$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27f8bd4b-8726-4307-9f2e-80a1fc470bf9.roa File: 27f8bd4b-8726-4307-9f2e-80a1fc470bf9.roa (raw, json) Hash identifier: 6L7ilfc3OVLcdVc7No3HxvY+3TclADWGrjKYmtimH5s= Subject key identifier: B3:37:2C:E1:A6:E3:F3:3E:B9:CA:E4:29:9C:5E:5C:E2:2C:D7:35:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FED7F9A2CA998C97CE07779995B23ADC21F3B4F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27f8bd4b-8726-4307-9f2e-80a1fc470bf9.roa Signing time: Wed 04 Mar 2026 06:06:49 +0000 ROA not before: Wed 04 Mar 2026 06:06:49 +0000 ROA not after: Tue 02 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ed:7f:9a:2c:a9:98:c9:7c:e0:77:79:99:5b:23:ad:c2:1f:3b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 4 06:06:49 2026 GMT Not After : Jun 2 23:59:59 2026 GMT Subject: serialNumber=84c1a8db745105fbedfbea7f22fc12c7a61841d4dfa495e83af5c4aeb723ac6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:59:48:ed:9b:0c:a4:58:85:a0:fe:76:47: 87:5f:6e:eb:a2:1b:e5:6e:4f:be:e6:c8:76:f2:21: d5:fc:2e:95:18:a4:ab:d9:08:a4:7a:ea:4f:f2:5f: 26:b8:63:db:33:22:15:b1:5e:21:1c:f4:6b:d5:2c: ae:25:b9:93:71:b0:8a:a2:33:73:54:31:ae:f5:c4: 06:41:0f:4c:bb:0b:3f:4a:a6:f1:5a:5a:54:e5:f8: 78:a0:5e:07:20:bc:cc:82:0d:2d:ec:ba:e6:7c:cd: bd:2b:93:9f:a0:6c:36:c3:d6:21:86:39:a8:ee:4c: 65:22:4d:97:88:37:64:09:a6:12:39:f7:15:da:97: 93:30:40:56:11:4a:47:e5:7a:da:67:c1:32:bd:9f: 0f:bc:55:bf:bf:08:0e:31:00:2f:a7:f7:cb:c0:2d: c7:22:e7:13:71:d0:df:13:4e:88:47:2c:3f:e7:6f: 80:d7:33:71:78:75:e1:a3:24:92:bb:c1:1f:48:5e: fc:e9:84:a9:e4:cd:da:90:7e:78:c0:8e:38:67:27: a5:2e:7d:f1:e7:24:13:b6:ab:90:5d:9c:7e:3d:86: e1:55:dd:d8:8d:fb:6d:11:f3:ea:fb:ca:da:a9:85: 21:fb:b3:80:87:92:6c:0d:73:5c:96:3a:6c:f6:10: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:37:2C:E1:A6:E3:F3:3E:B9:CA:E4:29:9C:5E:5C:E2:2C:D7:35:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27f8bd4b-8726-4307-9f2e-80a1fc470bf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.49.0/24 Signature Algorithm: sha256WithRSAEncryption 29:7d:3a:c8:7f:ac:2a:d7:3a:6e:dd:d0:6a:7a:35:b9:58:1b: 81:cd:7e:f5:ee:4f:2f:f2:d6:c6:ca:86:6c:00:d3:1e:7b:1a: f9:b2:9b:7f:10:e0:11:f4:ad:3f:f9:e2:82:16:29:6b:15:5d: ef:a7:01:aa:50:11:69:b9:04:97:b1:44:d4:61:47:db:dd:9f: 8e:86:e9:d4:41:42:95:20:57:46:60:85:23:ea:66:fa:1c:94: e1:63:f8:18:ce:25:05:32:fe:5e:a2:f1:44:a2:c7:91:4b:d5: 27:44:f6:fa:51:26:f6:53:0b:38:3e:ac:2e:b6:1b:33:b1:c7: af:e9:69:a6:2a:a5:e4:86:ce:42:36:92:89:67:96:6b:8c:d4: 80:0e:59:0e:18:00:ab:a5:f3:ff:92:da:1a:2a:20:a5:09:29: 3b:56:18:d7:c4:ba:14:87:06:41:c7:33:ec:47:b0:05:30:af: 09:04:20:b8:d1:82:06:ce:f7:e2:a5:66:7f:92:9b:b0:42:c0: a7:06:d3:cd:59:5f:cd:f3:89:b8:78:9b:ca:60:22:26:78:76: c5:f4:d9:67:84:3d:b4:cc:5c:af:24:28:34:d9:3e:95:23:1e: 71:e3:46:f2:0f:31:f1:72:88:d9:97:28:35:02:e0:15:98:68: 0b:4d:95:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT+1/miypmMl84Hd5mVsjrcIfO08wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzA0MDYwNjQ5WhcNMjYwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NGMxYThkYjc0NTEwNWZiZWRmYmVhN2YyMmZjMTJjN2E2 MTg0MWQ0ZGZhNDk1ZTgzYWY1YzRhZWI3MjNhYzZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKv1lI7ZsMpFiFoP52R4dfbuuiG+VuT77myHbyIdX8LpUY pKvZCKR66k/yXya4Y9szIhWxXiEc9GvVLK4luZNxsIqiM3NUMa71xAZBD0y7Cz9K pvFaWlTl+HigXgcgvMyCDS3suuZ8zb0rk5+gbDbD1iGGOajuTGUiTZeIN2QJphI5 9xXal5MwQFYRSkfletpnwTK9nw+8Vb+/CA4xAC+n98vALcci5xNx0N8TTohHLD/n b4DXM3F4deGjJJK7wR9IXvzphKnkzdqQfnjAjjhnJ6UuffHnJBO2q5BdnH49huFV 3diN+20R8+r7ytqphSH7s4CHkmwNc1yWOmz2EI+1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUszcs4abj8z65yuQpnF5c4izXNcQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3ZjhiZDRiLTg3MjYtNDMwNy05ZjJlLTgwYTFmYzQ3MGJmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsDEwDQYJKoZIhvcNAQELBQADggEBACl9Osh/rCrXOm7d0Gp6NblYG4HN fvXuTy/y1sbKhmwA0x57Gvmym38Q4BH0rT/54oIWKWsVXe+nAapQEWm5BJexRNRh R9vdn46G6dRBQpUgV0ZghSPqZvoclOFj+BjOJQUy/l6i8USix5FL1SdE9vpRJvZT Czg+rC62GzOxx6/paaYqpeSGzkI2kolnlmuM1IAOWQ4YAKul8/+S2hoqIKUJKTtW GNfEuhSHBkHHM+xHsAUwrwkEILjRggbO9+KlZn+Sm7BCwKcG081ZX83zibh4m8pg IiZ4dsX02WeEPbTMXK8kKDTZPpUjHnHjRvIPMfFyiNmXKDUC4BWYaAtNlZk= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:19 2026 by rpki-client