$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95d3d72c-4ca0-48b0-b8b6-d611532ca056.roa File: 95d3d72c-4ca0-48b0-b8b6-d611532ca056.roa (raw, json) Hash identifier: ZaQSrQkEk0R19S8+UK9F56WUXZo4pk2LUo+LU0wKiPo= Subject key identifier: 8A:44:D6:EA:56:8A:0D:91:11:AF:12:43:83:E2:85:EE:2D:B4:6D:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 62D89C7068B3BF109B6B112BC9CC57640D6B1C89 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95d3d72c-4ca0-48b0-b8b6-d611532ca056.roa Signing time: Mon 23 Feb 2026 00:51:23 +0000 ROA not before: Mon 23 Feb 2026 00:51:23 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d8:9c:70:68:b3:bf:10:9b:6b:11:2b:c9:cc:57:64:0d:6b:1c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:51:23 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=69de6017ef4a9603a7a20bc4178b789f1d3121c99fc1d834c22f4a239b5e8278, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:19:11:eb:bd:4f:18:19:b6:ff:4d:d8:92: a7:32:65:fa:a3:f8:b7:be:7c:96:64:1a:73:7c:d3: 63:e5:9c:b8:e4:3b:4e:7e:d1:46:4d:a1:ef:0f:8f: 0c:a0:13:8f:d3:0f:e3:e6:7a:da:c1:64:46:c0:ba: d9:46:b4:10:d0:63:9a:f6:3e:bf:78:6b:38:56:a5: 0d:a6:e3:d7:eb:74:c3:12:3d:5d:d3:74:59:59:bf: ef:31:99:2c:1b:f9:90:41:4f:5c:9e:88:39:26:10: 10:cd:d5:f7:f5:51:db:7f:a2:15:75:dc:a6:00:f0: cf:fb:b0:83:43:a9:7e:22:f4:d3:75:0a:ac:10:85: 68:75:96:c3:21:b7:78:64:c9:a7:6a:e3:7f:48:81: ed:c1:97:ed:16:a3:c9:26:67:c5:4a:ed:16:58:b3: 49:a3:1d:42:e7:83:10:a9:de:17:1b:02:97:65:e0: 16:e4:02:d8:9b:45:ba:c1:c8:b2:6a:61:fe:3a:25: 26:73:81:02:47:b5:5b:5d:cc:35:3d:cc:17:84:56: cb:04:1c:a2:9e:e7:3e:f7:f3:c3:32:28:94:12:21: 1a:45:56:f9:5e:52:f2:54:f7:79:54:b7:23:91:e1: 68:26:d8:48:7b:32:e8:08:f8:e0:ee:97:07:73:a6: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:44:D6:EA:56:8A:0D:91:11:AF:12:43:83:E2:85:EE:2D:B4:6D:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95d3d72c-4ca0-48b0-b8b6-d611532ca056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.122.0/24 Signature Algorithm: sha256WithRSAEncryption 92:ee:9e:1d:d6:a8:16:84:e8:f1:ff:e8:38:75:dc:fc:e7:9d: ed:d3:fb:b6:6e:57:19:83:a6:d4:b0:8d:e6:80:90:cd:c0:71: a1:1f:d5:dc:b2:ff:c4:5a:d5:39:ac:2c:de:cb:24:92:f8:df: 07:94:27:00:de:9b:a6:88:d1:e8:c2:a9:53:82:3e:20:a6:fe: c0:7e:f7:5e:52:5f:cc:6d:03:97:ca:ba:01:a0:09:3f:5f:87: a4:67:fc:1a:25:89:e0:e6:8f:87:a8:d2:96:60:86:5b:c5:d3: 71:3d:ec:98:35:c8:81:ba:12:ca:09:c4:19:d9:10:cf:a7:f1: ca:46:32:02:f7:89:27:8d:bb:33:74:44:97:35:46:71:3b:34: ab:6a:8f:14:38:b2:b4:97:bb:84:ff:6a:d0:9a:84:d4:5c:3c: 7b:14:0b:68:99:f5:0b:cf:cd:49:63:16:35:38:ed:61:00:80: 74:9f:19:08:3d:8d:40:8c:3e:82:76:83:c9:30:fe:f7:38:0b: 9a:3d:db:ae:ae:fe:ac:ee:14:bf:8f:07:4f:f9:35:3f:ff:c7: 79:42:39:72:2b:4f:92:12:16:c3:d3:ef:86:1c:af:30:d3:a7: 37:8f:e2:16:a3:b8:64:25:70:fc:f1:73:91:bf:b6:16:c1:14: 19:2d:f1:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYticcGizvxCbaxErycxXZA1rHIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDA1MTIzWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWRlNjAxN2VmNGE5NjAzYTdhMjBiYzQxNzhiNzg5ZjFk MzEyMWM5OWZjMWQ4MzRjMjJmNGEyMzliNWU4Mjc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCovxkR671PGBm2/03YkqcyZfqj+Le+fJZkGnN802PlnLjk O05+0UZNoe8PjwygE4/TD+PmetrBZEbAutlGtBDQY5r2Pr94azhWpQ2m49frdMMS PV3TdFlZv+8xmSwb+ZBBT1yeiDkmEBDN1ff1Udt/ohV13KYA8M/7sINDqX4i9NN1 CqwQhWh1lsMht3hkyadq439Ige3Bl+0Wo8kmZ8VK7RZYs0mjHULngxCp3hcbApdl 4BbkAtibRbrByLJqYf46JSZzgQJHtVtdzDU9zBeEVssEHKKe5z7388MyKJQSIRpF VvleUvJU93lUtyOR4Wgm2Eh7MugI+ODulwdzptIrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUikTW6laKDZERrxJDg+KF7i20bcQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1ZDNkNzJjLTRjYTAtNDhiMC1iOGI2LWQ2MTE1MzJjYTA1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRHowDQYJKoZIhvcNAQELBQADggEBAJLunh3WqBaE6PH/6Dh13Pznne3T +7ZuVxmDptSwjeaAkM3AcaEf1dyy/8Ra1TmsLN7LJJL43weUJwDem6aI0ejCqVOC PiCm/sB+915SX8xtA5fKugGgCT9fh6Rn/BolieDmj4eo0pZghlvF03E97Jg1yIG6 EsoJxBnZEM+n8cpGMgL3iSeNuzN0RJc1RnE7NKtqjxQ4srSXu4T/atCahNRcPHsU C2iZ9QvPzUljFjU47WEAgHSfGQg9jUCMPoJ2g8kw/vc4C5o9266u/qzuFL+PB0/5 NT//x3lCOXIrT5ISFsPT74YcrzDTpzeP4hajuGQlcPzxc5G/thbBFBkt8c8= -----END CERTIFICATE-----Generated at Sun Mar 1 21:44:30 2026 by rpki-client