$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2c22df8-d0cb-4fca-a47a-a0ba93916451.roa File: a2c22df8-d0cb-4fca-a47a-a0ba93916451.roa (raw, json) Hash identifier: TUdtpABZf4/uD3gSEfQM7930bOMc6s8Xw0g5tgpiHSo= Subject key identifier: 1E:1D:27:D0:97:57:34:85:24:6A:84:E3:EA:09:84:33:74:19:E9:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70DCCC401DA8D3D48368F246CD38563CD80DE5E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2c22df8-d0cb-4fca-a47a-a0ba93916451.roa Signing time: Fri 07 Aug 2026 00:21:06 +0000 ROA not before: Fri 07 Aug 2026 00:21:06 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:dc:cc:40:1d:a8:d3:d4:83:68:f2:46:cd:38:56:3c:d8:0d:e5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:21:06 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=1e9cd781ea92a792a75b9be3ff826746d04979c448ca18249520df7138396adf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:0f:2e:18:cd:e6:e5:cb:ef:fe:ef:74:f6: 79:87:2f:fb:37:c9:aa:41:22:1a:4c:57:ff:10:d1: 97:8c:08:ce:c7:72:6c:ca:48:30:22:9d:e9:26:ec: ba:72:7b:d0:e8:9b:98:6a:e6:70:e4:f1:22:c4:1e: 08:fa:dc:e3:42:59:e5:b4:04:8f:6f:2c:66:00:17: 79:7b:c9:fe:96:48:a7:aa:92:88:6b:68:4f:5b:85: 5c:86:09:8e:f0:8d:04:89:d0:cc:3f:bf:7e:b7:aa: cc:75:55:97:60:d4:d7:27:f0:55:2b:7a:06:c8:c7: ff:2b:cd:8b:70:c6:85:47:86:9b:ba:fa:71:5e:30: b1:3a:02:91:b8:2a:6c:fb:e6:ba:b0:f6:dd:3d:37: e7:b1:76:52:81:e5:d3:10:7f:35:b6:fb:5b:7b:cd: 83:aa:0d:13:53:d3:74:40:a1:ee:c9:d7:f8:ac:40: f4:b4:a8:62:1f:1e:1a:f0:cd:f4:a5:fb:5b:6f:b4: 52:37:53:6e:a2:b0:74:3d:42:0c:b9:65:b8:0c:03: c9:c7:27:23:e6:de:62:87:86:90:7d:fd:97:65:85: 18:d5:2e:13:60:f4:11:4f:35:39:65:eb:52:d8:32: 1c:4e:82:e5:9f:2d:40:9c:d9:f5:35:97:38:a4:36: e5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1D:27:D0:97:57:34:85:24:6A:84:E3:EA:09:84:33:74:19:E9:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2c22df8-d0cb-4fca-a47a-a0ba93916451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.3.0/24 Signature Algorithm: sha256WithRSAEncryption 60:9c:bc:b4:e0:6f:72:6b:8f:53:c3:fc:52:88:4a:2c:b6:f0: 0e:0e:5c:1a:f2:c6:2a:0d:84:b3:b9:25:f6:53:6f:f7:7a:26: 47:28:7c:30:e6:60:d8:5c:7c:3f:57:da:8d:a5:e9:e7:b7:93: 23:71:5d:0d:ef:f6:43:1b:72:ea:3c:30:41:61:85:49:82:33: 2e:74:4e:d6:15:da:0c:cc:de:e9:d8:78:fe:9e:c3:d9:36:e4: c9:51:65:b2:d2:af:bf:fd:7b:48:5b:16:a1:1a:3b:e8:d5:b9: ce:11:a6:52:35:56:85:30:e4:f7:d2:0f:bd:82:6e:a0:cd:00: 82:cc:df:ec:d7:b3:4a:74:e3:12:47:3b:b3:9d:d5:21:f4:4b: 0f:14:37:6d:4e:d6:e8:8c:90:c1:aa:33:1f:f4:10:76:f4:27: f5:7c:49:b1:b7:b4:2d:03:46:b2:8e:8e:b2:1c:44:c5:66:5f: 20:e4:a8:1f:5f:21:ac:28:ae:4b:8c:56:5f:b1:38:02:f3:89: 6e:93:4a:2a:89:a6:6f:72:af:de:77:21:47:91:0d:28:93:6d: a4:8e:31:eb:40:39:94:8b:5b:20:cf:1b:b4:cb:9a:66:08:37: ff:33:72:f3:ee:a7:77:fd:3c:02:29:36:aa:ae:07:69:36:1d: f4:e9:88:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcNzMQB2o09SDaPJGzThWPNgN5egwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAyMTA2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTljZDc4MWVhOTJhNzkyYTc1YjliZTNmZjgyNjc0NmQw NDk3OWM0NDhjYTE4MjQ5NTIwZGY3MTM4Mzk2YWRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGow8uGM3m5cvv/u909nmHL/s3yapBIhpMV/8Q0ZeMCM7H cmzKSDAinekm7Lpye9Dom5hq5nDk8SLEHgj63ONCWeW0BI9vLGYAF3l7yf6WSKeq kohraE9bhVyGCY7wjQSJ0Mw/v363qsx1VZdg1Ncn8FUregbIx/8rzYtwxoVHhpu6 +nFeMLE6ApG4Kmz75rqw9t09N+exdlKB5dMQfzW2+1t7zYOqDRNT03RAoe7J1/is QPS0qGIfHhrwzfSl+1tvtFI3U26isHQ9Qgy5ZbgMA8nHJyPm3mKHhpB9/ZdlhRjV LhNg9BFPNTll61LYMhxOguWfLUCc2fU1lzikNuX/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHh0n0JdXNIUkaoTj6gmEM3QZ6X0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyYzIyZGY4LWQwY2ItNGZjYS1hNDdhLWEwYmE5MzkxNjQ1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsAMwDQYJKoZIhvcNAQELBQADggEBAGCcvLTgb3Jrj1PD/FKISiy28A4O XBryxioNhLO5JfZTb/d6JkcofDDmYNhcfD9X2o2l6ee3kyNxXQ3v9kMbcuo8MEFh hUmCMy50TtYV2gzM3unYeP6ew9k25MlRZbLSr7/9e0hbFqEaO+jVuc4RplI1VoUw 5PfSD72CbqDNAILM3+zXs0p04xJHO7Od1SH0Sw8UN21O1uiMkMGqMx/0EHb0J/V8 SbG3tC0DRrKOjrIcRMVmXyDkqB9fIaworkuMVl+xOALziW6TSiqJpm9yr953IUeR DSiTbaSOMetAOZSLWyDPG7TLmmYIN/8zcvPup3f9PAIpNqquB2k2HfTpiBs= -----END CERTIFICATE-----Generated at Thu Sep 17 15:34:25 2026 by rpki-client