$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa File: 724c8337-ea3c-48d0-aa37-5e55be799b4e.roa (raw, json) Hash identifier: Sh4Q95U9Nr9MCG9yTNebFI3WuA8yHCglCn4UOIamt4Q= Subject key identifier: 90:56:6C:0E:A4:6D:E1:54:B5:04:6F:46:CA:FC:8B:65:BE:8C:89:2C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 25FA8CC5773B214E9AEFE67F0D250548759999DD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa Signing time: Thu 23 Jul 2026 14:50:07 +0000 ROA not before: Thu 23 Jul 2026 14:50:07 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fa:8c:c5:77:3b:21:4e:9a:ef:e6:7f:0d:25:05:48:75:99:99:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 23 14:50:07 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=f817e9e0a3fe6567f48a2223bf76b1dab3fa2b1b78ea01ba1c4da1bdbe040fee, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3a:1d:ce:73:a4:fb:e5:89:a3:00:d1:88:34: 5c:ba:b9:93:53:5d:bd:59:96:5d:7d:e2:77:f8:ea: 97:4c:28:52:72:3f:0d:2f:96:85:19:02:dc:e8:ad: 59:f1:8d:a0:2b:a9:39:27:98:34:c4:a8:3a:61:34: 4d:d5:ab:c0:56:fb:9e:7a:20:12:97:7f:a5:56:87: b4:e3:3d:2d:fe:b4:69:f6:4f:a9:c5:b0:0b:5d:99: 83:e9:1c:31:55:43:52:aa:13:45:5a:c1:08:5e:c3: f2:86:3f:60:a6:c5:45:c8:50:37:78:5e:83:c7:7e: 45:fd:97:10:c6:d6:6e:30:85:f0:66:16:78:73:10: f0:42:2c:62:f5:92:4a:d1:98:7c:91:da:21:fd:8c: b4:a7:8d:aa:ab:91:1b:d3:35:35:13:cf:6b:f2:5f: 47:d4:9e:2f:fb:ec:86:7a:40:3e:e7:d7:9e:70:c3: 9b:b8:51:6a:52:7b:8b:27:6b:ec:75:4f:07:40:10: f6:63:6b:4d:dd:06:b5:f8:db:4a:e8:c6:3d:b2:47: 12:b7:98:c9:26:66:4a:8d:9b:7a:83:7a:cd:b5:57: 42:da:01:24:c3:86:96:5d:fb:02:4e:dd:4c:8b:59: d3:ce:d0:34:14:4a:d4:7b:34:e9:ce:5b:ea:d6:5c: 05:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:56:6C:0E:A4:6D:E1:54:B5:04:6F:46:CA:FC:8B:65:BE:8C:89:2C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 88:8b:2b:f4:f4:04:e4:27:d3:b3:c6:8c:6a:a6:f5:83:cd:86: ff:b5:fd:bc:47:4c:1d:62:ae:c4:1f:9e:a7:c8:44:d7:29:a9: 63:15:d8:59:34:90:79:2b:a8:d0:15:35:61:f0:5f:aa:86:9f: 68:a8:ef:95:4b:7c:84:25:51:39:62:89:76:7c:88:5c:c2:c7: eb:df:d3:1e:09:55:cb:61:01:09:79:78:95:f9:16:4c:93:6b: 01:76:3e:ec:a6:ea:48:c8:62:67:c6:8b:63:51:09:d6:e0:5f: d4:6c:74:d7:78:bd:e3:6e:5b:fe:92:e9:b7:0a:49:20:52:07: d4:98:dd:59:38:b8:d3:d6:2b:48:58:8d:7f:38:be:24:b5:7c: 4f:33:52:ea:e8:7d:2a:59:e8:44:44:cc:dd:65:11:b3:d5:7d: e0:a7:ef:14:29:23:90:a3:4a:ec:79:90:88:74:65:e4:d1:6b: 06:54:40:25:8b:a2:63:dc:47:57:9b:71:ed:35:3f:7e:5a:7c: c6:5c:e3:77:84:95:49:57:de:68:43:90:11:5d:0a:25:e2:33: d4:7e:b2:d6:9f:11:39:5a:6a:32:ec:c5:6c:75:8f:1c:7c:d4: 35:5e:cf:3f:59:e4:65:7b:fc:1b:4a:c7:09:de:0b:53:5a:34: 31:60:73:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJfqMxXc7IU6a7+Z/DSUFSHWZmd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzIzMTQ1MDA3WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODE3ZTllMGEzZmU2NTY3ZjQ4YTIyMjNiZjc2YjFkYWIz ZmEyYjFiNzhlYTAxYmExYzRkYTFiZGJlMDQwZmVlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYOh3Oc6T75YmjANGINFy6uZNTXb1Zll194nf46pdMKFJy Pw0vloUZAtzorVnxjaArqTknmDTEqDphNE3Vq8BW+556IBKXf6VWh7TjPS3+tGn2 T6nFsAtdmYPpHDFVQ1KqE0VawQhew/KGP2CmxUXIUDd4XoPHfkX9lxDG1m4whfBm FnhzEPBCLGL1kkrRmHyR2iH9jLSnjaqrkRvTNTUTz2vyX0fUni/77IZ6QD7n155w w5u4UWpSe4sna+x1TwdAEPZja03dBrX420roxj2yRxK3mMkmZkqNm3qDes21V0La ASTDhpZd+wJO3UyLWdPO0DQUStR7NOnOW+rWXAWZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkFZsDqRt4VS1BG9GyvyLZb6MiSwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcyNGM4MzM3LWVhM2MtNDhkMC1hYTM3LTVlNTViZTc5OWI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBAIiLK/T0BOQn07PGjGqm9YPNhv+1 /bxHTB1irsQfnqfIRNcpqWMV2Fk0kHkrqNAVNWHwX6qGn2io75VLfIQlUTliiXZ8 iFzCx+vf0x4JVcthAQl5eJX5FkyTawF2Puym6kjIYmfGi2NRCdbgX9RsdNd4veNu W/6S6bcKSSBSB9SY3Vk4uNPWK0hYjX84viS1fE8zUurofSpZ6EREzN1lEbPVfeCn 7xQpI5CjSux5kIh0ZeTRawZUQCWLomPcR1ebce01P35afMZc43eElUlX3mhDkBFd CiXiM9R+stafETlaajLsxWx1jxx81DVezz9Z5GV7/BtKxwneC1NaNDFgc/o= -----END CERTIFICATE-----Generated at Fri Jul 24 05:24:43 2026 by rpki-client