$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6b471b3-52b0-4db4-a944-a55e6efaed74.roa File: a6b471b3-52b0-4db4-a944-a55e6efaed74.roa (raw, json) Hash identifier: pkzxh3Y4AaHU+Twk1jhTUGc2zHtqJKpZ+6ErtvC/Cdc= Subject key identifier: 11:7D:FE:6A:5B:40:A7:7E:20:B6:69:27:50:16:D8:5A:C2:29:BB:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02818B2C99CD219AF46E790678C16B80D5F1B23F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6b471b3-52b0-4db4-a944-a55e6efaed74.roa Signing time: Thu 17 Sep 2026 00:00:04 +0000 ROA not before: Thu 17 Sep 2026 00:00:04 +0000 ROA not after: Wed 16 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:81:8b:2c:99:cd:21:9a:f4:6e:79:06:78:c1:6b:80:d5:f1:b2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 17 00:00:04 2026 GMT Not After : Dec 16 23:59:59 2026 GMT Subject: serialNumber=b7fbd741042c9382d3a7534b353b4f966baec52edc291a8de82f4c8320315417, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:a2:5c:e3:b6:a9:06:c6:1f:db:0d:84:b0: c4:42:97:60:6f:a3:8f:15:c8:74:f4:4c:f3:29:08: 70:8b:9d:25:7b:02:de:ec:3c:11:f5:ff:44:14:a2: b5:63:fc:20:0f:e2:a1:e7:eb:e2:3e:b5:cf:4e:da: fd:9c:3e:92:8d:32:b2:fc:d7:45:0b:79:f8:6d:29: 82:e7:d9:da:aa:b5:78:32:3e:dc:3c:f6:c3:7e:9e: f9:64:ce:1f:fc:8a:39:32:f2:ea:fb:c0:bd:f2:95: 5e:b1:c9:ff:59:99:60:59:a9:d6:db:6c:e4:b4:1b: b0:61:65:da:9a:f4:62:6c:de:11:73:a7:6d:91:6b: 23:f4:a8:08:f3:c1:e4:b4:d3:c9:dd:0b:2d:61:70: a1:61:a2:6e:05:79:7b:98:1c:47:d4:54:93:0d:8b: ca:54:ae:48:6a:36:9b:29:7d:ea:d2:b3:29:08:30: 66:6e:fc:a3:4a:d5:9a:2c:0c:18:4a:89:3b:f8:85: 5e:db:2b:9a:6d:84:e3:1c:69:50:2c:55:83:d4:34: 5d:16:a8:68:db:c1:a1:9d:2e:88:9c:b9:ec:16:64: 5c:3e:01:a9:24:1a:7c:6d:59:41:ab:e5:79:b3:7f: 68:1a:b4:5a:d2:21:17:0c:ae:27:c8:e4:4c:7e:1c: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7D:FE:6A:5B:40:A7:7E:20:B6:69:27:50:16:D8:5A:C2:29:BB:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6b471b3-52b0-4db4-a944-a55e6efaed74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.38.0/24 Signature Algorithm: sha256WithRSAEncryption a4:fd:71:15:26:9a:19:95:f3:8b:07:df:2d:ba:f1:c2:2b:9a: b5:b1:15:32:95:1e:3c:40:bf:f5:e6:69:aa:0e:1d:a9:d7:6f: d8:a5:5f:de:ac:96:59:75:bf:dd:41:f6:04:fe:b9:62:42:fb: 8a:d6:0e:5f:98:6e:fc:50:46:d2:e1:22:ba:9b:2a:8d:54:3b: 14:fa:3c:d8:35:be:7c:2e:88:b6:c0:68:f4:b6:ef:e2:4c:ad: ff:10:f5:5f:de:74:9c:e7:5e:82:13:b5:8c:1d:6f:62:bb:d5: 0b:86:da:b5:81:fb:26:23:f5:0c:5d:c4:45:d7:ad:f0:7a:bc: 6b:3e:ea:ff:27:4e:52:2f:9b:31:f5:60:a6:30:0a:52:20:d2: 3e:09:f0:7d:09:75:55:6e:15:ae:39:9a:77:8f:4e:d9:90:ac: 0a:c7:b1:46:c2:c9:39:6a:aa:11:e9:34:ef:c4:d9:53:3b:4c: 7b:2a:49:be:94:3d:d5:5a:c5:b4:40:c0:98:4b:a6:1d:92:5d: df:26:e1:12:09:82:0e:de:0e:21:9c:6a:86:e1:d9:22:c9:ea: 50:93:9d:69:e5:32:d1:e0:6f:90:be:76:4a:d4:78:79:a6:65: 0d:54:d4:37:79:cb:10:7e:0f:3f:6c:eb:b5:e8:58:e0:dd:13: 0f:95:50:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAoGLLJnNIZr0bnkGeMFrgNXxsj8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTE3MDAwMDA0WhcNMjYxMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2ZiZDc0MTA0MmM5MzgyZDNhNzUzNGIzNTNiNGY5NjZi YWVjNTJlZGMyOTFhOGRlODJmNGM4MzIwMzE1NDE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvkqJc47apBsYf2w2EsMRCl2Bvo48VyHT0TPMpCHCLnSV7 At7sPBH1/0QUorVj/CAP4qHn6+I+tc9O2v2cPpKNMrL810ULefhtKYLn2dqqtXgy Ptw89sN+nvlkzh/8ijky8ur7wL3ylV6xyf9ZmWBZqdbbbOS0G7BhZdqa9GJs3hFz p22RayP0qAjzweS008ndCy1hcKFhom4FeXuYHEfUVJMNi8pUrkhqNpspferSsykI MGZu/KNK1ZosDBhKiTv4hV7bK5pthOMcaVAsVYPUNF0WqGjbwaGdLoicuewWZFw+ AakkGnxtWUGr5Xmzf2gatFrSIRcMrifI5Ex+HK43AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEX3+altAp34gtmknUBbYWsIpuxMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2YjQ3MWIzLTUyYjAtNGRiNC1hOTQ0LWE1NWU2ZWZhZWQ3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsCYwDQYJKoZIhvcNAQELBQADggEBAKT9cRUmmhmV84sH3y268cIrmrWx FTKVHjxAv/XmaaoOHanXb9ilX96slll1v91B9gT+uWJC+4rWDl+YbvxQRtLhIrqb Ko1UOxT6PNg1vnwuiLbAaPS27+JMrf8Q9V/edJznXoITtYwdb2K71QuG2rWB+yYj 9QxdxEXXrfB6vGs+6v8nTlIvmzH1YKYwClIg0j4J8H0JdVVuFa45mnePTtmQrArH sUbCyTlqqhHpNO/E2VM7THsqSb6UPdVaxbRAwJhLph2SXd8m4RIJgg7eDiGcaobh 2SLJ6lCTnWnlMtHgb5C+dkrUeHmmZQ1U1Dd5yxB+Dz9s67XoWODdEw+VUAU= -----END CERTIFICATE-----Generated at Sun Sep 20 19:09:24 2026 by rpki-client