$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9a8bea7-dc8c-471c-8fcc-7a27e76ea376.roa File: e9a8bea7-dc8c-471c-8fcc-7a27e76ea376.roa (raw, json) Hash identifier: iH4HsHEe2R9Zee+vkxjaz8tCORv9UnzBtT/pVGAO1pE= Subject key identifier: CF:88:D0:84:66:79:3E:59:95:ED:8A:67:25:04:11:B7:E7:FA:98:21 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5E93455E65AC2A1A0D95B23E4DF3DB011588B16A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9a8bea7-dc8c-471c-8fcc-7a27e76ea376.roa Signing time: Wed 21 Oct 2026 00:10:07 +0000 ROA not before: Wed 21 Oct 2026 00:10:07 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.111.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:93:45:5e:65:ac:2a:1a:0d:95:b2:3e:4d:f3:db:01:15:88:b1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 21 00:10:07 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=66f203bc45914ccf91d89295b63dcc91b6c815728e03542ad8f70669fee8a3cc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d4:39:1f:3b:a4:88:08:9f:5a:17:9a:bc:34: 5b:2a:5b:14:22:82:02:d6:61:26:44:b0:03:c3:f0: 6c:b6:ba:79:60:43:b3:85:cf:4f:31:ce:be:d7:ad: 18:65:49:e4:e0:07:91:28:bf:b6:71:33:b3:fe:2c: 36:91:15:38:36:10:09:ca:c4:30:4f:76:d8:ca:3e: f1:af:27:d7:e4:5a:6b:22:21:ef:9e:09:a3:9b:48: cd:2c:89:1f:49:04:46:1a:ce:6e:b8:42:c4:65:29: 01:ed:cb:c8:cf:c5:70:c0:5d:af:33:da:a0:00:8b: a9:9b:86:50:b8:87:b2:78:1a:3b:da:fd:8d:3e:05: 2f:76:2f:c5:0f:5f:8f:33:f7:00:e7:e9:5e:9b:b1: af:27:b7:21:26:c5:ee:52:15:c4:f6:a7:5f:54:9a: 42:da:8c:2a:b8:22:2c:09:37:02:e3:98:40:bc:54: 2d:05:0a:a9:cf:04:8f:c8:bf:ac:30:b9:c1:63:f6: bd:86:d3:cb:23:2c:4f:12:32:b0:2d:ab:82:bd:7c: 7f:a0:ad:38:d3:45:ee:b2:65:61:16:7a:5e:94:04: d3:00:40:08:ff:37:70:d9:b3:0f:c2:33:eb:aa:64: 09:b1:a4:63:f0:da:86:ce:cf:0a:2a:5c:45:e4:1d: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:88:D0:84:66:79:3E:59:95:ED:8A:67:25:04:11:B7:E7:FA:98:21 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9a8bea7-dc8c-471c-8fcc-7a27e76ea376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.253.0/24 Signature Algorithm: sha256WithRSAEncryption 19:53:a8:3c:60:ae:1f:f5:19:80:b7:aa:02:bd:1b:a0:0f:e8: 37:31:5b:1e:0a:88:62:50:8f:50:71:6b:51:ba:68:f6:60:05: f3:94:b6:21:c6:16:ec:86:09:9f:9b:17:0d:ac:13:dd:a9:76: 4b:7a:9f:73:64:67:9c:a2:ad:c4:ad:11:2c:65:30:9e:80:6c: 33:5a:45:3f:02:38:65:9e:d2:92:91:e6:29:d8:7f:d4:a3:7b: 9f:50:3a:61:fe:72:7b:18:42:8f:a1:4f:b9:22:90:be:5a:25: 46:b9:bc:31:38:8c:26:4f:a2:4f:22:ad:45:59:88:c2:cc:43: ae:0f:37:7e:14:2f:63:1d:13:31:a5:ba:d8:3e:7e:87:ed:f0: 0b:4e:f8:50:bb:18:7c:ea:da:0a:39:66:04:20:1e:eb:80:f1: 26:8e:0b:f9:a8:ed:09:09:2d:e7:b9:0c:c1:80:28:d1:f0:54: 1a:c0:b3:b7:c5:f4:80:d0:3d:37:33:db:19:a0:44:f4:bc:f1: 20:e7:30:e9:06:e0:34:22:33:70:c3:bb:73:0d:cc:dc:94:b8: 27:25:10:31:c0:7a:5b:f7:67:c0:a5:e7:d8:f9:05:5c:b1:66: 07:6e:d6:78:e5:0f:be:f9:0e:55:ec:07:36:3c:b1:e1:2c:64: 24:e1:c5:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXpNFXmWsKhoNlbI+TfPbARWIsWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDIxMDAxMDA3WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmYyMDNiYzQ1OTE0Y2NmOTFkODkyOTViNjNkY2M5MWI2 YzgxNTcyOGUwMzU0MmFkOGY3MDY2OWZlZThhM2NjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX1DkfO6SICJ9aF5q8NFsqWxQiggLWYSZEsAPD8Gy2unlg Q7OFz08xzr7XrRhlSeTgB5Eov7ZxM7P+LDaRFTg2EAnKxDBPdtjKPvGvJ9fkWmsi Ie+eCaObSM0siR9JBEYazm64QsRlKQHty8jPxXDAXa8z2qAAi6mbhlC4h7J4Gjva /Y0+BS92L8UPX48z9wDn6V6bsa8ntyEmxe5SFcT2p19UmkLajCq4IiwJNwLjmEC8 VC0FCqnPBI/Iv6wwucFj9r2G08sjLE8SMrAtq4K9fH+grTjTRe6yZWEWel6UBNMA QAj/N3DZsw/CM+uqZAmxpGPw2obOzwoqXEXkHQyfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz4jQhGZ5PlmV7YpnJQQRt+f6mCEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U5YThiZWE3LWRjOGMtNDcxYy04ZmNjLTdhMjdlNzZlYTM3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/0wDQYJKoZIhvcNAQELBQADggEBABlTqDxgrh/1GYC3qgK9G6AP6Dcx Wx4KiGJQj1Bxa1G6aPZgBfOUtiHGFuyGCZ+bFw2sE92pdkt6n3NkZ5yircStESxl MJ6AbDNaRT8COGWe0pKR5inYf9Sje59QOmH+cnsYQo+hT7kikL5aJUa5vDE4jCZP ok8irUVZiMLMQ64PN34UL2MdEzGlutg+foft8AtO+FC7GHzq2go5ZgQgHuuA8SaO C/mo7QkJLee5DMGAKNHwVBrAs7fF9IDQPTcz2xmgRPS88SDnMOkG4DQiM3DDu3MN zNyUuCclEDHAelv3Z8Cl59j5BVyxZgdu1njlD775DlXsBzY8seEsZCThxcQ= -----END CERTIFICATE-----Generated at Thu Nov 12 19:11:32 2026 by rpki-client