$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa File: cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa (raw, json) Hash identifier: ulR/yZ3CLVfcN77iqUszhFI727G8fH64T/B8E47Ji/4= Subject key identifier: 4C:A8:63:76:26:64:97:2D:29:F9:F6:75:D8:87:53:CE:BD:4B:0A:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2653CE4EAC1650B00C85437BE1B04DEB1ED7D92F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa Signing time: Sun 15 Feb 2026 00:10:48 +0000 ROA not before: Sun 15 Feb 2026 00:10:48 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 99.151.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:53:ce:4e:ac:16:50:b0:0c:85:43:7b:e1:b0:4d:eb:1e:d7:d9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:10:48 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=6b025c02b29181cceeff38d961d4c5609eac0643ac5fcfbb367654e221553e6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:67:aa:e8:88:77:79:13:68:e6:97:af:d0: 9e:6a:48:08:b8:24:74:bc:a4:f3:23:49:a9:69:96: c8:8d:45:d8:2f:36:b4:53:03:98:07:fa:4b:5d:bf: 7c:c7:d2:86:f5:56:ad:13:bf:0d:b7:b0:d1:80:5b: b5:a9:18:32:be:5d:61:39:3c:62:77:5d:c8:ca:76: b4:af:4b:31:30:f0:2c:ef:00:a3:4a:46:74:d6:7e: 16:19:62:d0:07:6a:05:80:c9:75:3c:6e:d6:a2:8e: 81:3a:6c:4a:a9:07:5c:d2:ff:31:c2:39:30:ca:ba: 91:46:81:47:cc:a2:83:3b:74:3b:7d:22:98:aa:66: f0:68:8f:8a:f4:99:6f:a7:47:08:7e:58:cf:22:82: b4:96:18:60:39:17:6d:3b:62:43:23:d8:10:37:42: fb:be:1f:22:71:b7:e7:17:ce:a6:2f:c8:ad:68:fb: 11:8b:c1:4a:29:13:61:e6:09:f6:e7:68:e8:d1:97: 17:e6:63:b1:55:cf:13:37:7c:60:89:32:ea:bc:0b: 51:9a:af:0e:8e:3f:33:61:2b:c3:e7:23:b0:16:a0: 94:8b:e7:ac:1b:12:c0:bd:fc:93:2a:d8:17:57:85: a5:28:6b:d7:2f:40:28:d1:ea:6f:30:dc:24:03:99: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A8:63:76:26:64:97:2D:29:F9:F6:75:D8:87:53:CE:BD:4B:0A:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebe811c-ffd0-4fa9-98ed-7b98685809e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.190.0/24 Signature Algorithm: sha256WithRSAEncryption 48:9a:86:62:28:f1:af:5c:4e:98:d2:ee:c4:a9:73:a6:8d:a5: c1:35:85:47:76:6a:c3:37:e2:51:ba:39:39:76:c1:b1:c2:4f: 25:e2:e9:1d:bf:a7:9a:1f:9b:95:21:99:81:17:f4:03:91:2a: 86:70:86:68:5c:68:a0:da:91:0e:62:16:18:c5:22:f4:91:db: b5:01:c3:15:3e:45:b2:15:e6:3d:51:d6:0b:00:bf:71:03:d1: 90:38:a8:53:da:53:97:b8:72:b9:ef:13:12:f3:28:df:3a:26: 83:ce:a0:b4:34:01:36:ee:e3:5e:f8:60:9f:20:e9:ee:fe:a9: 6d:e6:74:a9:77:22:bb:30:02:90:ab:cb:52:0f:d0:38:58:67: 2a:08:cb:9a:80:77:06:86:22:bf:42:95:6a:9f:d9:ac:8c:5f: b2:fc:b7:76:4e:b1:5c:78:90:ac:8b:d0:5f:7c:88:d6:4f:2d: 27:ed:ee:12:f8:27:b3:11:97:b6:11:c0:b1:92:94:90:5e:5f: 81:02:ab:66:71:87:d0:c2:d9:d4:22:41:0d:2f:a7:60:bc:6c: bd:37:cc:46:18:64:c9:60:d5:58:78:da:bc:3d:33:dd:b8:47: 1a:e8:aa:1d:4d:4f:8f:f1:e5:2c:ef:08:28:d7:10:b8:d5:7d: bb:de:43:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJlPOTqwWULAMhUN74bBN6x7X2S8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAxMDQ4WhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjAyNWMwMmIyOTE4MWNjZWVmZjM4ZDk2MWQ0YzU2MDll YWMwNjQzYWM1ZmNmYmIzNjc2NTRlMjIxNTUzZTZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8w2eq6Ih3eRNo5pev0J5qSAi4JHS8pPMjSalplsiNRdgv NrRTA5gH+ktdv3zH0ob1Vq0Tvw23sNGAW7WpGDK+XWE5PGJ3XcjKdrSvSzEw8Czv AKNKRnTWfhYZYtAHagWAyXU8btaijoE6bEqpB1zS/zHCOTDKupFGgUfMooM7dDt9 IpiqZvBoj4r0mW+nRwh+WM8igrSWGGA5F207YkMj2BA3Qvu+HyJxt+cXzqYvyK1o +xGLwUopE2HmCfbnaOjRlxfmY7FVzxM3fGCJMuq8C1Garw6OPzNhK8PnI7AWoJSL 56wbEsC9/JMq2BdXhaUoa9cvQCjR6m8w3CQDmSOZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTKhjdiZkly0p+fZ12IdTzr1LCmUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlYmU4MTFjLWZmZDAtNGZhOS05OGVkLTdiOTg2ODU4MDllMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjl74wDQYJKoZIhvcNAQELBQADggEBAEiahmIo8a9cTpjS7sSpc6aNpcE1 hUd2asM34lG6OTl2wbHCTyXi6R2/p5ofm5UhmYEX9AORKoZwhmhcaKDakQ5iFhjF IvSR27UBwxU+RbIV5j1R1gsAv3ED0ZA4qFPaU5e4crnvExLzKN86JoPOoLQ0ATbu 4174YJ8g6e7+qW3mdKl3IrswApCry1IP0DhYZyoIy5qAdwaGIr9ClWqf2ayMX7L8 t3ZOsVx4kKyL0F98iNZPLSft7hL4J7MRl7YRwLGSlJBeX4ECq2Zxh9DC2dQiQQ0v p2C8bL03zEYYZMlg1Vh42rw9M924Rxroqh1NT4/x5SzvCCjXELjVfbveQ2c= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:11 2026 by rpki-client