$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa File: f0a96265-a445-4e05-83b9-a3b3fd739677.roa (raw, json) Hash identifier: LE50io9f1OLdlnryn4OwAC2i1lJOkYpBQsd27UXmvCQ= Subject key identifier: E2:65:9D:1F:BD:FF:0C:82:69:9D:72:5C:10:03:FE:85:3C:87:36:EC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 79AB77A0AC783405EF8070726FC39E2CC5EF2C5F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa Signing time: Mon 04 May 2026 15:00:30 +0000 ROA not before: Mon 04 May 2026 15:00:30 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ab:77:a0:ac:78:34:05:ef:80:70:72:6f:c3:9e:2c:c5:ef:2c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 4 15:00:30 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=97ac817f7e4a993c21f4c8cdc531d7b49049085f14c244a4309d80dee88cc5ca, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:37:d2:0e:6d:74:60:ec:94:13:a9:c3:c0: 7d:5a:9c:8c:8f:6a:8e:fa:1e:e0:13:86:4b:7f:bd: d1:7a:38:47:fb:1e:f0:be:25:02:81:d0:ec:6b:ab: b0:3f:29:aa:95:ea:28:62:c0:af:a3:7e:56:5a:ae: 7f:9e:51:16:b2:e2:1e:2b:78:b9:eb:27:50:1f:c5: b0:e9:c2:8a:5a:2b:6f:a2:10:8b:f0:13:0b:c5:90: df:77:93:06:1d:4a:f7:d4:a3:d1:9f:5c:d1:ea:2e: 44:24:a7:97:b0:87:db:3f:68:30:62:30:a0:92:d9: 1d:80:88:6e:07:ba:10:8b:22:2b:4b:fe:d7:78:22: 8c:1b:5e:53:a8:eb:bf:43:d2:73:05:d3:c6:bd:ce: 53:a1:6c:d9:d0:1c:0c:d5:2c:7e:3c:c5:ff:dc:b6: 00:7a:4e:aa:19:da:b7:4e:62:61:75:b8:31:94:9f: 68:cd:3e:a2:67:c4:68:a0:19:e5:36:8a:ca:7d:c1: 4b:f8:f2:2d:58:4a:3f:98:62:01:b1:f7:dc:25:c5: 06:cb:68:e8:9b:f6:13:a0:b2:06:56:7a:16:22:ec: 2b:4d:97:86:cd:e7:52:24:fd:4a:75:0c:be:be:ca: ca:b0:38:f0:cd:1b:83:7b:4f:1c:58:f1:47:f6:a8: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:65:9D:1F:BD:FF:0C:82:69:9D:72:5C:10:03:FE:85:3C:87:36:EC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.28.0/23 Signature Algorithm: sha256WithRSAEncryption 21:3e:aa:36:03:76:37:2f:e7:70:71:f3:17:f8:1e:ac:57:61: 1f:29:38:2b:ad:1b:7d:b4:01:75:02:26:ae:0e:0f:cc:bc:b2: 5e:94:35:e2:14:ff:07:dc:d1:71:75:a8:4a:52:bb:db:f3:09: f2:43:d5:fe:6f:c2:f1:e7:87:57:c9:f5:2e:c8:33:61:27:6f: ca:ff:25:87:91:67:d1:2c:a8:6a:0e:04:02:23:97:9b:f6:68: 6a:53:d0:30:84:54:45:29:29:e8:7b:fa:a1:a6:ae:d7:66:40: 5c:95:e4:bd:5f:1f:cc:ce:8e:cd:d7:86:fa:f2:c5:cd:4c:24: 95:71:21:29:32:d1:ee:ce:0a:1a:c4:e1:77:61:08:8f:18:b2: 53:6a:23:21:7e:0a:68:f7:f1:40:09:33:81:6b:55:95:e5:d3: 72:fd:c9:28:25:6c:07:0c:52:44:36:fc:1e:ad:b0:ba:08:e6: 70:77:a5:0d:a7:34:f3:b1:75:c9:d7:39:21:8d:a5:e9:d4:38: e4:07:e3:38:0e:e2:5e:c9:4e:69:e4:51:4b:36:1f:be:f6:f1: 99:88:2f:c3:7b:09:91:67:b7:e4:93:78:5f:1e:8d:13:16:7c: 6b:1e:03:fe:fc:a8:e0:4a:b5:04:34:e7:ec:67:6a:0c:55:11: b8:5b:78:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeat3oKx4NAXvgHByb8OeLMXvLF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTA0MTUwMDMwWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2FjODE3ZjdlNGE5OTNjMjFmNGM4Y2RjNTMxZDdiNDkw NDkwODVmMTRjMjQ0YTQzMDlkODBkZWU4OGNjNWNhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDb3DfSDm10YOyUE6nDwH1anIyPao76HuAThkt/vdF6OEf7 HvC+JQKB0Oxrq7A/KaqV6ihiwK+jflZarn+eURay4h4reLnrJ1AfxbDpwopaK2+i EIvwEwvFkN93kwYdSvfUo9GfXNHqLkQkp5ewh9s/aDBiMKCS2R2AiG4HuhCLIitL /td4IowbXlOo679D0nMF08a9zlOhbNnQHAzVLH48xf/ctgB6TqoZ2rdOYmF1uDGU n2jNPqJnxGigGeU2isp9wUv48i1YSj+YYgGx99wlxQbLaOib9hOgsgZWehYi7CtN l4bN51Ik/Up1DL6+ysqwOPDNG4N7TxxY8Uf2qNhbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4mWdH73/DIJpnXJcEAP+hTyHNuwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2YwYTk2MjY1LWE0NDUtNGUwNS04M2I5LWEzYjNmZDczOTY3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBwwDQYJKoZIhvcNAQELBQADggEBACE+qjYDdjcv53Bx8xf4HqxXYR8p OCutG320AXUCJq4OD8y8sl6UNeIU/wfc0XF1qEpSu9vzCfJD1f5vwvHnh1fJ9S7I M2Enb8r/JYeRZ9EsqGoOBAIjl5v2aGpT0DCEVEUpKeh7+qGmrtdmQFyV5L1fH8zO js3Xhvryxc1MJJVxISky0e7OChrE4XdhCI8YslNqIyF+Cmj38UAJM4FrVZXl03L9 ySglbAcMUkQ2/B6tsLoI5nB3pQ2nNPOxdcnXOSGNpenUOOQH4zgO4l7JTmnkUUs2 H7728ZmIL8N7CZFnt+STeF8ejRMWfGseA/78qOBKtQQ05+xnagxVEbhbeIE= -----END CERTIFICATE-----Generated at Wed May 13 02:41:55 2026 by rpki-client