$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dfc522ed-0d32-4ec5-8088-25bb1a641c6e.roa File: dfc522ed-0d32-4ec5-8088-25bb1a641c6e.roa (raw, json) Hash identifier: CSl3kPRBW/3e32cyPsrvVGndWm2yo6bnLcgUMFVf6ZM= Subject key identifier: C4:5F:56:39:D6:C8:89:C1:9E:B4:AD:C1:7F:35:22:58:C7:63:D2:25 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4FA6D3CC1B3230BFACBF33FC7F41C9C56D69A869 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dfc522ed-0d32-4ec5-8088-25bb1a641c6e.roa Signing time: Thu 16 Jul 2026 00:20:07 +0000 ROA not before: Thu 16 Jul 2026 00:20:07 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a6:d3:cc:1b:32:30:bf:ac:bf:33:fc:7f:41:c9:c5:6d:69:a8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 16 00:20:07 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=951fe31686a5fbdaa3dedbec136adf648e6d578005ffbc38efca921a6ad3603a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:82:8a:19:42:ec:ea:f1:ae:89:6a:73:5f:40: 70:57:40:97:8b:3d:1c:19:6c:5c:8b:0f:90:80:bb: e4:99:b4:4d:03:e9:6a:18:f4:d8:05:6f:7c:3e:e8: b7:21:67:ad:b7:d3:e6:6c:07:16:89:af:d2:90:b7: 0e:21:3e:42:c6:3e:9f:9a:45:98:82:06:9e:6f:c5: 17:28:68:27:c5:b8:5e:d0:ca:6b:e8:90:11:50:55: 1c:9e:72:32:2a:36:ff:47:aa:fa:62:2f:8f:b0:19: f6:1b:9a:c1:9d:ea:b7:3d:9a:47:a2:d1:86:78:d9: 12:01:b2:0d:ad:ae:fc:87:ce:cc:dd:bb:84:93:a1: e4:66:6a:eb:57:42:73:ae:35:da:d4:79:6a:b0:a2: 80:6b:45:ce:a8:1b:2f:9c:7c:2d:bd:26:d0:31:b4: 51:b3:11:4f:13:be:9f:e5:e7:af:9a:da:a9:c2:05: 16:04:f6:f9:18:63:1c:64:84:a5:d8:bd:44:55:cf: 35:21:73:8a:22:71:e5:13:a4:10:81:1a:8e:05:92: 46:2f:cb:8b:1e:53:49:c0:ed:86:9e:34:72:d5:bd: 95:b0:7b:a3:1c:1c:7c:59:5a:47:2b:99:a1:7e:79: ce:98:7e:4b:56:f7:ca:3f:b0:a2:a8:3a:3b:4d:d7: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5F:56:39:D6:C8:89:C1:9E:B4:AD:C1:7F:35:22:58:C7:63:D2:25 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dfc522ed-0d32-4ec5-8088-25bb1a641c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/12 Signature Algorithm: sha256WithRSAEncryption 97:bf:2b:43:16:8c:10:44:4f:4d:71:d1:bb:60:63:01:2b:64: 9d:0d:3d:9d:3b:eb:4b:74:d0:e8:45:7b:d8:8f:dd:0c:f0:f7: 3d:d3:0d:96:9d:43:54:e3:bc:a2:95:df:04:be:05:14:af:43: d2:e1:12:54:ae:90:9e:7d:5a:8c:60:1d:40:34:ba:21:c7:94: b4:16:16:5a:a8:a1:c2:8b:55:fd:28:c0:64:50:0c:99:24:1d: 58:f7:7c:f5:e5:ac:b2:d8:8b:ad:ab:ae:0a:ff:52:1d:0b:f5: 20:29:28:d1:17:6d:02:15:a0:ff:91:d0:8e:16:8e:15:0e:b2: a4:71:ad:2b:ae:16:e5:5e:3f:02:f3:c4:5f:33:9f:5b:c5:1e: 4e:ba:b1:74:0e:c0:75:59:6a:4b:b6:c0:1d:a6:e1:7a:a0:a5: 46:0b:d8:ad:e8:35:7f:91:ab:30:70:cf:31:bf:8b:4d:86:0c: 4a:cc:17:76:60:d6:26:21:47:6c:f5:79:ab:1c:4c:3f:c5:7e: 41:51:97:d1:51:fd:50:eb:ec:52:74:2f:7d:2b:57:25:72:bc: ef:c5:5b:5a:26:68:a3:94:da:d7:89:79:9e:dd:ee:ba:bf:81: 5e:e1:96:3e:9b:d6:a3:4d:5a:be:b1:dc:74:fa:8f:c0:7e:a1: 01:9e:1e:7d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUT6bTzBsyML+svzP8f0HJxW1pqGkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzE2MDAyMDA3WhcNMjYxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTFmZTMxNjg2YTVmYmRhYTNkZWRiZWMxMzZhZGY2NDhl NmQ1NzgwMDVmZmJjMzhlZmNhOTIxYTZhZDM2MDNhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNgooZQuzq8a6JanNfQHBXQJeLPRwZbFyLD5CAu+SZtE0D 6WoY9NgFb3w+6LchZ6230+ZsBxaJr9KQtw4hPkLGPp+aRZiCBp5vxRcoaCfFuF7Q ymvokBFQVRyecjIqNv9HqvpiL4+wGfYbmsGd6rc9mkei0YZ42RIBsg2trvyHzszd u4SToeRmautXQnOuNdrUeWqwooBrRc6oGy+cfC29JtAxtFGzEU8Tvp/l56+a2qnC BRYE9vkYYxxkhKXYvURVzzUhc4oiceUTpBCBGo4FkkYvy4seU0nA7YaeNHLVvZWw e6McHHxZWkcrmaF+ec6YfktW98o/sKKoOjtN1/a/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxF9WOdbIicGetK3BfzUiWMdj0iUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RmYzUyMmVkLTBkMzItNGVjNS04MDg4LTI1YmIxYTY0MWM2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQjYDANBgkqhkiG9w0BAQsFAAOCAQEAl78rQxaMEERPTXHRu2BjAStknQ09 nTvrS3TQ6EV72I/dDPD3PdMNlp1DVOO8opXfBL4FFK9D0uESVK6Qnn1ajGAdQDS6 IceUtBYWWqihwotV/SjAZFAMmSQdWPd89eWsstiLrauuCv9SHQv1ICko0RdtAhWg /5HQjhaOFQ6ypHGtK64W5V4/AvPEXzOfW8UeTrqxdA7AdVlqS7bAHabheqClRgvY reg1f5GrMHDPMb+LTYYMSswXdmDWJiFHbPV5qxxMP8V+QVGX0VH9UOvsUnQvfStX JXK878VbWiZoo5Ta14l5nt3uur+BXuGWPpvWo01avrHcdPqPwH6hAZ4efQ== -----END CERTIFICATE-----Generated at Fri Jul 24 06:29:30 2026 by rpki-client