$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0caf62b0-1cb6-426a-827d-61eb989f8a93.roa File: 0caf62b0-1cb6-426a-827d-61eb989f8a93.roa (raw, json) Hash identifier: +WwVV9HjEnEauxXUozc8vuDLhQEGngi/oxHLMmb2+Xk= Subject key identifier: EB:28:7E:EE:1E:61:9F:B9:A2:76:51:10:05:57:21:90:D2:8C:74:DC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 415E8ECE1186C06C7DFA1FA7807B60BE1E984CF2 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0caf62b0-1cb6-426a-827d-61eb989f8a93.roa Signing time: Mon 19 Oct 2026 01:50:06 +0000 ROA not before: Mon 19 Oct 2026 01:50:06 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5e:8e:ce:11:86:c0:6c:7d:fa:1f:a7:80:7b:60:be:1e:98:4c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 01:50:06 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=6fe22434659c4c973cc4f6688b496fea8414ec7e8c3fff6dd4cbc67f3573096e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:a6:13:83:53:43:cf:51:1b:48:ed:4b:ca: c8:10:0d:54:7d:65:81:48:5b:a5:ac:72:f7:08:be: e1:37:51:5d:bf:e1:b6:d1:95:33:79:50:94:b0:2a: 1e:6e:cf:a8:49:07:ce:95:78:93:e7:2a:f3:80:a6: bf:1f:b5:8c:56:23:6c:f7:74:5c:51:4e:01:c1:7f: a4:de:cb:e3:4e:b3:79:07:8c:a8:3a:b0:c4:bd:71: ba:e1:7b:cb:db:ee:d3:b0:2b:14:81:ba:57:b4:37: 6f:03:4a:f6:ac:4c:00:ac:b9:d6:8d:32:82:3b:18: b7:a4:83:81:d3:8d:fe:af:af:b4:10:d8:5e:97:7e: df:38:7e:b8:e4:0b:d6:83:b6:94:7d:b8:17:36:36: 38:9b:fa:4f:30:a4:be:56:0d:88:a6:58:6e:74:05: 28:a1:e2:5d:ef:4b:bc:8d:e6:36:05:b3:f7:08:68: b9:59:2a:49:24:bd:08:1a:ce:3b:60:f0:21:31:c8: c8:14:a2:a0:9b:6e:0c:92:d4:7b:f1:a6:ee:80:a7: b5:49:6f:25:0f:69:be:a4:92:a2:da:84:e2:1f:1a: b1:cd:b1:4e:9c:07:8e:0e:b7:b4:29:75:5b:1e:fb: 6f:95:14:a9:97:9d:c6:ad:38:0b:d6:04:b3:90:a4: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:28:7E:EE:1E:61:9F:B9:A2:76:51:10:05:57:21:90:D2:8C:74:DC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0caf62b0-1cb6-426a-827d-61eb989f8a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.49.0/24 Signature Algorithm: sha256WithRSAEncryption 95:bc:1c:a2:56:3c:7b:de:1f:33:35:f9:95:f0:c0:31:1d:2a: 82:d1:b3:67:9e:f7:ca:d3:95:71:62:49:c7:05:ff:56:5e:b1: e1:64:8d:af:f3:3d:41:88:c9:56:97:65:9c:a5:64:e0:ac:38: 95:53:d4:b0:93:09:27:7e:d5:68:d1:2d:3b:86:9f:df:88:aa: 5d:f7:0f:39:a4:c2:d0:6b:9c:d4:e9:b2:36:8e:57:f8:da:78: 68:93:35:fb:25:39:21:0c:9f:03:6e:d1:87:0d:46:f6:8c:6e: 2f:5b:48:ca:a5:91:3e:d0:ad:1f:a8:dc:ea:d5:d9:33:c7:58: 82:e7:c5:4a:a5:e9:d4:d7:6d:3d:d3:fa:df:5d:04:42:54:48: 66:dd:aa:36:36:c0:b3:da:84:ab:46:fb:6c:22:e0:0c:2d:b9: dc:e4:e9:72:87:8e:d2:74:f8:0a:4a:07:09:78:d5:57:8f:08: 94:1f:bb:d1:0d:7d:ee:f0:49:2a:f2:b8:bc:1e:32:bb:f9:63: 9f:b0:7d:81:e0:80:10:87:37:50:ca:87:45:2d:1a:b1:b4:b8: bc:4e:03:a7:6b:0c:de:a4:39:39:f8:3a:e7:6f:50:b0:fa:a3: a1:b6:9d:6b:40:c3:3b:73:aa:c0:fe:90:46:e0:f2:50:ed:9e: 74:b9:94:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQV6OzhGGwGx9+h+ngHtgvh6YTPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE5MDE1MDA2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmUyMjQzNDY1OWM0Yzk3M2NjNGY2Njg4YjQ5NmZlYTg0 MTRlYzdlOGMzZmZmNmRkNGNiYzY3ZjM1NzMwOTZlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR0qYTg1NDz1EbSO1LysgQDVR9ZYFIW6WscvcIvuE3UV2/ 4bbRlTN5UJSwKh5uz6hJB86VeJPnKvOApr8ftYxWI2z3dFxRTgHBf6Tey+NOs3kH jKg6sMS9cbrhe8vb7tOwKxSBule0N28DSvasTACsudaNMoI7GLekg4HTjf6vr7QQ 2F6Xft84frjkC9aDtpR9uBc2Njib+k8wpL5WDYimWG50BSih4l3vS7yN5jYFs/cI aLlZKkkkvQgazjtg8CExyMgUoqCbbgyS1Hvxpu6Ap7VJbyUPab6kkqLahOIfGrHN sU6cB44Ot7QpdVse+2+VFKmXncatOAvWBLOQpM4TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6yh+7h5hn7midlEQBVchkNKMdNwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBjYWY2MmIwLTFjYjYtNDI2YS04MjdkLTYxZWI5ODlmOGE5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDEwDQYJKoZIhvcNAQELBQADggEBAJW8HKJWPHveHzM1+ZXwwDEdKoLR s2ee98rTlXFiSccF/1ZeseFkja/zPUGIyVaXZZylZOCsOJVT1LCTCSd+1WjRLTuG n9+Iql33DzmkwtBrnNTpsjaOV/jaeGiTNfslOSEMnwNu0YcNRvaMbi9bSMqlkT7Q rR+o3OrV2TPHWILnxUql6dTXbT3T+t9dBEJUSGbdqjY2wLPahKtG+2wi4Awtudzk 6XKHjtJ0+ApKBwl41VePCJQfu9ENfe7wSSryuLweMrv5Y5+wfYHggBCHN1DKh0Ut GrG0uLxOA6drDN6kOTn4OudvULD6o6G2nWtAwztzqsD+kEbg8lDtnnS5lNI= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:52 2026 by rpki-client