$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2c22df8-d0cb-4fca-a47a-a0ba93916451.roa File: a2c22df8-d0cb-4fca-a47a-a0ba93916451.roa (raw, json) Hash identifier: oKRVi9PBuuoBNgyfnEZEjpLMlyVRI7VVyJ99wlQl3Y0= Subject key identifier: 1C:3B:FF:43:02:BC:19:49:4C:40:19:0C:E6:63:EE:EF:BB:9D:00:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37A35DC4775E92457312264FFC67F4382DFBCF87 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2c22df8-d0cb-4fca-a47a-a0ba93916451.roa Signing time: Mon 26 Oct 2026 00:20:06 +0000 ROA not before: Mon 26 Oct 2026 00:20:06 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a3:5d:c4:77:5e:92:45:73:12:26:4f:fc:67:f4:38:2d:fb:cf:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:20:06 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=d8997e8024e7d71c98fcb3a3035bf0e9892f120488785f1e98d70b9798bc578c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:3d:4d:0b:48:b4:5f:5f:23:af:4b:f5:b5: 59:a1:de:e8:9d:28:50:3b:0d:c7:99:d6:fb:37:07: cf:7d:cd:4c:00:eb:9a:03:57:1a:de:33:72:97:ce: cd:2f:a8:53:a0:62:61:8e:48:de:62:9c:23:24:f8: 9a:8e:2d:47:ea:ee:a5:18:08:d5:64:e7:3c:e1:bb: 2d:ac:fc:7f:db:6c:ce:2d:68:c0:5b:73:49:d3:ff: 34:9d:a1:43:1f:ac:1d:a6:b1:e6:bd:5a:b1:58:e4: ac:c1:39:34:a7:34:26:2a:df:21:bc:a7:21:da:0a: fd:27:f2:ac:96:d6:4d:46:a6:0a:b1:ea:93:22:a0: e1:24:08:31:23:e6:a1:09:85:50:27:b4:8d:44:99: 46:bf:5c:95:d5:0f:7c:e9:37:2f:e4:a1:28:f0:93: 6d:fa:b2:a8:11:c8:7f:01:a1:ba:d3:e7:4a:d8:d5: 58:48:60:a9:fc:0a:5c:fa:70:50:9b:aa:25:fd:15: c5:e4:35:a6:ed:77:6e:46:b3:6c:07:58:d5:d0:7d: 94:f4:3a:cc:ca:34:11:c1:00:d0:45:70:d7:20:17: 1b:22:96:06:9a:8d:a3:c1:d4:ab:3a:95:8a:29:ec: 33:69:61:04:d2:49:5f:19:3b:41:c6:cb:a7:a4:df: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3B:FF:43:02:BC:19:49:4C:40:19:0C:E6:63:EE:EF:BB:9D:00:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2c22df8-d0cb-4fca-a47a-a0ba93916451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.3.0/24 Signature Algorithm: sha256WithRSAEncryption 95:73:65:20:6f:6f:24:4e:16:38:8f:4a:ee:ff:57:a3:83:a7: 68:19:5e:58:ed:72:36:59:01:ab:6a:3f:81:42:ef:ce:d1:6b: 5d:99:a3:be:08:f6:d1:6c:db:ae:ca:b4:0f:c5:51:25:85:ee: 6d:af:d0:38:ad:db:2e:7b:c4:41:d0:7b:fa:3e:da:df:e9:d0: 38:da:0f:7f:61:e4:89:76:03:03:42:95:89:a6:8b:99:e8:24: 23:51:e4:12:fc:b0:42:1e:19:6b:f4:90:88:12:2d:ce:d7:97: 70:80:59:3a:2b:03:ad:2d:ef:76:ab:8d:a5:a1:75:ee:72:61: 2c:99:f0:b0:a4:d4:5a:54:9c:8d:ad:7c:2d:76:04:f9:7d:8c: 4a:be:c8:70:57:1b:23:1e:00:36:9a:28:54:07:75:2a:29:57: 2e:3e:d5:85:de:0b:84:ce:0c:80:f2:a4:92:9c:8b:71:6a:5f: b3:d7:74:89:e2:bf:27:dd:f8:60:40:cb:26:ab:60:11:2d:23: 0b:24:15:72:73:e3:c6:b4:06:22:1d:91:8a:1e:26:a0:d9:4b: 5a:25:4d:c9:90:ff:ad:69:65:3a:19:62:78:96:a7:69:9c:ad: 98:c1:26:e8:d0:81:bc:54:a2:58:c0:fd:a0:58:48:4b:96:68: 36:fa:74:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN6NdxHdekkVzEiZP/Gf0OC37z4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAyMDA2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODk5N2U4MDI0ZTdkNzFjOThmY2IzYTMwMzViZjBlOTg5 MmYxMjA0ODg3ODVmMWU5OGQ3MGI5Nzk4YmM1NzhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkzD1NC0i0X18jr0v1tVmh3uidKFA7DceZ1vs3B899zUwA 65oDVxreM3KXzs0vqFOgYmGOSN5inCMk+JqOLUfq7qUYCNVk5zzhuy2s/H/bbM4t aMBbc0nT/zSdoUMfrB2msea9WrFY5KzBOTSnNCYq3yG8pyHaCv0n8qyW1k1Gpgqx 6pMioOEkCDEj5qEJhVAntI1EmUa/XJXVD3zpNy/koSjwk236sqgRyH8BobrT50rY 1VhIYKn8Clz6cFCbqiX9FcXkNabtd25Gs2wHWNXQfZT0OszKNBHBANBFcNcgFxsi lgaajaPB1Ks6lYop7DNpYQTSSV8ZO0HGy6ek36hPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHDv/QwK8GUlMQBkM5mPu77udACAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyYzIyZGY4LWQwY2ItNGZjYS1hNDdhLWEwYmE5MzkxNjQ1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsAMwDQYJKoZIhvcNAQELBQADggEBAJVzZSBvbyROFjiPSu7/V6ODp2gZ XljtcjZZAatqP4FC787Ra12Zo74I9tFs267KtA/FUSWF7m2v0Dit2y57xEHQe/o+ 2t/p0DjaD39h5Il2AwNClYmmi5noJCNR5BL8sEIeGWv0kIgSLc7Xl3CAWTorA60t 73arjaWhde5yYSyZ8LCk1FpUnI2tfC12BPl9jEq+yHBXGyMeADaaKFQHdSopVy4+ 1YXeC4TODIDypJKci3FqX7PXdInivyfd+GBAyyarYBEtIwskFXJz48a0BiIdkYoe JqDZS1olTcmQ/61pZToZYniWp2mcrZjBJujQgbxUoljA/aBYSEuWaDb6dKs= -----END CERTIFICATE-----Generated at Wed Nov 4 15:42:53 2026 by rpki-client