$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1bbf117d-2531-42a6-b595-4c38287c1d36.roa File: 1bbf117d-2531-42a6-b595-4c38287c1d36.roa (raw, json) Hash identifier: WFdCIQOBJStjB2+bygE7axS0Gx+ydmrd68jZ74B0nm8= Subject key identifier: 6C:61:FB:4F:FD:BF:83:D6:7B:A0:21:92:3B:D8:0B:F8:45:52:B9:F0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 57EB5A1672955A30784249C9A34ECD04C529A079 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1bbf117d-2531-42a6-b595-4c38287c1d36.roa Signing time: Thu 23 Jul 2026 14:50:10 +0000 ROA not before: Thu 23 Jul 2026 14:50:10 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:eb:5a:16:72:95:5a:30:78:42:49:c9:a3:4e:cd:04:c5:29:a0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 23 14:50:10 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=f426ff5baacfaee62eb8991a155ef6ae25b0b02c877517ef132a3390f2474f10, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:33:2b:dd:de:27:ee:5e:17:dc:10:9e:46: 30:18:49:6b:e6:77:b8:5c:8a:0a:3d:cf:73:d3:90: 2d:85:b4:d3:29:cc:ad:d1:5a:98:ac:a6:b0:f9:be: b0:16:a4:5b:13:02:f7:6f:2e:0b:e5:1d:55:9f:a0: ec:79:65:2a:eb:07:b8:df:c4:0f:63:56:b0:0f:2b: e8:b1:fa:9d:7e:cf:f1:3d:d6:03:fa:dc:b8:dd:64: e1:2a:05:43:77:f7:45:44:a1:9c:f1:5e:00:d2:d1: d8:84:bf:f2:35:fa:66:c9:6e:e6:ad:1a:70:ae:ea: 8c:d1:16:9b:c0:e3:b7:b9:e1:f1:5d:ea:6a:cb:61: 97:c7:1f:e2:c2:be:bc:ec:43:f9:12:bb:60:45:2e: 51:b7:87:c3:a4:13:6b:6b:23:d0:0e:88:84:c8:89: 26:e0:25:55:c7:e8:3d:3c:9c:f9:ba:aa:36:bd:29: e0:a9:3f:69:8c:f3:90:d5:c6:cd:45:a3:6b:27:81: 6f:ae:f7:51:58:9c:fd:3b:7d:a5:b3:f8:7e:5b:b9: a8:ab:47:dc:54:47:c3:3e:f2:b7:e1:d4:ee:4c:65: b3:91:d8:4d:6f:68:af:52:b0:b4:e2:96:cb:0a:90: e8:3d:d2:12:0f:e3:18:60:38:c2:b9:c6:bb:38:bf: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:61:FB:4F:FD:BF:83:D6:7B:A0:21:92:3B:D8:0B:F8:45:52:B9:F0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1bbf117d-2531-42a6-b595-4c38287c1d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.5.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:e1:9c:6c:e8:17:63:2c:6e:5a:45:67:cf:3a:14:11:93:34: 7f:a3:e3:26:8f:cc:45:3f:4d:73:3d:9f:54:df:b0:d1:fd:b2: 46:38:2d:06:d4:de:7a:0b:41:b1:fc:c4:eb:fe:57:96:13:0e: ac:0b:43:7e:a5:5a:fb:5d:bd:90:e8:a8:c5:39:a5:06:bf:32: 7a:51:30:a7:29:4f:fb:f3:2d:34:13:8c:0d:aa:17:a3:24:0f: a1:10:6e:3e:32:e6:ac:35:9d:73:02:4f:a1:57:32:19:b6:06: 73:65:8b:32:e9:93:4d:31:6d:a7:fb:c8:1f:9c:63:32:75:81: d0:3b:92:42:98:ea:88:09:4e:36:ad:94:f4:d3:df:2c:a0:2f: 14:f8:3c:82:04:0d:fb:94:ab:f9:c5:4d:ec:2b:4e:12:c7:a4: 4b:5e:85:c9:7d:0c:70:82:1b:19:8a:8d:e7:8a:a3:d1:d2:64: c7:5a:1d:81:09:08:b7:ef:c9:12:00:96:1e:c2:08:3d:6f:b6: 1b:89:c2:dd:be:10:c1:ee:44:38:d1:b1:1c:09:d5:f4:f1:f5: c5:d6:b1:0c:1b:7a:5a:ff:35:bd:d2:0b:80:33:b6:f7:ca:15: 2f:fc:35:dc:e3:4b:f0:6a:53:09:f8:f7:14:12:67:0b:65:45: 7d:1d:4e:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV+taFnKVWjB4QknJo07NBMUpoHkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzIzMTQ1MDEwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDI2ZmY1YmFhY2ZhZWU2MmViODk5MWExNTVlZjZhZTI1 YjBiMDJjODc3NTE3ZWYxMzJhMzM5MGYyNDc0ZjEwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCVDMr3d4n7l4X3BCeRjAYSWvmd7hcigo9z3PTkC2FtNMp zK3RWpisprD5vrAWpFsTAvdvLgvlHVWfoOx5ZSrrB7jfxA9jVrAPK+ix+p1+z/E9 1gP63LjdZOEqBUN390VEoZzxXgDS0diEv/I1+mbJbuatGnCu6ozRFpvA47e54fFd 6mrLYZfHH+LCvrzsQ/kSu2BFLlG3h8OkE2trI9AOiITIiSbgJVXH6D08nPm6qja9 KeCpP2mM85DVxs1Fo2sngW+u91FYnP07faWz+H5buairR9xUR8M+8rfh1O5MZbOR 2E1vaK9SsLTilssKkOg90hIP4xhgOMK5xrs4v9N7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbGH7T/2/g9Z7oCGSO9gL+EVSufAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzFiYmYxMTdkLTI1MzEtNDJhNi1iNTk1LTRjMzgyODdjMWQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAUwDQYJKoZIhvcNAQELBQADggEBAF3hnGzoF2MsblpFZ886FBGTNH+j 4yaPzEU/TXM9n1TfsNH9skY4LQbU3noLQbH8xOv+V5YTDqwLQ36lWvtdvZDoqMU5 pQa/MnpRMKcpT/vzLTQTjA2qF6MkD6EQbj4y5qw1nXMCT6FXMhm2BnNlizLpk00x baf7yB+cYzJ1gdA7kkKY6ogJTjatlPTT3yygLxT4PIIEDfuUq/nFTewrThLHpEte hcl9DHCCGxmKjeeKo9HSZMdaHYEJCLfvyRIAlh7CCD1vthuJwt2+EMHuRDjRsRwJ 1fTx9cXWsQwbelr/Nb3SC4AztvfKFS/8NdzjS/BqUwn49xQSZwtlRX0dTrM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:38:09 2026 by rpki-client