$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca331992-fd02-44e6-b6f8-92e7f46278f2.roa File: ca331992-fd02-44e6-b6f8-92e7f46278f2.roa (raw, json) Hash identifier: osfeXE5TGjO8GENDEkFmIwiFGuwGw5kaBMiEbl5yohg= Subject key identifier: 16:13:F3:F0:BD:7D:E4:A7:73:15:03:A9:FA:92:00:F1:0E:64:CE:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E024274B258BB86E39BBD9B4B9D1CEA603E1B1F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca331992-fd02-44e6-b6f8-92e7f46278f2.roa Signing time: Tue 17 Feb 2026 00:11:08 +0000 ROA not before: Tue 17 Feb 2026 00:11:08 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 98.80.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:02:42:74:b2:58:bb:86:e3:9b:bd:9b:4b:9d:1c:ea:60:3e:1b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 00:11:08 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=e42c0d5a3a52fb9edfb7a89b7f80e013cc3a006d4edcba9546914aa08c45654d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:3c:75:47:e8:42:60:ac:e3:b7:69:72:51: a8:e6:ed:f8:cb:84:e2:db:b4:1c:c1:a6:67:19:f9: 99:6f:da:14:e6:b2:44:51:2d:a0:99:0b:79:e7:fa: 47:e6:46:c7:02:97:df:0a:a6:6c:68:5a:bd:4f:47: bc:37:56:ec:ef:20:08:4f:21:b7:a6:49:a5:e2:d4: 9a:d5:a1:f2:fd:f5:3e:30:b5:de:ce:ff:10:5e:51: 43:a4:b1:8d:9c:c2:7d:75:fc:24:77:fd:99:b2:72: 02:1c:e9:fd:b5:d7:66:7c:f3:9f:19:d5:c5:28:93: 81:81:72:8c:37:20:97:73:c0:b4:0b:26:9d:5c:08: f7:70:9b:19:f6:33:88:43:a5:a0:f4:9e:ce:ce:ec: 24:4e:42:06:ed:50:da:e3:4c:a6:7f:b5:5c:e9:30: 15:eb:32:33:e1:8d:57:c2:da:8f:a3:e6:9b:0f:fe: 34:e3:77:87:34:a7:ff:80:38:b6:65:ac:43:5b:2c: 92:ea:50:b4:c0:0d:fd:85:e7:b0:6a:20:57:a5:1e: 4c:58:48:a7:b2:b7:e0:84:4d:5e:b4:00:91:21:0b: 78:de:b9:1b:2d:ab:13:73:20:ad:e8:de:0c:3f:9e: f2:1e:0f:f0:9a:7e:bd:2e:c5:98:21:35:ec:e0:ed: 88:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:13:F3:F0:BD:7D:E4:A7:73:15:03:A9:FA:92:00:F1:0E:64:CE:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca331992-fd02-44e6-b6f8-92e7f46278f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.80.0.0/12 Signature Algorithm: sha256WithRSAEncryption 9f:2d:ca:1e:a2:0e:18:59:0c:44:ae:6a:24:cb:25:ef:71:91: 1f:d4:25:f7:eb:c6:db:7e:77:ef:50:47:d3:04:54:ab:09:d1: 84:db:45:95:17:52:17:94:e0:97:d3:24:01:3d:fd:ac:f5:91: b2:d6:23:7a:1f:84:d0:6e:a6:2c:b3:39:a8:55:49:b4:5b:ed: 4e:d4:d2:03:d7:64:cf:1f:f7:67:cf:ed:9b:16:46:cc:6e:6a: d8:ef:53:47:27:96:5e:02:b1:91:42:f3:5f:ba:02:be:d7:0c: b0:a3:9b:dd:40:dd:63:39:83:b4:73:6e:68:7a:b0:07:d8:3f: e3:74:22:40:70:27:31:95:d2:49:db:ff:11:4e:af:6b:ff:26: c1:26:3f:5a:ee:df:d6:a5:b6:d6:33:c2:7b:af:16:3b:3f:73: 0e:2b:40:ff:1e:9a:de:a1:72:27:4d:eb:c3:11:44:32:41:51: d7:d1:07:6c:d6:f3:ed:f7:0e:ec:a1:90:1d:d2:2b:e9:68:a7: 66:09:d8:eb:ae:a0:a9:3a:38:45:1f:b0:40:9d:7b:46:8a:3b: 4a:37:ed:3e:d8:11:1c:24:e3:fb:b6:ad:7e:c8:c4:d5:8a:6e: a9:70:70:f5:42:74:ae:eb:47:1d:fc:3a:67:22:52:35:0d:8a: d1:85:45:4b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXgJCdLJYu4bjm72bS50c6mA+Gx8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDAxMTA4WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDJjMGQ1YTNhNTJmYjllZGZiN2E4OWI3ZjgwZTAxM2Nj M2EwMDZkNGVkY2JhOTU0NjkxNGFhMDhjNDU2NTRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHUjx1R+hCYKzjt2lyUajm7fjLhOLbtBzBpmcZ+Zlv2hTm skRRLaCZC3nn+kfmRscCl98KpmxoWr1PR7w3VuzvIAhPIbemSaXi1JrVofL99T4w td7O/xBeUUOksY2cwn11/CR3/ZmycgIc6f2112Z8858Z1cUok4GBcow3IJdzwLQL Jp1cCPdwmxn2M4hDpaD0ns7O7CROQgbtUNrjTKZ/tVzpMBXrMjPhjVfC2o+j5psP /jTjd4c0p/+AOLZlrENbLJLqULTADf2F57BqIFelHkxYSKeyt+CETV60AJEhC3je uRstqxNzIK3o3gw/nvIeD/Cafr0uxZghNezg7YixAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFhPz8L195KdzFQOp+pIA8Q5kzq8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhMzMxOTkyLWZkMDItNDRlNi1iNmY4LTkyZTdmNDYyNzhmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwRiUDANBgkqhkiG9w0BAQsFAAOCAQEAny3KHqIOGFkMRK5qJMsl73GRH9Ql 9+vG235371BH0wRUqwnRhNtFlRdSF5Tgl9MkAT39rPWRstYjeh+E0G6mLLM5qFVJ tFvtTtTSA9dkzx/3Z8/tmxZGzG5q2O9TRyeWXgKxkULzX7oCvtcMsKOb3UDdYzmD tHNuaHqwB9g/43QiQHAnMZXSSdv/EU6va/8mwSY/Wu7f1qW21jPCe68WOz9zDitA /x6a3qFyJ03rwxFEMkFR19EHbNbz7fcO7KGQHdIr6WinZgnY666gqTo4RR+wQJ17 Roo7SjftPtgRHCTj+7atfsjE1YpuqXBw9UJ0rutHHfw6ZyJSNQ2K0YVFSw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:35 2026 by rpki-client