$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa File: 1b5753b0-d542-44ed-a4ed-def12dec14c4.roa (raw, json) Hash identifier: gD4QgWmyfrUAk4owFWDxdUlAW8UOPS1Je9JXbHO3j/4= Subject key identifier: 08:E2:A2:EE:06:E4:94:D5:C2:FA:0D:AA:BC:59:AC:4A:13:C3:57:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47D3EC9E51913648BED81183B64E338AF458F841 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa Signing time: Mon 19 Oct 2026 01:40:11 +0000 ROA not before: Mon 19 Oct 2026 01:40:11 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d3:ec:9e:51:91:36:48:be:d8:11:83:b6:4e:33:8a:f4:58:f8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 01:40:11 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=70f8a6be85160906cf63602d4d5a85aed4c7250d33a166ffed5b577730955f4a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:c6:26:8d:f7:8c:b0:32:fa:6a:b3:d9:29: 55:b4:e1:60:5c:61:da:56:3b:87:9b:25:97:a0:62: 5c:7c:50:14:62:35:42:c4:a6:44:ee:d1:30:cc:86: e1:60:31:0e:fa:cf:ee:89:bc:62:f7:c9:75:4c:fc: 25:db:f7:bc:bc:c8:20:ec:d4:af:d2:7a:65:1c:2d: bb:e1:05:7c:7f:a8:e0:03:df:0d:e6:ac:e8:75:ee: 22:86:91:3d:fe:30:a9:06:d6:01:00:f8:d9:35:24: f1:5d:30:fd:3c:2c:8e:80:cf:19:b0:ee:02:de:d9: 02:eb:9d:48:26:36:c3:35:3d:5f:43:30:46:1b:95: 33:2a:f3:33:12:42:8d:b3:6b:1e:06:fc:da:d9:99: 22:9c:7d:50:34:e8:e5:38:62:de:d8:89:76:63:37: 5b:42:84:ab:43:88:30:2d:e8:60:bf:53:68:94:7c: 1e:77:4b:1a:44:38:02:35:34:9b:93:c2:82:46:f3: 93:c7:27:aa:d7:d7:35:11:d0:bd:b8:8a:92:03:cc: 16:87:f1:b8:9d:be:1e:15:6b:68:58:5d:aa:69:42: ec:45:d3:1d:f2:d3:7f:f4:38:2b:87:06:51:66:7b: 2a:30:36:29:d3:dd:c5:97:2b:94:ef:cf:7d:ca:67: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E2:A2:EE:06:E4:94:D5:C2:FA:0D:AA:BC:59:AC:4A:13:C3:57:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.85.0/24 Signature Algorithm: sha256WithRSAEncryption 04:02:e9:7b:42:28:e4:96:be:90:4a:3d:89:90:15:76:a5:93: c2:c0:2e:d8:a1:ba:d4:c7:63:8b:ae:ac:f9:b0:5e:f3:9c:ad: ae:07:c9:e2:27:82:b8:f0:00:05:75:43:ca:ed:1c:c4:b2:ac: f0:bc:fc:51:d9:86:02:dc:9d:40:63:81:89:ac:a8:79:51:93: ef:d2:a9:22:51:cc:fb:16:01:a1:0d:ea:4e:2b:4e:2b:ba:9d: 00:87:fa:1c:87:7c:4b:13:a9:1a:ef:8a:74:a2:c8:62:15:97: 39:2c:6b:08:85:81:e9:6c:01:19:50:c8:e7:d7:ee:dd:9a:5e: a9:6e:fc:b4:75:99:5d:cf:47:25:cd:14:e5:ab:19:6a:62:e1: a1:f9:15:67:eb:4a:ba:e2:83:f5:13:a7:bd:59:39:7f:56:e5: 0a:48:7d:e5:43:94:30:0e:84:11:98:ba:82:a8:c5:b9:68:2e: be:6d:a0:d4:5a:79:33:b1:59:9f:20:7f:37:6d:4e:be:a2:f0: 68:11:b1:3d:b1:cc:d1:95:65:db:64:0c:13:78:d0:47:99:2f: da:70:3e:60:b9:84:d7:d9:6d:d6:9f:1b:6f:ba:e5:6c:c5:9f: 00:5e:de:28:cf:75:bf:20:5d:1c:59:96:5b:90:1d:4b:11:04: 00:24:68:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR9PsnlGRNki+2BGDtk4zivRY+EEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDE0MDExWhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MGY4YTZiZTg1MTYwOTA2Y2Y2MzYwMmQ0ZDVhODVhZWQ0 YzcyNTBkMzNhMTY2ZmZlZDViNTc3NzMwOTU1ZjRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHfMYmjfeMsDL6arPZKVW04WBcYdpWO4ebJZegYlx8UBRi NULEpkTu0TDMhuFgMQ76z+6JvGL3yXVM/CXb97y8yCDs1K/SemUcLbvhBXx/qOAD 3w3mrOh17iKGkT3+MKkG1gEA+Nk1JPFdMP08LI6Azxmw7gLe2QLrnUgmNsM1PV9D MEYblTMq8zMSQo2zax4G/NrZmSKcfVA06OU4Yt7YiXZjN1tChKtDiDAt6GC/U2iU fB53SxpEOAI1NJuTwoJG85PHJ6rX1zUR0L24ipIDzBaH8bidvh4Va2hYXappQuxF 0x3y03/0OCuHBlFmeyowNinT3cWXK5Tvz33KZ5fXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCOKi7gbklNXC+g2qvFmsShPDV84wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiNTc1M2IwLWQ1NDItNDRlZC1hNGVkLWRlZjEyZGVjMTRjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsFUwDQYJKoZIhvcNAQELBQADggEBAAQC6XtCKOSWvpBKPYmQFXalk8LA LtihutTHY4uurPmwXvOcra4HyeIngrjwAAV1Q8rtHMSyrPC8/FHZhgLcnUBjgYms qHlRk+/SqSJRzPsWAaEN6k4rTiu6nQCH+hyHfEsTqRrvinSiyGIVlzksawiFgels ARlQyOfX7t2aXqlu/LR1mV3PRyXNFOWrGWpi4aH5FWfrSrrig/UTp71ZOX9W5QpI feVDlDAOhBGYuoKoxbloLr5toNRaeTOxWZ8gfzdtTr6i8GgRsT2xzNGVZdtkDBN4 0EeZL9pwPmC5hNfZbdafG2+65WzFnwBe3ijPdb8gXRxZlluQHUsRBAAkaGk= -----END CERTIFICATE-----Generated at Tue Nov 3 05:12:02 2026 by rpki-client