$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa File: 0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa (raw, json) Hash identifier: H7ALLUxfmYm1gDCOJYkHVtbVlTB125M3AUl9qSwxC5Q= Subject key identifier: 03:13:D8:7B:64:4C:09:EE:F8:A9:A1:90:24:F2:03:EE:83:CA:1B:29 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 047E15943843DEDE8E40071C820716E891218136 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa Signing time: Mon 26 Oct 2026 02:50:04 +0000 ROA not before: Mon 26 Oct 2026 02:50:04 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7e:15:94:38:43:de:de:8e:40:07:1c:82:07:16:e8:91:21:81:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 26 02:50:04 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=303359d28b633cbdaee343b271c5892c3861f535c99518dad228b759d3ec750d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:52:06:63:9c:b0:dd:e2:41:34:53:9e:65: a1:f6:58:3d:f7:86:e4:58:55:6d:b7:80:27:c4:90: f1:79:86:a5:8b:fe:8d:33:c2:30:6b:c1:57:07:80: c0:10:15:3b:e4:d2:ef:01:ac:b6:0a:57:22:4d:be: 83:dc:b6:80:26:40:de:d2:80:1c:32:e6:48:ba:83: e2:65:e8:17:e9:44:71:10:55:80:89:89:d4:69:4b: 69:93:d8:59:e3:73:08:bb:c9:8f:4c:23:de:45:fa: 41:90:70:39:9b:06:65:e7:13:a7:ce:7a:b8:e1:e7: 03:fe:5f:ed:ed:fc:ea:ee:4d:ed:24:c1:d3:a1:fa: 3a:39:f5:8a:05:62:32:8f:0a:46:d5:7e:cb:e5:7c: ae:45:e0:3b:b7:22:1a:ab:69:b6:18:12:3d:47:83: 89:1d:32:da:11:02:74:e2:5a:ca:66:3f:7a:54:f9: 43:85:8d:2f:b4:e7:bd:a5:be:42:b9:f9:99:0b:2e: e6:4f:55:97:a6:61:f5:78:74:86:ac:4e:fb:a4:72: 5a:3b:15:6e:39:23:8b:10:f2:97:11:61:c2:ae:fe: c6:5f:b2:90:13:9a:17:ec:32:72:b4:5c:85:a1:f9: 99:da:65:a9:75:84:96:ce:a4:7c:fe:d2:52:85:41: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:13:D8:7B:64:4C:09:EE:F8:A9:A1:90:24:F2:03:EE:83:CA:1B:29 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.2.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:4d:7b:58:87:8f:9c:71:fb:bf:31:a6:db:cd:ae:b8:5a:b0: b7:fc:16:c1:f2:a5:03:f8:c4:6b:cc:6f:88:e5:fe:56:07:7f: 5b:b4:1e:a0:1d:e7:7c:83:1e:46:62:72:1d:8a:dc:21:af:ce: d3:34:04:1d:29:db:be:f6:9c:51:de:5a:33:c1:5a:61:ba:55: d9:df:f0:15:c1:44:e0:61:99:30:3a:c1:4a:a0:b9:a1:08:36: a7:86:71:0f:99:9f:a3:93:4a:b8:26:3c:5f:4f:55:50:49:ea: 9a:49:dd:a4:35:a2:0f:6e:8b:f5:7a:3a:be:6d:86:3f:a7:e7: e0:75:a7:2a:0d:00:61:e6:51:e4:de:72:37:75:95:a7:59:77: 6a:5a:dc:c5:1f:e5:32:32:91:da:96:c5:8c:6f:c3:64:69:a6: a8:5e:3b:8c:38:f7:37:36:bc:9e:32:8d:af:9b:d0:32:1f:f9: 9e:ec:7f:7a:42:cc:37:03:7b:fc:54:e9:c5:d1:10:e3:fa:87: a7:7f:a4:db:28:52:6a:98:5b:c2:0a:72:6c:86:65:b5:ac:c4: 10:54:c2:83:41:89:b2:c9:50:30:6c:59:cf:9f:04:b2:db:1d: 16:b3:82:e4:e3:80:d1:5a:30:53:a2:d3:4c:f0:7c:d6:ae:73: de:b4:55:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBH4VlDhD3t6OQAccggcW6JEhgTYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI2MDI1MDA0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDMzNTlkMjhiNjMzY2JkYWVlMzQzYjI3MWM1ODkyYzM4 NjFmNTM1Yzk5NTE4ZGFkMjI4Yjc1OWQzZWM3NTBkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCslFIGY5yw3eJBNFOeZaH2WD33huRYVW23gCfEkPF5hqWL /o0zwjBrwVcHgMAQFTvk0u8BrLYKVyJNvoPctoAmQN7SgBwy5ki6g+Jl6BfpRHEQ VYCJidRpS2mT2Fnjcwi7yY9MI95F+kGQcDmbBmXnE6fOerjh5wP+X+3t/OruTe0k wdOh+jo59YoFYjKPCkbVfsvlfK5F4Du3IhqrabYYEj1Hg4kdMtoRAnTiWspmP3pU +UOFjS+0572lvkK5+ZkLLuZPVZemYfV4dIasTvukclo7FW45I4sQ8pcRYcKu/sZf spATmhfsMnK0XIWh+ZnaZal1hJbOpHz+0lKFQZvXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAxPYe2RMCe74qaGQJPID7oPKGykwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBlODE0ZjJjLTYxMDAtNDAzNy05ZGNjLWNkYWYzZTIwZDg1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAIwDQYJKoZIhvcNAQELBQADggEBAGpNe1iHj5xx+78xptvNrrhasLf8 FsHypQP4xGvMb4jl/lYHf1u0HqAd53yDHkZich2K3CGvztM0BB0p2772nFHeWjPB WmG6Vdnf8BXBROBhmTA6wUqguaEINqeGcQ+Zn6OTSrgmPF9PVVBJ6ppJ3aQ1og9u i/V6Or5thj+n5+B1pyoNAGHmUeTecjd1ladZd2pa3MUf5TIykdqWxYxvw2Rppqhe O4w49zc2vJ4yja+b0DIf+Z7sf3pCzDcDe/xU6cXREOP6h6d/pNsoUmqYW8IKcmyG ZbWsxBBUwoNBibLJUDBsWc+fBLLbHRazguTjgNFaMFOi00zwfNauc960VR0= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:39 2026 by rpki-client