$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa File: 9820da12-0a89-4f05-a638-5ca08cc892e3.roa (raw, json) Hash identifier: UGYDmCJfEUxmQcdqttz3Q02fFCOcJRpLPtLAnHQfWGY= Subject key identifier: A9:19:E3:C1:01:E7:B9:24:A7:08:D1:33:5D:DC:FF:E1:83:C8:C7:34 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5C061C1CCA9086FA3F9A43CE840B7B2D2BBF2035 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa Signing time: Thu 23 Jul 2026 15:00:10 +0000 ROA not before: Thu 23 Jul 2026 15:00:10 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:06:1c:1c:ca:90:86:fa:3f:9a:43:ce:84:0b:7b:2d:2b:bf:20:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 23 15:00:10 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=d060ff210bfc64cf7443bb1b322ae0b49d3efb96bfa0a4286fbb1d13eda57ece, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:00:a3:9f:4a:3a:49:b0:3d:7f:90:6a:e6:13: 0e:f8:6a:51:52:c4:19:d4:ac:ac:67:34:b9:cb:b9: 20:67:23:b0:42:e8:e7:08:a5:dd:d9:fb:bf:6f:e9: 18:1b:f4:4d:31:34:37:83:ad:53:a1:3c:4f:6d:65: c5:8e:70:23:50:fe:12:cf:38:fe:15:2f:bd:af:f4: 62:09:1e:7e:bb:a0:62:87:ee:74:94:77:be:05:bc: b6:d5:14:8c:1c:d9:94:b7:6c:11:1a:09:c3:af:41: 37:ba:aa:09:81:b6:58:ab:e6:99:da:e5:41:ee:dc: ae:77:95:4b:a5:d3:9e:51:4c:cf:1f:c7:fe:cf:05: 40:32:31:fa:dd:76:41:93:e0:ce:eb:0a:bf:0e:20: ba:60:a5:3d:56:1d:41:68:ac:16:29:8c:65:88:81: 1a:69:e5:7e:be:08:1a:51:60:bf:a7:8d:f7:cd:34: a8:b3:e5:11:42:a3:31:f7:32:c1:52:ab:33:c9:80: 83:19:7a:e1:ad:90:9d:81:aa:11:c3:33:2d:23:d6: 87:fd:e7:af:9b:c2:da:78:ed:8f:6f:d9:ab:bc:9e: 7f:55:03:b3:07:37:57:40:e1:09:1d:b0:30:9f:4c: 0c:7a:39:5a:a5:c5:97:26:8d:1f:73:8e:8d:34:88: 90:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:19:E3:C1:01:E7:B9:24:A7:08:D1:33:5D:DC:FF:E1:83:C8:C7:34 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.253.0/24 Signature Algorithm: sha256WithRSAEncryption 70:5f:a7:75:16:53:df:a9:96:45:23:f6:32:31:71:f3:b2:73: 72:36:12:ee:4b:0c:a8:b9:22:ff:3a:63:5f:8b:30:b9:72:16: 7f:a4:a9:ab:d7:94:77:5a:ad:1b:2a:59:28:04:58:fa:ee:8b: 8b:a9:c3:1a:b4:1b:11:25:f0:b7:69:65:89:9d:ad:76:87:49: a6:a4:ca:90:f7:66:f8:78:2b:1f:aa:60:5b:22:a0:74:89:db: c3:c7:7d:44:2e:38:ed:3f:67:8c:1e:70:04:06:2b:bc:d7:90: 5f:03:e6:9d:df:d6:b0:53:c5:44:b8:96:ee:7f:78:2d:4f:10: 63:11:0b:e8:4a:95:f9:93:0a:50:18:6a:1a:83:db:f7:25:cf: d5:a8:16:0a:e8:81:2b:d1:eb:58:5d:37:96:c5:0d:43:e1:15: 82:ba:49:d7:c5:68:06:ed:23:a3:e1:94:74:21:ac:fe:f0:21: 16:70:e4:17:da:a2:39:cf:27:2d:5f:08:e0:1e:80:aa:3b:24: 74:e8:8e:b5:66:cb:0e:19:78:d5:e7:ae:a1:6e:bd:49:fe:a4: 34:b4:3a:8c:eb:88:13:80:90:d6:09:6a:bf:9d:82:8e:de:8e: 51:37:f6:21:92:76:cb:a1:2f:88:e6:c3:66:f3:25:16:23:b5: e7:6f:db:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXAYcHMqQhvo/mkPOhAt7LSu/IDUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzIzMTUwMDEwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDYwZmYyMTBiZmM2NGNmNzQ0M2JiMWIzMjJhZTBiNDlk M2VmYjk2YmZhMGE0Mjg2ZmJiMWQxM2VkYTU3ZWNlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUAKOfSjpJsD1/kGrmEw74alFSxBnUrKxnNLnLuSBnI7BC 6OcIpd3Z+79v6Rgb9E0xNDeDrVOhPE9tZcWOcCNQ/hLPOP4VL72v9GIJHn67oGKH 7nSUd74FvLbVFIwc2ZS3bBEaCcOvQTe6qgmBtlir5pna5UHu3K53lUul055RTM8f x/7PBUAyMfrddkGT4M7rCr8OILpgpT1WHUForBYpjGWIgRpp5X6+CBpRYL+njffN NKiz5RFCozH3MsFSqzPJgIMZeuGtkJ2BqhHDMy0j1of956+bwtp47Y9v2au8nn9V A7MHN1dA4QkdsDCfTAx6OVqlxZcmjR9zjo00iJBlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqRnjwQHnuSSnCNEzXdz/4YPIxzQwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4MjBkYTEyLTBhODktNGYwNS1hNjM4LTVjYTA4Y2M4OTJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYP0wDQYJKoZIhvcNAQELBQADggEBAHBfp3UWU9+plkUj9jIxcfOyc3I2 Eu5LDKi5Iv86Y1+LMLlyFn+kqavXlHdarRsqWSgEWPrui4upwxq0GxEl8LdpZYmd rXaHSaakypD3Zvh4Kx+qYFsioHSJ28PHfUQuOO0/Z4wecAQGK7zXkF8D5p3f1rBT xUS4lu5/eC1PEGMRC+hKlfmTClAYahqD2/clz9WoFgrogSvR61hdN5bFDUPhFYK6 SdfFaAbtI6PhlHQhrP7wIRZw5BfaojnPJy1fCOAegKo7JHTojrVmyw4ZeNXnrqFu vUn+pDS0OozriBOAkNYJar+dgo7ejlE39iGSdsuhL4jmw2bzJRYjtedv2xc= -----END CERTIFICATE-----Generated at Fri Jul 24 09:53:29 2026 by rpki-client