$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d69bc1d5-8269-497f-a53a-bbb55896ac25.roa File: d69bc1d5-8269-497f-a53a-bbb55896ac25.roa (raw, json) Hash identifier: TkXQB469bSsGdc7aDaG+7KFTFnNZ22xtLTo0cBJc8mg= Subject key identifier: 2B:0E:12:9C:ED:8F:AA:CC:FA:72:F1:57:1C:F7:E4:38:E7:07:F9:7E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 32AFE8E7A72DA74BCD26BB82C4266E7452FC410C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d69bc1d5-8269-497f-a53a-bbb55896ac25.roa Signing time: Sat 24 Oct 2026 01:50:07 +0000 ROA not before: Sat 24 Oct 2026 01:50:07 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:af:e8:e7:a7:2d:a7:4b:cd:26:bb:82:c4:26:6e:74:52:fc:41:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:07 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=506ac4c096cee4cef32a88db7ced7c87b0793a33b116eab6ece35fbd8b3e8eee, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:8c:fc:9f:e9:66:e9:a8:ce:64:53:05:05: d8:d9:b8:30:6b:3c:40:0c:95:d4:47:e5:50:74:cb: 7b:fc:f9:fe:01:c5:d0:e5:b5:78:17:67:0a:de:67: 62:e2:23:9d:0d:13:6e:9b:cc:6c:cf:56:28:ba:96: d6:4e:37:c1:70:ac:9d:aa:a7:d5:21:5b:bd:7d:00: bc:fd:50:d6:40:b1:c9:3d:70:3d:16:77:6a:af:d9: cd:2a:fb:69:dd:4b:fa:c5:53:cf:e3:30:22:a2:6e: 3e:03:c0:16:49:80:30:94:9d:5f:0f:ec:bb:ec:5f: 7d:e0:03:87:b9:e0:68:e0:83:51:3d:0d:30:aa:4c: 80:09:3f:e4:66:d7:c1:a9:0c:91:3e:9d:bf:e5:69: 29:bc:80:50:4a:92:b4:3b:41:cf:be:5b:c4:59:0b: a8:d9:3f:e1:d3:2e:22:28:cd:67:e0:41:8a:51:e2: c6:0d:34:c3:e3:dc:58:ca:79:aa:72:ad:f6:92:72: f5:88:f2:91:b0:92:d0:77:24:2d:c9:43:94:c9:c5: c3:dd:b3:d6:49:a7:61:77:61:cb:35:19:ea:6e:f9: 73:ac:66:56:22:a2:b2:db:4b:bd:2c:e7:28:b1:ae: c5:01:49:6b:cb:9c:a4:37:5d:4c:e6:aa:43:bc:b9: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0E:12:9C:ED:8F:AA:CC:FA:72:F1:57:1C:F7:E4:38:E7:07:F9:7E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d69bc1d5-8269-497f-a53a-bbb55896ac25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.44.0/24 Signature Algorithm: sha256WithRSAEncryption 58:ad:9a:23:21:4f:8a:40:99:55:57:ce:20:5c:4a:d5:6a:01: a2:4a:b2:99:50:3f:e0:b3:84:f8:39:d1:5b:6b:8e:05:59:ed: 0a:05:30:0d:20:00:c8:16:52:39:e3:01:5e:7d:a6:42:36:eb: af:54:5f:6a:7f:ce:b8:a4:65:f4:24:3f:fa:ca:f7:ea:d9:02: 5a:19:98:2b:28:1f:05:6f:3c:a1:49:fd:4e:13:bc:92:10:fe: 2d:18:b2:b1:b3:29:6c:0b:78:ab:77:1a:f2:34:d5:6e:61:fc: cb:77:25:54:f2:04:f1:25:05:41:95:79:6b:24:4f:e4:e8:69: 0d:c5:b8:98:1b:be:86:6b:90:2e:d0:5e:6f:aa:47:58:33:b9: 7e:fe:52:f0:96:a0:c4:cf:ae:bb:b3:87:45:44:b3:1f:de:0d: 56:63:61:65:35:8a:0d:7a:d4:1f:65:25:13:fd:a3:76:02:6b: 43:ce:89:78:09:65:f9:e6:ec:84:ac:c9:e1:57:14:00:f1:b2: e9:45:5b:f0:89:71:b6:37:45:ca:fc:89:9e:d3:5f:76:c7:17: da:77:8d:7c:ae:c0:22:ca:3c:85:5e:a5:92:ea:a7:14:86:b9: 5c:13:6e:9d:0f:7e:51:eb:80:20:08:8d:89:fa:67:2a:0e:58: fe:19:e1:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMq/o56ctp0vNJruCxCZudFL8QQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDA3WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDZhYzRjMDk2Y2VlNGNlZjMyYTg4ZGI3Y2VkN2M4N2Iw NzkzYTMzYjExNmVhYjZlY2UzNWZiZDhiM2U4ZWVlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC04oz8n+lm6ajOZFMFBdjZuDBrPEAMldRH5VB0y3v8+f4B xdDltXgXZwreZ2LiI50NE26bzGzPVii6ltZON8FwrJ2qp9UhW719ALz9UNZAsck9 cD0Wd2qv2c0q+2ndS/rFU8/jMCKibj4DwBZJgDCUnV8P7LvsX33gA4e54Gjgg1E9 DTCqTIAJP+Rm18GpDJE+nb/laSm8gFBKkrQ7Qc++W8RZC6jZP+HTLiIozWfgQYpR 4sYNNMPj3FjKeapyrfaScvWI8pGwktB3JC3JQ5TJxcPds9ZJp2F3Ycs1Gepu+XOs ZlYiorLbS70s5yixrsUBSWvLnKQ3XUzmqkO8ufQ3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKw4SnO2Pqsz6cvFXHPfkOOcH+X4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q2OWJjMWQ1LTgyNjktNDk3Zi1hNTNhLWJiYjU1ODk2YWMyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCwwDQYJKoZIhvcNAQELBQADggEBAFitmiMhT4pAmVVXziBcStVqAaJK splQP+CzhPg50VtrjgVZ7QoFMA0gAMgWUjnjAV59pkI2669UX2p/zrikZfQkP/rK 9+rZAloZmCsoHwVvPKFJ/U4TvJIQ/i0YsrGzKWwLeKt3GvI01W5h/Mt3JVTyBPEl BUGVeWskT+ToaQ3FuJgbvoZrkC7QXm+qR1gzuX7+UvCWoMTPrruzh0VEsx/eDVZj YWU1ig161B9lJRP9o3YCa0POiXgJZfnm7ISsyeFXFADxsulFW/CJcbY3Rcr8iZ7T X3bHF9p3jXyuwCLKPIVepZLqpxSGuVwTbp0PflHrgCAIjYn6ZyoOWP4Z4ek= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:57 2026 by rpki-client