$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8d6939c0-9563-4976-9ada-00e0bc130168.roa File: 8d6939c0-9563-4976-9ada-00e0bc130168.roa (raw, json) Hash identifier: RDYv32C8Smn7DIFr399faNUjCjsvJSFRLPsjzyD7bLM= Subject key identifier: 10:3B:12:16:86:07:C3:43:7A:A7:CA:89:96:14:F9:FD:00:8C:23:97 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6FBCC9213BE192EF5D95961B6753F853478B1A89 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8d6939c0-9563-4976-9ada-00e0bc130168.roa Signing time: Mon 19 Oct 2026 01:50:06 +0000 ROA not before: Mon 19 Oct 2026 01:50:06 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bc:c9:21:3b:e1:92:ef:5d:95:96:1b:67:53:f8:53:47:8b:1a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 01:50:06 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=698766b4570252bc979d20287f6f948d77e42d017658f8f2b9e260f702bee713, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:e0:0b:96:97:25:96:7c:4f:35:46:78:30: d8:b4:e8:c5:fc:33:4a:00:8b:5c:81:3f:ff:06:bf: 2f:73:ab:85:af:7c:c3:82:2c:76:57:07:03:3a:51: 13:38:2a:b8:a6:d6:af:6e:3a:2c:9d:c5:f5:f6:de: 55:c7:d4:24:f6:5c:fe:a7:38:c9:2f:6f:97:b7:07: ee:8b:34:d3:11:70:c2:bf:9c:4b:7e:14:5f:75:87: af:57:c8:dd:ab:43:0b:cf:34:6b:d3:f1:38:33:8b: d3:f3:14:a9:57:8c:0c:60:7a:d0:25:c7:7a:a7:4a: e0:d2:9f:01:c5:4d:48:58:63:fc:c5:ca:36:00:b9: cf:bf:89:80:71:5a:e1:83:ca:ab:f1:e3:29:cd:9f: c7:ce:bf:86:80:66:e6:35:bd:15:c2:1e:bf:24:ec: 65:c1:1f:6c:dc:56:1f:e4:67:e2:1f:e7:63:7a:4a: 09:56:17:3e:44:7a:ae:ef:4b:3e:55:dd:2d:26:ed: 24:94:10:64:d7:4a:13:dd:f5:b2:e7:73:d8:4a:84: fd:cb:78:13:67:76:ad:8d:32:49:e1:b1:7a:2c:34: d5:49:18:e9:63:51:0c:a0:c9:05:f4:55:d6:65:43: 79:0b:55:b7:6f:aa:fc:1d:75:b8:07:b5:97:59:c8: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3B:12:16:86:07:C3:43:7A:A7:CA:89:96:14:F9:FD:00:8C:23:97 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8d6939c0-9563-4976-9ada-00e0bc130168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.52.0/24 Signature Algorithm: sha256WithRSAEncryption 87:1a:3f:7a:bc:14:14:67:aa:9e:0f:51:33:35:0a:8d:8b:1f: 1f:4e:53:aa:c8:31:83:d8:3a:a1:40:97:8e:7d:e8:bb:be:c8: c2:b5:a2:15:1f:49:38:dd:82:d1:46:56:a4:f8:3b:da:ed:6c: bb:6c:29:31:15:28:9b:0e:ca:bb:8f:b2:70:46:9d:39:24:61: d1:b5:f5:75:0b:a2:b2:39:11:10:f6:1a:e7:f8:fd:ce:28:80: 2a:3c:b2:f4:37:9b:24:91:5b:74:df:9c:f1:db:5a:2a:b3:96: 3d:ae:21:ef:f6:0f:e4:9b:53:98:a3:c2:5f:3f:a1:c0:7e:f3: 71:e0:62:41:ff:d2:87:a1:c2:6a:4e:0f:a6:42:a3:18:f4:8f: 7f:16:cd:52:ff:7d:5d:22:22:04:c7:2b:59:ad:8f:1d:7e:39: eb:e0:d6:80:2d:0b:1d:c4:b4:c5:77:24:c6:c6:48:b7:54:d7: be:f2:b6:d1:ed:91:fb:f4:f5:e6:7e:55:1d:99:8a:24:9b:83: 0c:c6:cc:34:5a:22:86:7b:d3:17:ff:08:cf:a8:ff:2e:1c:51: f4:6c:1a:d0:17:6f:10:ed:1c:ef:73:99:ec:20:84:c1:d0:79: 5c:c0:40:f4:88:88:04:35:e4:3b:03:7b:1b:c0:48:4d:f3:de: 04:ac:c1:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb7zJITvhku9dlZYbZ1P4U0eLGokwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE5MDE1MDA2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTg3NjZiNDU3MDI1MmJjOTc5ZDIwMjg3ZjZmOTQ4ZDc3 ZTQyZDAxNzY1OGY4ZjJiOWUyNjBmNzAyYmVlNzEzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+yeALlpcllnxPNUZ4MNi06MX8M0oAi1yBP/8Gvy9zq4Wv fMOCLHZXBwM6URM4Krim1q9uOiydxfX23lXH1CT2XP6nOMkvb5e3B+6LNNMRcMK/ nEt+FF91h69XyN2rQwvPNGvT8Tgzi9PzFKlXjAxgetAlx3qnSuDSnwHFTUhYY/zF yjYAuc+/iYBxWuGDyqvx4ynNn8fOv4aAZuY1vRXCHr8k7GXBH2zcVh/kZ+If52N6 SglWFz5Eeq7vSz5V3S0m7SSUEGTXShPd9bLnc9hKhP3LeBNndq2NMknhsXosNNVJ GOljUQygyQX0VdZlQ3kLVbdvqvwddbgHtZdZyPLDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEDsSFoYHw0N6p8qJlhT5/QCMI5cwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhkNjkzOWMwLTk1NjMtNDk3Ni05YWRhLTAwZTBiYzEzMDE2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDQwDQYJKoZIhvcNAQELBQADggEBAIcaP3q8FBRnqp4PUTM1Co2LHx9O U6rIMYPYOqFAl4596Lu+yMK1ohUfSTjdgtFGVqT4O9rtbLtsKTEVKJsOyruPsnBG nTkkYdG19XULorI5ERD2Guf4/c4ogCo8svQ3mySRW3TfnPHbWiqzlj2uIe/2D+Sb U5ijwl8/ocB+83HgYkH/0oehwmpOD6ZCoxj0j38WzVL/fV0iIgTHK1mtjx1+Oevg 1oAtCx3EtMV3JMbGSLdU177yttHtkfv09eZ+VR2ZiiSbgwzGzDRaIoZ70xf/CM+o /y4cUfRsGtAXbxDtHO9zmewghMHQeVzAQPSIiAQ15DsDexvASE3z3gSswZA= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:57 2026 by rpki-client