$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89a8e37e-25ae-47f3-a49b-f9093043948d.roa File: 89a8e37e-25ae-47f3-a49b-f9093043948d.roa (raw, json) Hash identifier: 2+pGxSVuG3jIjK5oPVxW0yc4SOLLDs9D7FJkV1AaLLc= Subject key identifier: 35:36:0D:9D:94:5C:D0:3E:88:ED:21:B3:F3:51:80:0F:A8:4E:E1:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 203E30FCB5EF713FD1AAE3C8700C521E86279E4C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89a8e37e-25ae-47f3-a49b-f9093043948d.roa Signing time: Fri 31 Jul 2026 01:31:42 +0000 ROA not before: Fri 31 Jul 2026 01:31:42 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3e:30:fc:b5:ef:71:3f:d1:aa:e3:c8:70:0c:52:1e:86:27:9e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 01:31:42 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=a3d1f55b01653115b02656e49b7c526f72e272175980e77ae27b74cb161cd689, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:60:ae:e1:37:52:37:ea:3c:99:f8:6d:8c: 3c:a2:b3:ca:45:0c:18:80:f4:14:f1:b4:48:a8:6b: 8b:11:1f:cd:0f:f2:13:76:53:b6:0a:0b:ad:e5:d7: d1:67:79:1b:81:29:e3:a0:4f:f3:1e:b8:66:ba:16: b1:60:fe:ab:92:08:f5:7d:f2:17:27:b3:04:73:99: 10:6a:f7:5d:63:ad:4a:a2:c8:89:d3:02:97:e1:23: c7:90:6c:eb:0c:50:25:b1:97:35:25:67:f2:44:4c: 84:e9:dd:b7:8e:f3:3e:66:77:03:b9:67:8b:d8:cd: 0d:b6:cf:a9:01:f7:6c:9b:20:14:81:41:4b:b6:d4: 1d:05:e4:80:b2:64:fb:db:4e:f1:39:ad:57:f7:83: db:ee:bf:a4:10:c9:db:7c:34:3a:cc:92:4f:75:e4: 52:8a:9a:ea:12:cd:35:d2:1f:50:18:3f:00:2e:1a: 10:1a:ab:48:ed:a6:1b:c5:5b:38:ea:8c:f2:f8:26: 77:43:71:eb:8a:75:a1:19:09:d4:00:bf:ca:f1:2a: 13:f2:03:7c:06:2c:0c:27:76:5e:c8:1a:d3:3a:82: 66:38:86:4d:cd:61:ea:49:51:2e:eb:ae:23:50:5a: d8:f2:f2:41:cb:2f:53:ae:8a:08:30:26:bf:09:0a: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:36:0D:9D:94:5C:D0:3E:88:ED:21:B3:F3:51:80:0F:A8:4E:E1:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89a8e37e-25ae-47f3-a49b-f9093043948d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.185.0/24 Signature Algorithm: sha256WithRSAEncryption 09:35:61:8e:48:58:0a:07:8d:48:77:4d:6f:4f:7f:4e:cf:82: 0c:30:00:26:84:6b:52:c3:c8:b3:29:27:54:b6:89:54:35:02: 51:cb:6f:68:15:9d:96:a6:61:5c:63:ea:1b:6b:3c:26:bc:26: 4b:75:09:ab:ad:be:12:14:1d:55:d1:dc:6f:c7:8f:02:ed:ea: a9:ac:bc:6e:be:3a:07:98:7c:4d:0e:2a:7c:bf:74:7f:58:c2: b2:9a:4e:eb:4b:56:84:40:50:03:2c:f9:9a:1f:8b:34:19:7f: 49:a9:7a:92:32:60:18:05:2e:9b:6b:ae:f7:b4:4e:50:9b:97: 2d:f6:43:97:82:cf:49:98:ba:b0:77:1a:c9:54:d8:bd:33:eb: f6:f0:43:e3:8f:16:73:d8:76:1f:2e:0d:6d:51:51:ed:23:42: 57:86:d3:43:04:fc:c2:b0:10:ad:bc:02:6b:16:2b:f7:fe:e4: 58:07:a9:59:cd:ad:1c:28:4b:ba:a4:16:bb:d7:ab:30:06:b3: 2e:7b:4d:2c:97:07:cf:b0:69:6b:95:c4:62:b4:28:53:fb:f1: 50:8d:38:f5:de:6b:e8:1e:f4:ea:36:f5:22:1a:6d:f7:51:42: 4a:b5:84:8d:fe:b9:fa:ad:4c:c9:0a:70:ce:67:db:8d:11:61: bf:27:fc:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUID4w/LXvcT/RquPIcAxSHoYnnkwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDEzMTQyWhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2QxZjU1YjAxNjUzMTE1YjAyNjU2ZTQ5YjdjNTI2Zjcy ZTI3MjE3NTk4MGU3N2FlMjdiNzRjYjE2MWNkNjg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4vmCu4TdSN+o8mfhtjDyis8pFDBiA9BTxtEioa4sRH80P 8hN2U7YKC63l19FneRuBKeOgT/MeuGa6FrFg/quSCPV98hcnswRzmRBq911jrUqi yInTApfhI8eQbOsMUCWxlzUlZ/JETITp3beO8z5mdwO5Z4vYzQ22z6kB92ybIBSB QUu21B0F5ICyZPvbTvE5rVf3g9vuv6QQydt8NDrMkk915FKKmuoSzTXSH1AYPwAu GhAaq0jtphvFWzjqjPL4JndDceuKdaEZCdQAv8rxKhPyA3wGLAwndl7IGtM6gmY4 hk3NYepJUS7rriNQWtjy8kHLL1OuiggwJr8JCp7lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNTYNnZRc0D6I7SGz81GAD6hO4aQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5YThlMzdlLTI1YWUtNDdmMy1hNDliLWY5MDkzMDQzOTQ4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsLkwDQYJKoZIhvcNAQELBQADggEBAAk1YY5IWAoHjUh3TW9Pf07Pggww ACaEa1LDyLMpJ1S2iVQ1AlHLb2gVnZamYVxj6htrPCa8Jkt1CautvhIUHVXR3G/H jwLt6qmsvG6+OgeYfE0OKny/dH9YwrKaTutLVoRAUAMs+ZofizQZf0mpepIyYBgF Lptrrve0TlCbly32Q5eCz0mYurB3GslU2L0z6/bwQ+OPFnPYdh8uDW1RUe0jQleG 00ME/MKwEK28AmsWK/f+5FgHqVnNrRwoS7qkFrvXqzAGsy57TSyXB8+waWuVxGK0 KFP78VCNOPXea+ge9Oo29SIabfdRQkq1hI3+ufqtTMkKcM5n240RYb8n/JM= -----END CERTIFICATE-----Generated at Mon Aug 3 05:45:12 2026 by rpki-client