$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da7b25fd-98db-48f9-b842-f5cfa4155d9d.roa File: da7b25fd-98db-48f9-b842-f5cfa4155d9d.roa (raw, json) Hash identifier: GsZ2DSL0D7j1bKHU7igaJbM9OL65sxAoZ7J5gQVAsgU= Subject key identifier: 95:AF:5C:E0:AB:52:40:9C:46:C4:99:5C:E6:D8:5F:5D:62:05:9D:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F96CFB6D7B971A26CE6296804D458A2C400E9D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da7b25fd-98db-48f9-b842-f5cfa4155d9d.roa Signing time: Tue 12 May 2026 01:20:11 +0000 ROA not before: Tue 12 May 2026 01:20:11 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:96:cf:b6:d7:b9:71:a2:6c:e6:29:68:04:d4:58:a2:c4:00:e9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:20:11 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=c7da19a0a8129fdfabc18f808f3abf68a16623919189aa8708efa0077fb89ffa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a5:d7:84:d6:86:8e:e6:f1:8f:fd:a5:36:1a: 99:1d:da:9a:4d:84:50:2b:b4:15:94:96:9b:d9:5d: 8f:4a:cb:96:a4:35:88:2b:d1:f9:59:02:61:aa:82: ab:ac:2d:9c:fa:7e:fa:e0:fb:d1:2b:59:5e:d0:42: bb:65:a4:23:78:55:8b:7a:3c:dc:7b:7f:32:aa:f6: 45:6a:ae:7b:99:a9:43:6b:2d:b4:39:b5:f3:8e:ca: 98:61:a2:d6:34:f2:94:8f:93:4f:80:f2:2d:5b:31: be:96:ab:4a:0e:96:36:ff:ba:57:02:bc:f2:39:74: 59:6b:72:10:af:46:b3:9e:bb:fd:bf:66:9e:29:bb: 28:fc:05:90:42:3c:2f:42:07:8c:c7:94:dd:91:1e: c9:39:9c:14:06:aa:8e:d0:41:7b:00:da:8c:f6:a4: 4a:10:21:d6:2a:a2:22:1d:da:34:3b:39:e7:98:c3: a8:09:2c:20:3e:a4:43:c1:ee:eb:ed:66:63:8c:e0: 45:b1:91:e0:ad:83:46:ad:bb:9a:60:67:64:5e:1f: fc:2d:8a:fa:4b:d8:20:8f:68:d4:8a:b6:21:b4:4d: db:6f:5e:f0:b4:ce:1c:53:41:ac:ed:d6:3d:da:13: 3e:c5:12:65:11:ec:c3:28:80:cd:4e:7c:dd:76:db: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:5C:E0:AB:52:40:9C:46:C4:99:5C:E6:D8:5F:5D:62:05:9D:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da7b25fd-98db-48f9-b842-f5cfa4155d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.179.0/24 Signature Algorithm: sha256WithRSAEncryption 20:64:8c:69:cc:b3:65:b8:a3:21:a3:f3:9a:23:9c:90:c1:50: 66:0f:13:83:3d:02:28:2e:dd:de:94:73:e3:55:92:a9:9b:4a: c9:c6:e9:91:21:61:1d:de:71:ea:5b:46:56:19:95:1c:3a:f6: fc:26:da:1c:b3:82:02:94:c3:87:51:d6:73:4e:30:32:89:76: c0:be:09:30:69:55:b4:7f:f8:f9:3e:12:59:27:8c:e6:f8:5c: 06:a3:31:45:8b:70:62:a0:d6:fd:77:df:1c:8c:59:87:a5:01: 69:6e:cd:4f:33:e5:6f:48:a2:96:84:ab:5f:e2:0d:07:51:49: ed:7c:f2:08:c4:ce:da:c9:c4:b2:f1:1f:36:79:bc:cc:ed:de: 03:a2:be:b6:a6:ef:76:83:06:fe:68:16:9c:1f:26:3f:77:e4: ef:cb:a7:ff:8f:76:ab:8d:a8:05:53:55:fb:be:e2:56:9a:88: 9a:53:77:0a:b5:d0:23:bf:21:83:be:0d:32:1e:8f:52:f7:c7: 5b:7c:83:5f:d3:f9:b7:33:8b:77:81:44:f3:e9:d6:e4:9b:d1: ae:fc:d9:1c:62:90:db:a6:f7:00:c0:c3:71:3a:45:3d:67:a5: 0d:a3:51:78:2b:07:9b:92:c6:7d:26:e0:2f:f8:c7:0b:33:13: d9:a3:85:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT5bPtte5caJs5iloBNRYosQA6dgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEyMDExWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2RhMTlhMGE4MTI5ZmRmYWJjMThmODA4ZjNhYmY2OGEx NjYyMzkxOTE4OWFhODcwOGVmYTAwNzdmYjg5ZmZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXpdeE1oaO5vGP/aU2Gpkd2ppNhFArtBWUlpvZXY9Ky5ak NYgr0flZAmGqgqusLZz6fvrg+9ErWV7QQrtlpCN4VYt6PNx7fzKq9kVqrnuZqUNr LbQ5tfOOyphhotY08pSPk0+A8i1bMb6Wq0oOljb/ulcCvPI5dFlrchCvRrOeu/2/ Zp4puyj8BZBCPC9CB4zHlN2RHsk5nBQGqo7QQXsA2oz2pEoQIdYqoiId2jQ7OeeY w6gJLCA+pEPB7uvtZmOM4EWxkeCtg0atu5pgZ2ReH/wtivpL2CCPaNSKtiG0Tdtv XvC0zhxTQazt1j3aEz7FEmUR7MMogM1OfN1222e5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUla9c4KtSQJxGxJlc5thfXWIFndYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhN2IyNWZkLTk4ZGItNDhmOS1iODQyLWY1Y2ZhNDE1NWQ5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsLMwDQYJKoZIhvcNAQELBQADggEBACBkjGnMs2W4oyGj85ojnJDBUGYP E4M9Aigu3d6Uc+NVkqmbSsnG6ZEhYR3ecepbRlYZlRw69vwm2hyzggKUw4dR1nNO MDKJdsC+CTBpVbR/+Pk+ElknjOb4XAajMUWLcGKg1v133xyMWYelAWluzU8z5W9I opaEq1/iDQdRSe188gjEztrJxLLxHzZ5vMzt3gOivram73aDBv5oFpwfJj935O/L p/+PdquNqAVTVfu+4laaiJpTdwq10CO/IYO+DTIej1L3x1t8g1/T+bczi3eBRPPp 1uSb0a782RxikNum9wDAw3E6RT1npQ2jUXgrB5uSxn0m4C/4xwszE9mjhXU= -----END CERTIFICATE-----Generated at Sat Jun 13 14:22:08 2026 by rpki-client