$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9940dc82-262d-4754-b3c6-d4ddcd21a9a1.roa File: 9940dc82-262d-4754-b3c6-d4ddcd21a9a1.roa (raw, json) Hash identifier: +fdWmz9NHR0u6K8hGkBMmYjp0vGdA5RmOiO+ICOS2XM= Subject key identifier: 63:8E:78:15:E4:A5:45:C0:23:A3:8D:65:98:95:1A:08:0B:45:76:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 372368782F1E85272207FC1A20922325222179FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9940dc82-262d-4754-b3c6-d4ddcd21a9a1.roa Signing time: Tue 12 May 2026 01:00:09 +0000 ROA not before: Tue 12 May 2026 01:00:09 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:23:68:78:2f:1e:85:27:22:07:fc:1a:20:92:23:25:22:21:79:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:00:09 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=6dd9822365a85a1749a4d62a1d90deed5f31e0167be554839b5ef9c0088316b9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:f9:46:84:23:2d:51:a3:57:10:a5:09:30: f6:5c:e9:ff:d5:59:9d:ea:58:cd:42:c6:1b:26:09: bc:52:05:d3:c1:1b:c6:19:6f:da:b7:62:b3:ca:2f: 22:bb:05:55:e2:91:0f:31:d4:14:58:5c:e2:33:83: 2c:2a:a0:05:ea:2b:23:91:9c:12:eb:3e:40:da:03: fc:05:49:4a:ee:78:6d:70:2d:79:c9:51:84:c4:32: 87:eb:6c:85:ce:67:7f:c4:10:95:f2:2c:fe:6f:f3: 5e:be:c7:6e:0f:ba:e4:d4:be:1d:73:97:e3:ab:e4: bc:af:0b:41:5e:28:80:4a:d3:66:07:cb:de:ca:42: 5c:08:c1:b1:d0:92:07:41:95:45:58:8e:51:d0:1f: d0:56:b5:eb:b6:6b:2e:8b:37:fd:0b:47:34:e7:67: d8:07:ae:60:a1:06:e0:b9:80:af:b7:89:c3:28:e9: d1:62:0c:42:9a:3b:20:d1:93:7f:2e:f2:84:e9:fc: fc:d9:83:7f:9e:82:2f:63:50:0c:27:97:a8:bb:d4: fb:56:1c:0b:9b:cd:25:52:20:fa:b7:d3:ae:18:f1: 67:34:bb:39:86:1f:c3:01:55:74:9f:9d:fd:4a:be: de:aa:35:8e:d5:3e:36:c4:79:06:8e:64:f9:f4:02: 8c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8E:78:15:E4:A5:45:C0:23:A3:8D:65:98:95:1A:08:0B:45:76:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9940dc82-262d-4754-b3c6-d4ddcd21a9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.120.0/24 Signature Algorithm: sha256WithRSAEncryption 68:d9:23:ae:46:ac:7b:fd:2b:85:36:d0:c0:d0:f5:fc:1d:c1: d8:13:ee:52:89:ab:34:35:ca:aa:1a:ee:a6:2e:c2:e8:f2:52: 42:fc:f7:80:2c:30:38:11:d0:fc:fb:67:f8:bc:d3:0d:58:88: 4e:95:7b:e2:46:5c:a0:e4:e5:45:ae:2b:85:87:ce:d0:d4:a9: d9:f5:3b:70:5a:da:95:ee:8d:b0:18:85:cc:29:df:9c:4f:f1: 61:80:41:46:e3:c5:fe:8c:87:c4:49:2d:59:65:ec:fb:fc:ba: 48:59:13:61:87:c2:d8:18:cf:4d:0f:48:5c:86:7e:18:3e:0f: 70:e4:9e:58:74:fa:9c:20:33:ec:1c:9a:32:0b:e3:85:dd:47: 05:d3:61:32:0e:79:a6:41:12:43:11:c7:05:3d:b7:60:b0:46: 0a:45:50:08:ae:d4:bf:8a:8c:9d:10:c1:aa:af:7e:81:c4:ff: 34:70:eb:ba:43:d4:de:ab:58:86:ca:e9:da:8c:11:42:06:6e: e2:15:dd:4b:02:37:78:57:58:41:ca:b6:2d:dd:31:8d:78:04: 90:77:6e:bc:e3:b7:1e:49:10:5f:67:c2:ac:0f:33:f4:93:4c: 20:92:42:e0:7a:19:b2:b2:4c:23:42:57:5f:d2:38:f8:86:02: c4:20:9e:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNyNoeC8ehSciB/waIJIjJSIhef4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEwMDA5WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGQ5ODIyMzY1YTg1YTE3NDlhNGQ2MmExZDkwZGVlZDVm MzFlMDE2N2JlNTU0ODM5YjVlZjljMDA4ODMxNmI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoZflGhCMtUaNXEKUJMPZc6f/VWZ3qWM1CxhsmCbxSBdPB G8YZb9q3YrPKLyK7BVXikQ8x1BRYXOIzgywqoAXqKyORnBLrPkDaA/wFSUrueG1w LXnJUYTEMofrbIXOZ3/EEJXyLP5v816+x24PuuTUvh1zl+Or5LyvC0FeKIBK02YH y97KQlwIwbHQkgdBlUVYjlHQH9BWteu2ay6LN/0LRzTnZ9gHrmChBuC5gK+3icMo 6dFiDEKaOyDRk38u8oTp/PzZg3+egi9jUAwnl6i71PtWHAubzSVSIPq3064Y8Wc0 uzmGH8MBVXSfnf1Kvt6qNY7VPjbEeQaOZPn0AowzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY454FeSlRcAjo41lmJUaCAtFdsAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5NDBkYzgyLTI2MmQtNDc1NC1iM2M2LWQ0ZGRjZDIxYTlhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsHgwDQYJKoZIhvcNAQELBQADggEBAGjZI65GrHv9K4U20MDQ9fwdwdgT 7lKJqzQ1yqoa7qYuwujyUkL894AsMDgR0Pz7Z/i80w1YiE6Ve+JGXKDk5UWuK4WH ztDUqdn1O3Ba2pXujbAYhcwp35xP8WGAQUbjxf6Mh8RJLVll7Pv8ukhZE2GHwtgY z00PSFyGfhg+D3Dknlh0+pwgM+wcmjIL44XdRwXTYTIOeaZBEkMRxwU9t2CwRgpF UAiu1L+KjJ0QwaqvfoHE/zRw67pD1N6rWIbK6dqMEUIGbuIV3UsCN3hXWEHKti3d MY14BJB3brzjtx5JEF9nwqwPM/STTCCSQuB6GbKyTCNCV1/SOPiGAsQgnq4= -----END CERTIFICATE-----Generated at Tue May 12 21:43:48 2026 by rpki-client