$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d0ea2fb-96e0-451c-88cc-f2d4cd9f8f05.roa File: 4d0ea2fb-96e0-451c-88cc-f2d4cd9f8f05.roa (raw, json) Hash identifier: K8h5upHKxfsjlchtpHCAQR586Rqa6C45hhi1nd9V8Lc= Subject key identifier: 35:43:D6:8B:FF:AA:4C:22:C2:5B:C2:18:A2:32:4B:64:3D:E8:93:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C18114090F5FCFBFE02AC21F4323D2657DB32EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d0ea2fb-96e0-451c-88cc-f2d4cd9f8f05.roa Signing time: Fri 31 Jul 2026 00:41:29 +0000 ROA not before: Fri 31 Jul 2026 00:41:29 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:18:11:40:90:f5:fc:fb:fe:02:ac:21:f4:32:3d:26:57:db:32:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 00:41:29 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=af895319b4e306367b9a7ad412871630054a407bffc015870d88c5e2e105a751, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:bc:33:98:93:20:92:a3:cf:7d:63:55:ea: 3e:67:bf:34:a2:df:98:d2:44:2c:84:35:7b:14:94: 36:2c:00:f6:47:73:59:cc:22:09:41:8a:ca:e7:ee: 80:bc:fe:6f:c9:21:21:bb:21:a4:9b:7d:f9:d9:50: cb:cb:8c:31:8d:10:6c:89:47:82:75:c0:08:ee:9c: 31:e0:d2:38:ee:c3:8d:3e:d2:92:fe:f9:c5:1e:27: 19:c9:e1:13:8f:48:15:60:49:dd:57:37:35:9e:28: 5a:cb:15:2e:c8:e9:e4:6b:b5:ef:06:9e:8d:55:e0: dc:80:5e:7b:c7:e6:0e:a1:ef:5b:02:4d:b0:e5:28: 67:7e:0a:c2:5c:90:b5:23:83:78:f9:35:4e:d3:38: cc:51:f2:a0:e1:ec:5a:c3:f8:87:e5:a5:11:c5:95: 12:59:d9:66:0a:50:e1:b0:02:2d:4a:13:8f:5d:56: 26:63:76:e0:15:1b:d4:09:82:00:c7:8b:fe:09:94: a3:67:06:5e:ee:20:79:08:78:26:36:82:24:04:04: 3d:37:1e:6f:28:b7:9c:d4:4e:2d:1b:44:12:aa:26: 70:de:2d:5b:67:78:7e:79:d1:17:f5:5f:a6:05:3c: f2:4b:9b:1d:69:bb:ef:8f:48:fc:c5:c9:8c:fb:98: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:43:D6:8B:FF:AA:4C:22:C2:5B:C2:18:A2:32:4B:64:3D:E8:93:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d0ea2fb-96e0-451c-88cc-f2d4cd9f8f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.174.0/24 Signature Algorithm: sha256WithRSAEncryption 37:1b:47:20:09:95:b0:a1:cd:d9:0f:5a:f9:53:32:1a:8e:f5: 81:79:bc:f2:21:08:e3:8e:5d:5c:ef:ac:a9:a0:41:05:0f:19: ac:6f:69:50:e0:d6:8b:60:e5:89:db:e8:c3:06:90:fa:64:08: 4d:19:0c:fd:87:06:9c:b5:46:02:37:8d:d7:15:98:6b:69:39: 16:ff:92:96:aa:94:12:b2:b2:3f:33:e7:77:b4:b0:e5:1b:28: e3:df:8f:0f:61:f1:9d:5c:b8:64:25:4a:de:9d:24:1a:e9:9b: 2a:b5:50:f4:ec:45:83:68:b2:10:be:e7:d9:db:4e:60:a9:4d: 37:85:16:f4:4c:69:db:8d:75:04:ff:38:73:b1:15:91:8c:44: 97:c4:50:74:2b:b3:a3:13:e2:aa:2e:ff:ef:47:c3:fc:19:b7: e2:20:3c:67:91:0c:84:bb:72:f7:c9:3c:b7:8e:5e:c8:40:3b: 59:6d:93:6f:f3:3f:a9:e8:63:db:5a:a9:49:1b:3a:7f:5e:8e: aa:a6:3c:24:09:2b:aa:36:7f:e4:00:68:62:f8:3d:1f:79:37: 47:4e:a0:4f:b0:d5:c4:c7:07:2c:8c:d3:2b:4f:05:a9:b1:4b: 44:74:53:cc:af:a8:c3:3c:6d:72:91:e7:1a:6a:e1:f4:c8:c3: 1d:83:a8:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPBgRQJD1/Pv+Aqwh9DI9JlfbMuswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDA0MTI5WhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjg5NTMxOWI0ZTMwNjM2N2I5YTdhZDQxMjg3MTYzMDA1 NGE0MDdiZmZjMDE1ODcwZDg4YzVlMmUxMDVhNzUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1ubwzmJMgkqPPfWNV6j5nvzSi35jSRCyENXsUlDYsAPZH c1nMIglBisrn7oC8/m/JISG7IaSbffnZUMvLjDGNEGyJR4J1wAjunDHg0jjuw40+ 0pL++cUeJxnJ4ROPSBVgSd1XNzWeKFrLFS7I6eRrte8Gno1V4NyAXnvH5g6h71sC TbDlKGd+CsJckLUjg3j5NU7TOMxR8qDh7FrD+IflpRHFlRJZ2WYKUOGwAi1KE49d ViZjduAVG9QJggDHi/4JlKNnBl7uIHkIeCY2giQEBD03Hm8ot5zUTi0bRBKqJnDe LVtneH550Rf1X6YFPPJLmx1pu++PSPzFyYz7mPz5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNUPWi/+qTCLCW8IYojJLZD3ok2YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkMGVhMmZiLTk2ZTAtNDUxYy04OGNjLWYyZDRjZDlmOGYwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsK4wDQYJKoZIhvcNAQELBQADggEBADcbRyAJlbChzdkPWvlTMhqO9YF5 vPIhCOOOXVzvrKmgQQUPGaxvaVDg1otg5Ynb6MMGkPpkCE0ZDP2HBpy1RgI3jdcV mGtpORb/kpaqlBKysj8z53e0sOUbKOPfjw9h8Z1cuGQlSt6dJBrpmyq1UPTsRYNo shC+59nbTmCpTTeFFvRMaduNdQT/OHOxFZGMRJfEUHQrs6MT4qou/+9Hw/wZt+Ig PGeRDIS7cvfJPLeOXshAO1ltk2/zP6noY9taqUkbOn9ejqqmPCQJK6o2f+QAaGL4 PR95N0dOoE+w1cTHByyM0ytPBamxS0R0U8yvqMM8bXKR5xpq4fTIwx2DqMU= -----END CERTIFICATE-----Generated at Tue Sep 15 13:22:08 2026 by rpki-client