$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2018ed2f-1a67-4075-bdda-cbfb6f251980.roa File: 2018ed2f-1a67-4075-bdda-cbfb6f251980.roa (raw, json) Hash identifier: S5UME08cA/wf4P24p6MtoOD/1+VCS+hRI/kmO8o7TMc= Subject key identifier: D3:6A:2F:64:49:95:6E:DD:AF:74:27:BE:3A:30:B0:E4:C5:0F:2F:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DE8BAADD131C97558EF03257631ACA3CC57399C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2018ed2f-1a67-4075-bdda-cbfb6f251980.roa Signing time: Fri 31 Jul 2026 01:21:33 +0000 ROA not before: Fri 31 Jul 2026 01:21:33 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e8:ba:ad:d1:31:c9:75:58:ef:03:25:76:31:ac:a3:cc:57:39:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 01:21:33 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=44121a69287e67db1f39b4b68980d53b44c39aa47c4e09eb3c4f907308b67f07, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:91:8f:8b:2a:58:c9:7f:89:22:62:4b:d8: 05:e1:97:97:21:56:f3:93:12:ef:ad:2e:73:3f:d5: ef:df:de:3e:50:44:84:3b:36:ef:10:be:6c:0a:2a: 62:60:b8:e1:82:6b:9c:32:a0:9d:3c:d7:60:ad:ca: 11:3b:2e:c4:f5:e0:45:bd:a5:b8:a4:8d:f7:32:54: f0:f8:18:84:cf:b4:5f:f7:5c:80:1b:d8:7f:b4:fa: e6:48:56:27:d2:3f:c8:bd:eb:af:39:5c:f6:7e:e7: 9e:7e:35:a8:0b:dd:ef:af:a2:0c:8d:27:68:d0:8b: 8c:ae:db:52:ed:ca:4e:00:72:a4:53:d4:24:5f:99: 1a:f7:7b:8d:46:62:df:ac:b0:a8:0e:97:54:66:a8: 98:24:bb:f9:2a:73:67:2f:8b:5d:68:31:01:18:d9: f3:be:e3:07:e0:67:b6:b8:37:98:51:3a:8e:d2:c3: ec:a9:f0:1e:4b:fc:ca:08:cf:03:4d:7f:69:4b:f6: be:c6:eb:88:a9:ed:59:7b:ac:48:4f:2f:cb:da:95: 67:bd:0b:cf:18:15:36:80:b0:e2:1d:9d:ec:47:19: c7:e3:7e:69:a8:eb:68:a9:ca:dd:20:0c:46:9d:08: 6c:5c:e2:83:f3:0f:25:c2:08:27:c5:96:d9:44:2a: 83:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6A:2F:64:49:95:6E:DD:AF:74:27:BE:3A:30:B0:E4:C5:0F:2F:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2018ed2f-1a67-4075-bdda-cbfb6f251980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.20.0/24 Signature Algorithm: sha256WithRSAEncryption 89:c5:4e:bd:e9:2e:86:61:ce:5a:d7:86:37:73:ec:a2:58:c8: 23:6b:88:fb:dc:be:76:14:c6:93:9e:9c:82:04:c6:f9:e8:4d: 20:71:61:fb:a9:d0:a1:f4:67:fa:3a:d4:62:72:70:0f:92:e2: a9:65:a8:32:13:65:0e:0c:b8:cc:61:d9:12:a0:e3:ff:97:01: 25:d8:c4:3b:1c:c2:bb:c3:7f:1c:8f:e2:dd:80:88:7b:06:87: db:b0:ce:de:65:79:58:ab:c0:af:13:5c:c2:af:42:cc:7d:23: 44:bd:4a:2f:5b:1a:0e:b2:fc:81:46:da:fc:00:04:7c:43:1a: e5:6a:95:9e:32:f1:c1:12:db:02:f7:99:cb:92:f7:51:a5:af: f8:72:e2:e5:f1:92:fc:4c:25:a8:73:85:78:09:6c:56:02:42: c7:e2:9f:59:49:2e:af:0e:6b:bc:db:85:56:09:58:45:68:3c: e8:02:9e:77:87:3b:c5:57:1b:7d:44:34:c1:82:f5:18:85:c5: 7c:0b:46:b2:87:fc:ae:d6:75:89:05:34:2d:5e:b4:ee:c8:d4: 13:d9:ff:a3:94:59:43:87:77:ac:a9:24:ac:46:46:e2:57:25: 36:5e:7a:02:29:18:76:7f:da:60:21:c6:ec:05:68:c8:37:c6: f9:2c:2f:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTei6rdExyXVY7wMldjGso8xXOZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDEyMTMzWhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDEyMWE2OTI4N2U2N2RiMWYzOWI0YjY4OTgwZDUzYjQ0 YzM5YWE0N2M0ZTA5ZWIzYzRmOTA3MzA4YjY3ZjA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxdpGPiypYyX+JImJL2AXhl5chVvOTEu+tLnM/1e/f3j5Q RIQ7Nu8QvmwKKmJguOGCa5wyoJ0812CtyhE7LsT14EW9pbikjfcyVPD4GITPtF/3 XIAb2H+0+uZIVifSP8i96685XPZ+555+NagL3e+vogyNJ2jQi4yu21Ltyk4AcqRT 1CRfmRr3e41GYt+ssKgOl1RmqJgku/kqc2cvi11oMQEY2fO+4wfgZ7a4N5hROo7S w+yp8B5L/MoIzwNNf2lL9r7G64ip7Vl7rEhPL8valWe9C88YFTaAsOIdnexHGcfj fmmo62ipyt0gDEadCGxc4oPzDyXCCCfFltlEKoPfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU02ovZEmVbt2vdCe+OjCw5MUPL50wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwMThlZDJmLTFhNjctNDA3NS1iZGRhLWNiZmI2ZjI1MTk4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmBQwDQYJKoZIhvcNAQELBQADggEBAInFTr3pLoZhzlrXhjdz7KJYyCNr iPvcvnYUxpOenIIExvnoTSBxYfup0KH0Z/o61GJycA+S4qllqDITZQ4MuMxh2RKg 4/+XASXYxDscwrvDfxyP4t2AiHsGh9uwzt5leVirwK8TXMKvQsx9I0S9Si9bGg6y /IFG2vwABHxDGuVqlZ4y8cES2wL3mcuS91Glr/hy4uXxkvxMJahzhXgJbFYCQsfi n1lJLq8Oa7zbhVYJWEVoPOgCnneHO8VXG31ENMGC9RiFxXwLRrKH/K7WdYkFNC1e tO7I1BPZ/6OUWUOHd6ypJKxGRuJXJTZeegIpGHZ/2mAhxuwFaMg3xvksL58= -----END CERTIFICATE-----Generated at Mon Aug 3 05:38:09 2026 by rpki-client