$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa File: 6b90b1f9-6b22-4e82-af32-2981da75246a.roa (raw, json) Hash identifier: 2xto2eiM6HTTeFni6GrQpbM8IFGU+WEhF8RlpqUTX0w= Subject key identifier: B1:94:43:2E:96:8A:64:03:0D:42:84:8E:27:7F:71:BF:36:D3:A7:69 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 44AF7D19591658A64327CF1FE5F59EE4C4D8455B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa Signing time: Thu 15 Oct 2026 03:10:03 +0000 ROA not before: Thu 15 Oct 2026 03:10:03 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:af:7d:19:59:16:58:a6:43:27:cf:1f:e5:f5:9e:e4:c4:d8:45:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 15 03:10:03 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=acc7df69ce066484568322f38ebf91ee0293a844b950289bac5e180192ef60f9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:c5:7c:43:e8:84:95:4e:94:cd:bf:e5:0c: 5a:59:a2:63:d3:fd:2b:7a:10:5b:dc:7a:87:7a:2a: d5:2a:53:a3:8a:10:6f:be:32:74:37:b3:34:10:f1: 8e:8a:a0:4c:54:4f:b9:2a:09:c0:bb:12:6a:f0:a4: a1:e3:be:0b:fd:62:94:61:ba:09:ed:d3:c8:08:fa: eb:99:99:04:f6:0c:7b:61:ba:1d:6b:4a:1a:e5:eb: 42:1b:fb:03:e7:d5:c1:e7:7b:9a:69:8f:d5:95:3d: c5:61:89:f5:a8:01:12:9c:f7:bc:04:da:6a:3e:2e: d5:b4:da:3c:e0:11:f3:16:67:21:5e:72:8a:03:9d: 30:3a:82:50:2f:ba:d0:69:9b:fd:e4:1e:26:fb:bb: 2b:84:de:05:4a:08:cc:ff:1d:8d:40:5c:92:1a:a1: 19:8f:a1:58:3e:12:48:d0:ff:84:e3:03:32:d1:48: 65:cb:32:60:e5:c8:e7:c7:30:44:24:5d:84:bc:4b: 65:45:2d:c3:92:7f:b5:47:a9:6a:05:08:c9:3f:d4: c4:e7:b6:af:7e:a9:7a:77:3a:b5:04:95:6c:7b:9f: 94:cc:24:5c:9c:31:70:87:a7:64:02:54:59:6c:f1: 92:59:ee:e8:5b:61:fe:8b:bb:56:f9:66:43:ce:ce: 2c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:94:43:2E:96:8A:64:03:0D:42:84:8E:27:7F:71:BF:36:D3:A7:69 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.33.0/24 Signature Algorithm: sha256WithRSAEncryption 20:4d:f4:77:7e:34:8a:91:7d:a5:da:ba:d3:53:27:a3:6d:aa: f1:70:a7:11:15:8f:46:01:c9:9b:c7:67:19:fc:17:94:44:2c: a1:a7:f5:c2:cc:a5:55:60:20:e9:17:3b:de:89:e4:c7:05:55: c1:07:3c:15:42:6c:fd:d4:0f:2c:5b:72:9b:83:28:9a:a9:3e: e5:38:c6:14:5e:13:5d:32:4c:ef:7b:7e:c1:33:47:38:09:7e: fb:34:a8:3e:c6:5a:cf:56:a7:d3:fb:e3:cf:e8:e9:a8:65:9f: ff:6c:f8:9f:7c:bf:51:33:7f:3c:56:41:7b:14:06:46:70:22: d9:7c:60:22:87:a5:33:42:13:1f:24:bf:63:b1:4f:40:a5:cf: 12:51:cc:91:00:52:d2:91:00:10:f4:76:2a:4e:82:0e:ba:8c: 73:a9:6f:66:b7:c2:52:1e:48:35:13:93:5a:c9:b7:79:3f:0c: 5f:26:82:72:21:33:26:7f:d1:b7:6f:05:7a:c9:94:fd:4a:83: e2:44:7c:0c:dc:ad:86:23:fc:3b:fd:7f:fd:12:93:24:d4:c8: f0:61:21:f6:f3:cf:ba:51:2e:21:66:c3:64:b7:ea:a2:4d:40: 7b:d0:98:0f:e9:9d:26:6e:83:fc:93:67:91:e7:7b:b0:58:55: dd:61:8c:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURK99GVkWWKZDJ88f5fWe5MTYRVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE1MDMxMDAzWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhY2M3ZGY2OWNlMDY2NDg0NTY4MzIyZjM4ZWJmOTFlZTAy OTNhODQ0Yjk1MDI4OWJhYzVlMTgwMTkyZWY2MGY5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2SsV8Q+iElU6Uzb/lDFpZomPT/St6EFvceod6KtUqU6OK EG++MnQ3szQQ8Y6KoExUT7kqCcC7EmrwpKHjvgv9YpRhugnt08gI+uuZmQT2DHth uh1rShrl60Ib+wPn1cHne5ppj9WVPcVhifWoARKc97wE2mo+LtW02jzgEfMWZyFe cooDnTA6glAvutBpm/3kHib7uyuE3gVKCMz/HY1AXJIaoRmPoVg+EkjQ/4TjAzLR SGXLMmDlyOfHMEQkXYS8S2VFLcOSf7VHqWoFCMk/1MTntq9+qXp3OrUElWx7n5TM JFycMXCHp2QCVFls8ZJZ7uhbYf6Lu1b5ZkPOziytAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsZRDLpaKZAMNQoSOJ39xvzbTp2kwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzZiOTBiMWY5LTZiMjItNGU4Mi1hZjMyLTI5ODFkYTc1MjQ2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCEwDQYJKoZIhvcNAQELBQADggEBACBN9Hd+NIqRfaXautNTJ6NtqvFw pxEVj0YByZvHZxn8F5RELKGn9cLMpVVgIOkXO96J5McFVcEHPBVCbP3UDyxbcpuD KJqpPuU4xhReE10yTO97fsEzRzgJfvs0qD7GWs9Wp9P748/o6ahln/9s+J98v1Ez fzxWQXsUBkZwItl8YCKHpTNCEx8kv2OxT0ClzxJRzJEAUtKRABD0dipOgg66jHOp b2a3wlIeSDUTk1rJt3k/DF8mgnIhMyZ/0bdvBXrJlP1Kg+JEfAzcrYYj/Dv9f/0S kyTUyPBhIfbzz7pRLiFmw2S36qJNQHvQmA/pnSZug/yTZ5Hne7BYVd1hjKY= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:44 2026 by rpki-client