$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/981544bc-1898-4afe-b6b3-35ece227a880.roa File: 981544bc-1898-4afe-b6b3-35ece227a880.roa (raw, json) Hash identifier: 3ve8vsuW+/H9Zmo6ehNEf5MeSSTXJGAW5Z0Gi6x3hBc= Subject key identifier: A8:81:19:F6:3C:9A:58:6B:14:73:27:A8:1C:5E:83:BC:C3:17:E6:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54B5C83EC4DCC676CC2E0B3B5D049089AF9430BF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/981544bc-1898-4afe-b6b3-35ece227a880.roa Signing time: Mon 23 Feb 2026 00:41:10 +0000 ROA not before: Mon 23 Feb 2026 00:41:10 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b5:c8:3e:c4:dc:c6:76:cc:2e:0b:3b:5d:04:90:89:af:94:30:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 00:41:10 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=c39cf67addd77b151b13222cb3fac409909c69500a008d7aa629a10be8f175de, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:7a:b8:15:f3:49:dd:7a:aa:f7:8c:4e:4a: 80:71:d9:58:ce:b4:38:fa:9b:1c:90:2c:80:3e:45: d5:92:74:83:4c:fe:7b:9f:59:4b:e4:b4:4b:fb:07: 61:69:02:2e:a4:8d:d3:fe:3c:ba:f2:14:6f:b9:e0: 7a:58:95:ed:ea:bc:cc:da:98:d2:d3:96:cc:ae:ec: 4b:70:18:0b:8f:08:c9:0a:0f:70:b5:17:c1:8d:c0: 43:17:86:0b:35:34:1f:a6:3c:33:55:4f:64:9b:60: 99:bd:c8:a2:7f:cc:66:40:ff:ed:2a:3f:23:53:c4: 4e:53:d3:f8:c5:97:96:b8:0a:af:ba:aa:a8:19:1f: 78:4f:2e:90:10:54:93:60:e9:be:1a:56:97:9e:55: e8:f4:12:ed:4a:d3:29:2b:58:f5:3d:75:18:0b:af: 31:f1:54:13:58:40:cf:b0:a1:a3:89:dd:76:6e:ec: 7e:67:61:3d:df:35:c5:53:76:70:61:50:63:23:2f: b5:25:9b:a5:d8:68:1e:95:db:97:af:d3:be:3d:f8: 79:4b:0c:22:42:21:2a:bb:81:a7:28:4a:5f:79:a6: b7:ba:3e:32:ad:ea:3a:8e:78:12:e1:96:06:60:a6: f2:03:fb:74:1b:ec:9e:cc:f1:8c:08:04:00:75:4c: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:81:19:F6:3C:9A:58:6B:14:73:27:A8:1C:5E:83:BC:C3:17:E6:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/981544bc-1898-4afe-b6b3-35ece227a880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.133.0/24 Signature Algorithm: sha256WithRSAEncryption 42:f2:42:52:a3:53:12:ab:de:45:8a:1a:4f:36:93:a0:4c:03: dc:2b:c8:a1:f5:0c:fd:80:9a:47:53:fb:31:7d:e3:41:84:60: 3d:22:e3:ed:a5:d8:69:2d:04:46:e2:8f:47:31:a0:8a:21:a9: 95:db:dc:31:30:70:98:d9:34:45:94:ab:fe:3c:72:01:ee:b9: dd:57:2b:cb:1c:78:f7:44:84:01:7a:9a:53:c9:00:05:91:9c: dc:e5:9f:0b:bc:0d:de:8c:78:ef:3c:d0:82:2a:a4:0b:5b:87: 81:8b:8e:9f:f5:96:4d:1e:00:29:11:00:a8:f3:9f:e5:65:69: 10:83:bc:7c:1f:75:7d:3e:68:84:8b:fc:56:e0:0c:87:96:75: a5:85:43:2b:6f:1c:d6:aa:b2:fd:dc:7f:d4:7c:d4:dd:ea:15: f2:f4:66:f3:c9:3a:10:52:44:29:03:81:02:29:d1:b2:35:e0: d1:87:34:23:61:fd:34:66:42:6c:53:9d:5a:92:de:b0:aa:06: 66:64:05:37:93:dc:06:90:e0:3a:e2:98:46:62:e4:56:0b:34: 38:c8:1f:56:35:f0:db:d1:7e:c5:c4:e9:3c:71:20:a2:de:e0: ce:fd:ad:d0:b1:aa:58:48:81:2c:1f:bd:59:7f:6f:b5:bf:2e: 5d:8e:78:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVLXIPsTcxnbMLgs7XQSQia+UML8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDA0MTEwWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzljZjY3YWRkZDc3YjE1MWIxMzIyMmNiM2ZhYzQwOTkw OWM2OTUwMGEwMDhkN2FhNjI5YTEwYmU4ZjE3NWRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp03q4FfNJ3Xqq94xOSoBx2VjOtDj6mxyQLIA+RdWSdINM /nufWUvktEv7B2FpAi6kjdP+PLryFG+54HpYle3qvMzamNLTlsyu7EtwGAuPCMkK D3C1F8GNwEMXhgs1NB+mPDNVT2SbYJm9yKJ/zGZA/+0qPyNTxE5T0/jFl5a4Cq+6 qqgZH3hPLpAQVJNg6b4aVpeeVej0Eu1K0ykrWPU9dRgLrzHxVBNYQM+woaOJ3XZu 7H5nYT3fNcVTdnBhUGMjL7Ulm6XYaB6V25ev0749+HlLDCJCISq7gacoSl95pre6 PjKt6jqOeBLhlgZgpvID+3Qb7J7M8YwIBAB1TPMbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqIEZ9jyaWGsUcyeoHF6DvMMX5gkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4MTU0NGJjLTE4OTgtNGFmZS1iNmIzLTM1ZWNlMjI3YTg4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRIUwDQYJKoZIhvcNAQELBQADggEBAELyQlKjUxKr3kWKGk82k6BMA9wr yKH1DP2AmkdT+zF940GEYD0i4+2l2GktBEbij0cxoIohqZXb3DEwcJjZNEWUq/48 cgHuud1XK8scePdEhAF6mlPJAAWRnNzlnwu8Dd6MeO880IIqpAtbh4GLjp/1lk0e ACkRAKjzn+VlaRCDvHwfdX0+aISL/FbgDIeWdaWFQytvHNaqsv3cf9R81N3qFfL0 ZvPJOhBSRCkDgQIp0bI14NGHNCNh/TRmQmxTnVqS3rCqBmZkBTeT3AaQ4DrimEZi 5FYLNDjIH1Y18NvRfsXE6TxxIKLe4M79rdCxqlhIgSwfvVl/b7W/Ll2OeLI= -----END CERTIFICATE-----Generated at Sun Mar 1 21:52:44 2026 by rpki-client