$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb9a3b0-5515-498a-a8b7-18d25fe04f6d.roa File: bbb9a3b0-5515-498a-a8b7-18d25fe04f6d.roa (raw, json) Hash identifier: 9abAYpD4qWKW4mQ9f2iW47qFjTLUWvoNl4sFen78QJo= Subject key identifier: 7E:1F:EA:0B:78:AB:27:96:F6:81:2E:44:EB:5F:D2:74:F2:57:C7:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 525CFF04C67582BF3F7AA82715DA90C1A6805155 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb9a3b0-5515-498a-a8b7-18d25fe04f6d.roa Signing time: Mon 19 Oct 2026 01:11:12 +0000 ROA not before: Mon 19 Oct 2026 01:11:12 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5c:ff:04:c6:75:82:bf:3f:7a:a8:27:15:da:90:c1:a6:80:51:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 01:11:12 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=b2cec5d4af02d7a1f6f2b3be22e42dc9727958f3ffcf011c4a789d6278e049ea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:16:78:68:e7:8c:1f:e8:f7:ff:5e:a4:08: 16:53:e1:02:23:85:84:5d:71:0f:f0:a8:d8:36:87: d6:b0:a7:dc:c5:1b:79:52:80:b1:3f:56:1e:c4:1b: 92:7a:81:55:a1:32:41:f1:44:b6:0f:16:e5:d6:00: 99:00:1c:cc:23:47:8e:8e:80:b6:82:96:6e:73:8f: 4d:1e:c3:bc:6b:3d:0f:df:df:00:b0:77:4e:64:38: 01:3d:ac:36:0b:de:00:fd:52:20:83:6f:a0:23:c4: 9b:27:9c:b9:8c:b2:e0:a9:b0:6d:56:10:a8:69:26: e7:e1:f7:3d:70:f4:11:55:68:46:fa:99:36:50:11: 87:4b:6b:fa:e7:85:98:51:c3:7e:1f:2e:7b:cd:2e: d6:b2:1e:b7:a2:37:59:3d:ee:5f:30:43:d9:21:ab: 12:c5:38:40:d6:c1:2d:5e:06:67:81:83:12:74:a0: 87:6e:f5:e4:2e:ce:b0:b5:a2:76:a0:33:5a:36:32: 67:a6:13:66:3f:68:8b:b3:10:0a:0f:4f:e1:15:36: b3:65:e3:6c:ef:f8:e9:c4:0b:b6:5e:22:d9:bc:f8: 82:63:ea:a8:00:b3:32:f3:79:c8:26:3b:12:dd:76: 03:9d:4c:20:37:fc:4b:a2:b1:29:b1:f0:4f:a6:c7: 03:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1F:EA:0B:78:AB:27:96:F6:81:2E:44:EB:5F:D2:74:F2:57:C7:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb9a3b0-5515-498a-a8b7-18d25fe04f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.128.0/24 Signature Algorithm: sha256WithRSAEncryption 37:ee:00:26:e5:7d:10:61:bd:f0:42:61:a0:1d:b9:c0:5a:80: 7d:1e:94:c1:32:1d:8a:11:52:c8:94:f5:54:56:51:13:86:4b: 8e:58:c6:6f:fd:2e:e5:fd:02:76:5e:23:76:39:8c:91:97:15: 9e:73:47:99:3f:3b:39:c5:32:2b:1c:db:22:c1:6b:83:b8:ae: 40:16:63:ff:91:9d:ac:98:b5:cd:d8:4f:44:ae:0c:22:d3:7a: 27:55:16:67:33:14:50:f3:b6:96:35:93:6b:07:ca:fa:70:47: d1:a1:04:31:3f:4e:ab:a9:7a:06:67:bc:05:94:72:a3:aa:e2: bd:81:30:73:1d:c1:ac:2f:37:43:17:54:1d:f0:9d:e8:e6:55: 7f:e4:d9:cc:d6:98:09:d4:c7:d1:e3:31:07:05:b2:a1:29:bc: 05:45:6d:7f:f1:e4:a3:28:ef:52:6e:08:c5:40:bf:65:97:44: b7:96:2b:97:95:e8:ef:f1:76:90:0d:25:62:d8:cc:e8:4e:5f: f2:40:18:7e:d1:39:44:54:80:2e:59:d2:c1:9a:25:8c:db:e0: e4:ba:f7:5a:e9:25:c7:c1:c0:fe:d3:9f:8d:ca:d8:4c:55:a1: c1:23:71:53:b0:d0:41:9a:ad:c9:ba:2a:29:f2:4d:b9:b3:d5: 2e:61:04:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUlz/BMZ1gr8/eqgnFdqQwaaAUVUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDExMTEyWhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmNlYzVkNGFmMDJkN2ExZjZmMmIzYmUyMmU0MmRjOTcy Nzk1OGYzZmZjZjAxMWM0YTc4OWQ2Mjc4ZTA0OWVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGLRZ4aOeMH+j3/16kCBZT4QIjhYRdcQ/wqNg2h9awp9zF G3lSgLE/Vh7EG5J6gVWhMkHxRLYPFuXWAJkAHMwjR46OgLaClm5zj00ew7xrPQ/f 3wCwd05kOAE9rDYL3gD9UiCDb6AjxJsnnLmMsuCpsG1WEKhpJufh9z1w9BFVaEb6 mTZQEYdLa/rnhZhRw34fLnvNLtayHreiN1k97l8wQ9khqxLFOEDWwS1eBmeBgxJ0 oIdu9eQuzrC1onagM1o2MmemE2Y/aIuzEAoPT+EVNrNl42zv+OnEC7ZeItm8+IJj 6qgAszLzecgmOxLddgOdTCA3/EuisSmx8E+mxwOHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfh/qC3irJ5b2gS5E61/SdPJXx20wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiYjlhM2IwLTU1MTUtNDk4YS1hOGI3LTE4ZDI1ZmUwNGY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsIAwDQYJKoZIhvcNAQELBQADggEBADfuACblfRBhvfBCYaAducBagH0e lMEyHYoRUsiU9VRWUROGS45Yxm/9LuX9AnZeI3Y5jJGXFZ5zR5k/OznFMisc2yLB a4O4rkAWY/+RnayYtc3YT0SuDCLTeidVFmczFFDztpY1k2sHyvpwR9GhBDE/Tqup egZnvAWUcqOq4r2BMHMdwawvN0MXVB3wnejmVX/k2czWmAnUx9HjMQcFsqEpvAVF bX/x5KMo71JuCMVAv2WXRLeWK5eV6O/xdpANJWLYzOhOX/JAGH7ROURUgC5Z0sGa JYzb4OS691rpJcfBwP7Tn43K2ExVocEjcVOw0EGarcm6KinyTbmz1S5hBIc= -----END CERTIFICATE-----Generated at Wed Nov 4 05:39:38 2026 by rpki-client