$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c0951ea-851e-4ddb-bbea-7579b667e4b5.roa File: 6c0951ea-851e-4ddb-bbea-7579b667e4b5.roa (raw, json) Hash identifier: 518B4aTkofYAqDWNNEwwq+yIz0CRPN7Z7cZUDprzENQ= Subject key identifier: A4:75:CA:D3:95:83:AC:A2:1E:44:36:F0:A4:86:FA:84:D5:5A:01:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7568153C8DE3E724A1920CB7C635E6F7BAE6A019 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c0951ea-851e-4ddb-bbea-7579b667e4b5.roa Signing time: Thu 17 Sep 2026 00:00:05 +0000 ROA not before: Thu 17 Sep 2026 00:00:05 +0000 ROA not after: Wed 16 Dec 2026 23:59:59 +0000 asID: 8987 IP address blocks: 1.178.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:68:15:3c:8d:e3:e7:24:a1:92:0c:b7:c6:35:e6:f7:ba:e6:a0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 17 00:00:05 2026 GMT Not After : Dec 16 23:59:59 2026 GMT Subject: serialNumber=072c95516742ca0b302d765d3e91dfc2f31abcf46dcafa8584e1619108286971, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ec:f0:02:41:c3:bc:9d:2b:36:f2:28:6c:fb: 08:b0:b3:b7:aa:3c:e3:98:e2:da:08:6d:b6:bf:87: 28:10:11:dc:41:96:4e:1f:3b:a4:ca:22:a6:20:cc: f4:c6:d1:2d:3e:70:28:b8:13:97:c0:0e:47:f2:f4: d2:2a:96:d1:e2:b5:a2:a0:89:e4:f4:82:9c:8e:51: 30:15:55:39:d5:d4:e6:fe:7b:95:80:56:3b:88:e3: dc:33:b9:f6:94:6a:71:c5:28:de:09:eb:f1:14:b7: 3f:8a:d0:5d:96:4d:62:91:1c:ce:06:63:52:c7:52: 69:47:cc:30:13:45:07:11:78:e5:c5:11:93:97:a8: 62:8d:eb:5b:5f:1b:ed:38:6b:94:99:c3:3b:af:89: 57:3c:93:96:fe:2a:c7:71:f4:64:fb:51:56:28:8f: fb:5f:cd:dc:86:4e:e7:e4:c7:ac:36:a9:a7:59:2c: b0:18:8c:f9:bc:8f:9a:bf:09:33:f8:bb:6b:b2:66: 02:63:c7:92:8e:8c:eb:93:10:f3:d5:09:09:bc:a9: 4f:36:e1:23:fa:59:c6:f4:84:3f:fb:57:af:a2:e8: ea:f8:59:0e:11:10:29:4e:68:b2:0b:15:b4:5c:bf: ee:64:8f:50:3f:af:bb:fb:ec:ba:89:a0:9e:ef:86: 2e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:75:CA:D3:95:83:AC:A2:1E:44:36:F0:A4:86:FA:84:D5:5A:01:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c0951ea-851e-4ddb-bbea-7579b667e4b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.30.0/24 Signature Algorithm: sha256WithRSAEncryption 24:fc:77:3d:0e:cf:81:1d:22:40:42:59:0b:93:94:66:bc:da: 3b:7a:5b:33:f8:3d:dc:76:1b:59:0c:de:b7:77:00:c8:f8:56: 41:68:4b:0c:7d:bf:1f:a3:a6:4b:30:6d:9d:55:d7:e2:7e:4b: da:0d:38:0d:46:39:99:c5:98:64:3e:69:93:29:53:fe:85:87: 20:3c:0a:8a:a0:b7:f9:22:4e:aa:81:29:36:24:d6:be:cd:1c: 0a:e1:01:1c:89:72:79:12:b0:50:40:8d:fa:44:f6:3a:ef:ab: 30:d3:e9:bc:59:dd:0e:44:8f:99:6f:26:de:84:5d:01:07:77: c2:86:95:49:58:0c:f3:87:4f:5e:f6:34:71:8f:f7:01:22:38: 81:3a:e6:25:51:01:e1:bf:28:41:a4:d7:63:83:8d:b5:df:e4: f2:15:57:84:c9:c5:bb:7b:ab:bb:73:cd:00:28:f6:42:bb:fb: 3e:29:1f:95:76:11:7a:d2:a7:d0:a1:d2:fb:29:49:a1:09:1b: ee:a3:83:0d:f1:77:43:7e:c7:3b:58:18:89:a9:fd:e6:59:ac: 7b:9f:7e:6e:bd:1d:20:27:d5:21:a1:db:b4:2b:e7:a5:7a:a0: c8:4b:1c:f8:a6:fc:17:79:22:15:94:4a:7b:14:ff:e5:ab:10: db:25:32:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdWgVPI3j5yShkgy3xjXm97rmoBkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTE3MDAwMDA1WhcNMjYxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzJjOTU1MTY3NDJjYTBiMzAyZDc2NWQzZTkxZGZjMmYz MWFiY2Y0NmRjYWZhODU4NGUxNjE5MTA4Mjg2OTcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDb7PACQcO8nSs28ihs+wiws7eqPOOY4toIbba/hygQEdxB lk4fO6TKIqYgzPTG0S0+cCi4E5fADkfy9NIqltHitaKgieT0gpyOUTAVVTnV1Ob+ e5WAVjuI49wzufaUanHFKN4J6/EUtz+K0F2WTWKRHM4GY1LHUmlHzDATRQcReOXF EZOXqGKN61tfG+04a5SZwzuviVc8k5b+Ksdx9GT7UVYoj/tfzdyGTufkx6w2qadZ LLAYjPm8j5q/CTP4u2uyZgJjx5KOjOuTEPPVCQm8qU824SP6Wcb0hD/7V6+i6Or4 WQ4REClOaLILFbRcv+5kj1A/r7v77LqJoJ7vhi49AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpHXK05WDrKIeRDbwpIb6hNVaARMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjMDk1MWVhLTg1MWUtNGRkYi1iYmVhLTc1NzliNjY3ZTRiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABsh4wDQYJKoZIhvcNAQELBQADggEBACT8dz0Oz4EdIkBCWQuTlGa82jt6 WzP4Pdx2G1kM3rd3AMj4VkFoSwx9vx+jpkswbZ1V1+J+S9oNOA1GOZnFmGQ+aZMp U/6FhyA8Coqgt/kiTqqBKTYk1r7NHArhARyJcnkSsFBAjfpE9jrvqzDT6bxZ3Q5E j5lvJt6EXQEHd8KGlUlYDPOHT172NHGP9wEiOIE65iVRAeG/KEGk12ODjbXf5PIV V4TJxbt7q7tzzQAo9kK7+z4pH5V2EXrSp9Ch0vspSaEJG+6jgw3xd0N+xztYGImp /eZZrHuffm69HSAn1SGh27Qr56V6oMhLHPim/Bd5IhWUSnsU/+WrENslMqM= -----END CERTIFICATE-----Generated at Thu Sep 17 16:19:15 2026 by rpki-client