$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/93da312c-9a87-4802-ae6d-e784f74c131d.roa File: 93da312c-9a87-4802-ae6d-e784f74c131d.roa (raw, json) Hash identifier: oGX5r5IDF3RJvU1DXiqPcFD2PcvWHuIITdnox/jdtK8= Subject key identifier: A1:F9:E2:B9:D2:CA:8C:96:57:9D:36:0B:35:8F:86:79:18:A7:5B:0B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 04A938FE3B245F9EA89BF0407A59879B2DED0478 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/93da312c-9a87-4802-ae6d-e784f74c131d.roa Signing time: Mon 26 Oct 2026 02:40:06 +0000 ROA not before: Mon 26 Oct 2026 02:40:06 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a9:38:fe:3b:24:5f:9e:a8:9b:f0:40:7a:59:87:9b:2d:ed:04:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 26 02:40:06 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=535c0bcaa5bd7b5a0bb901e7dfb136f003a921d34f8820b459cdf61bd5212b94, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:2a:ec:cf:2d:7f:22:1f:5e:20:76:1a:5e: 34:3b:56:a1:fa:66:de:d5:88:87:e9:12:3a:15:b5: 21:43:a3:67:15:2d:e0:b7:2d:4c:18:bd:7b:cb:5a: 77:1a:65:df:cb:b5:a5:fe:e6:f8:29:af:e5:00:6f: 82:78:b0:cd:2b:ed:eb:83:f2:14:09:6b:d4:47:b4: ed:d1:84:40:f9:f0:1f:37:01:f3:e1:68:93:b4:fa: e1:88:59:9d:80:8f:18:95:cc:f7:90:a9:f6:d8:86: 0c:3e:ed:34:d8:6e:07:32:fa:1b:93:20:9e:2a:b2: a8:0f:57:b6:96:2a:bd:d1:76:d8:a0:03:9c:c0:e0: 8a:73:0a:3a:d0:15:d2:38:ce:a5:0f:39:d9:74:be: 47:bc:b5:c0:28:68:b9:40:fe:79:84:da:36:d7:13: 90:c5:ea:f0:2a:db:32:d2:08:02:39:4b:22:79:fd: e0:56:53:92:80:46:ea:3b:e0:7a:18:12:03:ee:ff: ae:9f:43:f9:30:a3:fc:e5:a3:fb:b7:86:0e:9e:15: 82:44:d4:b5:f6:74:71:b9:03:52:9a:cb:31:d6:ee: 0a:9f:74:cb:2a:06:50:f4:19:a0:25:36:53:67:37: 96:8b:7a:5a:b1:41:90:75:03:5b:46:74:6c:4d:89: de:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F9:E2:B9:D2:CA:8C:96:57:9D:36:0B:35:8F:86:79:18:A7:5B:0B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/93da312c-9a87-4802-ae6d-e784f74c131d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.4.0/24 Signature Algorithm: sha256WithRSAEncryption 77:37:cc:c5:52:8a:22:2d:0c:07:0f:0d:bb:b0:2b:4d:10:16: e1:e7:fb:57:e8:cc:57:13:b0:1f:92:da:48:19:e6:ca:b5:e1: 57:13:88:0d:9b:e3:f7:78:6f:e3:9e:64:a3:5c:b8:79:d2:6a: b9:92:7c:69:37:5d:9a:4e:d0:79:01:a8:f1:ec:8c:bf:5c:f5: 76:84:b6:47:91:cf:9c:c9:c1:56:16:91:4d:fa:6f:90:b6:e9: eb:9d:d1:26:79:75:15:64:e3:df:ff:5d:9a:9d:bd:12:06:1a: 70:ec:ae:ef:f5:7b:07:c4:59:74:09:c8:11:7d:62:59:c9:c4: a2:98:ef:0b:f3:4f:f4:2e:32:b0:d1:85:59:ac:75:73:9e:d0: 4c:dd:5c:40:d1:f9:9c:44:35:d4:49:ba:ad:f1:59:54:f6:3f: e0:82:9a:ca:41:7a:24:61:ff:7f:c9:98:68:f8:45:5e:23:30: fc:b9:b5:ae:fc:13:82:16:84:13:b5:67:28:14:ec:54:6c:85: fd:96:f7:e6:96:96:74:f3:d4:af:d9:cb:97:28:78:1a:b2:b8: 0b:40:80:f4:7f:97:a4:9e:ae:df:fe:4a:ce:0f:98:b9:e7:03: c9:db:8e:79:15:b5:9b:da:06:34:43:48:c0:e4:f8:3c:46:46: 42:09:6a:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBKk4/jskX56om/BAelmHmy3tBHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI2MDI0MDA2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzVjMGJjYWE1YmQ3YjVhMGJiOTAxZTdkZmIxMzZmMDAz YTkyMWQzNGY4ODIwYjQ1OWNkZjYxYmQ1MjEyYjk0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD3yrszy1/Ih9eIHYaXjQ7VqH6Zt7ViIfpEjoVtSFDo2cV LeC3LUwYvXvLWncaZd/LtaX+5vgpr+UAb4J4sM0r7euD8hQJa9RHtO3RhED58B83 AfPhaJO0+uGIWZ2AjxiVzPeQqfbYhgw+7TTYbgcy+huTIJ4qsqgPV7aWKr3Rdtig A5zA4IpzCjrQFdI4zqUPOdl0vke8tcAoaLlA/nmE2jbXE5DF6vAq2zLSCAI5SyJ5 /eBWU5KARuo74HoYEgPu/66fQ/kwo/zlo/u3hg6eFYJE1LX2dHG5A1KayzHW7gqf dMsqBlD0GaAlNlNnN5aLelqxQZB1A1tGdGxNid71AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUofniudLKjJZXnTYLNY+GeRinWwswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkzZGEzMTJjLTlhODctNDgwMi1hZTZkLWU3ODRmNzRjMTMxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAQwDQYJKoZIhvcNAQELBQADggEBAHc3zMVSiiItDAcPDbuwK00QFuHn +1fozFcTsB+S2kgZ5sq14VcTiA2b4/d4b+OeZKNcuHnSarmSfGk3XZpO0HkBqPHs jL9c9XaEtkeRz5zJwVYWkU36b5C26eud0SZ5dRVk49//XZqdvRIGGnDsru/1ewfE WXQJyBF9YlnJxKKY7wvzT/QuMrDRhVmsdXOe0EzdXEDR+ZxENdRJuq3xWVT2P+CC mspBeiRh/3/JmGj4RV4jMPy5ta78E4IWhBO1ZygU7FRshf2W9+aWlnTz1K/Zy5co eBqyuAtAgPR/l6Sert/+Ss4PmLnnA8nbjnkVtZvaBjRDSMDk+DxGRkIJaps= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:31 2026 by rpki-client