$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f5245f4-4d87-41a1-ab55-898a8997c2d8.roa File: 5f5245f4-4d87-41a1-ab55-898a8997c2d8.roa (raw, json) Hash identifier: GNmCNdwHosm/Bk8W9bpRmkvwJ3RgbXn5FthMbo30QOk= Subject key identifier: A2:19:F7:12:05:37:F0:C9:BC:91:2E:FA:75:9F:BD:11:10:A9:48:F8 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6886B9D44CEA2009EDFF481FC04ED7FE229A6CD1 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f5245f4-4d87-41a1-ab55-898a8997c2d8.roa Signing time: Tue 12 May 2026 00:50:12 +0000 ROA not before: Tue 12 May 2026 00:50:12 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:86:b9:d4:4c:ea:20:09:ed:ff:48:1f:c0:4e:d7:fe:22:9a:6c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 12 00:50:12 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=61b71403f6287cd9667cfff7f027e76684cc42ef7706527ff4f7ce94ba3dffd0, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:7f:b1:e6:13:90:64:86:b0:f9:04:2e:f9: a2:58:f3:f0:1c:3f:6f:76:f4:0b:ec:7d:4c:46:48: e7:37:93:67:ca:10:5f:ff:34:0c:43:e3:53:7c:a0: 9d:f6:70:23:4f:70:49:52:3f:11:78:02:7a:ac:50: 39:f1:d4:0f:6f:e2:18:a5:6f:00:a0:97:20:8a:14: fe:7f:42:15:a0:c5:c5:5d:08:d2:e2:89:d3:9f:db: de:49:dc:cd:b1:8e:82:a9:3c:ba:43:8d:7d:8e:7b: 7f:d1:27:76:ab:50:cf:ec:38:89:a1:d2:81:41:25: 8b:f4:98:33:18:27:9d:b4:80:24:3a:96:63:61:c0: 70:c6:f2:9c:64:a7:3a:1c:aa:f8:e5:b8:12:fd:86: a0:58:b9:b1:9c:45:89:77:13:71:d8:6c:c8:33:a2: bc:81:bb:b7:93:c4:79:22:fe:d9:1d:d5:54:06:0f: b0:0b:59:89:c7:d9:87:a3:ee:39:5c:55:bc:f5:b8: 08:07:af:3a:f4:09:42:25:90:a1:2c:2d:c8:9d:00: a6:69:a2:e5:35:45:0a:2c:ad:5c:b7:ca:e3:c6:29: 31:95:dc:2e:9f:f2:8d:2c:f3:17:e8:60:95:d0:74: 65:07:9c:5e:c1:cb:69:1b:7e:a5:7e:e5:cd:f5:29: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:F7:12:05:37:F0:C9:BC:91:2E:FA:75:9F:BD:11:10:A9:48:F8 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f5245f4-4d87-41a1-ab55-898a8997c2d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.49.0/24 Signature Algorithm: sha256WithRSAEncryption 91:69:ab:0f:2c:68:89:1e:1a:18:d6:8d:cd:80:ae:61:c3:d7: 59:e5:dd:3c:9b:46:00:42:43:b8:49:71:04:5d:94:59:df:11: b0:3d:57:a0:e0:d7:6f:e8:34:b0:1c:f2:1c:0c:d6:0b:34:bd: 14:7b:c1:cd:df:98:1c:99:c0:07:3f:9e:48:10:37:ab:12:fd: b5:e9:18:aa:49:55:38:20:0b:f0:43:15:0a:56:c9:d9:d3:31: 42:72:b6:bd:e2:03:04:e1:74:52:5b:b2:05:7f:f4:d6:9c:8d: b2:9a:a5:d3:22:4f:e6:5b:71:4d:99:56:12:3d:7b:63:cd:f6: d5:d0:37:1c:13:55:f1:aa:20:1a:e2:e1:20:d2:1d:5a:57:7f: 7b:64:e3:53:cd:4f:9f:5a:46:18:b3:a8:68:13:5f:32:a9:99: 11:ac:b4:92:bf:4b:0e:36:22:da:26:1f:62:85:8f:a9:f2:8d: 01:e9:91:80:4c:f8:36:2a:b0:3c:5c:02:1d:59:59:84:7b:b3: 44:e0:05:3b:97:0f:a8:11:bc:1d:bc:16:01:3f:8f:2e:a6:fc: 55:55:7d:8b:13:77:ce:d4:d1:df:04:b0:95:eb:44:41:03:5b: 35:b0:a8:11:4c:28:dc:e5:61:75:b1:51:3f:e6:b8:8b:9d:25: 73:47:8c:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaIa51EzqIAnt/0gfwE7X/iKabNEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTEyMDA1MDEyWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MWI3MTQwM2Y2Mjg3Y2Q5NjY3Y2ZmZjdmMDI3ZTc2Njg0 Y2M0MmVmNzcwNjUyN2ZmNGY3Y2U5NGJhM2RmZmQwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnF3+x5hOQZIaw+QQu+aJY8/AcP2929AvsfUxGSOc3k2fK EF//NAxD41N8oJ32cCNPcElSPxF4AnqsUDnx1A9v4hilbwCglyCKFP5/QhWgxcVd CNLiidOf295J3M2xjoKpPLpDjX2Oe3/RJ3arUM/sOImh0oFBJYv0mDMYJ520gCQ6 lmNhwHDG8pxkpzocqvjluBL9hqBYubGcRYl3E3HYbMgzoryBu7eTxHki/tkd1VQG D7ALWYnH2Yej7jlcVbz1uAgHrzr0CUIlkKEsLcidAKZpouU1RQosrVy3yuPGKTGV 3C6f8o0s8xfoYJXQdGUHnF7By2kbfqV+5c31KXMrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUohn3EgU38Mm8kS76dZ+9ERCpSPgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVmNTI0NWY0LTRkODctNDFhMS1hYjU1LTg5OGE4OTk3YzJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDEwDQYJKoZIhvcNAQELBQADggEBAJFpqw8saIkeGhjWjc2ArmHD11nl 3TybRgBCQ7hJcQRdlFnfEbA9V6Dg12/oNLAc8hwM1gs0vRR7wc3fmByZwAc/nkgQ N6sS/bXpGKpJVTggC/BDFQpWydnTMUJytr3iAwThdFJbsgV/9NacjbKapdMiT+Zb cU2ZVhI9e2PN9tXQNxwTVfGqIBri4SDSHVpXf3tk41PNT59aRhizqGgTXzKpmRGs tJK/Sw42ItomH2KFj6nyjQHpkYBM+DYqsDxcAh1ZWYR7s0TgBTuXD6gRvB28FgE/ jy6m/FVVfYsTd87U0d8EsJXrREEDWzWwqBFMKNzlYXWxUT/muIudJXNHjH8= -----END CERTIFICATE-----Generated at Wed May 13 03:41:26 2026 by rpki-client