$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf75230d-996e-4940-9d89-4ea903cba1d0.roa File: cf75230d-996e-4940-9d89-4ea903cba1d0.roa (raw, json) Hash identifier: iOsm35Z7gYuO1OETcNTGBU7ESIH/FA/t8FC5ZSWIzC8= Subject key identifier: D1:B5:9A:14:73:98:67:38:9E:E8:BF:54:DB:43:1E:8C:12:14:5A:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 427CDE40D693F95BFD33F9C1A39A463CA06F0DDE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf75230d-996e-4940-9d89-4ea903cba1d0.roa Signing time: Tue 12 May 2026 01:20:52 +0000 ROA not before: Tue 12 May 2026 01:20:52 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7c:de:40:d6:93:f9:5b:fd:33:f9:c1:a3:9a:46:3c:a0:6f:0d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:20:52 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=1366dc1e0b78aed99e0680710f26e189168c562509ff9424838d184fe4106aca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5b:98:67:3d:69:aa:e2:b1:a4:b0:ae:e5:70: e7:6e:f4:6c:d3:4f:4a:3c:ad:9f:7a:34:92:c5:8b: 6f:5a:22:e3:8d:8c:ef:ca:35:d4:88:b9:6d:2a:8f: dd:9f:94:af:67:e5:98:4b:7c:8c:a1:a8:a9:a4:23: 66:c1:32:03:3b:f9:e6:d1:90:95:23:2c:4e:95:eb: 39:ce:45:e6:66:ed:97:37:bb:dd:32:c0:bf:43:96: c3:1c:43:9f:d9:19:e6:0f:1a:88:0a:89:b4:b8:a2: 65:ec:44:5c:1e:eb:e0:0f:92:a4:02:01:1e:d5:46: 3e:c2:49:9d:a4:02:b0:1c:03:41:fb:98:b3:93:00: ae:9f:58:18:f8:a4:52:61:4e:4e:9b:4c:ff:0f:b1: c6:99:4a:62:00:d0:b6:98:76:09:23:f3:d5:60:40: 11:d3:83:76:fc:96:40:f5:96:a4:91:bd:e8:39:78: 1d:33:72:9f:fb:bd:45:47:83:74:bb:b1:79:db:4f: bd:06:a4:ef:43:ab:83:e5:ea:e6:cf:30:14:e5:85: c3:f1:9e:8c:2a:a0:40:63:16:a8:9a:80:12:df:f1: b3:22:7d:d4:9f:f6:95:86:5f:5c:cc:88:23:aa:96: 29:a6:e9:34:83:63:d3:2e:89:25:1d:14:4b:48:98: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B5:9A:14:73:98:67:38:9E:E8:BF:54:DB:43:1E:8C:12:14:5A:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf75230d-996e-4940-9d89-4ea903cba1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.84.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:13:45:ad:eb:a0:d8:d8:d4:81:01:88:c3:28:cf:7b:85:4c: d3:d2:cd:3e:26:f3:e0:86:f9:f3:58:9c:e9:06:c4:d6:19:fa: 0e:9e:71:a5:11:13:cb:03:52:e3:19:b1:5b:5e:5a:c8:c2:7a: 36:0d:e1:0f:3b:79:1e:7c:8f:3b:78:26:8e:35:89:8d:74:b4: d1:1e:54:39:ca:56:10:f9:ff:fc:5c:55:f6:d8:67:21:c5:99: 7c:4e:82:7d:9f:08:6f:84:aa:ad:09:b4:76:71:ee:45:c4:99: e0:43:9a:eb:c0:8e:62:77:dc:d2:07:37:22:c5:a6:bc:7a:96: 4c:49:29:d9:9e:df:b8:61:bc:da:fe:b3:48:8f:b3:e2:32:8e: 25:87:0c:6d:56:2a:95:40:65:f2:a8:a3:97:ed:17:fa:77:34: 06:9b:35:0f:ef:de:91:61:75:00:7d:a3:97:4f:92:5e:85:04: cd:e3:66:7f:8d:16:0d:49:e7:d8:55:f1:8f:0f:a3:2a:89:99: a6:8f:90:d8:8d:f2:bb:1d:4f:c3:5a:81:b6:fc:66:99:21:5b: 9e:5d:c5:9d:82:ea:59:b6:e8:f6:c0:44:21:2f:62:2f:bd:30: e8:93:98:68:18:b3:af:90:cb:1a:ff:58:4f:98:da:62:29:b3: 04:57:ec:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQnzeQNaT+Vv9M/nBo5pGPKBvDd4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEyMDUyWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzY2ZGMxZTBiNzhhZWQ5OWUwNjgwNzEwZjI2ZTE4OTE2 OGM1NjI1MDlmZjk0MjQ4MzhkMTg0ZmU0MTA2YWNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnW5hnPWmq4rGksK7lcOdu9GzTT0o8rZ96NJLFi29aIuON jO/KNdSIuW0qj92flK9n5ZhLfIyhqKmkI2bBMgM7+ebRkJUjLE6V6znOReZm7Zc3 u90ywL9DlsMcQ5/ZGeYPGogKibS4omXsRFwe6+APkqQCAR7VRj7CSZ2kArAcA0H7 mLOTAK6fWBj4pFJhTk6bTP8PscaZSmIA0LaYdgkj89VgQBHTg3b8lkD1lqSRveg5 eB0zcp/7vUVHg3S7sXnbT70GpO9Dq4Pl6ubPMBTlhcPxnowqoEBjFqiagBLf8bMi fdSf9pWGX1zMiCOqlimm6TSDY9MuiSUdFEtImBMRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0bWaFHOYZzie6L9U20MejBIUWkcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmNzUyMzBkLTk5NmUtNDk0MC05ZDg5LTRlYTkwM2NiYTFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsFQwDQYJKoZIhvcNAQELBQADggEBAEoTRa3roNjY1IEBiMMoz3uFTNPS zT4m8+CG+fNYnOkGxNYZ+g6ecaURE8sDUuMZsVteWsjCejYN4Q87eR58jzt4Jo41 iY10tNEeVDnKVhD5//xcVfbYZyHFmXxOgn2fCG+Eqq0JtHZx7kXEmeBDmuvAjmJ3 3NIHNyLFprx6lkxJKdme37hhvNr+s0iPs+IyjiWHDG1WKpVAZfKoo5ftF/p3NAab NQ/v3pFhdQB9o5dPkl6FBM3jZn+NFg1J59hV8Y8PoyqJmaaPkNiN8rsdT8Nagbb8 ZpkhW55dxZ2C6lm26PbARCEvYi+9MOiTmGgYs6+Qyxr/WE+Y2mIpswRX7LE= -----END CERTIFICATE-----Generated at Wed May 13 08:16:55 2026 by rpki-client