$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c9b53b96-f734-4243-80ac-979ba4083b01.roa File: c9b53b96-f734-4243-80ac-979ba4083b01.roa (raw, json) Hash identifier: vhl7axfZ1V3UCWRmUHEkrMqntAgYVY5sBeCHzjp8UKA= Subject key identifier: ED:2F:7E:E0:A1:EB:2D:72:50:1C:14:C8:33:A0:19:6A:43:48:2C:57 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0FA36A9411758E7A2D418CCBEDD6949E4FB3A8F8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c9b53b96-f734-4243-80ac-979ba4083b01.roa Signing time: Tue 12 May 2026 00:50:13 +0000 ROA not before: Tue 12 May 2026 00:50:13 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 35.111.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a3:6a:94:11:75:8e:7a:2d:41:8c:cb:ed:d6:94:9e:4f:b3:a8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 12 00:50:13 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=d20fd333aa3883ed7358d7158ea57fc981eb39de6f67749959791e76d0825429, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:6f:15:86:ad:d2:27:f1:4c:a4:ae:b4:24: 32:4c:42:3d:91:a8:09:dd:71:07:43:28:69:09:a8: 08:f1:51:d8:19:84:af:ac:47:04:97:ed:1e:07:3e: 4f:ea:b8:1b:02:f6:f7:b6:a8:19:24:f6:d7:30:2d: 9e:8d:42:de:39:17:1c:b9:43:4f:a1:76:9f:ad:e4: f4:5e:df:57:b9:af:3f:ca:9b:51:e3:94:de:d2:b9: e3:c5:ad:89:24:ba:35:76:ac:b2:e3:01:f6:eb:ed: 1f:e8:42:dd:61:52:c7:ef:04:fb:f0:10:55:35:ab: 70:f6:73:b0:c2:55:c5:da:49:af:dc:06:b0:b0:a6: fb:98:18:f7:70:de:5f:44:e7:a9:d7:5a:47:eb:7d: da:a6:41:c5:12:ff:41:61:49:ce:c1:da:27:23:89: b9:f6:1e:d3:ea:c7:59:2e:d1:eb:9b:3a:84:d0:a3: 5f:c7:47:20:4a:97:2f:cc:cf:03:fe:9e:d9:d9:6a: a1:0a:06:be:fc:d4:1c:33:e6:e5:03:87:f5:d4:a9: 25:3f:21:c8:1e:b4:c1:8f:66:ed:dd:ac:d7:df:14: 2e:dd:24:29:70:38:ea:31:a5:7b:2e:38:b8:8d:ee: bb:a0:71:d6:6f:44:8e:ed:99:29:eb:c5:4a:db:2a: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2F:7E:E0:A1:EB:2D:72:50:1C:14:C8:33:A0:19:6A:43:48:2C:57 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c9b53b96-f734-4243-80ac-979ba4083b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.252.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:a9:20:f6:3c:7f:df:1b:3a:47:d6:e6:c1:70:e1:1e:96:9c: b7:f4:8a:50:fc:c0:0c:bb:6d:c7:a6:34:8b:5b:c2:90:dc:1e: ef:e3:79:ef:10:e0:41:65:b7:2b:bd:73:25:35:1d:e2:de:fb: a2:6d:6e:51:f2:6f:a5:e3:4e:ed:06:3e:fe:f0:5f:66:fc:15: 98:3a:1e:77:41:0b:78:1b:4c:d9:39:2d:c1:9b:cd:9b:bc:41: b6:ec:09:46:9f:e3:86:8b:66:ba:9b:b4:e4:cc:2e:dc:e8:c2: b3:7f:29:93:b2:29:90:37:49:f1:99:20:56:28:3c:db:c5:5e: e3:22:df:b4:ee:e6:14:5d:1f:96:d0:0c:40:a9:69:5e:c7:48: 93:bf:61:af:e4:d1:9b:37:97:65:5f:68:a3:f6:2a:a9:29:03: ec:ba:1a:6b:34:85:59:3f:cb:b2:84:4e:8f:9d:52:e5:77:cf: cb:7b:5f:ba:96:6c:31:19:5e:a8:b8:25:84:ca:a8:11:df:e6: ce:40:98:90:68:6e:22:dc:32:6f:0a:3e:55:03:90:4e:87:94: f8:b7:93:96:b9:a2:2e:31:d0:80:5d:c5:4d:2e:0d:3a:d4:fb: 9c:43:7e:ff:ea:a8:21:66:9d:d6:3e:8c:e9:d0:af:66:ea:89: 83:21:ea:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD6NqlBF1jnotQYzL7daUnk+zqPgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTEyMDA1MDEzWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjBmZDMzM2FhMzg4M2VkNzM1OGQ3MTU4ZWE1N2ZjOTgx ZWIzOWRlNmY2Nzc0OTk1OTc5MWU3NmQwODI1NDI5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4pm8Vhq3SJ/FMpK60JDJMQj2RqAndcQdDKGkJqAjxUdgZ hK+sRwSX7R4HPk/quBsC9ve2qBkk9tcwLZ6NQt45Fxy5Q0+hdp+t5PRe31e5rz/K m1HjlN7SuePFrYkkujV2rLLjAfbr7R/oQt1hUsfvBPvwEFU1q3D2c7DCVcXaSa/c BrCwpvuYGPdw3l9E56nXWkfrfdqmQcUS/0FhSc7B2icjibn2HtPqx1ku0eubOoTQ o1/HRyBKly/MzwP+ntnZaqEKBr781Bwz5uUDh/XUqSU/IcgetMGPZu3drNffFC7d JClwOOoxpXsuOLiN7rugcdZvRI7tmSnrxUrbKqrDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7S9+4KHrLXJQHBTIM6AZakNILFcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M5YjUzYjk2LWY3MzQtNDI0My04MGFjLTk3OWJhNDA4M2IwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/wwDQYJKoZIhvcNAQELBQADggEBAD6pIPY8f98bOkfW5sFw4R6WnLf0 ilD8wAy7bcemNItbwpDcHu/jee8Q4EFltyu9cyU1HeLe+6JtblHyb6XjTu0GPv7w X2b8FZg6HndBC3gbTNk5LcGbzZu8QbbsCUaf44aLZrqbtOTMLtzowrN/KZOyKZA3 SfGZIFYoPNvFXuMi37Tu5hRdH5bQDECpaV7HSJO/Ya/k0Zs3l2VfaKP2KqkpA+y6 Gms0hVk/y7KETo+dUuV3z8t7X7qWbDEZXqi4JYTKqBHf5s5AmJBobiLcMm8KPlUD kE6HlPi3k5a5oi4x0IBdxU0uDTrU+5xDfv/qqCFmndY+jOnQr2bqiYMh6gU= -----END CERTIFICATE-----Generated at Wed May 13 01:21:01 2026 by rpki-client