$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4238c1a8-40a3-4786-b492-376363023c79.roa File: 4238c1a8-40a3-4786-b492-376363023c79.roa (raw, json) Hash identifier: KRQ6QxngvDVtbd9jJjUknUfEnae08Z8DwNvfD8R/rtI= Subject key identifier: C7:70:DA:77:5F:94:81:23:D2:C4:25:EE:7C:AA:2B:1E:87:4D:45:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E9EB848DC43E12BE0AE3A14650795289CDAC32A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4238c1a8-40a3-4786-b492-376363023c79.roa Signing time: Fri 04 Sep 2026 18:13:27 +0000 ROA not before: Fri 04 Sep 2026 18:13:27 +0000 ROA not after: Thu 03 Dec 2026 23:59:59 +0000 asID: 214101 IP address blocks: 130.176.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9e:b8:48:dc:43:e1:2b:e0:ae:3a:14:65:07:95:28:9c:da:c3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 4 18:13:27 2026 GMT Not After : Dec 3 23:59:59 2026 GMT Subject: serialNumber=3d715ddec028e98daf8cf7a413ad93a1008eafd1f53ecccbeab02556e5e52312, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:99:c7:20:65:5f:a4:91:fb:78:5b:b5:05: ae:81:77:8d:a9:53:a6:0c:74:fd:9d:e0:a6:a3:0e: 8c:05:7b:5e:26:0b:c6:b7:67:86:c1:18:7f:48:ec: f1:e4:e3:f5:c7:10:99:9c:ff:64:05:8a:43:a5:05: da:d3:a6:24:39:ec:cb:a9:bb:f8:c6:88:c0:99:d5: d8:43:1f:0a:24:f8:f7:a2:bf:ab:98:1a:87:05:c8: ca:56:31:97:18:6b:46:3c:82:f2:c5:e5:be:74:f2: 38:84:d9:2b:cd:85:93:a6:e3:27:79:1c:f6:90:41: 9c:02:7e:7b:3d:1e:f7:88:db:63:d8:16:9b:3c:01: 6b:1b:a9:d8:15:19:bd:24:a4:12:d2:4b:a4:92:84: 6f:7d:50:10:bd:20:d5:96:fc:9e:b1:38:61:51:7e: f4:30:b1:73:25:bd:c3:2e:59:e6:eb:ce:88:ff:c7: 6a:53:21:fa:e8:af:ea:07:f8:0b:27:77:da:c7:e6: 26:d0:d0:c8:95:92:62:f0:e8:fb:9e:2f:55:74:33: 1c:61:69:4d:6b:58:83:7f:c2:7f:21:62:d6:9c:5d: 25:40:99:6a:63:56:51:f8:52:fb:0e:c1:54:91:e4: d8:d1:01:6f:2b:74:e8:21:78:2e:b3:5a:1e:94:b7: 9d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:70:DA:77:5F:94:81:23:D2:C4:25:EE:7C:AA:2B:1E:87:4D:45:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4238c1a8-40a3-4786-b492-376363023c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.4.0/24 Signature Algorithm: sha256WithRSAEncryption 87:f3:e2:7e:e1:bb:f9:6d:fc:5f:9e:ca:73:a0:5e:c6:1f:f8: 03:cf:e8:b8:86:5b:74:ab:5b:4d:74:39:eb:5b:f2:19:e1:d3: f1:61:45:89:ff:5c:d3:db:3f:4d:68:fc:4b:55:47:c3:93:b4: f2:66:1a:00:2a:97:9b:f3:ff:48:df:ef:b9:54:39:2d:07:05: e3:9d:dd:97:21:fa:45:56:c7:41:13:6f:75:43:c2:4f:2d:b5: 82:1f:3f:da:d3:d1:b0:73:59:51:b5:73:d5:6a:4a:85:7e:8d: 7c:4d:37:81:a9:bf:d0:d2:81:18:56:e1:e2:11:0e:24:7d:7f: 97:f5:34:7b:7d:6e:50:00:54:65:40:16:b0:b8:6a:45:14:42: 89:54:af:8c:7d:85:ac:04:fa:bf:2f:8f:5e:5b:a6:ce:f6:17: bf:87:4b:c6:c8:79:77:cb:06:41:02:13:8e:6b:5f:ee:e5:1f: 23:e9:7e:bc:27:92:d6:aa:f2:7b:ae:ed:59:60:33:5f:8f:ef: 8c:bf:58:d2:15:fb:9c:f4:0d:a7:05:cc:0f:8d:e8:97:ff:67: a7:d2:8d:9c:f3:ff:3f:be:15:81:c0:cb:1b:19:b8:9a:f0:f4: 91:84:c0:b3:18:68:d6:88:0a:7d:39:8e:d7:fe:0f:51:da:60: 2b:c3:75:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHp64SNxD4SvgrjoUZQeVKJzawyowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA0MTgxMzI3WhcNMjYxMjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDcxNWRkZWMwMjhlOThkYWY4Y2Y3YTQxM2FkOTNhMTAw OGVhZmQxZjUzZWNjY2JlYWIwMjU1NmU1ZTUyMzEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYXpnHIGVfpJH7eFu1Ba6Bd42pU6YMdP2d4KajDowFe14m C8a3Z4bBGH9I7PHk4/XHEJmc/2QFikOlBdrTpiQ57Mupu/jGiMCZ1dhDHwok+Pei v6uYGocFyMpWMZcYa0Y8gvLF5b508jiE2SvNhZOm4yd5HPaQQZwCfns9HveI22PY Fps8AWsbqdgVGb0kpBLSS6SShG99UBC9INWW/J6xOGFRfvQwsXMlvcMuWebrzoj/ x2pTIfror+oH+Asnd9rH5ibQ0MiVkmLw6PueL1V0MxxhaU1rWIN/wn8hYtacXSVA mWpjVlH4UvsOwVSR5NjRAW8rdOgheC6zWh6Ut50xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx3Dad1+UgSPSxCXufKorHodNRcAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyMzhjMWE4LTQwYTMtNDc4Ni1iNDkyLTM3NjM2MzAyM2M3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsAQwDQYJKoZIhvcNAQELBQADggEBAIfz4n7hu/lt/F+eynOgXsYf+APP 6LiGW3SrW010Oetb8hnh0/FhRYn/XNPbP01o/EtVR8OTtPJmGgAql5vz/0jf77lU OS0HBeOd3Zch+kVWx0ETb3VDwk8ttYIfP9rT0bBzWVG1c9VqSoV+jXxNN4Gpv9DS gRhW4eIRDiR9f5f1NHt9blAAVGVAFrC4akUUQolUr4x9hawE+r8vj15bps72F7+H S8bIeXfLBkECE45rX+7lHyPpfrwnktaq8nuu7VlgM1+P74y/WNIV+5z0DacFzA+N 6Jf/Z6fSjZzz/z++FYHAyxsZuJrw9JGEwLMYaNaICn05jtf+D1HaYCvDdfc= -----END CERTIFICATE-----Generated at Thu Sep 17 18:20:55 2026 by rpki-client