$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa File: d45c754b-55fa-459b-9d5e-9107618580af.roa (raw, json) Hash identifier: pvs003ft4005b5/gD4O7BtPDJKrwO++jHcgbWpDsBgE= Subject key identifier: 41:EB:D7:10:B9:8D:FC:0A:D5:0C:5B:4B:D2:B3:30:3F:C3:F3:CA:86 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1EAFD2B41294D40602D1E4F82BC0B04B33BE0BC7 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa Signing time: Sat 24 Oct 2026 01:50:09 +0000 ROA not before: Sat 24 Oct 2026 01:50:09 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:af:d2:b4:12:94:d4:06:02:d1:e4:f8:2b:c0:b0:4b:33:be:0b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:09 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=c9bb5b2f789e73949bc2d9e1f67388ce0db18072e396601c243fd22167dace27, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:0c:41:c0:f6:4b:9a:47:1d:84:73:8c:a4: 98:1a:c8:d8:59:b0:cb:00:3e:43:c3:33:59:39:67: 5c:40:dc:3a:29:8b:9b:ff:ab:0a:ec:4b:7f:43:c9: 1a:d2:2f:39:03:f0:85:7e:af:30:41:d6:4a:ff:e9: 46:03:ea:47:39:7c:2e:de:2c:9c:e5:3f:a9:f8:2a: a3:42:08:d4:9d:3c:34:e5:6a:c6:16:09:f6:2d:5c: 3f:37:3d:87:10:6f:fd:9c:ad:f8:4b:94:b1:eb:60: cb:67:0d:58:05:f1:05:7e:94:33:c3:ce:50:73:4f: 40:43:d2:ce:52:11:cb:1f:22:37:1c:b5:7e:43:01: 26:bf:ee:4d:8a:7b:09:f3:c2:4a:b2:22:f3:99:47: de:02:84:87:27:e7:71:4f:80:37:90:9a:ca:82:d2: 26:e3:8a:76:5e:04:88:34:d6:a7:a2:8b:ae:26:5f: 63:17:e3:d1:fd:7b:c0:8c:72:65:56:e0:5e:ed:8d: d3:5d:7b:89:05:a1:b3:d3:11:8e:9c:cb:c5:df:46: 96:90:3f:84:f0:e8:f0:9b:8f:5e:16:df:fa:37:c6: 38:16:ec:27:f1:e6:68:5f:b1:19:dd:11:aa:9c:4d: 26:6a:92:5e:ce:77:b8:36:4d:0c:25:ef:ce:72:12: 07:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EB:D7:10:B9:8D:FC:0A:D5:0C:5B:4B:D2:B3:30:3F:C3:F3:CA:86 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:d9:ad:4c:14:f4:a0:0f:f6:38:9e:a1:bd:bf:7a:bb:81:e7: 3e:7e:8b:ad:b7:0f:d5:25:fd:b6:cd:18:2f:3b:02:ec:69:30: b1:d4:ab:e5:5c:a4:2f:ca:e1:20:b7:6c:b7:c0:b9:19:13:0f: 35:0c:92:42:90:9e:a4:45:03:72:0b:cd:03:ff:cc:28:a8:ee: 96:15:aa:2a:25:6e:4c:63:47:b0:1b:5a:9f:18:49:87:dc:5a: ec:00:01:37:2f:fd:c4:c0:47:05:e1:fc:32:46:39:f6:c5:f9: 1a:d3:3a:48:24:87:13:32:41:bd:72:b2:0b:41:e7:a3:cb:43: fa:d8:81:2a:97:25:f1:b8:d4:55:fb:11:10:70:0c:5d:0a:26: 44:56:79:88:e6:60:08:57:38:fd:9c:11:46:c0:2d:3b:1c:38: 95:ab:2e:fc:df:d4:d2:ac:d5:54:93:be:f6:32:ce:34:29:cf: 62:fe:70:ae:97:2c:c0:04:08:03:3e:9a:08:c5:18:e7:db:a4: 2f:a4:68:5e:6b:cc:54:74:f3:af:cb:1e:7d:64:44:64:28:ac: 66:c6:77:f1:b5:84:0a:4e:ab:36:29:0b:5e:93:2a:12:de:e2: 0d:6a:c3:ef:c3:f0:63:d1:13:9e:fa:87:69:ad:97:83:37:de: aa:dc:b5:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHq/StBKU1AYC0eT4K8CwSzO+C8cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDA5WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWJiNWIyZjc4OWU3Mzk0OWJjMmQ5ZTFmNjczODhjZTBk YjE4MDcyZTM5NjYwMWMyNDNmZDIyMTY3ZGFjZTI3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjswxBwPZLmkcdhHOMpJgayNhZsMsAPkPDM1k5Z1xA3Dop i5v/qwrsS39DyRrSLzkD8IV+rzBB1kr/6UYD6kc5fC7eLJzlP6n4KqNCCNSdPDTl asYWCfYtXD83PYcQb/2crfhLlLHrYMtnDVgF8QV+lDPDzlBzT0BD0s5SEcsfIjcc tX5DASa/7k2KewnzwkqyIvOZR94ChIcn53FPgDeQmsqC0ibjinZeBIg01qeii64m X2MX49H9e8CMcmVW4F7tjdNde4kFobPTEY6cy8XfRpaQP4Tw6PCbj14W3/o3xjgW 7Cfx5mhfsRndEaqcTSZqkl7Od7g2TQwl785yEgcBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQevXELmN/ArVDFtL0rMwP8PzyoYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q0NWM3NTRiLTU1ZmEtNDU5Yi05ZDVlLTkxMDc2MTg1ODBhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAHrZrUwU9KAP9jieob2/eruB5z5+ i623D9Ul/bbNGC87AuxpMLHUq+VcpC/K4SC3bLfAuRkTDzUMkkKQnqRFA3ILzQP/ zCio7pYVqiolbkxjR7AbWp8YSYfcWuwAATcv/cTARwXh/DJGOfbF+RrTOkgkhxMy Qb1ysgtB56PLQ/rYgSqXJfG41FX7ERBwDF0KJkRWeYjmYAhXOP2cEUbALTscOJWr Lvzf1NKs1VSTvvYyzjQpz2L+cK6XLMAECAM+mgjFGOfbpC+kaF5rzFR086/LHn1k RGQorGbGd/G1hApOqzYpC16TKhLe4g1qw+/D8GPRE576h2mtl4M33qrctTk= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:39 2026 by rpki-client