$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d9cad97-cde7-4768-9af6-8a2992e72fe1.roa File: 7d9cad97-cde7-4768-9af6-8a2992e72fe1.roa (raw, json) Hash identifier: 7ZZbky9uFj0xe7m+oMChgs99JWpfKCKVdKSxw0+F8Ts= Subject key identifier: 42:CF:C9:CC:91:EC:78:93:6A:5F:07:41:D8:AF:9F:3E:09:35:E3:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F9FDFD918F4D2F77C9F10D85923B08A28AFF4AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d9cad97-cde7-4768-9af6-8a2992e72fe1.roa Signing time: Tue 15 Sep 2026 00:00:06 +0000 ROA not before: Tue 15 Sep 2026 00:00:06 +0000 ROA not after: Mon 14 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9f:df:d9:18:f4:d2:f7:7c:9f:10:d8:59:23:b0:8a:28:af:f4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 15 00:00:06 2026 GMT Not After : Dec 14 23:59:59 2026 GMT Subject: serialNumber=27e8e3488e74310f4a7092f195ad0de847db5c540d812064c15f39a336f7fdc9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:96:85:a3:38:4a:ab:56:d8:09:2b:f4:40: c4:98:a3:af:e5:79:c7:dc:a8:79:a4:b4:a3:ad:06: 7a:89:89:df:c0:71:15:a9:95:c3:98:75:94:cc:c9: 10:e8:3f:a4:84:51:f4:0c:d3:d7:4e:1c:7e:90:6f: b2:cb:73:f4:93:c7:24:e7:7d:62:b6:af:55:89:ec: e0:bf:cb:03:f5:31:0e:e0:fa:1c:78:d7:03:78:0a: 01:a9:be:54:7c:e7:b2:1f:75:ac:03:90:75:d2:75: ce:47:c6:9b:15:8a:ad:18:a5:1f:b2:d8:ca:24:e2: 79:b1:57:3f:16:ed:8a:aa:34:15:be:14:91:90:37: 4f:cc:0b:e0:8d:d3:61:33:83:5c:64:45:fa:f2:24: ea:4c:03:f1:59:3a:11:da:93:8a:f9:1f:52:5e:aa: a7:32:1d:d6:3f:af:a6:27:9f:a6:f5:37:91:f3:db: 31:e0:12:de:a2:19:c1:f0:c8:73:d2:07:e2:b0:b5: 6b:da:6c:3e:38:f9:93:63:ba:14:2d:b9:b9:ac:0e: 2c:7b:a9:89:15:2a:22:f9:da:38:0b:d8:11:65:75: cd:de:51:79:72:f3:03:d7:1f:40:33:4f:ff:22:73: b7:93:fb:ff:55:76:3e:dc:0b:ac:43:d8:8a:cb:cf: b0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CF:C9:CC:91:EC:78:93:6A:5F:07:41:D8:AF:9F:3E:09:35:E3:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d9cad97-cde7-4768-9af6-8a2992e72fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.26.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:56:ca:29:c0:43:01:2a:95:c8:64:99:b7:24:48:19:69:b1: 5e:83:77:6d:37:a1:0b:d6:73:d7:bc:a4:80:8b:8e:10:b9:49: 41:c9:19:cb:fb:30:2a:57:1b:61:2a:51:b0:c0:1c:d3:be:41: 52:a0:28:0f:64:2a:62:af:1b:e4:5a:19:d3:89:55:19:5d:61: 3b:e4:c9:67:61:46:a2:f1:2e:67:4e:f1:fa:8f:22:ec:38:3e: 8e:87:ac:4b:91:c9:67:33:4d:7f:da:05:d3:68:07:f7:fd:7b: 6a:8b:0a:6a:02:0c:a0:7e:09:b8:f6:39:c8:9f:c9:96:f3:a8: d9:ec:dd:b4:3f:4b:cd:74:91:fb:46:f1:96:4d:84:94:e6:d6: b4:64:60:25:31:9e:c9:40:13:50:d5:b1:93:e6:e0:a1:19:ba: e2:0d:5a:30:94:2d:67:4f:a4:56:02:01:9a:1e:fb:58:92:29: 0b:cd:f5:b8:28:18:4a:ac:6d:d3:cb:db:9c:e5:3e:76:29:49: 89:a9:d9:ff:9a:68:43:a9:a7:b1:a3:58:2f:72:eb:da:cb:5b: d4:59:27:48:76:57:1d:ba:a2:15:fd:ed:56:f5:3e:37:55:30: ef:f5:aa:b4:73:9f:62:ee:c8:9d:35:f3:5b:66:54:db:23:54: 24:0d:a6:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP5/f2Rj00vd8nxDYWSOwiiiv9K0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTE1MDAwMDA2WhcNMjYxMjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2U4ZTM0ODhlNzQzMTBmNGE3MDkyZjE5NWFkMGRlODQ3 ZGI1YzU0MGQ4MTIwNjRjMTVmMzlhMzM2ZjdmZGM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjQpaFozhKq1bYCSv0QMSYo6/lecfcqHmktKOtBnqJid/A cRWplcOYdZTMyRDoP6SEUfQM09dOHH6Qb7LLc/STxyTnfWK2r1WJ7OC/ywP1MQ7g +hx41wN4CgGpvlR857IfdawDkHXSdc5HxpsViq0YpR+y2Mok4nmxVz8W7YqqNBW+ FJGQN0/MC+CN02Ezg1xkRfryJOpMA/FZOhHak4r5H1JeqqcyHdY/r6Ynn6b1N5Hz 2zHgEt6iGcHwyHPSB+KwtWvabD44+ZNjuhQtubmsDix7qYkVKiL52jgL2BFldc3e UXly8wPXH0AzT/8ic7eT+/9Vdj7cC6xD2IrLz7APAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQs/JzJHseJNqXwdB2K+fPgk144AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkOWNhZDk3LWNkZTctNDc2OC05YWY2LThhMjk5MmU3MmZlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsBowDQYJKoZIhvcNAQELBQADggEBAFpWyinAQwEqlchkmbckSBlpsV6D d203oQvWc9e8pICLjhC5SUHJGcv7MCpXG2EqUbDAHNO+QVKgKA9kKmKvG+RaGdOJ VRldYTvkyWdhRqLxLmdO8fqPIuw4Po6HrEuRyWczTX/aBdNoB/f9e2qLCmoCDKB+ Cbj2OcifyZbzqNns3bQ/S810kftG8ZZNhJTm1rRkYCUxnslAE1DVsZPm4KEZuuIN WjCULWdPpFYCAZoe+1iSKQvN9bgoGEqsbdPL25zlPnYpSYmp2f+aaEOpp7GjWC9y 69rLW9RZJ0h2Vx26ohX97Vb1PjdVMO/1qrRzn2LuyJ0181tmVNsjVCQNpg0= -----END CERTIFICATE-----Generated at Thu Sep 17 17:55:58 2026 by rpki-client