$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b1249ac-b74a-4544-80b2-2b577af731f1.roa File: 8b1249ac-b74a-4544-80b2-2b577af731f1.roa (raw, json) Hash identifier: VAl+u+7mCuaIHSVtQ28tS81/DwTIg3Z1b49LybUqi/c= Subject key identifier: 78:CB:72:56:1A:59:9E:78:40:C8:43:A8:CE:03:50:76:6F:CD:BC:38 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 535B3A38A18BF3F53F791B888FDCA4963D2E6D07 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b1249ac-b74a-4544-80b2-2b577af731f1.roa Signing time: Thu 23 Jul 2026 15:00:06 +0000 ROA not before: Thu 23 Jul 2026 15:00:06 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5b:3a:38:a1:8b:f3:f5:3f:79:1b:88:8f:dc:a4:96:3d:2e:6d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 23 15:00:06 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=8e1ba19b474a665fac317fe719395e20d417131bac866e20404871778d4b55dd, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:a1:d7:42:62:de:68:0e:44:89:f9:ea:17: 2c:b7:86:4a:4f:cc:a6:a4:0f:8f:18:b6:ae:67:fb: 58:c0:63:cf:89:ef:6f:a4:0e:ce:2a:ac:bc:34:9e: ea:49:64:2a:47:c1:09:55:2c:03:2e:ef:28:ca:3d: a1:f2:8e:77:dc:79:05:8f:37:4c:f1:6f:7b:26:d0: d0:b0:d0:77:ba:ba:9c:67:c7:e9:0f:5a:19:c7:f4: 79:8e:fa:38:75:65:1c:a2:83:b4:ef:25:32:a0:d5: cf:02:41:c6:0e:8d:23:89:83:bc:c1:96:a1:4c:9f: 91:72:45:7c:90:d6:33:1d:21:61:03:ca:8a:77:dc: 4a:c6:78:d2:a1:80:13:a4:70:76:88:a5:18:00:04: d5:71:c7:25:f4:9e:7a:01:7b:1a:1f:48:1b:cd:ff: 9e:08:e3:14:03:f0:33:b7:c9:13:05:db:fd:59:dc: 34:65:b4:74:c9:e2:d2:61:9e:38:b4:98:49:a7:ec: 82:42:92:1c:f1:e9:c7:46:96:14:b2:65:51:c6:7c: 7f:14:f1:4d:e1:c7:41:1a:b8:ff:4e:13:ac:a8:8d: 62:cc:a4:20:51:56:db:cb:f8:32:8d:75:5d:54:d1: 25:01:df:78:1c:99:2e:b9:31:da:25:2a:0a:f7:e3: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CB:72:56:1A:59:9E:78:40:C8:43:A8:CE:03:50:76:6F:CD:BC:38 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b1249ac-b74a-4544-80b2-2b577af731f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:06:86:48:bc:12:a3:5d:fc:a3:6e:93:d0:d3:99:9c:6e:ee: ef:16:00:a7:0e:ae:fa:0b:dc:e2:d9:64:cc:ea:b8:64:fd:08: e8:02:95:49:89:50:fb:35:03:6b:a0:5e:c4:af:d3:97:65:95: 1f:67:d3:21:51:a8:58:38:d8:60:76:62:10:47:20:cc:22:b1: 89:1c:b7:ee:90:d6:97:7a:28:09:99:78:83:52:61:9e:f7:ed: 87:56:46:78:65:9b:2e:c4:37:cd:58:d6:1b:29:35:ae:4f:20: 84:f5:7c:47:45:64:f2:d4:9e:41:93:85:b1:b3:1a:83:e2:f7: 7d:24:1c:69:8c:70:39:ca:44:f6:d2:15:aa:48:44:b1:74:ba: 9b:d9:08:d6:52:8e:95:a1:39:f2:a5:17:0d:63:3e:61:17:0c: 2b:6c:be:19:18:c5:73:bf:f4:c0:7f:67:ca:f4:24:92:d9:6a: 1a:ca:23:ec:18:8a:9a:3c:c6:89:21:04:42:e2:8b:54:07:73: 81:33:77:1b:c8:5e:95:b2:b9:82:33:13:a7:17:ac:3b:f6:40: 10:dd:48:f5:ed:3f:c2:5b:76:ae:3f:58:7c:32:e1:e9:fe:80: 73:29:2d:57:9e:96:69:49:75:5e:5b:ef:20:01:44:af:01:1f: 1b:eb:7b:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU1s6OKGL8/U/eRuIj9yklj0ubQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzIzMTUwMDA2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTFiYTE5YjQ3NGE2NjVmYWMzMTdmZTcxOTM5NWUyMGQ0 MTcxMzFiYWM4NjZlMjA0MDQ4NzE3NzhkNGI1NWRkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzYaHXQmLeaA5EifnqFyy3hkpPzKakD48Ytq5n+1jAY8+J 72+kDs4qrLw0nupJZCpHwQlVLAMu7yjKPaHyjnfceQWPN0zxb3sm0NCw0He6upxn x+kPWhnH9HmO+jh1ZRyig7TvJTKg1c8CQcYOjSOJg7zBlqFMn5FyRXyQ1jMdIWED yop33ErGeNKhgBOkcHaIpRgABNVxxyX0nnoBexofSBvN/54I4xQD8DO3yRMF2/1Z 3DRltHTJ4tJhnji0mEmn7IJCkhzx6cdGlhSyZVHGfH8U8U3hx0EauP9OE6yojWLM pCBRVtvL+DKNdV1U0SUB33gcmS65MdolKgr348T3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeMtyVhpZnnhAyEOozgNQdm/NvDgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhiMTI0OWFjLWI3NGEtNDU0NC04MGIyLTJiNTc3YWY3MzFmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBQwDQYJKoZIhvcNAQELBQADggEBAG8Ghki8EqNd/KNuk9DTmZxu7u8W AKcOrvoL3OLZZMzquGT9COgClUmJUPs1A2ugXsSv05dllR9n0yFRqFg42GB2YhBH IMwisYkct+6Q1pd6KAmZeINSYZ737YdWRnhlmy7EN81Y1hspNa5PIIT1fEdFZPLU nkGThbGzGoPi930kHGmMcDnKRPbSFapIRLF0upvZCNZSjpWhOfKlFw1jPmEXDCts vhkYxXO/9MB/Z8r0JJLZahrKI+wYipo8xokhBELii1QHc4EzdxvIXpWyuYIzE6cX rDv2QBDdSPXtP8Jbdq4/WHwy4en+gHMpLVeelmlJdV5b7yABRK8BHxvre7o= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:30 2026 by rpki-client