$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2259c0b2-f09b-4e10-ae4c-70c8766b002c.roa File: 2259c0b2-f09b-4e10-ae4c-70c8766b002c.roa (raw, json) Hash identifier: 4eWQP8j1MqMkdF6iZ+TDiSaHoNE97m35Nx12G61czjw= Subject key identifier: 4D:43:11:D5:FB:35:4B:DB:F6:7A:15:9D:29:E1:89:87:32:FA:72:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 738D801EEA7E55D62C2FB9B80AB2D0B339488FD8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2259c0b2-f09b-4e10-ae4c-70c8766b002c.roa Signing time: Fri 23 Oct 2026 01:10:57 +0000 ROA not before: Fri 23 Oct 2026 01:10:57 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8d:80:1e:ea:7e:55:d6:2c:2f:b9:b8:0a:b2:d0:b3:39:48:8f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:10:57 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=85126dd35dadd66f253771fbe666e03feae84b47721f3ecba4fef130be9131ea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:5b:21:4e:10:c6:e6:f7:64:f9:fb:ab:3f: f6:4c:5e:81:ba:6e:21:1f:d5:79:d7:2e:fb:c6:aa: e4:ce:4c:aa:8f:c5:9a:86:29:fd:1f:4e:fa:e7:b9: e2:dd:5e:29:a4:39:a8:de:88:60:40:53:29:56:98: 2c:e2:30:f0:e5:84:ce:96:16:d5:9b:d1:a0:87:64: 71:28:0b:21:16:ff:d1:21:89:35:cc:fd:e5:a8:6f: 8e:4c:fe:95:5e:73:be:fb:8f:b2:71:d8:76:d2:54: d0:90:44:48:ae:53:fd:b5:5f:22:14:d4:d0:fb:76: 87:eb:a8:52:e9:db:c7:84:20:90:b4:fb:6b:5c:9d: 76:3a:da:e3:2e:08:34:20:37:2e:f6:4e:34:53:7f: 0b:3f:31:68:fb:91:8d:10:88:ed:6d:13:07:d5:d5: d9:74:5b:72:fc:d0:f3:45:02:03:57:d4:1f:fd:08: ac:45:94:cc:a0:5c:d1:e4:cd:5c:45:18:fd:fd:80: 0b:93:54:0a:a3:1a:67:e8:8c:6a:ba:ed:2c:ba:ec: f3:b7:15:2f:08:e8:a5:5a:b0:6d:e0:a1:0d:29:2c: 80:d1:49:77:28:5b:2f:a8:3a:8b:1a:ff:12:0c:24: 44:e0:1b:b7:d1:54:87:fa:76:81:2b:84:25:4d:e0: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:43:11:D5:FB:35:4B:DB:F6:7A:15:9D:29:E1:89:87:32:FA:72:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2259c0b2-f09b-4e10-ae4c-70c8766b002c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.18.0/24 Signature Algorithm: sha256WithRSAEncryption 99:b5:2d:0e:93:6a:63:c4:08:50:d0:8b:25:8c:0d:82:9e:01: 01:e2:ae:9e:51:cc:d4:ec:77:fa:7d:40:e8:f3:21:f2:aa:73: 0e:d5:18:19:71:4c:ef:00:9c:da:25:de:a6:f3:e5:5d:bc:30: d8:5e:49:ae:ed:65:75:bc:6b:74:6f:a2:1e:4c:50:35:90:9a: a1:03:19:51:f2:2c:c0:3f:a7:bc:99:1e:d4:ad:b3:00:6a:ee: 6b:30:70:de:84:e0:b0:cf:1b:80:1b:ce:b5:eb:5a:ee:13:ca: d6:c9:d8:47:46:b1:24:5c:e4:5e:0d:0e:9b:63:da:70:33:f3: 12:bf:dd:71:e3:06:77:aa:b7:d0:56:26:9d:88:b3:58:88:1b: a5:b0:4e:7f:5c:6c:91:07:cc:96:89:b4:17:71:c8:b8:09:75: 88:94:85:4f:4b:0c:28:df:37:88:1d:46:63:49:15:49:ac:70: e2:28:44:bb:fb:9f:37:ff:c5:c3:ad:7e:2c:93:76:4d:c7:05: d9:96:a1:c1:ba:70:a2:28:b9:9d:6c:84:a1:47:8f:5f:38:8d: bd:8d:fb:8a:ac:90:c9:ce:73:b3:00:3f:43:95:ef:d6:41:05: 63:3f:1f:96:a4:72:88:7a:49:84:81:0a:5a:02:ec:86:32:8d: b8:20:37:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc42AHup+VdYsL7m4CrLQszlIj9gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDExMDU3WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTEyNmRkMzVkYWRkNjZmMjUzNzcxZmJlNjY2ZTAzZmVh ZTg0YjQ3NzIxZjNlY2JhNGZlZjEzMGJlOTEzMWVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCydlshThDG5vdk+furP/ZMXoG6biEf1XnXLvvGquTOTKqP xZqGKf0fTvrnueLdXimkOajeiGBAUylWmCziMPDlhM6WFtWb0aCHZHEoCyEW/9Eh iTXM/eWob45M/pVec777j7Jx2HbSVNCQREiuU/21XyIU1ND7dofrqFLp28eEIJC0 +2tcnXY62uMuCDQgNy72TjRTfws/MWj7kY0QiO1tEwfV1dl0W3L80PNFAgNX1B/9 CKxFlMygXNHkzVxFGP39gAuTVAqjGmfojGq67Sy67PO3FS8I6KVasG3goQ0pLIDR SXcoWy+oOosa/xIMJETgG7fRVIf6doErhCVN4IX5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTUMR1fs1S9v2ehWdKeGJhzL6ci0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyNTljMGIyLWYwOWItNGUxMC1hZTRjLTcwYzg3NjZiMDAyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsBIwDQYJKoZIhvcNAQELBQADggEBAJm1LQ6TamPECFDQiyWMDYKeAQHi rp5RzNTsd/p9QOjzIfKqcw7VGBlxTO8AnNol3qbz5V28MNheSa7tZXW8a3Rvoh5M UDWQmqEDGVHyLMA/p7yZHtStswBq7mswcN6E4LDPG4AbzrXrWu4TytbJ2EdGsSRc 5F4NDptj2nAz8xK/3XHjBneqt9BWJp2Is1iIG6WwTn9cbJEHzJaJtBdxyLgJdYiU hU9LDCjfN4gdRmNJFUmscOIoRLv7nzf/xcOtfiyTdk3HBdmWocG6cKIouZ1shKFH j184jb2N+4qskMnOc7MAP0OV79ZBBWM/H5akcoh6SYSBCloC7IYyjbggNwU= -----END CERTIFICATE-----Generated at Tue Nov 3 08:20:36 2026 by rpki-client