$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c5fb1bb-534b-40c3-aeff-431430961d8e.roa File: 2c5fb1bb-534b-40c3-aeff-431430961d8e.roa (raw, json) Hash identifier: QNc45Y/t7xUurgmnAmlUPTE6/4w2BhudMJssosG1Xj0= Subject key identifier: E8:3A:E4:D4:FC:FB:0D:A1:6A:9B:BD:08:12:DB:12:35:1B:9F:F5:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D5470B6EDD0BBDA1C87CB7CDDB126D14B4A8807 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c5fb1bb-534b-40c3-aeff-431430961d8e.roa Signing time: Tue 11 Aug 2026 00:00:12 +0000 ROA not before: Tue 11 Aug 2026 00:00:12 +0000 ROA not after: Mon 09 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:54:70:b6:ed:d0:bb:da:1c:87:cb:7c:dd:b1:26:d1:4b:4a:88:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 11 00:00:12 2026 GMT Not After : Nov 9 23:59:59 2026 GMT Subject: serialNumber=281834e0cbc8735710c024a53949fbfb433eca283771121e9c6a4e96a41fec88, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:95:03:69:0d:0e:c2:a8:6c:b9:ea:68:0b: 3e:df:64:28:ef:59:ce:73:a3:5f:9a:4c:1b:1a:21: 36:87:f3:b2:8e:6d:26:cf:25:a3:79:04:7b:3b:f9: c1:e4:3d:14:0a:f4:c8:24:8b:8f:af:23:92:0d:c7: 80:03:f4:a7:1c:46:fc:f4:f5:3a:2f:b0:2a:55:be: 5a:07:54:de:47:f8:75:36:60:a7:30:c8:18:2e:12: c3:7b:d0:c6:4d:16:a0:00:ab:e8:23:09:77:c7:30: 4f:e1:06:61:88:f7:6e:4f:77:9c:f8:b3:44:78:04: df:6b:31:ad:cc:04:a4:8c:d8:a9:f4:cd:06:49:f0: cc:8e:08:ad:a9:88:b5:40:06:47:53:26:f3:9e:51: 63:54:2c:b2:13:6f:46:7f:c0:ba:db:79:d8:3c:1b: 52:e9:1b:54:82:87:a2:b7:41:71:c2:6f:e0:2b:50: 35:48:f5:07:c4:69:d3:7d:f7:90:96:c2:1e:24:fc: d5:a3:9d:64:6f:91:1b:80:28:18:f5:e6:ae:fa:c7: 01:35:9c:a2:db:db:c8:cd:7d:c4:33:57:14:8b:9c: de:3f:50:3a:85:4f:e4:14:39:94:f9:99:df:50:57: 41:e3:64:c7:ae:b3:92:0b:07:cc:60:f7:dd:31:a0: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3A:E4:D4:FC:FB:0D:A1:6A:9B:BD:08:12:DB:12:35:1B:9F:F5:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c5fb1bb-534b-40c3-aeff-431430961d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.57.0/24 Signature Algorithm: sha256WithRSAEncryption 26:46:41:80:0a:67:aa:53:f6:b4:e7:56:a5:2d:0a:7c:6e:2f: 7a:27:73:86:97:95:12:69:d7:a6:dc:55:8e:cf:0b:3e:bf:39: 7b:f4:d0:ac:38:4b:12:b6:a5:90:da:a8:27:dc:81:0a:35:f5: 20:a7:b0:28:69:89:cb:ff:e5:b6:33:30:c9:bf:fe:03:59:08: ee:4e:89:3f:02:60:24:f0:9e:9c:0e:17:57:4f:4c:37:bb:e2: 6f:82:b4:98:7f:80:91:6c:68:82:1c:e0:7f:3d:ab:cb:6f:92: 82:75:94:73:b2:e5:46:0d:6d:94:b6:20:44:f8:43:f2:02:a1: da:13:de:8c:c7:f7:a5:05:ae:2b:90:e1:dd:bb:b1:50:aa:21: 44:81:01:bc:17:f3:b9:ab:21:32:b3:be:9c:a7:5c:14:02:cf: f8:12:74:2c:6b:90:d5:23:28:ef:12:44:82:f4:0a:fc:68:88: 78:98:34:01:9a:43:37:80:f2:dc:4a:f6:50:ea:ef:59:a6:fa: dc:82:fc:f5:20:98:dd:47:d2:a2:6d:43:36:ec:10:75:ae:3f: 42:5f:eb:a6:61:b3:ed:f8:82:17:94:56:e1:4a:99:d1:3a:9c: d9:48:91:cf:60:3b:cd:07:77:84:4e:46:4d:83:67:0f:99:a4: 99:4d:2e:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPVRwtu3Qu9och8t83bEm0UtKiAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODExMDAwMDEyWhcNMjYxMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODE4MzRlMGNiYzg3MzU3MTBjMDI0YTUzOTQ5ZmJmYjQz M2VjYTI4Mzc3MTEyMWU5YzZhNGU5NmE0MWZlYzg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJFpUDaQ0OwqhsuepoCz7fZCjvWc5zo1+aTBsaITaH87KO bSbPJaN5BHs7+cHkPRQK9Mgki4+vI5INx4AD9KccRvz09TovsCpVvloHVN5H+HU2 YKcwyBguEsN70MZNFqAAq+gjCXfHME/hBmGI925Pd5z4s0R4BN9rMa3MBKSM2Kn0 zQZJ8MyOCK2piLVABkdTJvOeUWNULLITb0Z/wLrbedg8G1LpG1SCh6K3QXHCb+Ar UDVI9QfEadN995CWwh4k/NWjnWRvkRuAKBj15q76xwE1nKLb28jNfcQzVxSLnN4/ UDqFT+QUOZT5md9QV0HjZMeus5ILB8xg990xoFUXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6Drk1Pz7DaFqm70IEtsSNRuf9TYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjNWZiMWJiLTUzNGItNDBjMy1hZWZmLTQzMTQzMDk2MWQ4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsDkwDQYJKoZIhvcNAQELBQADggEBACZGQYAKZ6pT9rTnVqUtCnxuL3on c4aXlRJp16bcVY7PCz6/OXv00Kw4SxK2pZDaqCfcgQo19SCnsChpicv/5bYzMMm/ /gNZCO5OiT8CYCTwnpwOF1dPTDe74m+CtJh/gJFsaIIc4H89q8tvkoJ1lHOy5UYN bZS2IET4Q/ICodoT3ozH96UFriuQ4d27sVCqIUSBAbwX87mrITKzvpynXBQCz/gS dCxrkNUjKO8SRIL0CvxoiHiYNAGaQzeA8txK9lDq71mm+tyC/PUgmN1H0qJtQzbs EHWuP0Jf66Zhs+34gheUVuFKmdE6nNlIkc9gO80Hd4RORk2DZw+ZpJlNLuo= -----END CERTIFICATE-----Generated at Thu Sep 17 16:19:11 2026 by rpki-client