$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc87493-0fce-429d-8060-e6fb407a845b.roa File: cbc87493-0fce-429d-8060-e6fb407a845b.roa (raw, json) Hash identifier: iLlax9nblfZAn7WLhoxXIt/XbkZ1nOLQ4DUVvhTPgSg= Subject key identifier: 3C:89:B0:73:49:64:F8:E5:36:A8:FC:E8:A6:77:46:00:5A:0A:32:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19BCF3612BA3FF59A50F277FD854D90A2F8D3433 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc87493-0fce-429d-8060-e6fb407a845b.roa Signing time: Sat 28 Feb 2026 00:10:08 +0000 ROA not before: Sat 28 Feb 2026 00:10:08 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 98.82.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:bc:f3:61:2b:a3:ff:59:a5:0f:27:7f:d8:54:d9:0a:2f:8d:34:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:10:08 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=f63c2de892a54078658e256e8c1c1a7dbee0bb91177fc37d1d699d300a7a1155, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:ec:f6:b4:9d:2e:83:79:7d:ad:8e:00:c7: 53:31:5c:42:6a:6f:f9:28:2d:f9:61:2f:31:bb:5f: 6a:bd:e1:d0:fd:f7:a4:6f:ff:f3:47:f4:01:5a:c6: e7:61:a8:51:8d:00:4a:7b:9a:ee:3f:88:f3:36:51: 06:df:a5:d8:d3:7f:90:f3:1f:d2:43:13:30:c0:d3: db:08:3b:2f:bd:2d:c1:6a:32:07:2d:d2:9d:a5:2c: b8:10:85:ff:68:b3:d1:54:a3:fa:32:ec:e8:0e:b6: ad:24:69:34:62:f4:d4:23:be:d8:d0:15:b7:6d:2f: 43:f8:87:0f:a1:b9:3d:56:96:76:ad:52:e5:b9:22: 0f:7c:72:fa:28:36:31:13:91:9c:95:e3:ee:0a:9b: 0d:90:0f:2b:00:fa:cd:d9:d9:fd:03:1e:96:5f:5b: 0f:d2:4e:c1:e6:d5:da:df:3e:e8:cd:a8:2f:a1:1a: b7:6a:b7:c2:2c:23:a9:cc:b3:8d:09:d1:cc:96:d4: 3f:84:42:ae:d8:b7:e3:28:21:a4:ab:e4:78:04:10: 41:3c:9e:2f:fe:20:df:2b:16:22:5c:70:03:e1:25: 25:ba:79:5c:d2:b6:dd:c7:67:b9:5b:cd:1b:30:82: 84:6b:bb:12:43:90:85:11:51:09:8f:48:86:39:87: 6a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:89:B0:73:49:64:F8:E5:36:A8:FC:E8:A6:77:46:00:5A:0A:32:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbc87493-0fce-429d-8060-e6fb407a845b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.158.0/23 Signature Algorithm: sha256WithRSAEncryption 14:d7:bc:05:08:b5:3a:77:1d:aa:82:4e:8d:24:2a:10:37:db: 3f:3f:9b:cb:4c:01:7d:67:a8:58:0a:39:6e:2f:92:c8:87:cc: 76:cf:7c:96:fb:33:a9:6a:9d:c3:94:0a:ac:e8:a6:39:f1:1c: 4e:16:e1:89:fe:55:b8:79:fc:36:d5:01:3a:ac:46:cc:f6:06: 1f:3e:56:4c:94:70:81:9e:8b:7c:2d:49:18:02:23:10:26:f0: 44:b7:0f:82:29:ab:0e:77:1c:2e:20:69:18:66:b4:09:06:a3: d1:1c:d2:02:67:7b:c0:a7:53:4f:ad:a8:a6:e9:68:9e:ec:c2: 26:64:f7:04:66:7d:41:c3:9f:8a:50:b6:51:9f:9b:87:ba:f1: 47:2f:a9:aa:83:b8:b4:c4:ef:11:43:cc:f4:eb:34:bd:57:71: 0a:5f:db:ed:73:d4:33:31:3a:e4:05:f8:e6:9c:a3:4e:1b:72: 25:b7:11:1f:70:5e:af:cc:31:c6:47:8a:f4:be:fb:a5:92:dc: 77:e4:da:70:44:50:d8:30:8b:98:9f:a4:73:a2:80:f9:0f:01: 21:50:f1:00:39:70:f8:3f:61:86:c7:9d:7e:2e:b5:30:6b:28: 77:17:e9:74:db:7e:9b:d7:51:71:4c:76:0a:a1:7c:2c:ef:dc: a7:35:98:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGbzzYSuj/1mlDyd/2FTZCi+NNDMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAxMDA4WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjNjMmRlODkyYTU0MDc4NjU4ZTI1NmU4YzFjMWE3ZGJl ZTBiYjkxMTc3ZmMzN2QxZDY5OWQzMDBhN2ExMTU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4f+z2tJ0ug3l9rY4Ax1MxXEJqb/koLflhLzG7X2q94dD9 96Rv//NH9AFaxudhqFGNAEp7mu4/iPM2UQbfpdjTf5DzH9JDEzDA09sIOy+9LcFq Mgct0p2lLLgQhf9os9FUo/oy7OgOtq0kaTRi9NQjvtjQFbdtL0P4hw+huT1Wlnat UuW5Ig98cvooNjETkZyV4+4Kmw2QDysA+s3Z2f0DHpZfWw/STsHm1drfPujNqC+h Grdqt8IsI6nMs40J0cyW1D+EQq7Yt+MoIaSr5HgEEEE8ni/+IN8rFiJccAPhJSW6 eVzStt3HZ7lbzRswgoRruxJDkIURUQmPSIY5h2orAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPImwc0lk+OU2qPzopndGAFoKMmMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiYzg3NDkzLTBmY2UtNDI5ZC04MDYwLWU2ZmI0MDdhODQ1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUp4wDQYJKoZIhvcNAQELBQADggEBABTXvAUItTp3HaqCTo0kKhA32z8/ m8tMAX1nqFgKOW4vksiHzHbPfJb7M6lqncOUCqzopjnxHE4W4Yn+Vbh5/DbVATqs Rsz2Bh8+VkyUcIGei3wtSRgCIxAm8ES3D4Ipqw53HC4gaRhmtAkGo9Ec0gJne8Cn U0+tqKbpaJ7swiZk9wRmfUHDn4pQtlGfm4e68UcvqaqDuLTE7xFDzPTrNL1XcQpf 2+1z1DMxOuQF+Oaco04bciW3ER9wXq/MMcZHivS++6WS3Hfk2nBEUNgwi5ifpHOi gPkPASFQ8QA5cPg/YYbHnX4utTBrKHcX6XTbfpvXUXFMdgqhfCzv3Kc1mBs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:51 2026 by rpki-client