$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ca597d5-e2d7-4ff2-96a9-3ceaba019064.roa File: 9ca597d5-e2d7-4ff2-96a9-3ceaba019064.roa (raw, json) Hash identifier: LICFF57Y71NqrUW0J+jYjG1l0ef6Ap7nLoF7VuDkOtQ= Subject key identifier: F9:BD:97:56:8F:7F:02:06:B5:5F:E6:9A:D6:89:39:B6:35:48:89:0A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3EF188C48E75CC82162D3CE8BCC2F8F0B45B7092 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ca597d5-e2d7-4ff2-96a9-3ceaba019064.roa Signing time: Sat 24 Oct 2026 01:50:08 +0000 ROA not before: Sat 24 Oct 2026 01:50:08 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f1:88:c4:8e:75:cc:82:16:2d:3c:e8:bc:c2:f8:f0:b4:5b:70:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:08 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=9f9d03cb395284d2990f37ea7c352184309675b987e16fd7d1fbb55e1e40900e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:f4:20:46:0b:ac:52:39:3d:bb:4a:cc:f2: 7c:0d:54:3d:cb:6d:38:24:aa:59:b4:53:d4:0a:92: ba:ce:0f:e4:cb:21:86:0f:fc:fa:5e:60:49:41:07: 63:4c:93:9e:22:a3:1d:c8:c6:15:57:1f:8b:ab:e0: a4:f2:00:54:0d:fa:cb:d5:73:14:e9:52:94:86:a5: ad:f3:4d:a5:48:f1:85:7e:89:96:d8:6d:0c:05:1f: 35:25:57:77:c8:f0:a6:b0:d1:5d:8c:2d:7b:e9:c0: 1d:66:5c:0f:a6:79:7d:a4:22:27:1a:70:0a:c2:26: 1e:69:d8:1b:de:63:0c:a2:71:d5:5c:41:65:e9:a0: c6:ab:5d:c8:23:fd:9d:15:53:23:83:2d:f0:01:c6: 8c:6f:38:ed:5d:49:85:9b:eb:80:70:5a:91:92:e9: eb:56:ae:6b:f2:94:e2:4a:3f:9e:0c:17:2a:d0:b2: 99:9f:38:35:68:09:6f:f6:47:31:f2:b6:fb:32:2c: 5b:99:58:97:ce:da:3e:d4:3d:4d:a0:75:ba:bf:fb: ed:14:9c:95:4b:f1:d3:1d:e6:81:5b:b1:57:4b:0c: 10:4d:ac:05:23:a6:49:a7:61:46:b2:5e:80:3a:32: 1d:4a:19:84:b1:ce:8f:dd:cb:70:6f:dd:94:c8:7d: 4f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:97:56:8F:7F:02:06:B5:5F:E6:9A:D6:89:39:B6:35:48:89:0A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ca597d5-e2d7-4ff2-96a9-3ceaba019064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.44.0/24 Signature Algorithm: sha256WithRSAEncryption 82:9e:9f:ef:4a:64:cc:0b:ec:97:5f:12:97:72:a2:32:44:98: ca:e7:c1:c6:37:37:9b:4b:38:4f:20:43:b4:c0:1f:2a:7d:91: 4d:d7:30:88:c5:5b:ea:5b:5a:f1:9d:29:fd:43:2d:5a:ce:43: b5:c0:6c:50:65:ce:94:f4:d9:8e:de:55:7e:0a:26:3d:f9:e9: 94:2a:8e:99:98:43:a6:fc:c1:7c:83:9f:05:02:fd:23:ae:fe: 55:60:c4:9b:5d:0a:b6:fb:f9:ca:a5:4e:66:be:ba:67:4f:4f: 65:a9:62:97:cd:34:c1:d6:80:61:bd:99:fc:18:f2:62:53:47: f6:07:c7:22:69:10:11:c4:b9:82:e6:06:83:53:c4:a3:f3:ec: ba:1b:a7:aa:f1:52:89:e6:8c:66:0d:bb:72:dd:ea:c6:af:a3: 26:81:87:52:ef:e6:57:87:99:e1:0a:e8:af:70:2f:cf:d5:b2: 16:e1:40:08:00:84:c9:84:40:68:5a:e7:f1:c7:c9:86:f7:41: d1:62:9a:ab:5a:b1:fc:cc:57:0e:ac:65:93:3e:f4:62:fb:da: 39:b5:0f:2e:0e:44:0e:81:61:6a:53:58:d7:09:3c:b8:88:dc: b1:1b:85:e4:75:dc:87:f3:24:21:62:e3:de:e8:9b:54:d6:9c: 48:81:e1:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPvGIxI51zIIWLTzovML48LRbcJIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDA4WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjlkMDNjYjM5NTI4NGQyOTkwZjM3ZWE3YzM1MjE4NDMw OTY3NWI5ODdlMTZmZDdkMWZiYjU1ZTFlNDA5MDBlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtjvQgRgusUjk9u0rM8nwNVD3LbTgkqlm0U9QKkrrOD+TL IYYP/PpeYElBB2NMk54iox3IxhVXH4ur4KTyAFQN+svVcxTpUpSGpa3zTaVI8YV+ iZbYbQwFHzUlV3fI8Kaw0V2MLXvpwB1mXA+meX2kIicacArCJh5p2BveYwyicdVc QWXpoMarXcgj/Z0VUyODLfABxoxvOO1dSYWb64BwWpGS6etWrmvylOJKP54MFyrQ spmfODVoCW/2RzHytvsyLFuZWJfO2j7UPU2gdbq/++0UnJVL8dMd5oFbsVdLDBBN rAUjpkmnYUayXoA6Mh1KGYSxzo/dy3Bv3ZTIfU8pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+b2XVo9/Aga1X+aa1ok5tjVIiQowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljYTU5N2Q1LWUyZDctNGZmMi05NmE5LTNjZWFiYTAxOTA2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCwwDQYJKoZIhvcNAQELBQADggEBAIKen+9KZMwL7JdfEpdyojJEmMrn wcY3N5tLOE8gQ7TAHyp9kU3XMIjFW+pbWvGdKf1DLVrOQ7XAbFBlzpT02Y7eVX4K Jj356ZQqjpmYQ6b8wXyDnwUC/SOu/lVgxJtdCrb7+cqlTma+umdPT2WpYpfNNMHW gGG9mfwY8mJTR/YHxyJpEBHEuYLmBoNTxKPz7Lobp6rxUonmjGYNu3Ld6savoyaB h1Lv5leHmeEK6K9wL8/VshbhQAgAhMmEQGha5/HHyYb3QdFimqtasfzMVw6sZZM+ 9GL72jm1Dy4ORA6BYWpTWNcJPLiI3LEbheR13IfzJCFi497om1TWnEiB4f0= -----END CERTIFICATE-----Generated at Wed Nov 11 12:51:29 2026 by rpki-client