$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f542397a-2664-4186-9a24-a87ab5343f33.roa File: f542397a-2664-4186-9a24-a87ab5343f33.roa (raw, json) Hash identifier: QR07J0lBAUsnafhZf+9GOqtp+NaM8oUAuEtrE2L0xtY= Subject key identifier: DB:67:AA:85:1D:65:EF:15:BF:DB:A4:3F:4D:E3:86:FF:C2:A0:09:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30A15B5E77D59C285FAC63A9036AA4A8679D6B7E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f542397a-2664-4186-9a24-a87ab5343f33.roa Signing time: Mon 05 Oct 2026 00:31:45 +0000 ROA not before: Mon 05 Oct 2026 00:31:45 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 130.80.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a1:5b:5e:77:d5:9c:28:5f:ac:63:a9:03:6a:a4:a8:67:9d:6b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 5 00:31:45 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=a752ab8ce7877ad5d0d75bbaa56742019bd3433bb960467fa8eabf326d26e454, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:7d:6e:9b:4f:8c:3b:af:b2:76:da:d1:82: 5c:15:51:85:fb:16:a3:76:1e:52:db:84:7f:ce:34: c3:d7:81:ba:a0:3e:8a:02:d7:24:c7:e6:ce:15:c1: 03:da:16:2b:1b:d5:4e:66:e1:06:85:3f:d8:32:69: e9:cb:eb:e1:7f:37:13:82:83:d7:ee:6a:bb:1e:f7: ce:73:bb:ed:8e:01:01:6a:02:58:c6:a2:2d:e6:7d: 2e:22:64:77:0c:2c:59:da:bd:5d:ee:16:3a:4d:a8: e5:7d:da:f9:3a:cc:f5:a6:18:45:b5:b5:fe:2d:08: 33:ef:04:c8:6a:9f:8c:8a:e2:e8:6f:40:cf:8f:3b: f7:01:2d:c2:94:7e:d6:9c:0d:bc:18:5f:78:75:50: cc:83:6f:87:87:1c:73:88:7b:34:66:e6:5d:93:b0: a2:6f:44:c5:b4:e9:9f:ad:ef:a5:06:5d:7e:10:df: e2:d3:fe:a7:9d:23:b4:39:12:f1:fc:ec:55:36:d4: b3:bc:92:fb:b1:55:9a:30:e1:c0:9f:fc:de:ee:41: fe:aa:d4:ef:8f:c2:f6:9d:06:c4:7b:4e:d9:13:bf: 4b:8a:7a:99:b2:3e:04:08:3e:2b:87:a2:c6:7a:00: 20:ac:59:57:69:7a:72:83:03:64:60:58:30:56:0f: c4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:67:AA:85:1D:65:EF:15:BF:DB:A4:3F:4D:E3:86:FF:C2:A0:09:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f542397a-2664-4186-9a24-a87ab5343f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.80.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3e:c9:6c:f0:8e:8b:8a:23:a2:e1:7d:98:0a:d1:70:0c:ce:82: 25:a0:45:a0:52:db:0a:15:b0:0e:f6:b9:5e:03:94:11:66:bf: e2:8d:ec:37:a2:02:fa:a1:dc:84:b3:ae:e6:c1:af:61:1b:fc: ff:b4:5d:74:50:02:ab:48:72:a4:eb:91:bd:d7:c1:5e:86:79: b6:c9:29:b3:24:62:e7:39:f7:1e:8f:94:95:f9:07:66:f7:f9: 11:81:50:8b:50:4d:c6:c4:45:99:6a:d9:ef:35:c3:3d:81:d5: 3d:52:27:12:fc:50:d7:78:a7:24:6f:09:c4:45:0d:49:c4:c3: 3a:60:c2:e9:ee:3b:10:f1:48:0e:b0:b6:ac:34:71:37:39:90: b7:31:cd:37:aa:52:18:9b:88:d3:00:33:4e:69:dc:61:45:6b: 47:39:cb:d2:dc:6e:c4:1b:9a:bb:93:56:4f:e5:c4:e8:7c:f6: ed:a1:36:2b:13:c3:77:02:73:1a:37:39:d4:ca:50:02:be:73: f4:e8:47:de:5b:22:6e:3a:8e:3e:64:4c:3f:de:3e:07:24:e5: 67:dd:c6:4b:f6:0c:96:8c:18:02:9c:07:b1:2c:ba:46:cd:c2: 7e:b7:ff:fa:be:3b:4c:2c:1f:12:e1:a5:d9:79:70:99:13:23: a3:0b:e9:b9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMKFbXnfVnChfrGOpA2qkqGeda34wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAzMTQ1WhcNMjcwMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzUyYWI4Y2U3ODc3YWQ1ZDBkNzViYmFhNTY3NDIwMTli ZDM0MzNiYjk2MDQ2N2ZhOGVhYmYzMjZkMjZlNDU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVqH1um0+MO6+ydtrRglwVUYX7FqN2HlLbhH/ONMPXgbqg PooC1yTH5s4VwQPaFisb1U5m4QaFP9gyaenL6+F/NxOCg9fuarse985zu+2OAQFq AljGoi3mfS4iZHcMLFnavV3uFjpNqOV92vk6zPWmGEW1tf4tCDPvBMhqn4yK4uhv QM+PO/cBLcKUftacDbwYX3h1UMyDb4eHHHOIezRm5l2TsKJvRMW06Z+t76UGXX4Q 3+LT/qedI7Q5EvH87FU21LO8kvuxVZow4cCf/N7uQf6q1O+PwvadBsR7TtkTv0uK epmyPgQIPiuHosZ6ACCsWVdpenKDA2RgWDBWD8R7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU22eqhR1l7xW/26Q/TeOG/8KgCR0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1NDIzOTdhLTI2NjQtNDE4Ni05YTI0LWE4N2FiNTM0M2YzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCCUDANBgkqhkiG9w0BAQsFAAOCAQEAPsls8I6LiiOi4X2YCtFwDM6CJaBF oFLbChWwDva5XgOUEWa/4o3sN6IC+qHchLOu5sGvYRv8/7RddFACq0hypOuRvdfB XoZ5tskpsyRi5zn3Ho+UlfkHZvf5EYFQi1BNxsRFmWrZ7zXDPYHVPVInEvxQ13in JG8JxEUNScTDOmDC6e47EPFIDrC2rDRxNzmQtzHNN6pSGJuI0wAzTmncYUVrRznL 0txuxBuau5NWT+XE6Hz27aE2KxPDdwJzGjc51MpQAr5z9OhH3lsibjqOPmRMP94+ ByTlZ93GS/YMlowYApwHsSy6Rs3Cfrf/+r47TCwfEuGl2XlwmRMjowvpuQ== -----END CERTIFICATE-----Generated at Sun Nov 15 12:41:24 2026 by rpki-client