$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bdc4de21-9895-4d0a-8e2f-187812e1335d.roa File: bdc4de21-9895-4d0a-8e2f-187812e1335d.roa (raw, json) Hash identifier: gc0+gi0yYSmevQEJjMP4sxv3aR8+nL6ORGfV3oY+tBs= Subject key identifier: FD:94:29:62:47:0F:BE:5D:DF:4A:2D:9F:F9:F0:30:B7:59:45:55:91 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 70D2D1C594CF4C0E07BC69EC3E67E885F5AA962E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bdc4de21-9895-4d0a-8e2f-187812e1335d.roa Signing time: Thu 23 Jul 2026 14:50:10 +0000 ROA not before: Thu 23 Jul 2026 14:50:10 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d2:d1:c5:94:cf:4c:0e:07:bc:69:ec:3e:67:e8:85:f5:aa:96:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 23 14:50:10 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=53b8810404ed3f680d1947940b82a33fcef43917ecf597676f3dfcfef19a8087, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:17:c9:c7:54:da:62:cc:7a:4c:64:12:00: ca:9f:14:85:68:52:f8:07:cc:8f:6d:cf:33:01:c9: 80:a3:98:1a:cc:5a:e8:35:e1:0a:14:71:11:15:ea: 33:7b:0e:f7:a5:60:00:79:25:6a:d3:bc:3d:d3:30: 91:70:41:f1:5a:4d:fe:24:5d:1d:60:c4:8e:7f:4d: a2:2e:80:64:91:94:4e:74:ee:b9:35:67:9c:10:4e: 97:ad:32:45:30:0a:3c:b3:4e:3a:11:5d:33:8f:41: 55:a3:74:bb:7d:f2:64:57:09:91:e2:c5:b2:5f:a0: 00:bf:e9:e3:63:73:10:65:98:97:91:c7:5a:8d:72: b9:53:1d:4f:fa:d3:dc:0d:5f:ad:db:25:7c:ef:39: 34:bb:d6:17:b5:4b:04:b5:53:f1:34:8a:6f:ef:e7: 8a:89:ac:7e:d2:4d:8f:5d:3b:4f:36:0b:43:2d:ef: 6d:9b:c1:a3:08:cc:e8:d2:57:9d:7c:c1:2c:02:77: 14:a1:09:e8:52:30:98:8a:4c:8f:f2:77:99:75:19: 3b:d8:c2:6c:1b:c1:6f:9c:a9:37:d6:97:5b:6d:fd: b9:69:71:96:10:82:a2:57:11:ac:e8:58:6a:b2:7e: 01:f1:2c:87:e5:be:44:f5:70:99:ed:b4:18:72:7a: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:94:29:62:47:0F:BE:5D:DF:4A:2D:9F:F9:F0:30:B7:59:45:55:91 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bdc4de21-9895-4d0a-8e2f-187812e1335d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.5.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:db:40:1f:de:cc:6b:20:35:9f:74:5f:d8:44:05:24:e3:6a: 40:83:a1:56:d1:ae:c1:34:fd:7f:29:3b:0b:ec:be:06:d8:b3: 70:e5:06:f8:6e:c2:67:7e:ec:b7:46:a0:db:3c:64:9a:e0:76: b4:58:3a:0a:f4:60:26:15:f9:ff:3f:f6:0e:1f:51:48:f9:e7: e3:a6:d6:d9:e6:86:a1:a2:2f:20:0f:33:e6:d6:d1:62:05:20: 2a:e4:38:b5:40:db:98:f9:48:fb:20:2c:d1:b5:cf:1e:03:db: e7:7c:c9:86:39:33:65:c8:32:d0:1f:cd:48:9f:13:24:cf:82: 2d:e8:4e:a4:f4:06:bb:cf:4b:16:84:2c:d5:f9:15:4d:f1:8b: 2b:cb:2a:06:aa:13:d7:25:0a:9c:39:e4:bb:60:40:87:65:22: 45:65:b3:0f:bf:c8:e7:94:f4:26:7a:f3:ac:f3:c6:f9:87:bf: 54:3e:2b:6f:77:df:49:37:43:68:8a:15:87:b8:98:d0:45:c3: a0:20:fd:7a:b5:00:fc:82:6f:3f:f0:af:2f:36:ee:3d:47:ec: 2c:95:74:1e:00:0e:ca:9f:83:4e:92:00:23:bf:35:be:89:61: 29:02:52:db:32:02:fe:29:f0:01:10:99:a4:d3:33:11:95:da: dd:1f:71:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcNLRxZTPTA4HvGnsPmfohfWqli4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzIzMTQ1MDEwWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1M2I4ODEwNDA0ZWQzZjY4MGQxOTQ3OTQwYjgyYTMzZmNl ZjQzOTE3ZWNmNTk3Njc2ZjNkZmNmZWYxOWE4MDg3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGVxfJx1TaYsx6TGQSAMqfFIVoUvgHzI9tzzMByYCjmBrM Wug14QoUcREV6jN7DvelYAB5JWrTvD3TMJFwQfFaTf4kXR1gxI5/TaIugGSRlE50 7rk1Z5wQTpetMkUwCjyzTjoRXTOPQVWjdLt98mRXCZHixbJfoAC/6eNjcxBlmJeR x1qNcrlTHU/609wNX63bJXzvOTS71he1SwS1U/E0im/v54qJrH7STY9dO082C0Mt 722bwaMIzOjSV518wSwCdxShCehSMJiKTI/yd5l1GTvYwmwbwW+cqTfWl1tt/blp cZYQgqJXEazoWGqyfgHxLIflvkT1cJnttBhyeuClAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/ZQpYkcPvl3fSi2f+fAwt1lFVZEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2JkYzRkZTIxLTk4OTUtNGQwYS04ZTJmLTE4NzgxMmUxMzM1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAUwDQYJKoZIhvcNAQELBQADggEBAB/bQB/ezGsgNZ90X9hEBSTjakCD oVbRrsE0/X8pOwvsvgbYs3DlBvhuwmd+7LdGoNs8ZJrgdrRYOgr0YCYV+f8/9g4f UUj55+Om1tnmhqGiLyAPM+bW0WIFICrkOLVA25j5SPsgLNG1zx4D2+d8yYY5M2XI MtAfzUifEyTPgi3oTqT0BrvPSxaELNX5FU3xiyvLKgaqE9clCpw55LtgQIdlIkVl sw+/yOeU9CZ686zzxvmHv1Q+K29330k3Q2iKFYe4mNBFw6Ag/Xq1APyCbz/wry82 7j1H7CyVdB4ADsqfg06SACO/Nb6JYSkCUtsyAv4p8AEQmaTTMxGV2t0fcQg= -----END CERTIFICATE-----Generated at Fri Jul 24 08:15:17 2026 by rpki-client