:40:2a:b9:1b:d9:5f:6f:4c:2a:b8:35:db:89: f1:34:9f:0d:d5:75:88:fe:07:af:54:73:56:a4:68:bd:97:ad: 52:c8:21:ae:ac:c4:34:de:fc:6f:f6:6a:21:8e:51:5c:67:ad: e3:b6:40:e2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEaJe5xHHXqJ3N+g9glgiiYV50/owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAxMTM0WhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2I2NzhkMzllNTg1NDkyMjlhOGVhOTQwNzBiMjZlY2Qz MzVkOGExMWMxZmQzOGIyZGM5NThhOWI5ZDYzZmEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi+Mte5p6b+jMssJSE7kAd4QKTux/k0dP2tdBbf7GWrl0z OfGs/l3Y6IU3DYANASWSLpnsuYrnVO9LmLolHnbAZuVVH3IoJa9jJWZvXcccHp1G 45YmZqHMR6VWrsN5ruVC+QE0lF1vlCTp4ABBAFj25V8J7H1tbl2HzyS/OESwuyBz JFbv0fvAcz+1GfSmTLejgZ0mJvGxyCfT/XNLymwUxm4koREvk2LMuDHFiSqX6l1o zZ08QbIWf7Pbtav+eb5GRfLxcPDuzJ0oPoRF05O0vWQsewJTE6muj2GnHIEdR2pM cabgYxMesh/hdHDxt5/D0i7+gd2hE1o0JpUvc0mhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmakAJ+6FZxoUd7I1D52AyhoBXwEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhOTVjNjEyLTM0MGMtNDg0Zi1iZDFiLTAyNDI1NDU3ODAyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwNjyDANBgkqhkiG9w0BAQsFAAOCAQEAP3iiX/tgvNF2jCUw17NGB/fdCg2L 0ou2Yj7OGK4H2jBp+VjKNlvZpUWuJZ305peo48xkkRlbatZOZLdizXuZD5enVfOc bWhN8WyynxxEXAywr6/DJu1fOvERkBSkZjv49qGUw+rov/Wjgloe1nNsPZ6HyMMZ 7sXeiEPlgHBYKquQ8H541VzbfxT2mH8VsYKjKsBKt4U3z48scoUhuSuExGoA8HAL faFZJYyP7Zr2WgcWbOSnzSu8Pu88hchAnwcIkWNA6A1CbT/DHe9AKrkb2V9vTCq4 NduJ8TSfDdV1iP4Hr1RzVqRovZetUsghrqzENN78b/ZqIY5RXGet47ZA4g== -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:30 2026 by rpki-client