$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa File: e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa (raw, json) Hash identifier: I7mW/+ozAzqwlTghXIJmIYkDGwCCtZiynwS+K9+qid8= Subject key identifier: 1C:0C:DB:31:1B:C9:94:40:30:30:72:FF:AE:D6:AD:09:1C:B2:1D:C6 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4050057F1F7F24997E71F54D683DFC8EAE766D57 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa Signing time: Thu 23 Jul 2026 14:50:09 +0000 ROA not before: Thu 23 Jul 2026 14:50:09 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:50:05:7f:1f:7f:24:99:7e:71:f5:4d:68:3d:fc:8e:ae:76:6d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 23 14:50:09 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=655a2d2949b96f54ee50ab5efb97d3c438330f9761fe48713b798363bbd25a38, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:e3:a5:5b:3e:f6:d4:36:60:03:28:3a:3d: ea:b1:37:3d:96:e7:5d:92:31:f3:e0:d0:06:9e:b3: 6b:12:e2:c6:6b:d9:86:32:88:f6:2d:e8:03:56:46: d2:c9:33:15:93:e6:2f:8a:20:91:7a:32:93:36:78: 80:cc:43:f0:34:96:4e:2b:1e:38:65:2e:04:67:79: 95:78:b1:ea:3f:81:6b:1f:76:2d:08:cc:92:f7:df: 73:34:0c:9f:c3:d2:0b:53:be:65:e8:47:17:f8:74: a9:2a:41:a8:3f:d7:f7:1c:85:68:6d:97:f9:8c:3d: 12:78:d7:85:f0:fd:2c:13:0d:18:da:7a:9a:99:e9: 36:ba:11:05:11:4b:a2:4b:e7:2a:bd:dd:77:6d:16: 28:34:65:c7:b6:a9:8b:98:e6:a4:84:a1:ad:7e:cd: e8:71:4e:ca:c5:69:bc:5d:c6:c7:bc:46:5d:eb:3f: 6a:3a:b9:d6:a9:70:4e:f9:25:31:c9:fc:22:d0:7f: c9:06:c0:a3:cb:7c:b4:d8:9f:79:52:69:93:c5:ce: 59:18:06:00:1e:76:0e:ab:a8:90:1b:90:34:cc:ac: 53:3a:c1:97:d5:c8:31:25:b1:29:8b:c8:c3:f5:55: 2c:44:bd:29:57:0b:30:4f:af:18:6b:9f:4e:b7:54: 01:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0C:DB:31:1B:C9:94:40:30:30:72:FF:AE:D6:AD:09:1C:B2:1D:C6 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.22.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:9d:26:5e:c3:b2:cb:b0:20:76:80:15:a7:7e:e1:61:d6:80: 32:14:36:dd:65:b1:8a:33:6f:75:4e:d6:86:a9:f2:b7:73:72: ff:fc:9b:4b:22:ac:62:b1:fe:b3:68:29:3f:4e:8c:30:70:93: 9e:a4:43:5c:5e:55:7b:92:39:3f:89:58:b7:67:85:0b:c9:25: a9:f6:74:26:b2:a1:2e:96:b6:38:22:ee:51:a1:27:5f:69:0d: 91:bf:72:73:2b:a0:e2:35:96:61:62:fd:c9:fe:cc:3a:c3:60: 80:db:ae:6d:08:94:98:33:b4:90:30:9f:63:fd:23:1e:0f:db: 09:f9:94:35:10:98:59:e0:e8:50:62:59:7d:b2:ed:d3:b6:4f: f3:9f:b8:ef:95:3f:8a:6f:af:a1:ad:d5:db:5d:37:a8:f8:83: 44:47:89:a1:2b:5d:07:ef:0f:66:fa:a7:f1:cc:e3:51:5c:10: d1:38:bf:31:a6:b6:85:9b:b8:d7:93:48:59:d1:22:ea:4c:c7: 53:f2:00:b6:aa:94:46:ce:bd:16:89:82:2a:f3:63:ca:be:2a: b6:4f:36:e1:d9:99:58:7f:14:75:d2:f1:42:31:87:83:02:ad: 27:56:2b:f2:c6:be:12:0c:a5:ba:4d:ea:6a:7a:fc:bd:73:25: a0:64:03:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQFAFfx9/JJl+cfVNaD38jq52bVcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzIzMTQ1MDA5WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTVhMmQyOTQ5Yjk2ZjU0ZWU1MGFiNWVmYjk3ZDNjNDM4 MzMwZjk3NjFmZTQ4NzEzYjc5ODM2M2JiZDI1YTM4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiB+OlWz721DZgAyg6PeqxNz2W512SMfPg0Aaes2sS4sZr 2YYyiPYt6ANWRtLJMxWT5i+KIJF6MpM2eIDMQ/A0lk4rHjhlLgRneZV4seo/gWsf di0IzJL333M0DJ/D0gtTvmXoRxf4dKkqQag/1/cchWhtl/mMPRJ414Xw/SwTDRja epqZ6Ta6EQURS6JL5yq93XdtFig0Zce2qYuY5qSEoa1+zehxTsrFabxdxse8Rl3r P2o6udapcE75JTHJ/CLQf8kGwKPLfLTYn3lSaZPFzlkYBgAedg6rqJAbkDTMrFM6 wZfVyDElsSmLyMP1VSxEvSlXCzBPrxhrn063VAF7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHAzbMRvJlEAwMHL/rtatCRyyHcYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2UyYjhhNzYzLTgzZTQtNDA4ZS04NTRhLWEyZTlmNjhjYTk5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBYwDQYJKoZIhvcNAQELBQADggEBAH6dJl7DssuwIHaAFad+4WHWgDIU Nt1lsYozb3VO1oap8rdzcv/8m0sirGKx/rNoKT9OjDBwk56kQ1xeVXuSOT+JWLdn hQvJJan2dCayoS6Wtjgi7lGhJ19pDZG/cnMroOI1lmFi/cn+zDrDYIDbrm0IlJgz tJAwn2P9Ix4P2wn5lDUQmFng6FBiWX2y7dO2T/OfuO+VP4pvr6Gt1dtdN6j4g0RH iaErXQfvD2b6p/HM41FcENE4vzGmtoWbuNeTSFnRIupMx1PyALaqlEbOvRaJgirz Y8q+KrZPNuHZmVh/FHXS8UIxh4MCrSdWK/LGvhIMpbpN6mp6/L1zJaBkA3o= -----END CERTIFICATE-----Generated at Fri Jul 24 05:24:37 2026 by rpki-client