$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa File: 8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa (raw, json) Hash identifier: V7KmlC801myB7ti3827cAXIdAUHNVWcfaCamnLrgBWI= Subject key identifier: A9:9F:0A:5E:65:9D:68:81:69:35:E9:54:0B:B0:69:93:27:27:66:C8 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 42D2C7B9FFF0DEF043A7A438670EA4D6BB596CE5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa Signing time: Tue 12 May 2026 00:50:13 +0000 ROA not before: Tue 12 May 2026 00:50:13 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.111.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d2:c7:b9:ff:f0:de:f0:43:a7:a4:38:67:0e:a4:d6:bb:59:6c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 12 00:50:13 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=7f681509b6bac41b6ea4ddb12791f7795b52166ce2f1a0fe56b347013e08b0e8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:77:5d:71:c0:9e:fb:3d:0c:bf:a2:85:82: e6:de:5c:9d:91:81:63:87:d1:b8:a4:43:fa:33:cb: 58:4c:ca:19:4b:73:fd:aa:65:3f:b4:87:ae:9f:49: 41:bc:73:1a:c6:e5:31:66:8d:6a:d7:5d:86:d5:fd: 70:72:ba:b9:88:49:62:f9:ef:a2:12:3c:75:da:6d: f6:70:34:62:b8:61:e4:55:13:8f:e4:a8:5e:f4:88: a5:82:71:c1:4a:f7:03:76:56:54:bf:67:de:27:68: ca:8b:23:d9:5d:49:f8:58:6f:34:7b:8a:a6:f5:ad: fd:f0:4d:68:9e:7d:11:50:62:83:b7:1e:a2:4e:40: d4:ce:55:1e:30:29:8f:62:30:b5:a0:19:a3:2b:37: 83:80:fa:bb:3e:0f:67:98:01:07:38:9f:91:bf:21: fc:91:1a:28:52:b4:20:ac:d0:39:86:07:34:27:97: 72:18:c2:e1:c5:60:4d:53:bb:f9:d6:45:fb:e3:b5: 79:02:34:53:07:65:f9:ea:1c:c5:23:64:45:eb:32: 67:9d:ed:63:9d:1f:3c:f1:b9:f6:9b:15:86:32:fc: 2c:aa:ef:b3:5e:45:f5:6b:b0:ae:f9:5f:c0:c2:01: f7:8d:43:0d:00:63:b3:ef:ab:6e:2e:40:d2:80:fb: 60:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9F:0A:5E:65:9D:68:81:69:35:E9:54:0B:B0:69:93:27:27:66:C8 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.252.0/24 Signature Algorithm: sha256WithRSAEncryption 16:0e:ba:b8:b5:8a:a3:74:b6:f3:4f:aa:0d:c3:0b:b8:81:6b: 44:bd:23:87:e9:ee:53:44:28:19:88:67:ef:37:a6:b1:f5:04: 7e:d5:57:5c:f0:6c:74:99:06:fe:d5:c7:a1:c5:20:cc:ff:bd: 54:e5:76:ac:ca:08:1d:d7:00:7f:91:30:bc:7b:84:ac:dc:78: 77:17:94:c9:36:30:a9:cd:ba:1d:22:b3:6b:86:32:87:02:ee: 2a:51:3e:b0:5a:31:71:32:91:b2:d4:1e:6e:09:b7:5a:b5:1c: 3a:ba:2b:f4:28:b2:12:ea:3b:09:be:d7:c4:a7:35:d4:e1:b6: 79:a0:9b:6e:b2:4d:5c:15:49:cc:7f:59:33:91:45:a2:52:b1: 1b:48:16:30:c9:39:56:a8:ca:58:6b:44:fd:c5:0f:91:92:a2: de:ce:7b:89:0d:fc:d7:70:ec:c4:a7:70:16:5d:e5:f3:de:31: 79:87:d0:a6:94:28:68:4e:96:79:34:5e:f2:0e:b7:1a:d1:c5: dd:b3:49:4c:21:60:ca:dd:7c:ad:a3:16:8b:8d:6e:ef:df:53: bf:24:7b:11:5e:3c:1d:bb:70:27:87:46:49:20:15:f2:f3:bf: f0:1e:f5:91:8a:be:66:67:28:58:5c:02:47:e8:98:da:7b:92: b0:ba:c8:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQtLHuf/w3vBDp6Q4Zw6k1rtZbOUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTEyMDA1MDEzWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjY4MTUwOWI2YmFjNDFiNmVhNGRkYjEyNzkxZjc3OTVi NTIxNjZjZTJmMWEwZmU1NmIzNDcwMTNlMDhiMGU4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChOnddccCe+z0Mv6KFgubeXJ2RgWOH0bikQ/ozy1hMyhlL c/2qZT+0h66fSUG8cxrG5TFmjWrXXYbV/XByurmISWL576ISPHXabfZwNGK4YeRV E4/kqF70iKWCccFK9wN2VlS/Z94naMqLI9ldSfhYbzR7iqb1rf3wTWiefRFQYoO3 HqJOQNTOVR4wKY9iMLWgGaMrN4OA+rs+D2eYAQc4n5G/IfyRGihStCCs0DmGBzQn l3IYwuHFYE1Tu/nWRfvjtXkCNFMHZfnqHMUjZEXrMmed7WOdHzzxufabFYYy/Cyq 77NeRfVrsK75X8DCAfeNQw0AY7Pvq24uQNKA+2DLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqZ8KXmWdaIFpNelUC7BpkycnZsgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg2MDBmYmUyLTI2ZTAtNDI5Mi1hNGYwLTMwNzdlYjhlMWUzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/wwDQYJKoZIhvcNAQELBQADggEBABYOuri1iqN0tvNPqg3DC7iBa0S9 I4fp7lNEKBmIZ+83prH1BH7VV1zwbHSZBv7Vx6HFIMz/vVTldqzKCB3XAH+RMLx7 hKzceHcXlMk2MKnNuh0is2uGMocC7ipRPrBaMXEykbLUHm4Jt1q1HDq6K/QoshLq Owm+18SnNdThtnmgm26yTVwVScx/WTORRaJSsRtIFjDJOVaoylhrRP3FD5GSot7O e4kN/Ndw7MSncBZd5fPeMXmH0KaUKGhOlnk0XvIOtxrRxd2zSUwhYMrdfK2jFouN bu/fU78kexFePB27cCeHRkkgFfLzv/Ae9ZGKvmZnKFhcAkfomNp7krC6yFw= -----END CERTIFICATE-----Generated at Tue May 12 23:19:22 2026 by rpki-client