$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7756513f-4fd9-4337-9702-90d5277dd482.roa File: 7756513f-4fd9-4337-9702-90d5277dd482.roa (raw, json) Hash identifier: mcC2xZ0wA8G4a1gEzmq19Wg/7UzS+Luy+l5xm2a1KFk= Subject key identifier: 1F:7C:06:7C:6B:DE:BD:8D:A5:2D:FD:5C:5A:56:82:A5:A5:39:C0:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6687973BDABC5959A98591A1516094BFAC1CAA22 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7756513f-4fd9-4337-9702-90d5277dd482.roa Signing time: Mon 19 Oct 2026 01:40:08 +0000 ROA not before: Mon 19 Oct 2026 01:40:08 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:87:97:3b:da:bc:59:59:a9:85:91:a1:51:60:94:bf:ac:1c:aa:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 01:40:08 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=cd1f55212998fcf353bee3478dbdf7571d7b34bfb5afb266b092f0bee3a0d33a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:98:0b:e9:01:45:38:51:10:54:d9:0e:bb:22: 60:ca:67:89:1c:6d:9f:51:33:03:44:71:21:5b:bd: ec:30:58:d4:92:3d:17:fe:6f:58:db:6f:ea:42:6c: e5:57:b8:81:2c:67:7e:33:7f:27:d6:74:d4:e6:ee: bd:b3:94:72:59:75:b7:4a:12:61:62:81:9c:68:c2: 6b:95:52:c4:0f:77:ac:3f:c6:b1:7d:10:e8:b9:b0: b5:aa:c6:50:7a:4d:18:ca:22:2f:e7:54:25:97:2b: 3b:56:74:be:50:2e:3d:b4:5b:a9:5b:de:6e:19:a5: 19:cf:06:56:9b:ff:dc:a0:99:c3:02:60:d2:f9:de: 2a:34:b1:c8:40:40:a9:ff:41:1f:8f:8c:1b:15:96: ec:6c:27:f7:0d:76:be:37:ae:7a:19:db:6b:3c:18: 61:d0:cf:ca:9d:8a:ed:2e:16:de:44:62:b3:34:06: 99:c8:49:50:bd:d8:1c:64:5a:23:99:42:7e:09:f4: 08:58:8e:b7:3e:db:aa:02:3b:1f:72:7a:00:0e:ac: 10:4c:0a:37:d0:0a:7f:2c:9a:7b:0c:65:d5:6b:8a: 58:7c:32:b9:89:28:a6:67:19:96:0d:c6:1c:0d:db: 49:35:4f:c6:d6:16:9b:e5:7d:67:9e:7d:87:ce:5e: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7C:06:7C:6B:DE:BD:8D:A5:2D:FD:5C:5A:56:82:A5:A5:39:C0:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7756513f-4fd9-4337-9702-90d5277dd482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.14.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:37:7b:ad:88:0f:4b:7f:1e:9c:d0:ce:68:d8:fb:f6:df:7e: fb:c1:49:e4:fb:94:d2:43:5c:d4:13:26:e6:33:02:d5:57:c9: ba:2f:b8:e4:a2:89:79:83:68:61:92:28:d8:34:d8:a4:22:eb: 2d:4d:12:da:77:ea:47:01:cf:08:1b:1e:fa:d2:34:31:1b:7b: 3d:37:2d:1c:5f:d9:0b:28:1a:22:56:4c:6a:97:1b:93:17:dc: a5:52:8a:c0:3d:82:ec:ed:b2:28:f5:3f:60:e8:52:19:5f:de: 93:60:33:e2:b1:54:32:6c:dc:1c:28:d4:69:d4:30:8a:0e:d1: c2:00:5a:ff:77:41:0d:f2:a4:18:16:78:1f:3a:de:20:e3:8c: fd:41:8f:4d:8b:da:2b:c0:39:91:2d:30:93:60:d1:74:ce:76: 01:44:82:66:51:31:2d:50:38:d2:d3:8f:13:24:be:6b:01:1f: 52:2d:2b:be:22:eb:f9:1c:80:af:da:c8:eb:f1:cb:49:6e:85: a6:9a:ee:fc:84:f3:3a:1e:e9:2e:dc:ae:c0:ca:83:50:ce:11: e4:15:b6:86:10:0a:ce:50:98:d3:72:58:2f:17:42:ab:7e:00: 41:44:44:c1:18:9f:6f:40:5a:d9:08:54:6c:30:ae:1a:28:29: 62:2a:9b:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZoeXO9q8WVmphZGhUWCUv6wcqiIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDE0MDA4WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDFmNTUyMTI5OThmY2YzNTNiZWUzNDc4ZGJkZjc1NzFk N2IzNGJmYjVhZmIyNjZiMDkyZjBiZWUzYTBkMzNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOmAvpAUU4URBU2Q67ImDKZ4kcbZ9RMwNEcSFbvewwWNSS PRf+b1jbb+pCbOVXuIEsZ34zfyfWdNTm7r2zlHJZdbdKEmFigZxowmuVUsQPd6w/ xrF9EOi5sLWqxlB6TRjKIi/nVCWXKztWdL5QLj20W6lb3m4ZpRnPBlab/9ygmcMC YNL53io0schAQKn/QR+PjBsVluxsJ/cNdr43rnoZ22s8GGHQz8qdiu0uFt5EYrM0 BpnISVC92BxkWiOZQn4J9AhYjrc+26oCOx9yegAOrBBMCjfQCn8smnsMZdVrilh8 MrmJKKZnGZYNxhwN20k1T8bWFpvlfWeefYfOXjqDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH3wGfGvevY2lLf1cWlaCpaU5wBswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc3NTY1MTNmLTRmZDktNDMzNy05NzAyLTkwZDUyNzdkZDQ4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsA4wDQYJKoZIhvcNAQELBQADggEBAJo3e62ID0t/HpzQzmjY+/bffvvB SeT7lNJDXNQTJuYzAtVXybovuOSiiXmDaGGSKNg02KQi6y1NEtp36kcBzwgbHvrS NDEbez03LRxf2QsoGiJWTGqXG5MX3KVSisA9guztsij1P2DoUhlf3pNgM+KxVDJs 3Bwo1GnUMIoO0cIAWv93QQ3ypBgWeB863iDjjP1Bj02L2ivAOZEtMJNg0XTOdgFE gmZRMS1QONLTjxMkvmsBH1ItK74i6/kcgK/ayOvxy0luhaaa7vyE8zoe6S7crsDK g1DOEeQVtoYQCs5QmNNyWC8XQqt+AEFERMEYn29AWtkIVGwwrhooKWIqm2k= -----END CERTIFICATE-----Generated at Mon Nov 2 18:50:40 2026 by rpki-client