$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86f7c3f6-0ab1-49c6-8352-f942257d2f79.roa File: 86f7c3f6-0ab1-49c6-8352-f942257d2f79.roa (raw, json) Hash identifier: 9HrVD9azuuBNk4SSofBGd35neZUXS0jkyPv93FI1zO4= Subject key identifier: 93:34:1E:57:12:99:8D:3E:29:83:8C:AC:E0:95:0D:9E:5F:84:0B:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 780632C0DB059BEAEA0DA35FB65EFC173A469258 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86f7c3f6-0ab1-49c6-8352-f942257d2f79.roa Signing time: Mon 19 Oct 2026 00:21:19 +0000 ROA not before: Mon 19 Oct 2026 00:21:19 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:06:32:c0:db:05:9b:ea:ea:0d:a3:5f:b6:5e:fc:17:3a:46:92:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:21:19 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=538374ef3ac608859e4c56dd61b64959e74444c40d7c67e6ec725bda3017f03d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:24:72:80:86:93:75:ba:46:39:02:95:ae: ef:11:a7:25:1a:0b:81:5c:99:91:99:c3:d0:fc:ca: b0:aa:da:9b:37:e0:58:cc:dd:bc:94:f6:c3:21:00: 55:29:c6:35:c6:21:61:95:85:ae:0e:41:43:de:d3: f0:79:96:84:6e:6d:58:c4:3a:f1:f3:1d:c0:83:92: 29:b7:1a:4a:17:10:c0:84:17:8b:31:b7:12:43:96: 87:27:df:27:a9:dc:7b:ad:11:30:d7:b3:e3:ef:0c: c0:8c:cf:72:58:02:11:a0:a5:97:a6:52:97:99:42: 05:94:70:5f:78:25:b3:12:62:21:fd:aa:91:67:93: a2:54:78:23:88:c5:f2:07:5f:cd:8d:04:12:fa:98: ea:b8:75:ef:a2:97:38:96:10:16:61:95:70:1e:a1: 0d:9d:0d:cc:2b:c2:79:da:8d:84:f0:c2:b2:65:46: 37:a5:de:90:ed:27:f4:64:5f:8e:67:7b:08:43:a6: f4:3e:9c:24:dc:fd:bd:0d:be:08:95:5c:fd:e0:92: 20:3a:96:b2:97:23:51:db:32:1e:72:52:d2:c8:72: e1:80:71:01:a4:6d:1a:59:26:0b:6d:79:b4:fe:df: 58:20:e7:0d:b3:21:a4:9c:e7:c6:0c:39:49:fb:99: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:34:1E:57:12:99:8D:3E:29:83:8C:AC:E0:95:0D:9E:5F:84:0B:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86f7c3f6-0ab1-49c6-8352-f942257d2f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.234.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:27:ae:08:3d:a3:e2:67:16:d8:c0:6b:8e:1a:f6:bf:79:57: 82:5c:f6:f7:4c:6b:bd:f9:01:00:0b:bc:76:7d:f9:a7:e3:4f: 99:80:86:49:86:2e:88:e3:7f:90:41:97:d3:0b:a4:29:a7:80: 2d:bb:45:98:ad:f7:87:97:6c:5f:37:b4:88:59:54:0f:16:44: 9f:c6:1d:34:a3:a7:f9:0d:64:31:7e:3d:88:d2:cf:80:d9:a0: a5:e6:d8:1f:76:dc:f0:17:43:4a:b1:da:a7:3f:e1:77:ad:5d: 94:4b:fd:65:1d:a7:4b:38:30:37:b7:2a:63:c1:aa:17:f0:6d: 5a:e3:eb:0f:91:71:65:fc:2c:85:2d:da:3a:92:c7:35:d0:a4: 2b:fe:93:70:6e:5d:27:d9:b8:cb:8e:c4:ea:fb:57:13:99:66: a0:e4:42:0b:85:ab:47:c3:56:f7:cc:b4:ca:36:47:a8:46:15: 0f:8c:4b:82:71:2a:e2:bc:e7:8a:4f:45:fb:b3:78:40:07:94: bd:24:95:34:6a:b5:c9:06:08:92:e7:02:b6:66:51:e4:54:a7: 80:4a:a8:2c:2d:f3:cd:94:e2:81:4c:b9:04:92:6f:4a:5d:8d: 22:b1:ea:61:f0:3f:58:0a:16:12:9f:a6:bf:eb:d3:b5:14:7c: 07:06:94:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeAYywNsFm+rqDaNftl78FzpGklgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDAyMTE5WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzgzNzRlZjNhYzYwODg1OWU0YzU2ZGQ2MWI2NDk1OWU3 NDQ0NGM0MGQ3YzY3ZTZlYzcyNWJkYTMwMTdmMDNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkcCRygIaTdbpGOQKVru8RpyUaC4FcmZGZw9D8yrCq2ps3 4FjM3byU9sMhAFUpxjXGIWGVha4OQUPe0/B5loRubVjEOvHzHcCDkim3GkoXEMCE F4sxtxJDlocn3yep3HutETDXs+PvDMCMz3JYAhGgpZemUpeZQgWUcF94JbMSYiH9 qpFnk6JUeCOIxfIHX82NBBL6mOq4de+ilziWEBZhlXAeoQ2dDcwrwnnajYTwwrJl Rjel3pDtJ/RkX45newhDpvQ+nCTc/b0NvgiVXP3gkiA6lrKXI1HbMh5yUtLIcuGA cQGkbRpZJgttebT+31gg5w2zIaSc58YMOUn7me0vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkzQeVxKZjT4pg4ys4JUNnl+ECxMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2ZjdjM2Y2LTBhYjEtNDljNi04MzUyLWY5NDIyNTdkMmY3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsOowDQYJKoZIhvcNAQELBQADggEBAB4nrgg9o+JnFtjAa44a9r95V4Jc 9vdMa735AQALvHZ9+afjT5mAhkmGLojjf5BBl9MLpCmngC27RZit94eXbF83tIhZ VA8WRJ/GHTSjp/kNZDF+PYjSz4DZoKXm2B923PAXQ0qx2qc/4XetXZRL/WUdp0s4 MDe3KmPBqhfwbVrj6w+RcWX8LIUt2jqSxzXQpCv+k3BuXSfZuMuOxOr7VxOZZqDk QguFq0fDVvfMtMo2R6hGFQ+MS4JxKuK854pPRfuzeEAHlL0klTRqtckGCJLnArZm UeRUp4BKqCwt882U4oFMuQSSb0pdjSKx6mHwP1gKFhKfpr/r07UUfAcGlLg= -----END CERTIFICATE-----Generated at Tue Nov 3 10:18:53 2026 by rpki-client