$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f0c69f0-aafc-423b-9c72-c20ba6bbff48.roa File: 2f0c69f0-aafc-423b-9c72-c20ba6bbff48.roa (raw, json) Hash identifier: 07KKrO2bEN59k7i+VTjfuQ6xjU2CGN8xY35/W9HgUKQ= Subject key identifier: 09:85:A9:27:40:05:FA:44:AB:51:30:F9:70:FE:31:FE:E5:2A:4D:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D56F6B296FC1F09B5F0A4941F4D6E47DA13B83C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f0c69f0-aafc-423b-9c72-c20ba6bbff48.roa Signing time: Mon 19 Oct 2026 01:41:29 +0000 ROA not before: Mon 19 Oct 2026 01:41:29 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:56:f6:b2:96:fc:1f:09:b5:f0:a4:94:1f:4d:6e:47:da:13:b8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 01:41:29 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=a974441e650f1bd98903fbd1f17bd2531f6b23d54d616227448b6f4a41b85fdc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:10:61:a3:2c:07:47:00:cf:05:f2:4b:51: f6:cf:93:95:b5:75:2a:7b:59:da:f2:2c:5d:6b:73: 6a:89:ec:cd:0f:8f:4d:24:d3:86:61:ea:70:65:92: 03:c2:a7:a7:d1:11:61:99:7e:8b:f1:25:d8:9b:9c: 9b:c8:4f:3a:23:b0:fc:e5:95:91:07:70:0c:0a:7c: 8c:d2:88:58:7f:d1:aa:36:8a:a2:bd:1c:77:75:99: d8:13:f2:e4:7b:68:af:d6:33:d1:31:d8:5d:3a:e6: ca:ed:33:7e:cf:a4:da:00:7b:7d:87:d4:e5:19:d5: 7e:a2:b0:08:21:b3:c2:60:17:15:66:b2:1c:18:e3: 56:46:ee:58:ca:e7:2f:ae:25:3a:09:0e:dd:f3:c3: 5d:8d:ef:d8:17:c7:ae:1c:74:ed:e4:dd:55:ee:f0: 8e:46:f8:19:ba:24:17:60:68:c4:30:b2:7a:78:f7: c3:6f:de:e4:17:b7:17:64:42:7b:64:a2:42:05:02: 34:59:bf:f7:d9:fe:05:2f:05:60:87:2e:03:3e:e1: ed:bc:66:87:b5:b5:ae:1c:a5:50:e8:1e:8e:a2:af: 23:8d:ce:de:dc:ca:49:10:be:06:94:b7:05:70:1f: b8:9a:bb:02:31:27:c1:70:06:74:74:f8:80:29:dd: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:85:A9:27:40:05:FA:44:AB:51:30:F9:70:FE:31:FE:E5:2A:4D:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f0c69f0-aafc-423b-9c72-c20ba6bbff48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.221.0/24 Signature Algorithm: sha256WithRSAEncryption 81:5a:0e:8f:73:07:56:b5:c5:e2:3e:dd:b3:60:bc:bb:25:0c: 51:83:c3:64:f6:69:d9:e4:bb:98:d1:c0:86:d7:e4:cc:77:79: 56:92:c5:db:3c:d7:69:9f:3c:28:d1:23:ea:c6:d8:b4:0f:2c: 35:83:51:48:ed:bc:50:70:ae:5e:9c:6d:f6:23:e3:a6:3b:1e: 8f:4e:81:d0:e3:69:9a:58:10:f3:25:e4:db:f9:25:22:c8:62: 68:09:e7:6a:35:08:b3:b2:05:86:b0:be:f6:6f:3f:2a:95:e0: 7f:37:9c:ca:1b:fe:12:11:f9:bf:9d:a9:89:11:34:44:af:94: 55:f3:3a:73:eb:ed:92:f0:05:bf:01:31:96:0d:a6:ab:8b:ae: a3:97:11:5e:8a:9a:2d:ad:f8:6e:06:7c:c2:76:1a:4d:9c:60: ab:66:11:ed:a1:b9:2e:b0:ae:8a:93:3e:fc:3f:5f:ce:41:4a: 11:bd:bb:23:21:a7:b6:8d:f5:f3:93:cc:80:84:70:52:ec:c5: 31:08:20:e0:9e:e7:34:dd:c9:0b:48:95:8f:4a:da:2d:6a:c7: eb:15:76:f1:a2:c3:1d:c5:48:8d:27:76:e1:20:eb:5a:17:96: cf:e9:ec:ff:4c:d7:42:23:81:70:6a:26:04:52:56:f9:29:90: b6:a5:d8:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDVb2spb8Hwm18KSUH01uR9oTuDwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDE0MTI5WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTc0NDQxZTY1MGYxYmQ5ODkwM2ZiZDFmMTdiZDI1MzFm NmIyM2Q1NGQ2MTYyMjc0NDhiNmY0YTQxYjg1ZmRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdfxBhoywHRwDPBfJLUfbPk5W1dSp7WdryLF1rc2qJ7M0P j00k04Zh6nBlkgPCp6fREWGZfovxJdibnJvITzojsPzllZEHcAwKfIzSiFh/0ao2 iqK9HHd1mdgT8uR7aK/WM9Ex2F065srtM37PpNoAe32H1OUZ1X6isAghs8JgFxVm shwY41ZG7ljK5y+uJToJDt3zw12N79gXx64cdO3k3VXu8I5G+Bm6JBdgaMQwsnp4 98Nv3uQXtxdkQntkokIFAjRZv/fZ/gUvBWCHLgM+4e28Zoe1ta4cpVDoHo6iryON zt7cykkQvgaUtwVwH7iauwIxJ8FwBnR0+IAp3U+jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCYWpJ0AF+kSrUTD5cP4x/uUqTSgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmMGM2OWYwLWFhZmMtNDIzYi05YzcyLWMyMGJhNmJiZmY0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsN0wDQYJKoZIhvcNAQELBQADggEBAIFaDo9zB1a1xeI+3bNgvLslDFGD w2T2adnku5jRwIbX5Mx3eVaSxds812mfPCjRI+rG2LQPLDWDUUjtvFBwrl6cbfYj 46Y7Ho9OgdDjaZpYEPMl5Nv5JSLIYmgJ52o1CLOyBYawvvZvPyqV4H83nMob/hIR +b+dqYkRNESvlFXzOnPr7ZLwBb8BMZYNpquLrqOXEV6Kmi2t+G4GfMJ2Gk2cYKtm Ee2huS6wroqTPvw/X85BShG9uyMhp7aN9fOTzICEcFLsxTEIIOCe5zTdyQtIlY9K 2i1qx+sVdvGiwx3FSI0nduEg61oXls/p7P9M10IjgXBqJgRSVvkpkLal2AU= -----END CERTIFICATE-----Generated at Mon Nov 2 16:45:52 2026 by rpki-client