$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb9a3b0-5515-498a-a8b7-18d25fe04f6d.roa File: bbb9a3b0-5515-498a-a8b7-18d25fe04f6d.roa (raw, json) Hash identifier: HSbLY2bJuAEfxHncSmh0jugfKaRook0yMuyUJPGq8Tg= Subject key identifier: 5E:47:8A:8D:72:50:EE:52:5C:6C:B4:4C:E9:F6:42:E5:52:C5:2A:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6C332E430076FEAC1DD95D81652F1B8960997F45 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb9a3b0-5515-498a-a8b7-18d25fe04f6d.roa Signing time: Tue 12 May 2026 01:10:09 +0000 ROA not before: Tue 12 May 2026 01:10:09 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:33:2e:43:00:76:fe:ac:1d:d9:5d:81:65:2f:1b:89:60:99:7f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:10:09 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=145402b28072cd216f041cbea2ad7ec57dc7c5a4ec61eb417012394d67bff3dd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:73:f1:6e:2c:4a:7c:84:a4:e8:99:71:6f: c3:d5:e5:3c:47:b3:e9:7e:c1:81:18:2f:12:05:64: e1:4c:d8:72:11:15:16:91:32:98:1e:a4:f6:6a:60: af:3c:eb:49:81:dd:75:c0:ba:32:f7:64:c4:fc:4c: ad:5f:5d:a9:1a:97:93:ea:78:9f:2b:ca:93:3b:2c: 8a:03:45:20:4c:8b:bf:fe:0a:aa:ff:fc:fb:b5:21: 33:40:83:c7:3d:fa:64:60:2c:07:7b:16:c5:b4:c9: 51:1e:30:22:38:10:ca:5e:89:83:c2:f5:0b:73:f7: a0:f8:bc:1b:13:ef:40:e5:43:af:a0:03:b9:48:12: 6e:6b:b4:f3:ad:19:13:d7:57:5f:d9:b6:d9:c4:93: 8f:e9:9e:c5:2c:df:92:ad:57:0b:4f:b2:95:41:d5: 1f:9d:89:15:4c:19:d3:07:d0:b9:eb:52:f0:a0:6b: 67:14:f2:0a:1c:6d:ee:5b:77:c3:45:1f:c2:a6:73: e1:38:20:0a:e2:59:99:c6:1f:63:6c:04:cb:ea:ee: 88:d5:3d:06:37:e5:c5:7c:74:23:22:2b:20:6e:7e: bc:b5:d8:9b:3d:a3:fe:b6:c4:67:03:d0:b1:8d:87: 48:8d:93:69:06:1a:84:8d:a9:71:a3:75:9d:49:d4: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:47:8A:8D:72:50:EE:52:5C:6C:B4:4C:E9:F6:42:E5:52:C5:2A:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb9a3b0-5515-498a-a8b7-18d25fe04f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.128.0/24 Signature Algorithm: sha256WithRSAEncryption c2:f0:91:6d:84:2e:9d:d2:05:14:a0:9d:69:4d:71:3b:57:45: 68:87:a1:ec:23:35:c2:b3:33:e2:7a:c3:d2:8a:83:5a:6a:5a: 84:63:11:0c:38:6f:06:0f:78:61:3a:44:62:1a:88:c7:a9:e0: cd:ab:db:99:70:86:54:c9:70:5b:88:b2:f7:de:45:cf:7f:a9: b4:f5:70:3f:98:c9:cd:2c:6d:fb:13:72:67:b0:a6:78:83:d6: 9b:e2:2d:bd:ed:be:e3:45:f3:95:a9:f2:6d:15:cf:c2:18:18: 29:92:4d:f2:6e:11:1c:21:c2:17:e5:20:b9:cc:e2:fc:df:ab: a8:cb:df:9a:5e:6b:fb:28:5a:06:49:f4:6f:75:47:11:9f:4a: d0:ed:84:2b:5d:16:62:24:e2:cd:7b:a9:7e:28:3e:37:9d:8f: fa:6a:fe:8d:b4:ce:21:1f:43:cf:d4:c2:40:8f:56:53:bb:c9: f6:78:3e:8b:1f:09:5f:27:de:84:07:d1:28:33:65:10:42:53: f9:72:4e:37:84:78:66:dd:92:6b:1c:ed:db:9b:7b:58:70:ed: f0:db:30:51:db:cf:0e:d4:e5:c3:25:af:f2:9d:d6:08:f4:eb: af:43:e4:5a:7f:f7:8c:5a:fa:38:5a:72:e8:c4:0e:b8:58:09: 9c:14:63:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbDMuQwB2/qwd2V2BZS8biWCZf0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDExMDA5WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDU0MDJiMjgwNzJjZDIxNmYwNDFjYmVhMmFkN2VjNTdk YzdjNWE0ZWM2MWViNDE3MDEyMzk0ZDY3YmZmM2RkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsnXPxbixKfISk6Jlxb8PV5TxHs+l+wYEYLxIFZOFM2HIR FRaRMpgepPZqYK8860mB3XXAujL3ZMT8TK1fXakal5PqeJ8rypM7LIoDRSBMi7/+ Cqr//Pu1ITNAg8c9+mRgLAd7FsW0yVEeMCI4EMpeiYPC9Qtz96D4vBsT70DlQ6+g A7lIEm5rtPOtGRPXV1/ZttnEk4/pnsUs35KtVwtPspVB1R+diRVMGdMH0LnrUvCg a2cU8gocbe5bd8NFH8Kmc+E4IAriWZnGH2NsBMvq7ojVPQY35cV8dCMiKyBufry1 2Js9o/62xGcD0LGNh0iNk2kGGoSNqXGjdZ1J1MxjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXkeKjXJQ7lJcbLRM6fZC5VLFKg4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiYjlhM2IwLTU1MTUtNDk4YS1hOGI3LTE4ZDI1ZmUwNGY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsIAwDQYJKoZIhvcNAQELBQADggEBAMLwkW2ELp3SBRSgnWlNcTtXRWiH oewjNcKzM+J6w9KKg1pqWoRjEQw4bwYPeGE6RGIaiMep4M2r25lwhlTJcFuIsvfe Rc9/qbT1cD+Yyc0sbfsTcmewpniD1pviLb3tvuNF85Wp8m0Vz8IYGCmSTfJuERwh whflILnM4vzfq6jL35pea/soWgZJ9G91RxGfStDthCtdFmIk4s17qX4oPjedj/pq /o20ziEfQ8/UwkCPVlO7yfZ4PosfCV8n3oQH0SgzZRBCU/lyTjeEeGbdkmsc7dub e1hw7fDbMFHbzw7U5cMlr/Kd1gj0669D5Fp/94xa+jhacujEDrhYCZwUY80= -----END CERTIFICATE-----Generated at Tue May 12 21:59:15 2026 by rpki-client