$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b00aeea4-383a-49e7-8e11-a05b39456c60.roa File: b00aeea4-383a-49e7-8e11-a05b39456c60.roa (raw, json) Hash identifier: DumGcEmoxKFahChSF63ix4fmypHNVc0JiUq31Dd86a4= Subject key identifier: 45:E0:25:0C:08:EB:DB:BA:CE:6E:49:81:AE:E0:C5:40:1C:B2:D2:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FB8893BCF0FF5DB66C565D41D23EF2D2557E80C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b00aeea4-383a-49e7-8e11-a05b39456c60.roa Signing time: Mon 19 Oct 2026 00:41:42 +0000 ROA not before: Mon 19 Oct 2026 00:41:42 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b8:89:3b:cf:0f:f5:db:66:c5:65:d4:1d:23:ef:2d:25:57:e8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:41:42 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=f188cf126fe13da7ab0f11d963fff376a2ada17c8a95f9c3f167de51920f55ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:f4:a6:35:50:2d:3a:4f:d4:f2:ad:e4:ad: e6:37:f7:cc:7e:d3:a6:0d:73:5d:32:2b:9e:06:b7: 73:ed:8e:dd:ad:cb:85:ea:17:23:fc:ee:81:8d:29: 81:8e:bb:17:60:19:6c:58:d3:5f:3b:e3:a9:8e:07: b3:6e:1e:ab:72:cb:1a:4c:84:2c:e5:61:e4:c0:b2: 8e:db:bc:b4:22:26:fa:cb:27:ff:d0:24:2c:bf:84: 62:1f:47:74:62:14:b2:aa:c5:37:4c:8f:c6:c1:ce: c4:1a:ba:73:9c:c6:0d:42:19:ba:b3:f8:bd:22:22: d9:bf:d3:17:1e:7a:48:77:76:76:9b:c2:ad:2b:94: a2:f3:4a:5d:1c:9d:24:99:c4:82:1d:f4:3b:b8:b7: c7:37:92:7e:fa:f5:71:31:a1:32:d9:12:e6:b4:6d: de:cf:a1:e0:80:b0:cb:b4:6f:b8:25:72:d8:b5:9f: 9a:ca:90:4a:15:97:6d:bc:fa:7b:35:01:03:cd:e4: 86:eb:36:6e:68:62:e1:8a:3f:f6:b5:64:6f:c1:fa: 14:5b:62:56:aa:c4:6d:1a:13:9a:f4:e0:48:46:b4: 97:28:2c:07:30:6f:7a:59:cf:dd:bf:b9:14:3e:11: ad:f0:3e:cc:59:1d:10:59:ae:aa:ca:e2:85:7e:e1: 3b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E0:25:0C:08:EB:DB:BA:CE:6E:49:81:AE:E0:C5:40:1C:B2:D2:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b00aeea4-383a-49e7-8e11-a05b39456c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.72.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:71:aa:c3:cb:4a:1e:61:92:a6:bd:28:26:d3:bc:08:5a:d9: 1a:4c:0a:10:27:26:0b:4d:18:09:0f:3d:2f:dd:68:f9:2e:94: 03:c7:64:f4:f2:97:2e:8b:de:fa:15:bb:98:b7:3b:ac:14:df: 32:18:7d:de:e6:5b:9f:8f:2e:fe:61:1d:0f:48:3f:fd:5c:52: f9:46:21:29:80:b4:90:ff:27:81:58:30:71:4f:f2:3b:33:97: 0a:0f:31:29:32:f2:ac:59:b3:9f:59:f8:6a:c1:c3:d1:99:c8: 5e:81:cc:dd:e2:36:30:f8:d1:ea:f4:84:09:25:eb:d7:b4:3a: 8f:7e:1c:24:0f:e0:c6:26:03:ca:54:ce:f0:0c:89:93:02:70: ae:09:29:8b:47:f7:b0:79:39:14:0b:fb:44:02:63:c3:2d:22: 71:f0:d4:0c:6f:fa:35:46:32:ee:fc:c9:9b:60:c8:a1:63:7c: e2:a8:2a:b1:95:1e:67:ec:38:44:a6:9d:e0:8a:34:67:b5:0b: 4e:3a:aa:ed:fa:cc:16:d8:4a:bc:34:8d:e1:3b:4e:15:2f:50: 49:b1:c9:9f:69:ef:f9:25:61:3a:7d:25:22:4f:bc:f6:a4:b6: 91:bc:97:93:b3:72:2a:89:7a:67:92:75:69:45:9b:49:ed:45: 9c:84:41:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb7iJO88P9dtmxWXUHSPvLSVX6AwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA0MTQyWhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTg4Y2YxMjZmZTEzZGE3YWIwZjExZDk2M2ZmZjM3NmEy YWRhMTdjOGE5NWY5YzNmMTY3ZGU1MTkyMGY1NWVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1SPSmNVAtOk/U8q3kreY398x+06YNc10yK54Gt3Ptjt2t y4XqFyP87oGNKYGOuxdgGWxY018746mOB7NuHqtyyxpMhCzlYeTAso7bvLQiJvrL J//QJCy/hGIfR3RiFLKqxTdMj8bBzsQaunOcxg1CGbqz+L0iItm/0xceekh3dnab wq0rlKLzSl0cnSSZxIId9Du4t8c3kn769XExoTLZEua0bd7PoeCAsMu0b7glcti1 n5rKkEoVl228+ns1AQPN5IbrNm5oYuGKP/a1ZG/B+hRbYlaqxG0aE5r04EhGtJco LAcwb3pZz92/uRQ+Ea3wPsxZHRBZrqrK4oV+4TsLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUReAlDAjr27rObkmBruDFQByy0nwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwMGFlZWE0LTM4M2EtNDllNy04ZTExLWEwNWIzOTQ1NmM2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKCsEgwDQYJKoZIhvcNAQELBQADggEBACpxqsPLSh5hkqa9KCbTvAha2RpM ChAnJgtNGAkPPS/daPkulAPHZPTyly6L3voVu5i3O6wU3zIYfd7mW5+PLv5hHQ9I P/1cUvlGISmAtJD/J4FYMHFP8jszlwoPMSky8qxZs59Z+GrBw9GZyF6BzN3iNjD4 0er0hAkl69e0Oo9+HCQP4MYmA8pUzvAMiZMCcK4JKYtH97B5ORQL+0QCY8MtInHw 1Axv+jVGMu78yZtgyKFjfOKoKrGVHmfsOESmneCKNGe1C046qu36zBbYSrw0jeE7 ThUvUEmxyZ9p7/klYTp9JSJPvPaktpG8l5OzciqJemeSdWlFm0ntRZyEQRc= -----END CERTIFICATE-----Generated at Mon Nov 2 14:52:37 2026 by rpki-client