$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3278fd19-7c91-4842-8409-64ab8070318d.roa File: 3278fd19-7c91-4842-8409-64ab8070318d.roa (raw, json) Hash identifier: 3uih5JS45AwuDPcz5JTGleZcHsDjIqG3Hv5BOStoZUE= Subject key identifier: 7E:BF:A9:15:37:95:28:97:A2:E1:4D:E3:9D:BC:21:36:22:A3:8D:3E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4CDEDEF807C0B9696BEB11F389240CA3EF0DF079 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3278fd19-7c91-4842-8409-64ab8070318d.roa Signing time: Sat 11 Jul 2026 00:00:04 +0000 ROA not before: Sat 11 Jul 2026 00:00:04 +0000 ROA not after: Fri 09 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.99.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:de:de:f8:07:c0:b9:69:6b:eb:11:f3:89:24:0c:a3:ef:0d:f0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 11 00:00:04 2026 GMT Not After : Oct 9 23:59:59 2026 GMT Subject: serialNumber=352370ce2d48dbc04b03216fcc4c45d8b025d8f914e04d12242b6e4a2e86ea93, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:e8:93:09:e0:03:2b:08:76:4e:db:b3:59: 42:5a:e1:62:89:54:19:a4:30:a8:0d:42:3b:a9:0f: 5a:c7:5d:08:db:7e:ae:1b:b7:33:ec:d5:2d:0f:a2: 33:3a:27:8b:7d:b8:a0:bd:46:2a:e9:b9:d6:02:6b: a8:c0:2e:8c:c0:9d:6e:56:f2:5e:a3:a8:1d:b7:f2: 07:5c:12:e6:df:34:3f:d2:32:ca:a9:79:32:e5:96: e6:4a:1f:6e:66:cc:54:8a:59:21:dd:5d:57:ae:b8: 7a:87:83:09:2c:81:60:a9:e7:91:d6:b2:13:80:ba: 33:c5:f9:70:d1:03:99:7c:7f:df:18:e7:26:aa:24: 30:86:e9:51:66:aa:80:a6:ff:4e:83:88:ca:9c:50: bc:c0:fd:d7:24:9a:61:b5:80:4b:96:dc:b9:46:d1: 98:ef:28:bb:d9:3d:c1:a7:21:90:65:53:84:e6:5e: 98:ef:fe:41:d1:de:cd:51:ec:5d:fc:fe:72:fd:ec: b2:01:cf:a0:cd:9f:47:2b:b4:0a:af:66:b4:6f:83: d4:e1:d6:89:ec:d6:71:3c:90:67:73:30:da:c4:48: 25:c5:53:08:78:78:22:48:1d:2a:78:80:91:5f:a2: f3:a3:72:33:ea:bf:e1:53:cb:be:1d:0c:dc:23:c7: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BF:A9:15:37:95:28:97:A2:E1:4D:E3:9D:BC:21:36:22:A3:8D:3E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3278fd19-7c91-4842-8409-64ab8070318d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.99.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:18:a9:42:b5:6e:ca:60:e1:f0:2f:d4:0b:66:68:5c:68:b8: 8c:82:18:5c:5a:ea:c7:12:49:14:93:90:44:ce:66:2c:13:46: ea:44:bc:8b:2b:88:9a:94:27:57:67:16:ce:14:e7:b6:52:71: 8e:cb:c9:9a:9b:89:53:ec:18:cd:1e:84:01:e3:60:49:cb:cb: 1b:a5:ad:b0:8d:28:ef:e2:d4:4d:22:27:4a:ff:86:af:4a:1c: 40:ce:ed:fc:ff:85:5f:d0:13:ab:70:bb:16:0f:61:d2:e7:f0: fb:ef:4d:fb:93:e4:c4:32:2f:53:24:28:de:db:2b:c3:e7:f4: ee:43:9d:06:03:f7:b2:19:f3:b3:18:f9:26:12:d3:8a:52:f0: c3:5b:b5:63:73:cc:7f:98:41:bd:13:93:4f:d4:40:17:ec:6d: fa:b0:0f:05:fb:f1:a3:d9:48:8f:ee:74:50:9f:ff:44:65:58: e3:2b:35:5c:48:27:fa:4c:13:98:e7:29:11:54:52:c1:02:7d: 4c:8b:67:71:ae:aa:ed:64:e3:68:00:78:3f:ce:f4:12:98:52: 1d:fa:a6:aa:80:e1:2f:64:9a:ed:85:17:c4:21:23:4c:f4:fb: d9:57:b1:e5:6b:52:d3:43:96:92:44:3d:51:89:6b:64:71:2a: ee:07:47:b5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTN7e+AfAuWlr6xHziSQMo+8N8HkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzExMDAwMDA0WhcNMjYxMDA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTIzNzBjZTJkNDhkYmMwNGIwMzIxNmZjYzRjNDVkOGIw MjVkOGY5MTRlMDRkMTIyNDJiNmU0YTJlODZlYTkzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1qeiTCeADKwh2TtuzWUJa4WKJVBmkMKgNQjupD1rHXQjb fq4btzPs1S0PojM6J4t9uKC9RirpudYCa6jALozAnW5W8l6jqB238gdcEubfND/S MsqpeTLlluZKH25mzFSKWSHdXVeuuHqHgwksgWCp55HWshOAujPF+XDRA5l8f98Y 5yaqJDCG6VFmqoCm/06DiMqcULzA/dckmmG1gEuW3LlG0ZjvKLvZPcGnIZBlU4Tm Xpjv/kHR3s1R7F38/nL97LIBz6DNn0crtAqvZrRvg9Th1ons1nE8kGdzMNrESCXF Uwh4eCJIHSp4gJFfovOjcjPqv+FTy74dDNwjx4HPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfr+pFTeVKJei4U3jnbwhNiKjjT4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzMyNzhmZDE5LTdjOTEtNDg0Mi04NDA5LTY0YWI4MDcwMzE4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjYzANBgkqhkiG9w0BAQsFAAOCAQEABRipQrVuymDh8C/UC2ZoXGi4jIIY XFrqxxJJFJOQRM5mLBNG6kS8iyuImpQnV2cWzhTntlJxjsvJmpuJU+wYzR6EAeNg ScvLG6WtsI0o7+LUTSInSv+Gr0ocQM7t/P+FX9ATq3C7Fg9h0ufw++9N+5PkxDIv UyQo3tsrw+f07kOdBgP3shnzsxj5JhLTilLww1u1Y3PMf5hBvROTT9RAF+xt+rAP Bfvxo9lIj+50UJ//RGVY4ys1XEgn+kwTmOcpEVRSwQJ9TItnca6q7WTjaAB4P870 EphSHfqmqoDhL2Sa7YUXxCEjTPT72Vex5WtS00OWkkQ9UYlrZHEq7gdHtQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:13:32 2026 by rpki-client