$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5d3964e-016a-4ff4-8797-0547a260e2f3.roa File: b5d3964e-016a-4ff4-8797-0547a260e2f3.roa (raw, json) Hash identifier: j6U9PelFw2I5OhUqvL0RyxoP7+Qp2e3UA7AMNRC5G8k= Subject key identifier: AD:A5:8D:5B:86:D6:B3:02:F2:3D:29:73:59:D7:B9:50:CC:EF:96:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F9AE69A2ACB31DFCCCD6EAC8A3D7024F8FBEC84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5d3964e-016a-4ff4-8797-0547a260e2f3.roa Signing time: Tue 12 May 2026 01:11:42 +0000 ROA not before: Tue 12 May 2026 01:11:42 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9a:e6:9a:2a:cb:31:df:cc:cd:6e:ac:8a:3d:70:24:f8:fb:ec:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:11:42 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=76321e446a87834d4a97a62aabce1adc7d9f644feee038e2b7dd476c23210bab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:44:79:f1:c2:71:ad:e2:07:f8:76:7a:cd: 25:f3:45:39:47:c7:14:02:ea:ef:69:29:ee:50:f3: a3:18:0f:64:a3:8a:aa:54:bd:a7:de:1b:df:70:06: d2:0d:a1:2c:47:58:d2:1a:44:36:81:41:a7:1a:ff: 3e:e2:73:fe:f5:c0:37:22:7d:19:d3:b8:86:ff:ff: 63:ed:eb:d9:0e:0e:ca:fd:70:0d:fb:f7:79:63:f6: 17:8a:44:f9:6d:6c:70:e0:c6:0f:74:0e:ef:0f:7d: dd:c5:6c:85:ff:12:0c:6f:1e:87:ce:58:20:82:15: 26:0b:f4:11:f2:1b:ef:8f:60:90:be:2e:81:51:b0: c8:33:72:d4:79:ff:3d:a2:34:81:63:61:bd:46:23: 71:b5:a0:d7:3e:43:73:e3:f7:37:db:28:de:c2:c0: 81:98:c7:05:5b:93:d5:e8:e1:5b:cc:b9:fb:e7:ae: 29:70:1e:e9:6b:58:9b:fa:73:ce:11:17:d9:16:1b: 4e:d3:dd:20:46:cf:c7:16:97:a2:6b:6a:6d:8e:2f: ea:d0:cc:99:cd:d7:d4:d5:30:8e:d8:c4:2b:2d:1b: 11:f2:f9:73:97:df:f2:c8:d9:84:56:39:1c:e8:61: a5:e9:d4:17:3a:c3:07:6b:70:9b:53:28:d8:42:23: 3e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A5:8D:5B:86:D6:B3:02:F2:3D:29:73:59:D7:B9:50:CC:EF:96:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5d3964e-016a-4ff4-8797-0547a260e2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.217.0/24 Signature Algorithm: sha256WithRSAEncryption 52:56:5b:46:a8:e6:bf:7b:c7:38:f6:98:ed:8e:72:28:1e:48: 7f:bb:cc:93:f5:af:25:3c:3c:22:2f:11:3e:7d:8f:4b:2d:1d: 13:42:3e:e5:c6:c4:e3:2b:47:59:a0:59:6b:ba:ea:6a:d9:bc: 8f:22:a3:e2:12:c9:13:ae:c1:f6:0e:d1:20:79:1b:70:7e:49: cb:ef:55:d8:f2:f0:c6:dc:d2:86:66:da:b5:b3:d5:ae:c2:c8: d7:c0:5d:b7:ea:f2:e4:f7:6a:fb:21:dc:57:dc:26:3d:1b:f6: 0d:7f:67:4b:32:74:db:23:18:44:ad:83:a0:ab:32:b3:e1:ef: b4:c8:52:79:24:90:d4:c1:91:24:1f:37:8f:c2:ec:71:11:e2: fa:b2:a5:67:09:1b:07:60:72:8c:50:47:e9:dc:76:d8:de:bb: a0:e4:de:dc:cd:0b:9d:26:c2:bc:85:a6:4a:ef:16:45:33:ca: 7e:4a:c8:d4:57:b9:19:66:cd:20:53:cd:6d:3b:24:cd:8c:bc: 09:ba:38:24:f5:ea:a2:6e:e9:29:36:03:53:4a:73:71:5d:ec: 09:f7:23:ea:78:03:b5:4f:69:b3:9a:83:54:27:b0:68:cf:ef: 9e:81:b9:97:54:51:a6:30:35:1d:06:24:0e:90:4b:59:b0:51: 34:74:88:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL5rmmirLMd/MzW6sij1wJPj77IQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDExMTQyWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjMyMWU0NDZhODc4MzRkNGE5N2E2MmFhYmNlMWFkYzdk OWY2NDRmZWVlMDM4ZTJiN2RkNDc2YzIzMjEwYmFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkLUR58cJxreIH+HZ6zSXzRTlHxxQC6u9pKe5Q86MYD2Sj iqpUvafeG99wBtINoSxHWNIaRDaBQaca/z7ic/71wDcifRnTuIb//2Pt69kODsr9 cA3793lj9heKRPltbHDgxg90Du8Pfd3FbIX/EgxvHofOWCCCFSYL9BHyG++PYJC+ LoFRsMgzctR5/z2iNIFjYb1GI3G1oNc+Q3Pj9zfbKN7CwIGYxwVbk9Xo4VvMufvn rilwHulrWJv6c84RF9kWG07T3SBGz8cWl6Jram2OL+rQzJnN19TVMI7YxCstGxHy +XOX3/LI2YRWORzoYaXp1Bc6wwdrcJtTKNhCIz6RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUraWNW4bWswLyPSlzWde5UMzvlmYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1ZDM5NjRlLTAxNmEtNGZmNC04Nzk3LTA1NDdhMjYwZTJmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsNkwDQYJKoZIhvcNAQELBQADggEBAFJWW0ao5r97xzj2mO2OcigeSH+7 zJP1ryU8PCIvET59j0stHRNCPuXGxOMrR1mgWWu66mrZvI8io+ISyROuwfYO0SB5 G3B+ScvvVdjy8Mbc0oZm2rWz1a7CyNfAXbfq8uT3avsh3FfcJj0b9g1/Z0sydNsj GEStg6CrMrPh77TIUnkkkNTBkSQfN4/C7HER4vqypWcJGwdgcoxQR+ncdtjeu6Dk 3tzNC50mwryFpkrvFkUzyn5KyNRXuRlmzSBTzW07JM2MvAm6OCT16qJu6Sk2A1NK c3Fd7An3I+p4A7VPabOag1QnsGjP756BuZdUUaYwNR0GJA6QS1mwUTR0iLM= -----END CERTIFICATE-----Generated at Tue May 12 21:50:58 2026 by rpki-client