$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa File: c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa (raw, json) Hash identifier: JZ5+C7bu4tfH96HYyzXcmwqAwoSfzHcVoq11d8s6YhQ= Subject key identifier: 73:3F:D2:8E:6A:5A:A6:D2:81:9B:FE:B2:25:46:8D:AB:67:80:23:69 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 534CCA5D041CBE127433A95F7062D2A5860C458B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa Signing time: Thu 23 Jul 2026 14:50:11 +0000 ROA not before: Thu 23 Jul 2026 14:50:11 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4c:ca:5d:04:1c:be:12:74:33:a9:5f:70:62:d2:a5:86:0c:45:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 23 14:50:11 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=340c38b592f71c441d87c8586f81fd62b7fcbd97cc63c27042fb7b98a6b58ad9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:46:da:c2:a2:72:5e:2f:cc:a6:72:9c:74: ab:61:66:12:2b:70:17:b8:d6:51:63:98:23:e0:fa: 20:04:1a:0f:c6:3b:f5:3f:9e:76:ab:11:6e:99:ac: 3d:96:68:23:bf:98:04:84:b4:a9:d5:41:29:51:41: 4f:69:52:3b:4e:28:d4:aa:e1:b4:e5:de:75:53:20: fe:42:d7:23:88:39:f0:6e:7d:2c:aa:68:ee:83:b9: db:e8:be:91:3a:31:87:f4:66:62:27:4d:3f:d7:e0: 3d:1e:cd:a8:f7:b7:25:88:db:76:60:cc:72:b2:2a: d2:86:86:34:fc:36:cd:7c:e7:b5:ac:0a:2c:b3:69: c8:93:e9:df:5c:fd:8a:0f:12:b6:7a:3e:8e:98:f2: 29:76:a1:ac:eb:03:42:fd:d5:a6:81:42:97:09:e8: 25:5a:bb:70:70:4b:58:42:d6:94:da:23:8b:70:0e: 94:80:63:c8:6b:8a:49:5f:a1:fd:91:c6:6d:fd:5c: ac:f0:70:bb:9a:95:bd:99:5a:00:7a:1f:d7:a2:44: 01:9c:f3:f3:b4:af:5e:29:32:8d:d2:63:86:31:9c: cb:83:9e:99:af:10:73:8c:58:08:d1:3a:d8:f3:c2: 5e:8a:12:58:7f:fc:18:e4:86:8c:b4:a6:05:25:3c: 6c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3F:D2:8E:6A:5A:A6:D2:81:9B:FE:B2:25:46:8D:AB:67:80:23:69 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.5.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:b0:31:fc:6f:d4:af:fb:c4:93:e3:ca:11:52:89:3b:1a:58: b0:53:27:e9:98:af:18:65:bf:52:4e:34:05:8a:87:25:99:b5: ad:92:ec:d3:69:8a:45:54:ce:66:f3:e5:87:28:b4:92:77:32: 2a:c2:46:78:17:6c:c4:43:6f:14:69:73:c5:4d:d9:c8:63:a4: 3d:73:79:a1:dc:27:9c:86:af:e2:8e:dd:5b:83:ba:1c:a1:c6: 27:79:ea:12:cd:58:cd:3c:a5:0f:a5:3b:8d:aa:90:d0:b4:bb: 1b:a4:7e:0b:4b:f6:99:13:97:5a:0f:2d:72:5b:73:3a:49:ef: 8b:47:de:70:4b:b5:a4:b7:61:21:b0:7e:f8:25:5b:08:79:ab: 8e:cd:65:d4:a3:b6:14:5e:bb:eb:3c:71:91:67:16:94:57:95: 64:bd:7c:02:5d:53:f0:8e:ef:9d:db:98:28:30:93:5c:ee:c7: db:c4:06:91:26:c8:83:27:94:cf:13:23:9a:ec:da:d2:82:61: 39:40:7c:a4:7d:8c:6c:31:c8:2d:14:3a:7d:a9:0c:df:e0:11: 2d:98:eb:ac:54:a5:af:1b:73:22:60:36:54:81:4c:a8:8a:b5: f4:19:14:33:05:f9:69:9f:33:29:0b:19:c0:ea:12:e7:71:99: 9f:ae:63:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU0zKXQQcvhJ0M6lfcGLSpYYMRYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzIzMTQ1MDExWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDBjMzhiNTkyZjcxYzQ0MWQ4N2M4NTg2ZjgxZmQ2MmI3 ZmNiZDk3Y2M2M2MyNzA0MmZiN2I5OGE2YjU4YWQ5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTYUbawqJyXi/MpnKcdKthZhIrcBe41lFjmCPg+iAEGg/G O/U/nnarEW6ZrD2WaCO/mASEtKnVQSlRQU9pUjtOKNSq4bTl3nVTIP5C1yOIOfBu fSyqaO6DudvovpE6MYf0ZmInTT/X4D0ezaj3tyWI23ZgzHKyKtKGhjT8Ns1857Ws CiyzaciT6d9c/YoPErZ6Po6Y8il2oazrA0L91aaBQpcJ6CVau3BwS1hC1pTaI4tw DpSAY8hriklfof2Rxm39XKzwcLualb2ZWgB6H9eiRAGc8/O0r14pMo3SY4YxnMuD npmvEHOMWAjROtjzwl6KElh//Bjkhoy0pgUlPGxnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcz/SjmpaptKBm/6yJUaNq2eAI2kwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2MyMGNlZjAxLWQ2YzQtNDQ0Mi04ZmNjLTc2YmMyNGE3YWZhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAUwDQYJKoZIhvcNAQELBQADggEBACywMfxv1K/7xJPjyhFSiTsaWLBT J+mYrxhlv1JONAWKhyWZta2S7NNpikVUzmbz5YcotJJ3MirCRngXbMRDbxRpc8VN 2chjpD1zeaHcJ5yGr+KO3VuDuhyhxid56hLNWM08pQ+lO42qkNC0uxukfgtL9pkT l1oPLXJbczpJ74tH3nBLtaS3YSGwfvglWwh5q47NZdSjthReu+s8cZFnFpRXlWS9 fAJdU/CO753bmCgwk1zux9vEBpEmyIMnlM8TI5rs2tKCYTlAfKR9jGwxyC0UOn2p DN/gES2Y66xUpa8bcyJgNlSBTKiKtfQZFDMF+WmfMykLGcDqEudxmZ+uY4g= -----END CERTIFICATE-----Generated at Thu Jul 23 23:43:13 2026 by rpki-client