$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bcbccd5-914b-4612-b4e2-c9b3befa9b3b.roa File: 1bcbccd5-914b-4612-b4e2-c9b3befa9b3b.roa (raw, json) Hash identifier: uG6Z/1yFMBnZzYoyqixDjiDiSygL6jJctJ5TiefNyHE= Subject key identifier: 8A:50:54:03:36:BC:B1:47:4B:86:AA:AE:F6:F7:C3:28:8C:75:25:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D81B198994099596C655B028C53FB634102C56B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bcbccd5-914b-4612-b4e2-c9b3befa9b3b.roa Signing time: Thu 09 Apr 2026 01:36:39 +0000 ROA not before: Thu 09 Apr 2026 01:36:39 +0000 ROA not after: Wed 08 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:81:b1:98:99:40:99:59:6c:65:5b:02:8c:53:fb:63:41:02:c5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 01:36:39 2026 GMT Not After : Jul 8 23:59:59 2026 GMT Subject: serialNumber=2bff49f651fbe25cf5c52194741d08a83da451d84452f7358063320b3701f26e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:c5:fa:b6:13:2b:89:55:67:5f:56:3a:62: 9d:25:c1:da:1b:a7:00:61:a8:89:dd:1d:1e:bf:d2: 66:75:f3:ef:31:f0:cd:9c:27:b1:b5:89:ba:a8:31: e4:b2:3a:df:9e:48:d6:b8:a3:16:9f:e1:99:1f:73: 42:c2:4b:ef:70:93:8f:1d:07:e3:57:31:41:eb:2e: cf:e2:31:66:3d:19:26:cf:c6:9f:03:0f:64:9e:9f: f3:8b:18:24:fe:f2:6d:4f:5b:75:fd:df:29:21:2f: 5a:f5:9b:32:12:c3:12:ef:75:b5:2c:1f:8b:e9:34: 5f:f0:d5:3d:21:97:25:20:98:64:0a:4c:d6:9a:16: 1a:6d:e0:a9:89:1e:a0:27:0e:e2:0d:f8:08:6a:97: 77:14:44:5b:82:3a:fa:cd:c5:17:eb:1c:01:5b:6d: 0e:97:58:34:22:79:20:8e:15:af:f8:be:f0:26:fc: b0:a6:1e:39:dd:c6:78:b5:cb:7f:81:29:d0:09:7d: d1:60:1f:73:28:60:52:6f:3d:7f:5c:4a:ac:e9:3c: 38:24:b1:22:08:20:12:5d:68:45:51:5a:7e:fd:f5: 5d:d0:ce:a0:92:de:24:f5:a5:02:80:c5:f6:00:79: fa:e9:2d:26:f9:a0:f7:c6:a9:b9:5f:ed:6c:fd:04: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:54:03:36:BC:B1:47:4B:86:AA:AE:F6:F7:C3:28:8C:75:25:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1bcbccd5-914b-4612-b4e2-c9b3befa9b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.33.0/24 Signature Algorithm: sha256WithRSAEncryption d5:77:5e:71:4f:e1:a1:91:80:38:0c:d3:15:ac:16:dc:a2:4d: 40:e9:14:cd:4e:1a:14:47:e1:b7:bf:e0:05:89:37:4d:b1:8a: 80:08:f6:e2:a3:96:d3:44:0a:23:5a:c5:fe:35:a1:61:88:f2: f6:2c:aa:d8:1c:4b:b1:85:e3:7b:2b:52:48:b6:f2:e9:6e:ce: e3:cf:bf:ad:09:16:70:5d:f6:a1:e9:0c:52:a9:9c:82:06:0b: 94:b4:86:31:13:78:33:1d:49:f6:50:d8:43:d7:a8:33:0c:40: 0d:8a:57:4b:19:4c:5c:ee:68:df:7c:d0:d4:00:17:b7:02:69: 92:8d:f7:df:b6:d2:30:cc:e0:e9:01:02:29:c9:56:2c:8a:d4: 22:9c:4f:f5:0e:7e:aa:24:4e:0a:67:bd:2b:0f:19:1f:b7:42: b3:9e:78:1e:9b:7e:ce:da:19:e8:c1:30:ba:05:9f:bc:74:fd: 1d:40:2d:4e:92:7f:e0:ef:9f:47:be:a9:36:f1:73:eb:95:36: 05:11:dc:20:d7:c4:9b:1c:b7:19:fc:cb:d2:b8:f1:f3:f8:19: 14:e3:14:d5:a6:8b:fe:eb:56:2e:38:d2:98:35:31:44:a4:41: d4:6e:e9:db:09:67:d3:67:b8:dd:9f:03:52:8a:43:34:0a:8c: dd:74:07:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfYGxmJlAmVlsZVsCjFP7Y0ECxWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDA5MDEzNjM5WhcNMjYwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmZmNDlmNjUxZmJlMjVjZjVjNTIxOTQ3NDFkMDhhODNk YTQ1MWQ4NDQ1MmY3MzU4MDYzMzIwYjM3MDFmMjZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJrcX6thMriVVnX1Y6Yp0lwdobpwBhqIndHR6/0mZ18+8x 8M2cJ7G1ibqoMeSyOt+eSNa4oxaf4Zkfc0LCS+9wk48dB+NXMUHrLs/iMWY9GSbP xp8DD2Sen/OLGCT+8m1PW3X93ykhL1r1mzISwxLvdbUsH4vpNF/w1T0hlyUgmGQK TNaaFhpt4KmJHqAnDuIN+Ahql3cURFuCOvrNxRfrHAFbbQ6XWDQieSCOFa/4vvAm /LCmHjndxni1y3+BKdAJfdFgH3MoYFJvPX9cSqzpPDgksSIIIBJdaEVRWn799V3Q zqCS3iT1pQKAxfYAefrpLSb5oPfGqblf7Wz9BLEjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUilBUAza8sUdLhqqu9vfDKIx1JZ8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiY2JjY2Q1LTkxNGItNDYxMi1iNGUyLWM5YjNiZWZhOWIzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsCEwDQYJKoZIhvcNAQELBQADggEBANV3XnFP4aGRgDgM0xWsFtyiTUDp FM1OGhRH4be/4AWJN02xioAI9uKjltNECiNaxf41oWGI8vYsqtgcS7GF43srUki2 8uluzuPPv60JFnBd9qHpDFKpnIIGC5S0hjETeDMdSfZQ2EPXqDMMQA2KV0sZTFzu aN980NQAF7cCaZKN99+20jDM4OkBAinJViyK1CKcT/UOfqokTgpnvSsPGR+3QrOe eB6bfs7aGejBMLoFn7x0/R1ALU6Sf+Dvn0e+qTbxc+uVNgUR3CDXxJsctxn8y9K4 8fP4GRTjFNWmi/7rVi440pg1MUSkQdRu6dsJZ9NnuN2fA1KKQzQKjN10B8c= -----END CERTIFICATE-----Generated at Fri Apr 17 05:58:26 2026 by rpki-client