$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d870782-8129-4f82-82eb-4102943f73d6.roa File: 3d870782-8129-4f82-82eb-4102943f73d6.roa (raw, json) Hash identifier: XuXK9yW43AIzBQn/TAzNyxYWIQGraXecIduWQRJSSjY= Subject key identifier: 31:E5:9B:5C:9F:AC:68:A4:86:1A:50:42:D6:E5:BE:95:E1:6E:82:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B317E3437212C46DB34D095B4057CD823B8507C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d870782-8129-4f82-82eb-4102943f73d6.roa Signing time: Wed 18 Feb 2026 00:21:00 +0000 ROA not before: Wed 18 Feb 2026 00:21:00 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 208.118.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:31:7e:34:37:21:2c:46:db:34:d0:95:b4:05:7c:d8:23:b8:50:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:21:00 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=4c80b5ea5728cd942c4097ccdf225f18eb523b2daeafb90da1810a28c28b03e8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:67:44:ba:49:ab:9e:6f:54:37:74:b3:04: 5e:c6:59:15:e0:97:a7:5f:36:c1:a8:d9:83:ac:98: 85:8f:ef:29:35:67:7d:a6:18:85:83:32:69:b8:f0: 5f:38:e7:91:29:1f:c5:d5:3a:33:95:6f:aa:de:1f: cd:06:38:95:c4:54:8e:74:b6:c3:31:6e:48:18:f9: 0b:0b:07:f6:cc:d1:57:8d:db:2e:3a:9b:cc:d4:4a: 28:50:02:f1:e2:71:be:c8:cd:52:12:92:1d:1a:43: da:08:a0:53:98:0f:1e:32:e4:c4:51:b8:43:0b:1e: 73:ee:98:9e:36:64:b8:1f:a2:c5:6f:ec:76:80:1e: 5c:89:2e:96:4d:3a:dd:9e:a4:23:73:c9:83:c5:da: ec:14:a2:b8:81:2c:b0:a5:21:c5:aa:15:c7:30:64: 55:a0:6b:4b:02:b1:f4:21:c1:13:61:b6:5d:ac:ff: 77:57:24:ae:cf:de:a6:bb:e3:6d:3a:76:69:ec:43: 4b:5f:95:4e:52:fe:77:a8:b5:22:b6:05:24:7e:48: 22:4a:8a:ae:31:e7:42:fa:ef:04:b5:e4:87:b7:26: 1b:20:97:f6:9f:f2:4a:8a:d7:28:23:ab:28:8b:44: 9e:69:7a:c3:f1:f4:a3:0f:60:33:4e:da:03:cd:ed: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E5:9B:5C:9F:AC:68:A4:86:1A:50:42:D6:E5:BE:95:E1:6E:82:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d870782-8129-4f82-82eb-4102943f73d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.118.0.0/19 Signature Algorithm: sha256WithRSAEncryption 85:d0:d8:26:13:41:62:c3:e4:56:37:40:3f:9f:6d:28:f0:e4: 6c:39:7f:cc:24:36:8f:6e:12:30:65:d6:ed:26:55:81:8f:f9: ac:7d:3f:9c:48:7d:7a:fb:66:2b:41:45:1f:2b:64:28:3d:b3: c0:87:80:af:cb:3f:d6:a1:0b:36:bd:66:93:78:6f:a8:1d:d2: 07:9e:c9:2d:7b:81:ab:44:f7:88:a3:fc:41:80:90:15:98:a0: 10:91:74:33:96:6c:5d:b4:91:8a:83:63:85:35:d1:c2:a4:25: 1d:4a:d2:0f:c2:1a:b8:f1:0e:e4:1a:21:8c:e5:d4:48:ef:c8: e8:d0:fb:af:79:67:82:97:44:af:ea:9c:e5:67:61:aa:b3:30: 69:0e:0f:c7:85:2f:34:e6:5b:46:17:1a:e6:35:79:1a:38:1d: 26:a3:e2:91:62:eb:44:f0:0b:0b:ca:37:e5:6c:43:54:02:81: 72:37:8e:72:d4:1d:ac:c3:1b:c4:da:85:25:ba:8f:ef:a5:9c: e9:6a:a5:bc:63:7d:7b:72:f4:dc:d0:50:72:73:77:12:58:a6: d7:48:7b:8f:92:c2:c5:fc:50:1a:5c:c0:70:f6:f2:bd:0b:d3: 22:c3:f1:55:9f:6d:07:49:ce:29:b6:8e:f6:9e:c5:77:82:2e: 09:ca:6e:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCzF+NDchLEbbNNCVtAV82CO4UHwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAyMTAwWhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzgwYjVlYTU3MjhjZDk0MmM0MDk3Y2NkZjIyNWYxOGVi NTIzYjJkYWVhZmI5MGRhMTgxMGEyOGMyOGIwM2U4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIcGdEukmrnm9UN3SzBF7GWRXgl6dfNsGo2YOsmIWP7yk1 Z32mGIWDMmm48F8455EpH8XVOjOVb6reH80GOJXEVI50tsMxbkgY+QsLB/bM0VeN 2y46m8zUSihQAvHicb7IzVISkh0aQ9oIoFOYDx4y5MRRuEMLHnPumJ42ZLgfosVv 7HaAHlyJLpZNOt2epCNzyYPF2uwUoriBLLClIcWqFccwZFWga0sCsfQhwRNhtl2s /3dXJK7P3qa74206dmnsQ0tflU5S/neotSK2BSR+SCJKiq4x50L67wS15Ie3Jhsg l/af8kqK1ygjqyiLRJ5pesPx9KMPYDNO2gPN7aKnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMeWbXJ+saKSGGlBC1uW+leFugrQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkODcwNzgyLTgxMjktNGY4Mi04MmViLTQxMDI5NDNmNzNkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXQdgAwDQYJKoZIhvcNAQELBQADggEBAIXQ2CYTQWLD5FY3QD+fbSjw5Gw5 f8wkNo9uEjBl1u0mVYGP+ax9P5xIfXr7ZitBRR8rZCg9s8CHgK/LP9ahCza9ZpN4 b6gd0geeyS17gatE94ij/EGAkBWYoBCRdDOWbF20kYqDY4U10cKkJR1K0g/CGrjx DuQaIYzl1EjvyOjQ+695Z4KXRK/qnOVnYaqzMGkOD8eFLzTmW0YXGuY1eRo4HSaj 4pFi60TwCwvKN+VsQ1QCgXI3jnLUHazDG8TahSW6j++lnOlqpbxjfXty9NzQUHJz dxJYptdIe4+SwsX8UBpcwHD28r0L0yLD8VWfbQdJzim2jvaexXeCLgnKbpc= -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:35 2026 by rpki-client