$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa File: 2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa (raw, json) Hash identifier: hPTBOXUlESbDs2fyH9bhwHcOB9BJFNyF91jDkwxl3gw= Subject key identifier: F2:6E:9E:2E:3D:B2:97:72:E1:72:7A:CC:01:7C:CE:0D:07:91:48:FE Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 672F4E28D7647E727C72ED3E00745023075CB7C9 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa Signing time: Mon 04 May 2026 15:00:49 +0000 ROA not before: Mon 04 May 2026 15:00:49 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2f:4e:28:d7:64:7e:72:7c:72:ed:3e:00:74:50:23:07:5c:b7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 4 15:00:49 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=e1e355ebff5cb2e723de937de989bd7664e6fe42b0ac46b2762ccc00e11dafd1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:ad:83:75:59:b2:86:43:44:0b:95:ac:c6: 33:68:03:1e:2a:7b:05:b1:4e:33:b1:46:65:fd:d5: 5b:c3:d2:31:22:80:52:26:06:bf:ae:2c:f0:8f:b9: 7c:cb:2e:84:88:10:8a:a4:97:89:6d:66:3c:b1:e1: 4e:1a:de:99:98:ec:7b:0b:b9:e8:96:f3:92:51:a0: 55:f6:7d:d0:77:ba:58:39:54:89:8b:e5:ee:16:25: 7f:ff:b3:d8:50:aa:12:0c:f7:5a:7f:67:47:6d:37: 64:69:ae:7b:8d:e0:43:db:6f:d3:0a:47:e9:18:f5: 1f:dc:32:e5:e0:54:b1:a5:35:7e:31:ff:3a:5b:19: d9:c7:2a:7c:4d:59:b5:f9:e8:5a:cc:55:7d:a3:52: 67:99:4f:2c:8c:2d:a4:17:37:3a:30:91:4e:8d:06: af:da:5f:2c:f3:96:cb:fc:d2:08:86:41:92:0a:c3: 88:ed:84:91:64:3e:9a:fa:79:77:67:6e:cd:01:7d: 72:81:43:7c:68:ad:85:7a:4f:0c:e6:e1:e7:72:47: 4a:74:02:b3:9e:d5:b0:a3:c0:c7:1c:9c:b7:b5:b7: 83:12:74:17:b9:13:9f:e0:a7:80:e5:43:3d:52:8a: 84:37:99:fc:ea:d4:ea:51:ae:72:0b:80:2d:22:7f: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:9E:2E:3D:B2:97:72:E1:72:7A:CC:01:7C:CE:0D:07:91:48:FE X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:37:f0:ff:70:fd:3f:d5:a2:86:74:5d:df:2b:de:c6:42:76: c1:1d:09:3d:dd:74:19:02:dc:42:81:59:7c:48:85:81:6a:65: ef:48:98:a2:f0:74:06:5e:7b:3d:82:ba:88:01:bc:d5:0b:51: f0:d1:5e:67:9c:17:74:4b:20:f6:f2:d2:d1:8e:6e:ee:2e:cd: 36:43:a4:a6:17:ba:ca:db:4c:84:28:25:7f:24:5d:46:97:88: 69:5a:50:a0:de:25:56:cc:c9:15:65:f8:41:1f:5f:e8:5d:09: 4f:d4:1a:e7:e0:2c:7d:8e:02:ad:89:df:8c:7b:2b:fa:4f:a1: 09:eb:9e:db:bc:f9:43:cb:1d:b3:61:44:34:78:8a:2f:64:9c: e0:fc:83:a1:84:c8:d7:0e:31:0b:6c:12:b6:c8:d2:0c:f1:e3: d1:28:46:88:5b:d5:fc:6a:1e:77:b1:40:1c:0a:77:56:aa:9e: 2a:1e:0a:ae:f5:a9:c4:e4:56:ef:00:11:26:8e:ea:cc:8f:55: b6:cb:15:51:3c:6f:07:80:f1:9f:65:ef:ec:96:9f:c8:ed:4c: 8e:b8:17:11:e2:f9:55:81:c4:fb:53:5e:ab:9d:6f:77:f6:8b: 28:8c:e8:a0:46:5e:f3:f2:96:a2:f2:2a:49:7f:fe:c3:21:d5: 5f:b0:20:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZy9OKNdkfnJ8cu0+AHRQIwdct8kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTA0MTUwMDQ5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMWUzNTVlYmZmNWNiMmU3MjNkZTkzN2RlOTg5YmQ3NjY0 ZTZmZTQyYjBhYzQ2YjI3NjJjY2MwMGUxMWRhZmQxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3C62DdVmyhkNEC5WsxjNoAx4qewWxTjOxRmX91VvD0jEi gFImBr+uLPCPuXzLLoSIEIqkl4ltZjyx4U4a3pmY7HsLueiW85JRoFX2fdB3ulg5 VImL5e4WJX//s9hQqhIM91p/Z0dtN2RprnuN4EPbb9MKR+kY9R/cMuXgVLGlNX4x /zpbGdnHKnxNWbX56FrMVX2jUmeZTyyMLaQXNzowkU6NBq/aXyzzlsv80giGQZIK w4jthJFkPpr6eXdnbs0BfXKBQ3xorYV6Twzm4edyR0p0ArOe1bCjwMccnLe1t4MS dBe5E5/gp4DlQz1SioQ3mfzq1OpRrnILgC0if485AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8m6eLj2yl3LhcnrMAXzODQeRSP4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJjM2Q3MjQ3LWUwN2ItNGQxYy1hNmVlLWViYWExM2ZiZDljYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBAF838P9w/T/VooZ0Xd8r3sZCdsEd CT3ddBkC3EKBWXxIhYFqZe9ImKLwdAZeez2CuogBvNULUfDRXmecF3RLIPby0tGO bu4uzTZDpKYXusrbTIQoJX8kXUaXiGlaUKDeJVbMyRVl+EEfX+hdCU/UGufgLH2O Aq2J34x7K/pPoQnrntu8+UPLHbNhRDR4ii9knOD8g6GEyNcOMQtsErbI0gzx49Eo Rohb1fxqHnexQBwKd1aqnioeCq71qcTkVu8AESaO6syPVbbLFVE8bweA8Z9l7+yW n8jtTI64FxHi+VWBxPtTXqudb3f2iyiM6KBGXvPylqLyKkl//sMh1V+wIHo= -----END CERTIFICATE-----Generated at Wed May 13 02:43:08 2026 by rpki-client