$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/44f47a87-fa5e-4db0-bb12-60c873b8710c.roa File: 44f47a87-fa5e-4db0-bb12-60c873b8710c.roa (raw, json) Hash identifier: n4NHcyhTX99vkDLoSZSWFQurbbKoCtSxi4tDv5/MkJc= Subject key identifier: F6:9F:53:BC:38:78:9E:40:A7:99:2C:33:FD:B8:2C:43:B4:65:B3:D7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7C266E7ED7F01C2A1FEB0F090243975B5009F2A3 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/44f47a87-fa5e-4db0-bb12-60c873b8710c.roa Signing time: Thu 15 Oct 2026 03:10:06 +0000 ROA not before: Thu 15 Oct 2026 03:10:06 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:26:6e:7e:d7:f0:1c:2a:1f:eb:0f:09:02:43:97:5b:50:09:f2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 15 03:10:06 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=b4595d88317cadc65135dd4d4481cff2aaaa7df7815d1e40b34284d1c35e6d84, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:c7:cc:df:14:9c:27:c0:e5:2a:85:32:e4: c2:d6:04:5d:76:5e:3f:db:e9:3c:0a:7e:e0:c8:e5: ff:03:a4:35:65:a9:56:17:d3:7d:a4:c7:d2:5e:0e: 6f:17:3d:21:74:1a:f5:ca:c8:c0:c4:a9:94:e1:cb: 49:c2:1b:d7:82:6e:67:52:45:b3:a4:a5:95:95:ab: 9a:c6:a9:c4:e4:22:9e:4f:1a:4e:dc:ed:65:88:c8: 4f:00:7e:9a:0d:5e:94:b7:e5:29:04:73:9d:85:99: 83:43:cc:37:c1:5f:92:64:63:1e:29:e7:6d:c7:ae: fb:2f:7d:89:db:dc:24:90:fc:6f:6e:24:9d:92:5d: 38:54:a0:56:5f:cc:b1:98:cd:ce:ac:ad:4c:5f:72: 9b:b7:da:59:53:a5:a1:77:eb:59:f1:ab:24:76:8a: 5d:6e:02:ba:0b:c1:f2:6f:fe:8a:78:ad:34:b1:5a: 8d:2d:ed:f2:0c:94:ed:45:7e:b6:40:e5:cc:51:42: 82:60:2d:38:c7:5d:a9:4e:2c:f0:be:53:d4:ba:af: 5d:be:b6:06:2d:ab:a0:21:b8:0e:f0:cb:db:1d:6b: 82:38:1b:a6:f7:dc:a2:24:72:ee:c0:da:bb:2c:a4: 23:d9:83:cd:60:bd:ae:a7:9f:cc:70:27:8e:01:c8: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9F:53:BC:38:78:9E:40:A7:99:2C:33:FD:B8:2C:43:B4:65:B3:D7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/44f47a87-fa5e-4db0-bb12-60c873b8710c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.32.0/24 Signature Algorithm: sha256WithRSAEncryption 23:94:3f:e7:3f:07:a9:fc:98:ce:d8:b1:7e:db:1d:e7:b5:3c: 6e:db:5a:48:2f:ae:cf:80:b4:7e:e2:62:17:27:cf:13:35:c8: 83:1c:b5:71:8c:80:e2:de:99:13:b8:fb:33:2a:e4:d2:8c:08: 38:75:f5:14:6d:65:79:f9:21:91:7c:a9:63:0a:22:fd:5c:f6: 9f:ed:52:13:69:66:45:46:1c:d7:6d:71:85:55:50:7a:0d:c6: 46:87:1b:da:30:78:96:be:84:02:a3:0c:74:7c:69:60:0b:48: 6e:1d:ea:f5:55:56:f7:2c:94:af:26:a0:62:70:82:b0:8e:26: 2c:e4:aa:42:51:6b:00:97:05:29:49:a8:92:0b:0a:22:d6:78: 18:05:21:11:f0:bb:8d:f7:8d:32:aa:50:46:be:3d:12:35:42: c5:90:97:a7:4e:8f:3c:87:ac:95:a7:d8:21:d9:0c:e7:02:fa: 60:d8:06:81:3b:d6:e7:e9:80:3a:43:01:45:4a:99:b1:f7:7f: 2c:60:41:54:60:77:c3:03:bf:88:86:31:bf:c3:87:d4:87:c8: cd:20:dd:11:b7:89:78:5b:ff:64:be:30:31:64:a7:53:1a:c2: 1d:4b:e6:71:ef:02:81:6d:0c:67:55:38:ac:09:f4:53:fa:56: df:71:05:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfCZuftfwHCof6w8JAkOXW1AJ8qMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE1MDMxMDA2WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDU5NWQ4ODMxN2NhZGM2NTEzNWRkNGQ0NDgxY2ZmMmFh YWE3ZGY3ODE1ZDFlNDBiMzQyODRkMWMzNWU2ZDg0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDILMfM3xScJ8DlKoUy5MLWBF12Xj/b6TwKfuDI5f8DpDVl qVYX032kx9JeDm8XPSF0GvXKyMDEqZThy0nCG9eCbmdSRbOkpZWVq5rGqcTkIp5P Gk7c7WWIyE8AfpoNXpS35SkEc52FmYNDzDfBX5JkYx4p523HrvsvfYnb3CSQ/G9u JJ2SXThUoFZfzLGYzc6srUxfcpu32llTpaF361nxqyR2il1uAroLwfJv/op4rTSx Wo0t7fIMlO1FfrZA5cxRQoJgLTjHXalOLPC+U9S6r12+tgYtq6AhuA7wy9sda4I4 G6b33KIkcu7A2rsspCPZg81gva6nn8xwJ44ByO8DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9p9TvDh4nkCnmSwz/bgsQ7Rls9cwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzQ0ZjQ3YTg3LWZhNWUtNGRiMC1iYjEyLTYwYzg3M2I4NzEwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCAwDQYJKoZIhvcNAQELBQADggEBACOUP+c/B6n8mM7YsX7bHee1PG7b Wkgvrs+AtH7iYhcnzxM1yIMctXGMgOLemRO4+zMq5NKMCDh19RRtZXn5IZF8qWMK Iv1c9p/tUhNpZkVGHNdtcYVVUHoNxkaHG9oweJa+hAKjDHR8aWALSG4d6vVVVvcs lK8moGJwgrCOJizkqkJRawCXBSlJqJILCiLWeBgFIRHwu433jTKqUEa+PRI1QsWQ l6dOjzyHrJWn2CHZDOcC+mDYBoE71ufpgDpDAUVKmbH3fyxgQVRgd8MDv4iGMb/D h9SHyM0g3RG3iXhb/2S+MDFkp1Mawh1L5nHvAoFtDGdVOKwJ9FP6Vt9xBao= -----END CERTIFICATE-----Generated at Thu Nov 12 18:15:38 2026 by rpki-client