$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/35dd8080-5375-4755-bea9-982f40526ea4.roa File: 35dd8080-5375-4755-bea9-982f40526ea4.roa (raw, json) Hash identifier: MzMkvfJU/gKQJdxkJSBnHfq+RD4NDbMTtTYOe9t2YAA= Subject key identifier: 8E:FD:8C:DE:68:BC:B9:5C:C5:B2:27:1C:C0:FC:3E:50:1C:1E:59:5C Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 64D6F2085F27A77B160F55BC996007C1341AAB1B Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/35dd8080-5375-4755-bea9-982f40526ea4.roa Signing time: Thu 15 Oct 2026 00:07:07 +0000 ROA not before: Thu 15 Oct 2026 00:07:07 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 7224 IP address blocks: 172.96.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d6:f2:08:5f:27:a7:7b:16:0f:55:bc:99:60:07:c1:34:1a:ab:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Oct 15 00:07:07 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=c5553ad0e0f65058e3ff57d74210388c4a9bd59a9d4ee3801979ffd7088bf15d, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:29:2f:3c:61:a3:34:a0:ed:fa:97:bf:ab: 91:1d:c5:2f:ed:3e:4f:3b:bd:51:51:f3:23:f7:ec: d2:75:63:36:bf:a9:cb:8c:57:aa:64:99:4a:74:f5: bd:c5:36:8d:4f:f5:9a:fe:c9:b2:11:72:53:12:a4: 61:90:be:53:0b:35:1e:47:d1:ee:e7:67:eb:0e:d2: 67:39:66:9d:30:9c:15:cb:df:22:ed:84:5a:0f:1c: 3e:46:60:84:0c:61:06:79:0d:24:19:98:df:40:77: c7:89:4f:c0:ed:f7:ac:f4:b5:3c:9a:b1:5a:67:91: 62:6b:72:41:0b:20:da:ab:3f:c2:ad:3b:e5:73:87: c1:2f:f4:7f:41:2d:80:a3:6a:88:7d:36:8b:ab:15: e6:2d:8c:d3:08:0e:62:b5:58:e2:77:df:12:33:d6: e8:ee:52:aa:5e:fe:67:d4:9d:99:fe:20:6d:f0:7d: fc:9f:2d:3e:9b:dc:3e:87:15:9f:18:25:7c:49:36: 80:81:b1:00:0b:ca:8c:7b:45:6b:fe:83:b4:fc:58: d0:cc:bc:4c:cf:15:45:b3:40:28:a7:ef:17:1e:13: 48:d5:48:70:dc:bd:d9:03:56:2e:98:bb:a3:de:3b: 12:cb:42:20:a7:88:7a:94:e2:33:7a:49:3b:19:90: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FD:8C:DE:68:BC:B9:5C:C5:B2:27:1C:C0:FC:3E:50:1C:1E:59:5C X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/35dd8080-5375-4755-bea9-982f40526ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.96.0/20 Signature Algorithm: sha256WithRSAEncryption 4b:c3:32:9f:1e:ee:b0:df:4f:d7:59:a8:4e:cc:cb:47:16:2b: 82:3a:84:cf:f2:13:04:13:2b:e0:75:9a:5a:f2:8b:e4:e8:6c: f2:1c:c4:e8:96:32:e3:4c:e2:44:c6:7c:c7:f7:b9:23:6f:4e: 3d:4c:11:73:84:40:01:75:25:7c:89:6f:e2:37:d8:0c:5b:12: 4c:d7:c1:8e:8a:9e:76:37:d7:c7:76:8f:87:00:94:e4:b9:0e: a6:63:30:df:17:d7:43:09:40:fd:ed:62:98:0b:45:ca:2e:b9: 92:17:d6:91:24:69:0f:c6:86:46:78:27:06:be:8a:06:cc:81: 6d:4e:c4:2d:c8:74:e0:69:5e:29:47:d8:66:b7:4a:a7:91:44: fd:ea:96:dc:75:9c:7c:e4:d5:b3:b0:97:67:fc:1b:64:e5:b8: dd:f2:9c:f7:cc:7b:49:ae:67:87:77:4b:19:1d:74:29:f8:87: e5:10:81:30:44:f3:06:57:f4:e3:ff:c0:5b:40:a3:81:df:ed: 1b:98:d0:ea:7b:4e:5a:be:84:21:59:61:3e:df:95:0d:42:00: d1:03:94:4f:95:1b:4b:ba:4f:0d:fe:40:36:bf:4a:e2:dc:a6: ed:7f:9b:12:77:ca:26:1a:fb:41:d8:0f:8a:17:ba:84:b1:2f: 9d:44:cb:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZNbyCF8np3sWD1W8mWAHwTQaqxswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjYxMDE1MDAwNzA3WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTU1M2FkMGUwZjY1MDU4ZTNmZjU3ZDc0MjEwMzg4YzRh OWJkNTlhOWQ0ZWUzODAxOTc5ZmZkNzA4OGJmMTVkMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAmSkvPGGjNKDt+pe/q5EdxS/tPk87vVFR8yP37NJ1Yza/ qcuMV6pkmUp09b3FNo1P9Zr+ybIRclMSpGGQvlMLNR5H0e7nZ+sO0mc5Zp0wnBXL 3yLthFoPHD5GYIQMYQZ5DSQZmN9Ad8eJT8Dt96z0tTyasVpnkWJrckELINqrP8Kt O+Vzh8Ev9H9BLYCjaoh9NourFeYtjNMIDmK1WOJ33xIz1ujuUqpe/mfUnZn+IG3w ffyfLT6b3D6HFZ8YJXxJNoCBsQALyox7RWv+g7T8WNDMvEzPFUWzQCin7xceE0jV SHDcvdkDVi6Yu6PeOxLLQiCniHqU4jN6STsZkLLdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjv2M3mi8uVzFsiccwPw+UBweWVwwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzM1ZGQ4MDgwLTUzNzUtNDc1NS1iZWE5LTk4MmY0MDUyNmVhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASsYGAwDQYJKoZIhvcNAQELBQADggEBAEvDMp8e7rDfT9dZqE7My0cWK4I6 hM/yEwQTK+B1mlryi+TobPIcxOiWMuNM4kTGfMf3uSNvTj1MEXOEQAF1JXyJb+I3 2AxbEkzXwY6KnnY318d2j4cAlOS5DqZjMN8X10MJQP3tYpgLRcouuZIX1pEkaQ/G hkZ4Jwa+igbMgW1OxC3IdOBpXilH2Ga3SqeRRP3qltx1nHzk1bOwl2f8G2TluN3y nPfMe0muZ4d3SxkddCn4h+UQgTBE8wZX9OP/wFtAo4Hf7RuY0Op7Tlq+hCFZYT7f lQ1CANEDlE+VG0u6Tw3+QDa/SuLcpu1/mxJ3yiYa+0HYD4oXuoSxL51Ey3Y= -----END CERTIFICATE-----Generated at Thu Nov 5 20:03:50 2026 by rpki-client