$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bada3e67-c008-4ed4-add1-6c213e7acb37.roa File: bada3e67-c008-4ed4-add1-6c213e7acb37.roa (raw, json) Hash identifier: dpYPHs6HX609JLWttCrdp66ZLeqfzOrg+t4ZHRd7zNA= Subject key identifier: E9:5D:FC:B7:67:DE:5A:AD:63:BF:F0:82:7F:24:C5:08:D4:A8:CB:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1958D15D9BC2F3F912E7030E16EEF5970D51A2C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bada3e67-c008-4ed4-add1-6c213e7acb37.roa Signing time: Tue 24 Feb 2026 00:41:10 +0000 ROA not before: Tue 24 Feb 2026 00:41:10 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 7224 IP address blocks: 198.14.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:58:d1:5d:9b:c2:f3:f9:12:e7:03:0e:16:ee:f5:97:0d:51:a2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:41:10 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=8c38df655bb43bc6768ee3ba41f9bf4b020d44bdffe31b31e5e5e9a95df6ee30, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:50:df:1f:ce:02:e1:b7:a8:55:75:4c:1c: a5:0a:45:58:ce:68:fe:7a:ee:8f:4f:b7:7b:48:f7: 95:cd:9b:b6:5e:7f:c0:76:5d:ea:6a:d5:cb:a6:5d: 9b:88:9a:0d:18:e0:77:24:7c:0c:90:a8:a3:6c:5b: 23:93:05:78:7a:b0:2c:95:d6:c9:f5:73:1c:45:9b: ca:01:e5:ef:95:6b:0a:92:9d:63:61:07:3d:48:54: 53:a7:7e:5d:83:91:7a:0b:30:56:27:34:1a:55:c9: 4a:2a:86:57:c5:20:7f:1a:04:56:3d:a4:78:25:cf: b9:f3:7a:84:57:b1:1d:e7:d4:b0:97:a5:e3:72:bc: c1:e3:da:f5:3a:4c:44:19:69:d5:8b:a1:d3:fb:da: 8c:08:8a:79:e0:5c:13:8c:2e:c6:22:0c:9c:5f:9e: a3:87:02:f9:be:43:70:c1:95:a2:9f:b9:d4:14:e3: be:80:c2:81:03:b0:d8:9e:87:9d:99:89:5b:22:d4: e8:42:7d:58:07:8f:6a:f4:e5:3f:ec:e9:1c:01:e7: af:a1:d2:9e:5f:8d:09:0d:b6:19:d5:ce:9e:13:ab: 21:37:de:e7:db:52:df:44:b6:cf:a4:d1:75:64:16: 00:85:a0:15:1b:ba:bd:64:12:b7:d5:be:31:81:a2: 65:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5D:FC:B7:67:DE:5A:AD:63:BF:F0:82:7F:24:C5:08:D4:A8:CB:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bada3e67-c008-4ed4-add1-6c213e7acb37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.14.1.0/24 Signature Algorithm: sha256WithRSAEncryption 29:a1:1e:9c:9e:ec:6c:0b:37:8c:9a:a2:86:f2:f8:fb:f8:14: a0:c1:dd:da:11:0a:ae:59:2d:4a:a2:11:28:9f:ab:7c:51:d7: 0d:1d:6e:f5:d5:38:07:b6:b7:c4:14:d8:da:a0:ce:f5:be:26: 62:bb:5d:18:cf:e4:ef:b5:de:d7:68:19:63:50:4a:73:cf:2a: 4d:7c:e9:69:b6:a5:24:e4:c4:77:80:57:c7:10:c1:87:c0:74: f3:54:73:6e:07:71:e4:6c:d3:1c:a1:44:94:7e:92:0e:29:6b: 8a:81:ee:28:d5:9e:31:e2:23:6c:3e:c9:c4:72:51:7c:bb:59: 70:2d:25:9f:ca:a4:c9:bc:ee:92:b2:cf:81:19:39:2a:e3:32: d2:48:bf:a9:b6:52:36:dd:bc:e1:f7:ae:91:54:dd:19:75:b3: f6:3e:00:a0:5f:02:76:ff:8d:1e:3b:67:cb:2d:70:98:97:af: e5:ba:7e:f2:32:f6:72:ab:7d:69:ec:76:a9:62:78:01:30:de: 9e:ad:77:81:74:d0:8b:fb:27:b0:1d:a3:41:89:9f:ad:da:ca: 2b:34:f8:d9:2b:4b:c9:fe:00:fd:75:8f:3d:0a:23:fd:e8:89: 6f:91:fc:d2:3d:9b:b3:3c:56:33:aa:cf:39:93:4d:82:56:2b: fd:62:14:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGVjRXZvC8/kS5wMOFu71lw1RosQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDA0MTEwWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzM4ZGY2NTViYjQzYmM2NzY4ZWUzYmE0MWY5YmY0YjAy MGQ0NGJkZmZlMzFiMzFlNWU1ZTlhOTVkZjZlZTMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh3FDfH84C4beoVXVMHKUKRVjOaP567o9Pt3tI95XNm7Ze f8B2Xepq1cumXZuImg0Y4HckfAyQqKNsWyOTBXh6sCyV1sn1cxxFm8oB5e+VawqS nWNhBz1IVFOnfl2DkXoLMFYnNBpVyUoqhlfFIH8aBFY9pHglz7nzeoRXsR3n1LCX peNyvMHj2vU6TEQZadWLodP72owIinngXBOMLsYiDJxfnqOHAvm+Q3DBlaKfudQU 476AwoEDsNieh52ZiVsi1OhCfVgHj2r05T/s6RwB56+h0p5fjQkNthnVzp4TqyE3 3ufbUt9Ets+k0XVkFgCFoBUbur1kErfVvjGBomVrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6V38t2feWq1jv/CCfyTFCNSoy4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhZGEzZTY3LWMwMDgtNGVkNC1hZGQxLTZjMjEzZTdhY2IzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGDgEwDQYJKoZIhvcNAQELBQADggEBACmhHpye7GwLN4yaooby+Pv4FKDB 3doRCq5ZLUqiESifq3xR1w0dbvXVOAe2t8QU2NqgzvW+JmK7XRjP5O+13tdoGWNQ SnPPKk186Wm2pSTkxHeAV8cQwYfAdPNUc24HceRs0xyhRJR+kg4pa4qB7ijVnjHi I2w+ycRyUXy7WXAtJZ/KpMm87pKyz4EZOSrjMtJIv6m2UjbdvOH3rpFU3Rl1s/Y+ AKBfAnb/jR47Z8stcJiXr+W6fvIy9nKrfWnsdqlieAEw3p6td4F00Iv7J7Ado0GJ n63ayis0+NkrS8n+AP11jz0KI/3oiW+R/NI9m7M8VjOqzzmTTYJWK/1iFFU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:56:34 2026 by rpki-client