$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f78896e-9c27-4154-9a25-9064134c796a.roa File: 2f78896e-9c27-4154-9a25-9064134c796a.roa (raw, json) Hash identifier: 2/yKdIYGz6D8nR4WBVFJLYHANGt64PZ5h+Sz3EOqEHs= Subject key identifier: 3D:31:22:56:37:44:75:D4:01:C3:F0:58:A9:E5:2A:39:B1:E6:F0:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71810F1B1F002D8B84108D7CA963ACA3C713847A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f78896e-9c27-4154-9a25-9064134c796a.roa Signing time: Tue 12 May 2026 01:31:13 +0000 ROA not before: Tue 12 May 2026 01:31:13 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:81:0f:1b:1f:00:2d:8b:84:10:8d:7c:a9:63:ac:a3:c7:13:84:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:31:13 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=e9c0c1d0c3571b86526b19183eb5d2431044bc20b2d792dfa375f6ab21abcb68, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:15:15:58:44:bc:49:33:b1:57:65:df:4c: 45:dd:be:4a:3f:c5:fc:d6:bd:92:8d:f8:00:cb:88: 25:93:ce:27:2b:9d:00:bf:5a:7a:2d:f1:39:d0:5e: 3b:d0:52:29:fd:61:32:a6:82:3b:22:27:e6:7d:21: 43:6d:f4:09:27:df:2b:f5:7b:a9:05:be:02:da:59: 7c:e0:4c:8b:e0:8d:2d:64:fd:72:7b:18:31:69:04: 81:e9:c7:e9:c9:2c:f2:43:0a:eb:b3:18:57:67:f4: 68:c4:b9:55:ff:9a:4f:8d:06:62:8b:b2:eb:c7:f6: a6:04:45:92:ab:71:4b:94:9b:74:52:8a:ad:7e:ea: 52:39:d1:53:4d:87:00:17:66:26:f1:c0:a5:00:00: 53:5e:49:23:f4:30:61:21:b8:09:2e:f3:d7:fe:4f: 8d:8b:cd:6a:76:ed:75:39:93:85:01:ff:5c:1e:9f: d9:10:b0:64:de:fe:6d:71:4f:45:c3:9d:2f:16:b2: 53:4c:8d:c6:e2:d9:c2:42:25:4d:64:22:ba:49:ae: 3f:a6:0c:cc:a4:51:90:57:79:4f:da:4c:6f:7e:11: 0b:fb:a1:89:27:0f:e5:5e:6a:f5:86:83:77:09:9a: e0:fe:79:ad:e9:27:46:fe:74:2c:c8:56:56:c4:40: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:22:56:37:44:75:D4:01:C3:F0:58:A9:E5:2A:39:B1:E6:F0:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f78896e-9c27-4154-9a25-9064134c796a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.255.0/24 Signature Algorithm: sha256WithRSAEncryption a2:ad:0b:14:0c:91:a2:e7:23:94:c6:e2:8d:22:96:3f:d9:8a: b6:16:7d:cd:22:94:0d:6f:f5:3e:1f:e8:bc:36:83:61:91:34: 51:2f:7e:2e:fe:7d:de:98:41:ae:fc:65:41:b6:14:22:51:90: 7e:bb:04:06:bb:6f:61:da:4a:7a:83:82:13:28:e3:15:64:11: 3a:80:ce:e4:ba:83:8c:8b:2c:2e:16:3a:0e:1f:2e:cf:f1:b2: 4e:3e:2c:55:8c:83:66:e6:c1:30:b9:96:1a:1b:5d:41:a5:29: 0b:be:df:b2:52:18:e5:84:d2:e7:19:61:c2:e2:af:6e:0f:5f: 39:56:1a:00:be:43:ce:68:9c:59:b7:d4:cc:85:02:4a:93:3d: b8:fe:bd:88:a0:7a:cf:19:ab:9a:cf:1a:19:6a:f8:68:92:60: 72:c3:4a:03:1f:f8:e9:5d:3b:31:1f:34:d9:93:24:58:0c:c3: e5:2d:29:ac:6f:2d:fe:f8:79:7d:39:8a:36:8f:3f:58:44:79: 98:6a:ab:63:06:c8:1f:04:ee:91:24:ed:99:3d:f9:6e:ba:e8: 8d:5d:69:ea:9e:58:e1:ca:d3:19:8e:b4:23:4f:ff:8e:8b:ed: d0:fa:33:a2:fc:f8:3a:16:76:e4:65:de:3c:31:4f:76:70:34: 8b:11:68:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcYEPGx8ALYuEEI18qWOso8cThHowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEzMTEzWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOWMwYzFkMGMzNTcxYjg2NTI2YjE5MTgzZWI1ZDI0MzEw NDRiYzIwYjJkNzkyZGZhMzc1ZjZhYjIxYWJjYjY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzCBUVWES8STOxV2XfTEXdvko/xfzWvZKN+ADLiCWTzicr nQC/Wnot8TnQXjvQUin9YTKmgjsiJ+Z9IUNt9Akn3yv1e6kFvgLaWXzgTIvgjS1k /XJ7GDFpBIHpx+nJLPJDCuuzGFdn9GjEuVX/mk+NBmKLsuvH9qYERZKrcUuUm3RS iq1+6lI50VNNhwAXZibxwKUAAFNeSSP0MGEhuAku89f+T42LzWp27XU5k4UB/1we n9kQsGTe/m1xT0XDnS8WslNMjcbi2cJCJU1kIrpJrj+mDMykUZBXeU/aTG9+EQv7 oYknD+VeavWGg3cJmuD+ea3pJ0b+dCzIVlbEQF0rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPTEiVjdEddQBw/BYqeUqObHm8MQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmNzg4OTZlLTljMjctNDE1NC05YTI1LTkwNjQxMzRjNzk2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsP8wDQYJKoZIhvcNAQELBQADggEBAKKtCxQMkaLnI5TG4o0ilj/ZirYW fc0ilA1v9T4f6Lw2g2GRNFEvfi7+fd6YQa78ZUG2FCJRkH67BAa7b2HaSnqDghMo 4xVkETqAzuS6g4yLLC4WOg4fLs/xsk4+LFWMg2bmwTC5lhobXUGlKQu+37JSGOWE 0ucZYcLir24PXzlWGgC+Q85onFm31MyFAkqTPbj+vYiges8Zq5rPGhlq+GiSYHLD SgMf+OldOzEfNNmTJFgMw+UtKaxvLf74eX05ijaPP1hEeZhqq2MGyB8E7pEk7Zk9 +W666I1daeqeWOHK0xmOtCNP/46L7dD6M6L8+DoWduRl3jwxT3ZwNIsRaMg= -----END CERTIFICATE-----Generated at Wed May 13 03:38:29 2026 by rpki-client