$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba2a4a20-1ad8-49ab-96c4-ec41278a0393.roa File: ba2a4a20-1ad8-49ab-96c4-ec41278a0393.roa (raw, json) Hash identifier: I+PEwGNrnpJSuMjW6jfzfUBGC50DjtCBemPks0DpDnQ= Subject key identifier: A6:C7:8C:CE:79:FD:CF:22:5A:76:A1:1E:92:B4:4A:6E:55:03:6C:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4216F82789D9CB1E29A795CB874D4B6BD35C9500 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba2a4a20-1ad8-49ab-96c4-ec41278a0393.roa Signing time: Tue 28 Apr 2026 00:30:14 +0000 ROA not before: Tue 28 Apr 2026 00:30:14 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.186.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:16:f8:27:89:d9:cb:1e:29:a7:95:cb:87:4d:4b:6b:d3:5c:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:30:14 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=a4b716ab0777e4a5df254d1771f6dc04c7eb84a63b41d0dbb4f6fb0d775b7af1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:16:4d:a5:ea:b9:14:46:56:50:22:1b:73: f1:9d:dd:72:a5:7e:fd:33:66:10:3a:7e:3d:ba:34: 20:ba:a6:f7:26:f4:25:20:e6:0d:53:b2:75:e2:5e: e3:7e:44:11:ff:df:6b:17:76:04:8c:0e:54:d7:82: 31:ce:2c:d1:12:a1:df:1c:00:e6:95:d0:30:db:3d: e2:27:0b:0e:4b:56:a2:a8:46:43:e9:8c:84:48:46: b4:ff:fc:53:cf:8c:a5:61:35:75:df:57:48:af:2a: 78:c7:cb:5a:5e:96:e2:85:4a:fe:f0:6e:86:5c:cb: ed:84:f8:84:ac:4e:76:49:80:83:45:f6:1e:c2:d6: 54:2c:3d:77:cd:54:e2:89:90:aa:10:58:25:ed:14: 71:2e:05:e7:e7:38:e6:c8:cb:92:c3:93:60:b2:38: cb:56:a3:92:cf:25:80:a3:21:0a:e7:f3:d8:e3:a1: bc:a7:3d:79:e6:47:7d:f7:d5:15:00:6f:b9:10:04: ce:d4:f8:9f:2c:da:e3:e4:b0:59:34:74:6e:f7:23: 20:e5:19:90:03:fc:4f:37:fe:c0:2c:19:af:67:b7: 61:90:0c:36:f7:8c:48:55:f2:af:23:1b:91:55:32: 09:43:fe:38:13:6f:e3:e0:f8:a3:d5:78:7f:88:17: 9d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C7:8C:CE:79:FD:CF:22:5A:76:A1:1E:92:B4:4A:6E:55:03:6C:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba2a4a20-1ad8-49ab-96c4-ec41278a0393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.186.32.0/19 Signature Algorithm: sha256WithRSAEncryption 01:29:a8:c2:f3:77:66:52:a5:0c:65:4a:be:1f:ee:f7:a1:50: 6d:2e:7d:a3:4b:1b:c8:7b:8f:e4:c9:88:d6:6e:81:7b:9a:92: 0c:8f:1d:ea:fe:04:e7:ae:ce:ff:9a:d8:0a:1b:09:29:01:ee: 05:47:82:a7:9d:71:25:5f:45:b4:a5:92:5c:6a:05:34:d2:e1: 5a:4e:da:47:28:48:ca:30:0b:20:38:97:ab:7b:c4:47:1e:3d: 84:32:18:bc:77:cb:5f:a5:75:bd:95:a4:43:8c:f7:c9:eb:50: d1:b2:59:9d:05:d2:54:3f:aa:94:a8:c2:e8:24:7c:48:eb:5c: f7:e3:27:d3:3f:b7:95:0b:52:57:18:79:72:f7:4d:91:11:f8: ef:a7:fa:72:ea:90:01:80:e5:d9:2f:85:28:8e:7d:86:5a:8f: 90:6c:ed:8c:08:fe:f9:7c:c1:0d:f6:69:c2:31:f0:bc:a8:19: db:c3:b2:bc:5d:be:53:1f:26:63:f6:48:e6:9a:60:9b:66:69: c9:00:73:60:22:9f:4e:de:fe:db:5e:c4:03:38:13:6c:48:2a: 0d:29:a0:78:54:85:bc:42:a7:b7:f6:12:20:c6:e9:75:0b:68: 15:4a:7e:b7:ff:c0:6e:b8:52:4b:09:62:62:73:59:c3:68:54: a4:76:e5:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQhb4J4nZyx4pp5XLh01La9NclQAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAzMDE0WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNGI3MTZhYjA3NzdlNGE1ZGYyNTRkMTc3MWY2ZGMwNGM3 ZWI4NGE2M2I0MWQwZGJiNGY2ZmIwZDc3NWI3YWYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOahZNpeq5FEZWUCIbc/Gd3XKlfv0zZhA6fj26NCC6pvcm 9CUg5g1TsnXiXuN+RBH/32sXdgSMDlTXgjHOLNESod8cAOaV0DDbPeInCw5LVqKo RkPpjIRIRrT//FPPjKVhNXXfV0ivKnjHy1peluKFSv7wboZcy+2E+ISsTnZJgINF 9h7C1lQsPXfNVOKJkKoQWCXtFHEuBefnOObIy5LDk2CyOMtWo5LPJYCjIQrn89jj obynPXnmR3331RUAb7kQBM7U+J8s2uPksFk0dG73IyDlGZAD/E83/sAsGa9nt2GQ DDb3jEhV8q8jG5FVMglD/jgTb+Pg+KPVeH+IF52DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpseMznn9zyJadqEekrRKblUDbIUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMmE0YTIwLTFhZDgtNDlhYi05NmM0LWVjNDEyNzhhMDM5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWCuiAwDQYJKoZIhvcNAQELBQADggEBAAEpqMLzd2ZSpQxlSr4f7vehUG0u faNLG8h7j+TJiNZugXuakgyPHer+BOeuzv+a2AobCSkB7gVHgqedcSVfRbSlklxq BTTS4VpO2kcoSMowCyA4l6t7xEcePYQyGLx3y1+ldb2VpEOM98nrUNGyWZ0F0lQ/ qpSowugkfEjrXPfjJ9M/t5ULUlcYeXL3TZER+O+n+nLqkAGA5dkvhSiOfYZaj5Bs 7YwI/vl8wQ32acIx8LyoGdvDsrxdvlMfJmP2SOaaYJtmackAc2Ain07e/ttexAM4 E2xIKg0poHhUhbxCp7f2EiDG6XULaBVKfrf/wG64UksJYmJzWcNoVKR25eg= -----END CERTIFICATE-----Generated at Sun May 3 15:33:16 2026 by rpki-client