$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa File: f82c1957-9091-4d53-8075-edcb55104e57.roa (raw, json) Hash identifier: 19rjzkJ6Ql1uBeYpfIIu+205WGkYSTuUJ56+3Tr/Gw8= Subject key identifier: 80:82:85:C4:46:8F:06:47:49:23:EB:D7:4F:98:E3:81:67:C1:33:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FF70A32AB5176318087DA30956381E621915A93 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa Signing time: Sat 28 Feb 2026 00:00:07 +0000 ROA not before: Sat 28 Feb 2026 00:00:07 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.141.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f7:0a:32:ab:51:76:31:80:87:da:30:95:63:81:e6:21:91:5a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:00:07 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=cc0c283a430a0b71338471ea99b6b3f0830e3ed501e81579991bbdbe877d1fac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6d:aa:d5:80:f5:cf:25:d2:0c:32:dc:4d:3f: 19:e1:99:42:3c:fb:f4:46:e1:3d:87:2f:59:d7:f8: 2a:3a:fa:6c:a1:af:db:7e:62:7e:68:87:a5:09:a6: 89:69:5d:05:ff:7a:2e:64:05:1a:ae:64:8b:18:37: 2c:4c:3f:58:80:5a:51:ac:c9:5e:7a:ac:ae:0a:e8: 11:44:06:bb:fa:44:ea:19:e7:08:b3:c1:7b:63:ae: c7:8c:b2:94:4d:32:71:70:f7:1a:f7:1a:44:e8:10: bd:68:5d:b4:9e:c2:a0:93:6d:c1:12:80:08:82:60: ca:fa:1e:e7:d6:a6:6d:ab:c7:22:85:8a:8a:56:6b: f5:63:74:ab:c5:4f:39:73:8d:25:81:f5:17:22:53: ad:49:0b:28:1e:27:53:e0:2c:78:ea:dd:3f:c5:d1: 89:04:dd:b7:91:e1:05:eb:f1:20:d5:4b:2d:e3:03: a0:4f:1f:02:71:7d:e8:08:24:38:31:ce:c2:ec:1e: 75:81:de:85:c1:fc:ff:a5:32:ee:27:81:04:3b:ae: 9c:45:44:4e:59:8e:28:8b:9d:b9:6d:03:3f:f7:89: 8c:d2:0a:65:54:ee:f9:c3:5b:54:1c:cf:c7:8b:ba: e6:e9:69:f9:91:c5:0e:3a:5a:05:77:cf:ad:2d:33: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:82:85:C4:46:8F:06:47:49:23:EB:D7:4F:98:E3:81:67:C1:33:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f82c1957-9091-4d53-8075-edcb55104e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.141.0.0/17 Signature Algorithm: sha256WithRSAEncryption 10:8a:ba:04:99:8a:5b:08:45:38:e1:48:69:d8:b4:f4:d4:17: 7d:dd:7c:04:b2:ad:e3:f7:61:ed:8e:25:9e:6e:9a:e0:1b:2a: e8:e3:4e:ff:3c:fe:18:99:1b:ff:a9:0a:86:1c:62:92:8a:f0: 04:98:c9:00:08:76:01:f7:f3:e9:d8:db:92:e7:d2:89:20:3a: ca:ed:10:85:78:ad:c8:48:b8:19:13:b0:36:61:55:1d:29:71: 29:47:f2:85:9f:2d:1a:db:32:2a:75:40:29:1f:b5:f9:d0:12: 90:3e:54:5a:c7:87:fb:74:53:63:91:9f:ea:42:cc:96:17:85: 16:91:09:5a:5d:59:2b:16:4b:85:1f:bb:35:6f:48:3d:db:c8: a2:d3:bb:76:41:c0:b0:fd:43:6a:4d:7b:e4:19:46:20:ba:66: f1:02:63:cb:da:cc:72:35:3b:6f:ed:c6:5a:5b:d2:2f:b7:c6: 7b:46:39:78:76:61:47:c3:5d:e1:7f:3d:1c:bd:07:fb:31:40: 9f:b6:3f:af:5b:b3:e1:fe:1a:54:51:aa:fd:08:b5:49:fa:65: c9:53:87:e4:99:9b:ce:63:38:db:8e:d5:3c:03:71:7f:52:e4: d3:78:20:06:ce:44:53:ba:2c:a0:3a:2d:1f:2e:fb:d3:e7:59: 8f:d5:f6:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP/cKMqtRdjGAh9owlWOB5iGRWpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAwMDA3WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzBjMjgzYTQzMGEwYjcxMzM4NDcxZWE5OWI2YjNmMDgz MGUzZWQ1MDFlODE1Nzk5OTFiYmRiZTg3N2QxZmFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlbarVgPXPJdIMMtxNPxnhmUI8+/RG4T2HL1nX+Co6+myh r9t+Yn5oh6UJpolpXQX/ei5kBRquZIsYNyxMP1iAWlGsyV56rK4K6BFEBrv6ROoZ 5wizwXtjrseMspRNMnFw9xr3GkToEL1oXbSewqCTbcESgAiCYMr6HufWpm2rxyKF iopWa/VjdKvFTzlzjSWB9RciU61JCygeJ1PgLHjq3T/F0YkE3beR4QXr8SDVSy3j A6BPHwJxfegIJDgxzsLsHnWB3oXB/P+lMu4ngQQ7rpxFRE5ZjiiLnbltAz/3iYzS CmVU7vnDW1Qcz8eLuubpafmRxQ46WgV3z60tM35dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgIKFxEaPBkdJI+vXT5jjgWfBMwQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4MmMxOTU3LTkwOTEtNGQ1My04MDc1LWVkY2I1NTEwNGU1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdjjQAwDQYJKoZIhvcNAQELBQADggEBABCKugSZilsIRTjhSGnYtPTUF33d fASyreP3Ye2OJZ5umuAbKujjTv88/hiZG/+pCoYcYpKK8ASYyQAIdgH38+nY25Ln 0okgOsrtEIV4rchIuBkTsDZhVR0pcSlH8oWfLRrbMip1QCkftfnQEpA+VFrHh/t0 U2ORn+pCzJYXhRaRCVpdWSsWS4UfuzVvSD3byKLTu3ZBwLD9Q2pNe+QZRiC6ZvEC Y8vazHI1O2/txlpb0i+3xntGOXh2YUfDXeF/PRy9B/sxQJ+2P69bs+H+GlRRqv0I tUn6ZclTh+SZm85jONuO1TwDcX9S5NN4IAbORFO6LKA6LR8u+9PnWY/V9u8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:41 2026 by rpki-client