$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d7e791f4-bbcd-4e1c-a866-5f58dc127512.roa File: d7e791f4-bbcd-4e1c-a866-5f58dc127512.roa (raw, json) Hash identifier: 2bJ+KzxYl6mSAcbOpiOXTYfzeBrOJNkUo2Gxdpc+KeM= Subject key identifier: 4B:7E:CC:C8:34:61:8D:DF:13:AD:A3:7E:0D:20:2E:1E:D0:BB:CD:96 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 202E7DAB62CE72D32E31D56954C474F0830376C0 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d7e791f4-bbcd-4e1c-a866-5f58dc127512.roa Signing time: Sat 24 Oct 2026 02:02:57 +0000 ROA not before: Sat 24 Oct 2026 02:02:57 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2e:7d:ab:62:ce:72:d3:2e:31:d5:69:54:c4:74:f0:83:03:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 02:02:57 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=d817fc39ac7fe4bac7ec436dc0519d210ba1ef921d8fb9138b5d104c42ebe2b1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:ab:71:1d:3c:02:56:9c:e7:34:64:65:78: 78:4b:43:df:2e:c3:5a:75:3e:7f:1a:54:ab:21:f7: 47:26:ef:86:7c:be:bd:24:d8:2d:a3:eb:7d:a0:e7: c8:2e:b1:37:3a:58:4a:8f:68:70:35:4a:25:71:ff: 9a:0d:94:57:5b:24:28:b0:61:2d:28:bd:b1:97:b7: 81:fe:06:83:60:fd:3c:1c:d7:8e:98:dc:f3:9a:e5: 0c:c6:2e:49:13:dc:b1:83:d7:cd:b2:0b:9b:37:ac: 18:f5:25:e5:5e:5e:29:d5:48:f8:e4:ef:df:c4:7d: 5b:2d:c2:67:18:16:bc:eb:05:8c:60:4f:7c:f5:14: ee:10:65:b1:cc:11:f8:87:e2:5f:cd:18:66:d3:4e: 7e:56:c8:9f:6d:f2:d8:c8:e1:f2:5d:f0:b6:b4:46: d1:42:70:29:7b:b4:a2:14:af:66:51:37:e0:91:fb: 20:d9:91:8a:34:bd:9b:4e:20:eb:8a:6d:13:5f:fd: 1c:70:38:db:44:6d:68:be:9b:95:3f:60:ca:4e:28: ce:e1:ca:bc:cb:9c:7a:37:0f:d4:83:95:43:f5:21: a7:c3:a6:19:95:9a:47:cd:c5:f7:d4:67:7b:00:34: e0:22:75:4b:2c:46:1c:08:ff:ac:86:a8:ac:15:74: cc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7E:CC:C8:34:61:8D:DF:13:AD:A3:7E:0D:20:2E:1E:D0:BB:CD:96 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d7e791f4-bbcd-4e1c-a866-5f58dc127512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.42.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:bb:24:6c:c1:65:0f:0f:c9:99:81:f4:80:1d:ce:c3:3f:1b: 90:33:d3:52:ad:6e:27:7e:d5:8d:ce:3f:7e:3a:72:54:d3:fb: 11:63:04:eb:90:bc:ad:2f:87:62:38:ea:4e:e6:d2:6f:38:e0: 4a:7b:24:70:a4:af:b6:2a:b5:fb:26:85:d7:cd:d9:f2:69:26: d9:c9:2d:e7:5b:db:7a:b6:56:8b:fc:fe:f9:42:d3:b1:78:10: db:65:b5:99:5d:ba:43:06:80:6a:11:b7:79:be:6e:f9:ac:9a: 2b:c7:d8:97:09:01:8f:55:4a:ad:19:b2:e7:45:3a:d3:dc:16: f4:f4:c8:41:ee:36:56:7d:11:7a:a8:52:1b:3b:75:5b:12:70: 31:f6:27:62:c6:f6:f7:7d:10:d2:cc:a9:34:18:7d:af:71:6f: 66:94:a2:d9:37:89:2e:42:98:c0:1d:1e:06:22:e2:57:88:12: 7c:29:1e:1e:d7:9e:24:1b:85:f5:29:b4:fb:82:36:b6:d3:67: 9f:fc:96:93:47:24:11:78:cc:8b:09:09:22:5f:97:88:c1:ae: 09:39:c8:29:b2:c1:bf:84:08:19:94:75:74:6f:f0:e8:13:27: d8:8d:f1:e9:d6:61:e9:ce:78:ff:b6:5e:71:68:b7:f7:d1:c8: 18:4b:c2:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIC59q2LOctMuMdVpVMR08IMDdsAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDIwMjU3WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODE3ZmMzOWFjN2ZlNGJhYzdlYzQzNmRjMDUxOWQyMTBi YTFlZjkyMWQ4ZmI5MTM4YjVkMTA0YzQyZWJlMmIxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjSKtxHTwCVpznNGRleHhLQ98uw1p1Pn8aVKsh90cm74Z8 vr0k2C2j632g58gusTc6WEqPaHA1SiVx/5oNlFdbJCiwYS0ovbGXt4H+BoNg/Twc 146Y3POa5QzGLkkT3LGD182yC5s3rBj1JeVeXinVSPjk79/EfVstwmcYFrzrBYxg T3z1FO4QZbHMEfiH4l/NGGbTTn5WyJ9t8tjI4fJd8La0RtFCcCl7tKIUr2ZRN+CR +yDZkYo0vZtOIOuKbRNf/RxwONtEbWi+m5U/YMpOKM7hyrzLnHo3D9SDlUP1IafD phmVmkfNxffUZ3sANOAidUssRhwI/6yGqKwVdMyBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS37MyDRhjd8TraN+DSAuHtC7zZYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q3ZTc5MWY0LWJiY2QtNGUxYy1hODY2LTVmNThkYzEyNzUxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCowDQYJKoZIhvcNAQELBQADggEBAGy7JGzBZQ8PyZmB9IAdzsM/G5Az 01Ktbid+1Y3OP346clTT+xFjBOuQvK0vh2I46k7m0m844Ep7JHCkr7YqtfsmhdfN 2fJpJtnJLedb23q2Vov8/vlC07F4ENtltZldukMGgGoRt3m+bvmsmivH2JcJAY9V Sq0ZsudFOtPcFvT0yEHuNlZ9EXqoUhs7dVsScDH2J2LG9vd9ENLMqTQYfa9xb2aU otk3iS5CmMAdHgYi4leIEnwpHh7XniQbhfUptPuCNrbTZ5/8lpNHJBF4zIsJCSJf l4jBrgk5yCmywb+ECBmUdXRv8OgTJ9iN8enWYenOeP+2XnFot/fRyBhLwts= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:30 2026 by rpki-client