$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/185148e2-5071-4d76-9e20-a8fc5757ad10.roa File: 185148e2-5071-4d76-9e20-a8fc5757ad10.roa (raw, json) Hash identifier: sxMdU8BSyJbasTVU83BmANF2Ja6WTKR7Hk+3d75rDEE= Subject key identifier: D5:C1:3C:97:4F:5F:12:29:64:53:B6:71:F2:35:CA:C2:AE:86:16:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6BFC4645E726C2F7D57653CBF03952F021ADCE49 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/185148e2-5071-4d76-9e20-a8fc5757ad10.roa Signing time: Mon 19 Oct 2026 00:41:06 +0000 ROA not before: Mon 19 Oct 2026 00:41:06 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fc:46:45:e7:26:c2:f7:d5:76:53:cb:f0:39:52:f0:21:ad:ce:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:41:06 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=c2197aca8d79c49571ab705de5557a435ae0399bdbf1e738e4d399d5a058270a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:52:bd:c9:3e:d5:97:dd:b1:3d:83:ce:89: e3:a1:24:8b:40:41:02:3f:06:f1:bd:7d:20:c7:c1: 54:33:7f:fe:98:4f:50:39:29:d1:4c:19:dd:de:4b: 53:d2:8b:2b:99:7c:96:8b:f7:f1:02:7d:2d:cb:cd: 96:5f:a5:ea:1c:b5:41:8f:a8:b1:31:e8:1e:49:3b: af:72:ac:da:3d:39:95:4e:cb:5d:a1:a9:0e:7b:0c: 31:ff:c2:b2:91:78:76:7d:0c:02:14:ce:b3:4e:b6: ec:60:c5:d4:a1:7d:55:df:96:bb:a6:b9:48:c5:a4: 18:28:a4:a5:3c:38:a6:a7:e2:e5:41:99:6a:60:bb: 84:c7:bf:e4:8a:aa:28:a7:f4:d3:8b:2c:60:4b:b1: 44:fd:d9:8e:55:9e:7b:d3:0a:a6:62:ea:5f:40:b4: 70:32:9d:37:39:fc:c6:ac:0b:8b:2e:75:f1:b5:2c: 16:a4:2b:a4:4f:d8:01:78:83:df:c6:5f:00:3e:4b: c1:ee:5f:53:d6:7d:6c:e0:19:bd:68:03:ef:ec:d5: e6:d0:29:c7:7a:fe:3d:82:6b:0d:1b:ce:97:41:31: 8a:a9:6a:f2:c0:a5:7c:b3:c5:95:82:df:3f:3c:d5: 8d:a3:ee:f8:bc:e0:30:ab:40:77:bf:f8:89:c4:db: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C1:3C:97:4F:5F:12:29:64:53:B6:71:F2:35:CA:C2:AE:86:16:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/185148e2-5071-4d76-9e20-a8fc5757ad10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.250.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:76:b4:31:15:d2:9b:eb:80:1f:08:35:d5:f0:cb:70:4a:35: b4:26:61:44:80:ff:31:a8:54:0f:72:77:b6:9c:e3:1b:ca:dc: 20:94:83:3e:27:29:97:2c:3c:88:97:73:f4:03:48:e8:45:d5: e2:ac:28:9f:39:a9:42:d5:d9:11:de:bf:de:21:98:ca:a5:d6: a2:1e:9d:b0:94:52:d0:9e:a1:60:74:82:b8:53:9c:19:37:5d: b0:ea:fc:a2:80:7d:e2:90:7b:7c:de:cd:82:37:2c:b8:83:87: 4b:e9:38:12:dd:e7:62:78:58:64:69:db:a1:28:ad:45:31:39: 1a:73:cf:c9:e4:14:e6:9d:e1:67:18:fe:ca:b8:3a:4f:38:d0: 57:8a:48:31:28:6c:cc:a1:4b:7f:a5:14:69:92:74:d5:c8:a2: 3c:c7:5d:58:2b:94:3c:71:f4:54:a5:87:47:f2:c5:1c:b6:9a: 11:3e:a2:4b:5d:f0:c6:f6:f7:1c:5f:b6:ab:34:1b:17:a3:7f: 71:cf:2d:4e:5e:a0:ea:d1:b4:7a:d9:0e:86:fb:08:73:91:ae: 97:7c:06:06:f0:f3:d9:cd:66:35:6c:5e:60:e8:01:9d:c9:21: 8e:66:30:1a:81:8a:58:91:7c:f6:97:bb:cb:4d:99:ee:16:f9: 6c:e5:0b:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa/xGRecmwvfVdlPL8DlS8CGtzkkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA0MTA2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjE5N2FjYThkNzljNDk1NzFhYjcwNWRlNTU1N2E0MzVh ZTAzOTliZGJmMWU3MzhlNGQzOTlkNWEwNTgyNzBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnbFK9yT7Vl92xPYPOieOhJItAQQI/BvG9fSDHwVQzf/6Y T1A5KdFMGd3eS1PSiyuZfJaL9/ECfS3LzZZfpeoctUGPqLEx6B5JO69yrNo9OZVO y12hqQ57DDH/wrKReHZ9DAIUzrNOtuxgxdShfVXflrumuUjFpBgopKU8OKan4uVB mWpgu4THv+SKqiin9NOLLGBLsUT92Y5VnnvTCqZi6l9AtHAynTc5/MasC4sudfG1 LBakK6RP2AF4g9/GXwA+S8HuX1PWfWzgGb1oA+/s1ebQKcd6/j2Caw0bzpdBMYqp avLApXyzxZWC3z881Y2j7vi84DCrQHe/+InE23EjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1cE8l09fEilkU7Zx8jXKwq6GFkAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4NTE0OGUyLTUwNzEtNGQ3Ni05ZTIwLWE4ZmM1NzU3YWQxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsPowDQYJKoZIhvcNAQELBQADggEBAJx2tDEV0pvrgB8INdXwy3BKNbQm YUSA/zGoVA9yd7ac4xvK3CCUgz4nKZcsPIiXc/QDSOhF1eKsKJ85qULV2RHev94h mMql1qIenbCUUtCeoWB0grhTnBk3XbDq/KKAfeKQe3zezYI3LLiDh0vpOBLd52J4 WGRp26EorUUxORpzz8nkFOad4WcY/sq4Ok840FeKSDEobMyhS3+lFGmSdNXIojzH XVgrlDxx9FSlh0fyxRy2mhE+oktd8Mb29xxftqs0Gxejf3HPLU5eoOrRtHrZDob7 CHORrpd8Bgbw89nNZjVsXmDoAZ3JIY5mMBqBiliRfPaXu8tNme4W+WzlC0w= -----END CERTIFICATE-----Generated at Tue Nov 3 19:22:14 2026 by rpki-client