$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ade0c3cf-e1a7-4f55-af83-96aec7cee6f7.roa File: ade0c3cf-e1a7-4f55-af83-96aec7cee6f7.roa (raw, json) Hash identifier: x2bQP1peQO+RRw3pZB3rpE9em/+ILQZcNKKS3VhkXpU= Subject key identifier: D3:19:5C:85:98:23:1E:C9:B8:7A:F4:E6:4C:5A:52:47:57:B1:13:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37E359DF8650A95533D07B3B415AA5145FE58B0E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ade0c3cf-e1a7-4f55-af83-96aec7cee6f7.roa Signing time: Tue 12 May 2026 01:20:50 +0000 ROA not before: Tue 12 May 2026 01:20:50 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e3:59:df:86:50:a9:55:33:d0:7b:3b:41:5a:a5:14:5f:e5:8b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:20:50 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=b7c70939c2523249a1bb0638530cac91b350d6f0d2b64c70ce127f33e99953d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:65:29:d1:98:08:9e:a4:b7:b2:c9:36:ab: 01:ff:b3:40:17:76:d5:06:78:4d:eb:e2:45:d3:c6: 92:07:d7:86:77:c5:8d:65:7c:e3:85:32:1f:c6:a8: fb:47:ff:1e:da:6b:58:11:80:02:d4:7c:30:ea:74: 2c:fc:b8:7e:85:ee:03:6a:bc:1b:cb:e9:03:d7:fa: b6:51:41:a3:8e:98:46:fd:21:de:19:c8:98:9c:7e: b0:b1:99:d5:57:be:76:41:a1:fa:62:84:f2:cc:30: 12:55:99:02:e5:92:54:e4:6c:35:8a:f3:3e:08:45: 9e:87:88:ba:87:1d:8f:36:c3:9d:b2:dc:ce:6e:96: 7a:d9:02:f7:91:03:da:f8:71:eb:0a:49:68:db:7d: 7f:a6:b1:32:1d:64:45:b0:8b:ed:39:50:cf:97:c3: 1a:83:4b:b3:cb:e6:3c:50:03:8e:94:37:4a:69:d3: 93:a1:2c:f8:68:8d:ad:78:c8:87:5c:0c:02:a5:28: 44:c2:2c:57:a4:9b:29:82:25:1e:20:d7:b7:73:d5: f2:a0:2a:9a:62:37:68:f0:79:74:f1:12:46:e3:19: 46:56:e8:22:b3:bd:a5:76:11:05:d3:58:e6:d3:bc: c7:c7:51:aa:90:7a:c5:b5:a6:5d:89:59:f9:21:e0: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:19:5C:85:98:23:1E:C9:B8:7A:F4:E6:4C:5A:52:47:57:B1:13:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ade0c3cf-e1a7-4f55-af83-96aec7cee6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.214.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:3b:28:f6:b7:da:f6:99:9f:2b:d9:c7:20:3b:67:f8:48:c3: ad:18:f4:94:a6:8b:db:06:f4:95:99:ff:41:7a:66:5a:c4:a9: d0:0b:ce:e4:9e:ed:94:fe:ff:13:fe:ec:17:64:4b:bd:a2:76: 7c:78:35:fa:6e:5f:c3:66:75:31:9c:6c:91:42:1b:5c:a8:81: 73:86:35:0d:59:46:26:81:32:3c:1d:69:39:92:84:bd:3d:be: 4f:e6:88:88:bf:4d:dd:01:0d:86:dc:30:ef:be:12:32:87:36: 95:97:85:b5:41:56:c8:18:78:aa:df:d4:bc:c7:d4:be:42:f3: f6:fe:e9:d4:10:d0:07:7d:a3:04:8c:9f:7e:69:2b:bb:b7:c3: d8:03:c7:67:a8:1f:41:ca:6d:3a:8a:25:96:51:e3:50:5c:5e: 21:fd:cf:94:d5:c9:b9:5a:e7:a3:2e:19:6d:b1:06:a2:43:e3: 6e:d5:00:bf:2b:92:10:34:1e:51:48:5a:bb:27:18:c6:ea:7e: a6:33:d8:1e:02:0e:31:56:13:de:55:19:19:80:94:b0:27:16: ac:13:76:69:dd:91:6c:d6:82:71:da:6b:1c:75:26:8f:6d:96: 6d:2f:9f:00:1c:87:c4:9b:f0:c4:85:de:a7:58:2b:96:10:ad: b5:f0:37:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN+NZ34ZQqVUz0Hs7QVqlFF/liw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEyMDUwWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2M3MDkzOWMyNTIzMjQ5YTFiYjA2Mzg1MzBjYWM5MWIz NTBkNmYwZDJiNjRjNzBjZTEyN2YzM2U5OTk1M2Q4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR+GUp0ZgInqS3ssk2qwH/s0AXdtUGeE3r4kXTxpIH14Z3 xY1lfOOFMh/GqPtH/x7aa1gRgALUfDDqdCz8uH6F7gNqvBvL6QPX+rZRQaOOmEb9 Id4ZyJicfrCxmdVXvnZBofpihPLMMBJVmQLlklTkbDWK8z4IRZ6HiLqHHY82w52y 3M5ulnrZAveRA9r4cesKSWjbfX+msTIdZEWwi+05UM+XwxqDS7PL5jxQA46UN0pp 05OhLPhoja14yIdcDAKlKETCLFekmymCJR4g17dz1fKgKppiN2jweXTxEkbjGUZW 6CKzvaV2EQXTWObTvMfHUaqQesW1pl2JWfkh4AWVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0xlchZgjHsm4evTmTFpSR1exE0cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkZTBjM2NmLWUxYTctNGY1NS1hZjgzLTk2YWVjN2NlZTZmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsNYwDQYJKoZIhvcNAQELBQADggEBAE07KPa32vaZnyvZxyA7Z/hIw60Y 9JSmi9sG9JWZ/0F6ZlrEqdALzuSe7ZT+/xP+7BdkS72idnx4NfpuX8NmdTGcbJFC G1yogXOGNQ1ZRiaBMjwdaTmShL09vk/miIi/Td0BDYbcMO++EjKHNpWXhbVBVsgY eKrf1LzH1L5C8/b+6dQQ0Ad9owSMn35pK7u3w9gDx2eoH0HKbTqKJZZR41BcXiH9 z5TVybla56MuGW2xBqJD427VAL8rkhA0HlFIWrsnGMbqfqYz2B4CDjFWE95VGRmA lLAnFqwTdmndkWzWgnHaaxx1Jo9tlm0vnwAch8Sb8MSF3qdYK5YQrbXwNyY= -----END CERTIFICATE-----Generated at Tue May 12 21:41:39 2026 by rpki-client