$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa File: 2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa (raw, json) Hash identifier: BHmaAscEijoNJ/DASIfwxQgDdaSc3BmInn3U3xNhRFk= Subject key identifier: 3B:74:67:FC:CD:2C:6F:3B:A2:4A:06:14:17:C6:34:FE:BC:FD:43:09 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: C3E371F77496DCCD0D4CA746E3AD5177F522D6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa Signing time: Thu 23 Jul 2026 15:00:23 +0000 ROA not before: Thu 23 Jul 2026 15:00:23 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c3:e3:71:f7:74:96:dc:cd:0d:4c:a7:46:e3:ad:51:77:f5:22:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 23 15:00:23 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=7a2860f9ad81e10456beaee6dc00c729fbe988dc84136a00edbce3d3d9de72a0, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:67:6c:81:b0:b2:25:8c:b0:59:1f:8e:d0:84: 24:56:2b:4d:8e:33:73:c9:ca:61:c8:7f:9d:05:84: 7c:06:31:11:af:ef:11:dd:b3:77:19:49:a7:49:a9: 67:0c:88:d3:38:71:95:43:a6:3b:68:c2:2c:8c:e4: cd:5a:d4:0d:70:a0:68:a1:ca:6b:7c:be:ec:13:91: ca:a5:94:4c:81:36:44:51:24:f3:6a:ef:2d:94:e0: 85:d9:0c:fd:17:cd:66:75:b5:65:5b:70:94:3b:5f: 4f:cf:fc:2a:a0:62:fb:31:c7:c5:39:7d:47:da:67: c7:44:7a:95:e4:d5:9a:92:b8:91:95:ec:51:23:52: 8a:2a:94:20:be:70:27:5c:d0:cc:b7:88:8a:4f:b4: 0a:b2:84:79:0f:1a:e5:05:7a:f4:f8:ed:a2:82:43: e3:04:13:fe:5c:46:aa:8e:8e:74:d4:fb:92:e2:34: ff:0b:62:72:d1:e3:32:9a:b7:5f:2b:20:14:8c:ae: e6:30:c8:70:31:99:43:e6:2f:23:20:f7:b8:51:6c: c1:3c:18:89:74:a6:0b:69:15:31:9a:08:72:35:4f: af:a6:14:21:29:57:52:e1:84:ee:90:59:49:1a:c5: a8:54:f4:9d:dd:c9:5b:9b:82:44:d1:a0:29:90:74: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:74:67:FC:CD:2C:6F:3B:A2:4A:06:14:17:C6:34:FE:BC:FD:43:09 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.28.0/23 Signature Algorithm: sha256WithRSAEncryption 42:ae:75:d5:41:32:61:16:16:19:8e:76:d8:49:e6:30:86:48: 8d:e0:20:b2:d3:60:a5:9f:b4:d2:5c:6f:46:0d:90:19:f4:00: e5:f1:e5:35:21:46:f6:6f:b1:7a:c4:00:9c:51:f2:cb:e0:e7: ab:a5:35:ea:2b:6b:ae:71:31:56:9f:7a:80:c6:d8:63:6e:e7: 96:f8:ee:b8:6e:88:36:a8:a1:a4:fb:60:85:20:8d:b2:ad:5f: de:26:ab:d1:20:44:82:36:b9:0f:3b:b4:43:bb:77:90:ea:86: 04:75:7a:30:59:53:d8:16:b0:50:e3:fb:18:2a:af:89:26:a8: 4a:8f:e7:8d:74:b1:9e:f2:37:e7:33:bc:76:ab:de:d3:85:a7: 72:e7:86:39:7e:d4:56:65:5b:42:c3:3d:d9:f2:c7:79:66:d7: d0:9b:04:10:95:31:b8:39:a4:8b:74:54:86:01:97:8b:33:ed: fb:74:d3:24:cf:cd:9f:26:97:26:d6:c2:3b:fe:9c:a1:51:ef: eb:ad:be:f2:23:ff:02:b4:75:32:b0:32:4e:6f:4e:b0:e4:a5: 7d:08:fc:01:6e:84:d7:80:e8:65:be:69:54:f4:a6:6d:83:f1: 0e:ab:20:66:fb:3b:64:d1:56:37:24:1b:38:c2:ed:e7:b1:ac: d5:79:09:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAMPjcfd0ltzNDUynRuOtUXf1ItYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzIzMTUwMDIzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTI4NjBmOWFkODFlMTA0NTZiZWFlZTZkYzAwYzcyOWZi ZTk4OGRjODQxMzZhMDBlZGJjZTNkM2Q5ZGU3MmEwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzZ2yBsLIljLBZH47QhCRWK02OM3PJymHIf50FhHwGMRGv 7xHds3cZSadJqWcMiNM4cZVDpjtowiyM5M1a1A1woGihymt8vuwTkcqllEyBNkRR JPNq7y2U4IXZDP0XzWZ1tWVbcJQ7X0/P/CqgYvsxx8U5fUfaZ8dEepXk1ZqSuJGV 7FEjUooqlCC+cCdc0My3iIpPtAqyhHkPGuUFevT47aKCQ+MEE/5cRqqOjnTU+5Li NP8LYnLR4zKat18rIBSMruYwyHAxmUPmLyMg97hRbME8GIl0pgtpFTGaCHI1T6+m FCEpV1LhhO6QWUkaxahU9J3dyVubgkTRoCmQdBAtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO3Rn/M0sbzuiSgYUF8Y0/rz9QwkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJhZThkY2RlLTBmNGItNDk5OC1hYzY5LWI0YzVkODYwOTg0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBwwDQYJKoZIhvcNAQELBQADggEBAEKuddVBMmEWFhmOdthJ5jCGSI3g ILLTYKWftNJcb0YNkBn0AOXx5TUhRvZvsXrEAJxR8svg56ulNeora65xMVafeoDG 2GNu55b47rhuiDaooaT7YIUgjbKtX94mq9EgRII2uQ87tEO7d5DqhgR1ejBZU9gW sFDj+xgqr4kmqEqP5410sZ7yN+czvHar3tOFp3Lnhjl+1FZlW0LDPdnyx3lm19Cb BBCVMbg5pIt0VIYBl4sz7ft00yTPzZ8mlybWwjv+nKFR7+utvvIj/wK0dTKwMk5v TrDkpX0I/AFuhNeA6GW+aVT0pm2D8Q6rIGb7O2TRVjckGzjC7eexrNV5CS8= -----END CERTIFICATE-----Generated at Fri Jul 24 08:16:25 2026 by rpki-client