$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8521ac3d-2da2-4d88-b38b-4b2d742acf7b.roa File: 8521ac3d-2da2-4d88-b38b-4b2d742acf7b.roa (raw, json) Hash identifier: 7YUIoA+912ER3ZemfdAgowi1qZrAWoK85y/XUXjWVk4= Subject key identifier: 74:29:C6:BF:22:A4:85:F2:7D:E2:5F:CA:55:2F:08:B3:E5:79:40:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6951DB6C6E72C3C7C53DE89CE7619DC0E2F478B3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8521ac3d-2da2-4d88-b38b-4b2d742acf7b.roa Signing time: Fri 31 Jul 2026 01:21:03 +0000 ROA not before: Fri 31 Jul 2026 01:21:03 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:51:db:6c:6e:72:c3:c7:c5:3d:e8:9c:e7:61:9d:c0:e2:f4:78:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 01:21:03 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=37d43a8ccadeec3db677691d7a24d0505b1f6741adf378726e950de349b207dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f7:ac:ac:b9:94:5c:18:74:ca:ef:d7:d2:1a: e4:f0:e6:49:14:37:c0:f6:79:9e:7d:07:b0:19:92: 66:7f:d3:78:02:18:04:e2:46:93:72:ba:95:83:db: 6f:a3:6f:fd:98:ce:25:b6:5c:71:07:92:21:fa:0a: c8:26:2b:6d:e3:94:09:ba:79:c8:bb:b8:d1:ab:5a: c8:8e:1b:20:90:cd:b0:ee:07:77:6c:2e:ba:aa:99: 32:f5:f4:1b:15:3a:3c:b0:3e:46:71:35:97:d6:2d: d5:99:71:77:c2:93:19:45:0f:71:69:aa:e1:2c:79: 41:2a:81:83:41:1a:5b:71:81:a6:f4:b4:03:c0:f0: ef:a8:8a:86:d7:01:7d:e6:99:13:37:a4:89:30:6a: 02:40:af:61:8c:4b:ba:dd:f6:68:4a:93:f6:b7:42: 33:e7:fb:3b:0a:aa:ac:3d:cf:99:fa:ca:92:40:4a: 25:52:6e:5f:b3:89:6a:b0:6b:8e:96:c9:52:16:21: 16:31:15:e3:de:02:11:bd:ae:ea:89:6d:32:a1:29: 55:74:48:10:2e:a4:b4:70:93:a7:b8:02:86:08:39: e4:ed:64:99:77:6f:69:fc:87:e7:ff:05:25:1c:f7: 6f:4e:70:b5:a3:f1:10:12:35:17:60:bd:99:f9:e0: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:29:C6:BF:22:A4:85:F2:7D:E2:5F:CA:55:2F:08:B3:E5:79:40:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8521ac3d-2da2-4d88-b38b-4b2d742acf7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.209.0/24 Signature Algorithm: sha256WithRSAEncryption 94:52:de:a2:37:22:12:2e:0e:73:d8:6f:d6:87:e0:e3:b9:e5: 58:47:b7:db:24:8d:c2:08:2a:7d:7a:3e:8d:60:84:59:77:2c: f8:36:ed:cd:36:89:52:8e:f9:ca:6e:5a:a9:02:04:f7:c4:56: c5:14:36:03:f2:fc:10:13:9b:41:c4:2f:e7:75:7c:96:86:c8: 17:3c:0f:e0:24:dc:22:9a:11:e6:5d:7c:ed:1a:c7:83:8b:32: 73:46:63:b1:83:32:25:35:d1:b2:e2:cd:8b:0b:a2:8f:f0:f7: 53:22:c8:60:27:e0:af:ed:c3:8d:a7:be:e4:3e:a2:b3:41:eb: f1:e0:1b:ae:c1:6d:d8:fb:4c:8e:fc:3e:67:23:b0:2c:8e:e1: 8c:0b:63:39:d3:60:67:ac:be:a0:d5:4b:ca:06:99:11:5c:96: 64:8b:a3:6c:e0:46:1e:af:e8:3d:ed:96:2d:3a:8c:d1:cc:54: 92:98:12:6e:d4:5d:23:ae:6d:7f:55:05:36:10:ce:83:8a:ac: 69:27:ff:48:73:c1:9c:87:46:37:bd:2d:4d:14:75:f1:7d:dc: de:7f:b5:55:83:63:5c:af:53:41:c3:4c:14:85:e2:ae:70:a2: 44:25:0f:f2:ba:b1:09:d1:73:c9:da:55:ff:9e:ff:97:48:06: b4:74:b1:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaVHbbG5yw8fFPeic52GdwOL0eLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDEyMTAzWhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2Q0M2E4Y2NhZGVlYzNkYjY3NzY5MWQ3YTI0ZDA1MDVi MWY2NzQxYWRmMzc4NzI2ZTk1MGRlMzQ5YjIwN2RjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs96ysuZRcGHTK79fSGuTw5kkUN8D2eZ59B7AZkmZ/03gC GATiRpNyupWD22+jb/2YziW2XHEHkiH6CsgmK23jlAm6eci7uNGrWsiOGyCQzbDu B3dsLrqqmTL19BsVOjywPkZxNZfWLdWZcXfCkxlFD3FpquEseUEqgYNBGltxgab0 tAPA8O+oiobXAX3mmRM3pIkwagJAr2GMS7rd9mhKk/a3QjPn+zsKqqw9z5n6ypJA SiVSbl+ziWqwa46WyVIWIRYxFePeAhG9ruqJbTKhKVV0SBAupLRwk6e4AoYIOeTt ZJl3b2n8h+f/BSUc929OcLWj8RASNRdgvZn54HxzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdCnGvyKkhfJ94l/KVS8Is+V5QBwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1MjFhYzNkLTJkYTItNGQ4OC1iMzhiLTRiMmQ3NDJhY2Y3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsNEwDQYJKoZIhvcNAQELBQADggEBAJRS3qI3IhIuDnPYb9aH4OO55VhH t9skjcIIKn16Po1ghFl3LPg27c02iVKO+cpuWqkCBPfEVsUUNgPy/BATm0HEL+d1 fJaGyBc8D+Ak3CKaEeZdfO0ax4OLMnNGY7GDMiU10bLizYsLoo/w91MiyGAn4K/t w42nvuQ+orNB6/HgG67Bbdj7TI78PmcjsCyO4YwLYznTYGesvqDVS8oGmRFclmSL o2zgRh6v6D3tli06jNHMVJKYEm7UXSOubX9VBTYQzoOKrGkn/0hzwZyHRje9LU0U dfF93N5/tVWDY1yvU0HDTBSF4q5wokQlD/K6sQnRc8naVf+e/5dIBrR0sSo= -----END CERTIFICATE-----Generated at Tue Sep 15 13:19:22 2026 by rpki-client