$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa File: dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa (raw, json) Hash identifier: HLz4w4q4Ix89vbrkhFQW034+ycTTiHTGUDChmEFeN34= Subject key identifier: 14:41:C3:B5:A6:D6:55:3C:51:F1:D7:5E:4C:1A:77:DC:AA:B7:B7:32 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0631B659B29F8E15554EFFB4CC31FD6A4028E651 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa Signing time: Thu 15 Oct 2026 03:10:08 +0000 ROA not before: Thu 15 Oct 2026 03:10:08 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:31:b6:59:b2:9f:8e:15:55:4e:ff:b4:cc:31:fd:6a:40:28:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 15 03:10:08 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=b7d38c4056406728462ff89827856cc220f2bfa60bc0172e209981015f7e26a5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:1f:41:b5:1d:43:16:ff:52:d5:26:67:31: 8b:e1:10:8a:13:06:3d:06:e5:cf:b5:8b:e6:5c:3b: d2:0b:02:2b:02:f3:13:27:10:87:c7:4c:0e:ab:1a: 70:7c:5f:fa:52:18:97:db:bb:e9:6d:0a:61:d8:a1: 9a:77:7a:67:43:73:50:b8:78:e0:08:83:c7:a0:73: 2d:6c:99:91:30:be:81:2c:71:89:5b:32:5d:1b:94: 82:db:d6:71:e3:17:25:8a:8b:d1:c2:ad:6e:1e:ab: bc:c7:d3:7b:f6:39:dc:b2:c0:4d:fe:ed:92:1a:5c: ae:ed:a6:a4:39:72:2f:4c:8b:5d:73:b8:79:82:27: ef:ff:1a:87:ed:bc:76:2b:88:4d:1a:6b:62:df:ee: 10:5f:0b:67:30:01:b3:72:f0:bd:73:dc:ea:e8:c4: e8:14:a4:fe:0f:b9:8a:65:17:59:98:77:de:af:2d: f3:e2:a3:85:05:f1:fe:7f:9a:52:3c:11:b6:9a:13: f3:e9:ab:a5:65:77:87:f4:93:98:60:9f:21:73:60: 45:a2:f0:60:6d:5d:0c:7a:74:a9:60:00:ee:de:c6: 47:9c:2b:6c:15:08:8b:8e:4d:3b:35:c8:0f:e3:2d: 27:08:e9:ac:c8:16:1e:77:63:f6:18:77:f5:5b:04: b8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:C3:B5:A6:D6:55:3C:51:F1:D7:5E:4C:1A:77:DC:AA:B7:B7:32 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.11.0/24 Signature Algorithm: sha256WithRSAEncryption 11:71:96:89:48:77:57:3a:51:1f:df:40:12:93:53:79:e2:dd: 64:dc:bb:f4:72:a0:bf:2f:26:8a:4e:ea:75:e5:3f:4f:82:f6: 3e:1e:bb:9d:0f:a8:14:b6:d5:de:be:f0:9e:9a:c3:f3:d8:da: 0f:57:48:85:cb:07:c1:24:fd:bf:6a:d4:03:50:68:4d:8d:d7: 2e:c0:eb:84:5f:4d:19:a9:97:b7:2d:53:28:f7:41:51:72:dd: e2:69:98:59:b8:85:91:70:b0:43:24:88:b8:5c:1a:67:3f:cd: d9:ff:f1:72:b0:e0:23:cf:90:58:52:3b:3f:38:46:dc:5b:89: 64:b5:5c:ca:80:92:ad:fe:8b:0d:d0:ce:0a:a8:08:61:f9:e1: 9c:fd:3b:3f:f2:ee:a9:17:c8:d8:bf:11:75:58:0f:f3:7a:74: ee:11:ae:24:75:7b:2d:15:70:98:1a:ac:ae:70:f1:1d:c4:b3: b6:0a:95:ac:42:25:92:e0:10:61:8f:f6:cc:09:fd:ad:d3:91: 47:41:34:13:56:c3:01:b6:34:81:92:b7:6c:f3:ce:69:b8:07: d4:6d:ca:df:ff:6b:c1:db:c3:64:df:9c:b8:6c:3e:80:95:bd: be:62:4f:eb:eb:3a:28:9f:61:56:22:d9:2c:52:bd:62:5d:b8: a2:f1:a7:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBjG2WbKfjhVVTv+0zDH9akAo5lEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE1MDMxMDA4WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2QzOGM0MDU2NDA2NzI4NDYyZmY4OTgyNzg1NmNjMjIw ZjJiZmE2MGJjMDE3MmUyMDk5ODEwMTVmN2UyNmE1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK6x9BtR1DFv9S1SZnMYvhEIoTBj0G5c+1i+ZcO9ILAisC 8xMnEIfHTA6rGnB8X/pSGJfbu+ltCmHYoZp3emdDc1C4eOAIg8egcy1smZEwvoEs cYlbMl0blILb1nHjFyWKi9HCrW4eq7zH03v2OdyywE3+7ZIaXK7tpqQ5ci9Mi11z uHmCJ+//GoftvHYriE0aa2Lf7hBfC2cwAbNy8L1z3OroxOgUpP4PuYplF1mYd96v LfPio4UF8f5/mlI8EbaaE/Ppq6Vld4f0k5hgnyFzYEWi8GBtXQx6dKlgAO7exkec K2wVCIuOTTs1yA/jLScI6azIFh53Y/YYd/VbBLglAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFEHDtabWVTxR8ddeTBp33Kq3tzIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RjODIyYzAxLTE3MTctNGU0NS1hNWE4LTNhNWRjOTE2Yzc2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAswDQYJKoZIhvcNAQELBQADggEBABFxlolId1c6UR/fQBKTU3ni3WTc u/RyoL8vJopO6nXlP0+C9j4eu50PqBS21d6+8J6aw/PY2g9XSIXLB8Ek/b9q1ANQ aE2N1y7A64RfTRmpl7ctUyj3QVFy3eJpmFm4hZFwsEMkiLhcGmc/zdn/8XKw4CPP kFhSOz84RtxbiWS1XMqAkq3+iw3QzgqoCGH54Zz9Oz/y7qkXyNi/EXVYD/N6dO4R riR1ey0VcJgarK5w8R3Es7YKlaxCJZLgEGGP9swJ/a3TkUdBNBNWwwG2NIGSt2zz zmm4B9Rtyt//a8Hbw2TfnLhsPoCVvb5iT+vrOiifYVYi2SxSvWJduKLxpww= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:37 2026 by rpki-client