$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa File: 18c5e828-21e1-417e-ac11-13a92ad7d891.roa (raw, json) Hash identifier: +Ui/yQSFlvP/BIO30hU6QwdbauR3AVmeqg3R+/xywxc= Subject key identifier: 00:2F:DB:9A:83:4A:C8:0B:FA:8E:AD:86:43:EB:80:60:86:86:37:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 485F1D4D437CE6FEB1DB30B7477151E97C44E529 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa Signing time: Fri 20 Feb 2026 00:30:48 +0000 ROA not before: Fri 20 Feb 2026 00:30:48 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 24.110.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5f:1d:4d:43:7c:e6:fe:b1:db:30:b7:47:71:51:e9:7c:44:e5:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 20 00:30:48 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=2efc20313773e1c05cf1ea122953cff12ea4f18b664df0e72c0f27d1b1698d82, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:59:79:e8:1c:eb:33:c9:f2:af:d1:02:88: 1a:5b:8b:88:46:b1:c3:fd:7a:b6:5d:39:89:b5:7a: 67:8b:3e:9e:58:a4:d0:16:57:38:de:a9:09:5c:45: 5a:5b:e9:ef:8f:32:21:79:fc:15:1f:64:ce:2c:14: 55:d8:a4:fb:32:7e:8b:d6:9b:08:73:34:ec:c3:ce: 71:f4:7b:ea:f1:17:5b:46:c1:0e:23:0c:91:ee:aa: 52:af:21:95:bf:6c:01:db:c8:50:dd:d9:b3:a1:09: d6:ae:10:69:a0:c0:1e:94:02:62:87:e5:33:15:fd: 48:b5:cf:db:cd:52:8e:72:ca:be:43:ae:2d:31:a3: a3:d5:6a:30:a8:16:a7:d5:2d:2f:40:d5:3c:a7:4c: 80:da:67:52:bd:d0:7e:f0:70:1f:25:50:9a:e2:68: 95:f5:79:5f:cc:d5:41:c2:bb:19:3b:51:5a:03:0e: 96:95:46:d3:19:86:50:8e:ce:b5:78:77:e5:93:bd: 0f:ef:97:cb:63:22:b9:53:8a:9a:80:09:a0:68:35: c0:55:d8:82:a9:75:94:06:7d:5d:a4:d5:03:a6:6e: 43:f3:ea:96:a4:93:29:18:b4:6a:37:1b:5d:0e:0a: f6:b7:a0:ad:e8:09:87:08:c7:93:06:79:03:ef:f9: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2F:DB:9A:83:4A:C8:0B:FA:8E:AD:86:43:EB:80:60:86:86:37:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.35.0/24 Signature Algorithm: sha256WithRSAEncryption cf:40:64:00:ec:55:28:71:d4:1b:79:dd:7e:1f:12:d2:d5:da: 24:75:9c:09:d8:31:e7:6a:ed:02:5c:32:c4:39:50:db:ac:2a: 4f:89:ee:85:31:b4:34:1d:4a:0d:99:bb:22:4d:20:62:3d:41: 81:a2:62:74:59:fe:e8:ad:ef:77:5b:bc:b8:d4:89:84:8b:6d: 8d:b1:b5:c5:23:bf:0a:e6:fc:21:a2:4a:69:ff:74:36:d4:41: 21:53:50:a8:ab:64:42:c8:ad:4a:89:d4:23:76:a7:fe:98:06: ef:bf:40:dc:27:cc:e5:a1:80:3c:b8:1c:62:0c:d0:5a:73:a9: 21:88:c9:47:c2:d2:9c:13:11:e5:47:d0:4f:6e:23:d6:10:fe: f4:3b:35:c8:b6:85:6d:e5:7a:95:99:1b:7f:b9:c3:0f:d6:6e: fa:31:71:e9:a1:a0:24:33:69:4c:5a:a8:3f:ef:b8:3c:61:bf: 70:95:d9:74:5f:92:c4:be:73:57:e2:f4:75:3c:95:39:96:e6: 1d:e2:40:b6:e3:e2:f7:37:83:17:75:d5:5d:3c:d3:cf:a4:73: 52:bb:02:7d:02:06:1c:27:d8:49:8f:70:6f:03:21:37:f7:65: b9:9e:95:dc:55:5f:c1:46:47:9c:d0:18:33:6e:9d:eb:f3:11: ba:77:22:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSF8dTUN85v6x2zC3R3FR6XxE5SkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIwMDAzMDQ4WhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWZjMjAzMTM3NzNlMWMwNWNmMWVhMTIyOTUzY2ZmMTJl YTRmMThiNjY0ZGYwZTcyYzBmMjdkMWIxNjk4ZDgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC61Fl56BzrM8nyr9ECiBpbi4hGscP9erZdOYm1emeLPp5Y pNAWVzjeqQlcRVpb6e+PMiF5/BUfZM4sFFXYpPsyfovWmwhzNOzDznH0e+rxF1tG wQ4jDJHuqlKvIZW/bAHbyFDd2bOhCdauEGmgwB6UAmKH5TMV/Ui1z9vNUo5yyr5D ri0xo6PVajCoFqfVLS9A1TynTIDaZ1K90H7wcB8lUJriaJX1eV/M1UHCuxk7UVoD DpaVRtMZhlCOzrV4d+WTvQ/vl8tjIrlTipqACaBoNcBV2IKpdZQGfV2k1QOmbkPz 6pakkykYtGo3G10OCva3oK3oCYcIx5MGeQPv+VXjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAC/bmoNKyAv6jq2GQ+uAYIaGN/wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4YzVlODI4LTIxZTEtNDE3ZS1hYzExLTEzYTkyYWQ3ZDg5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAYbiMwDQYJKoZIhvcNAQELBQADggEBAM9AZADsVShx1Bt53X4fEtLV2iR1 nAnYMedq7QJcMsQ5UNusKk+J7oUxtDQdSg2ZuyJNIGI9QYGiYnRZ/uit73dbvLjU iYSLbY2xtcUjvwrm/CGiSmn/dDbUQSFTUKirZELIrUqJ1CN2p/6YBu+/QNwnzOWh gDy4HGIM0FpzqSGIyUfC0pwTEeVH0E9uI9YQ/vQ7Nci2hW3lepWZG3+5ww/Wbvox cemhoCQzaUxaqD/vuDxhv3CV2XRfksS+c1fi9HU8lTmW5h3iQLbj4vc3gxd11V08 08+kc1K7An0CBhwn2EmPcG8DITf3ZbmeldxVX8FGR5zQGDNunevzEbp3Ijk= -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:00 2026 by rpki-client