$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/730defff-dea2-415b-8fa5-bfb0f56d5b26.roa File: 730defff-dea2-415b-8fa5-bfb0f56d5b26.roa (raw, json) Hash identifier: L+1Xz1uN7wTLlSB/hG5qdtVVW/9/BLCNb7sqd4TC5y4= Subject key identifier: 23:74:90:B6:F2:B7:01:D8:54:1D:00:9F:58:41:B6:F0:B6:87:59:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29B1B01272C88D6D5AA23B4556C8F4C036F923B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/730defff-dea2-415b-8fa5-bfb0f56d5b26.roa Signing time: Sat 21 Feb 2026 00:40:10 +0000 ROA not before: Sat 21 Feb 2026 00:40:10 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b1:b0:12:72:c8:8d:6d:5a:a2:3b:45:56:c8:f4:c0:36:f9:23:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:40:10 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=c9326d96aa6cabfc1c775a501cfc61dfa7a8cf8da4e61bf98966649ab68abba7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:90:8b:b2:ba:7f:bd:ec:9b:0a:c5:3a:5f: d3:cd:64:ae:04:45:0a:62:5d:3b:fc:03:e7:6d:03: d6:54:53:2f:bb:ca:a1:57:0c:73:a6:79:2e:d1:5d: fc:38:ff:da:5b:4e:fa:13:81:94:c7:17:46:ed:9a: f9:e0:90:ad:14:40:7f:f0:88:1d:7a:5c:12:40:3e: 80:20:67:85:db:f0:4a:02:9f:81:9d:e7:e4:a5:54: 65:f9:0d:91:03:ec:c7:c8:00:f6:07:30:f3:0b:5c: 98:db:8a:8a:c4:c9:04:6e:1f:48:7a:8c:66:ee:5f: 2d:ea:59:7a:87:21:19:26:ff:2c:85:9a:07:9e:b2: 2e:ba:02:a6:cf:ab:a2:61:4d:89:ac:35:d0:82:d0: 72:b6:8f:96:72:f3:ee:f8:c1:0b:5f:9c:7f:f4:0b: 20:be:08:48:11:ad:15:11:10:35:81:da:7a:b0:10: 25:03:35:e1:cd:fa:09:1f:5a:f8:48:8b:4c:8e:00: 1e:81:5b:0d:42:18:7f:8a:3b:bc:2f:b6:2a:36:30: 94:78:4e:44:5f:0b:06:39:54:8f:8a:1f:6e:7c:11: a9:02:8d:0a:e4:f3:8b:d8:7e:aa:b5:2f:b4:e6:f3: d6:9d:cf:a1:22:77:b4:63:e5:74:a6:d0:55:1f:cc: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:74:90:B6:F2:B7:01:D8:54:1D:00:9F:58:41:B6:F0:B6:87:59:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/730defff-dea2-415b-8fa5-bfb0f56d5b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.237.0/24 Signature Algorithm: sha256WithRSAEncryption 10:cc:cd:a2:88:0d:b6:c2:33:28:28:8d:3d:b5:55:17:87:5c: 5b:25:f7:0e:98:32:e6:a1:fe:42:e0:21:30:d8:51:de:3d:8f: fd:43:d4:81:96:9e:4c:08:c6:5d:1b:c6:20:e1:5d:47:ee:4c: a9:5e:ee:6e:27:b5:23:13:cb:49:7a:8a:d9:30:6e:4a:37:d0: 1c:bf:e8:e5:66:de:3d:67:d7:19:bf:5d:ba:28:42:be:a9:c4: ce:5b:b6:6e:25:3e:55:9d:a1:80:2b:f7:a5:ea:5a:be:c0:11: 8b:a5:23:8b:42:c3:7f:da:ba:6e:dd:48:12:62:f1:89:27:f9: 78:db:61:62:ac:be:0b:94:b8:26:00:bb:e2:a9:46:77:44:9d: a9:36:e9:19:85:a7:42:5e:6e:b6:6e:e8:7d:c5:90:79:0b:cf: 44:8f:95:28:60:fb:7a:dc:5f:7e:16:6f:db:32:13:7d:bf:1b: a5:0f:60:7b:b2:1d:95:8d:0b:f8:97:b1:47:98:3f:be:79:6c: 0d:48:bb:ff:08:1e:63:83:0f:e2:38:7d:ee:46:7e:1a:bc:af: 03:cb:3b:0d:ca:2c:c3:74:0e:5a:98:b6:33:11:e3:38:f3:78: a8:f4:67:f4:19:d7:66:68:37:4b:d3:b8:6a:1c:cb:74:2f:8d: 84:11:be:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKbGwEnLIjW1aojtFVsj0wDb5I7kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA0MDEwWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTMyNmQ5NmFhNmNhYmZjMWM3NzVhNTAxY2ZjNjFkZmE3 YThjZjhkYTRlNjFiZjk4OTY2NjQ5YWI2OGFiYmE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0E5CLsrp/veybCsU6X9PNZK4ERQpiXTv8A+dtA9ZUUy+7 yqFXDHOmeS7RXfw4/9pbTvoTgZTHF0btmvngkK0UQH/wiB16XBJAPoAgZ4Xb8EoC n4Gd5+SlVGX5DZED7MfIAPYHMPMLXJjbiorEyQRuH0h6jGbuXy3qWXqHIRkm/yyF mgeesi66AqbPq6JhTYmsNdCC0HK2j5Zy8+74wQtfnH/0CyC+CEgRrRUREDWB2nqw ECUDNeHN+gkfWvhIi0yOAB6BWw1CGH+KO7wvtio2MJR4TkRfCwY5VI+KH258EakC jQrk84vYfqq1L7Tm89adz6Eid7Rj5XSm0FUfzF7FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI3SQtvK3AdhUHQCfWEG28LaHWaQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczMGRlZmZmLWRlYTItNDE1Yi04ZmE1LWJmYjBmNTZkNWIyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsO0wDQYJKoZIhvcNAQELBQADggEBABDMzaKIDbbCMygojT21VReHXFsl 9w6YMuah/kLgITDYUd49j/1D1IGWnkwIxl0bxiDhXUfuTKle7m4ntSMTy0l6itkw bko30By/6OVm3j1n1xm/XbooQr6pxM5btm4lPlWdoYAr96XqWr7AEYulI4tCw3/a um7dSBJi8Ykn+XjbYWKsvguUuCYAu+KpRndEnak26RmFp0JebrZu6H3FkHkLz0SP lShg+3rcX34Wb9syE32/G6UPYHuyHZWNC/iXsUeYP755bA1Iu/8IHmODD+I4fe5G fhq8rwPLOw3KLMN0DlqYtjMR4zjzeKj0Z/QZ12ZoN0vTuGocy3QvjYQRvmY= -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:07 2026 by rpki-client