$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0169813a-bb63-4d7c-af7c-621b7522e549.roa File: 0169813a-bb63-4d7c-af7c-621b7522e549.roa (raw, json) Hash identifier: +bQJAXw1R6v+lMI8YCFNa1WkqeIizaBBmTcD4wqapGA= Subject key identifier: 7D:55:C5:FD:7A:E1:1D:E9:68:5C:D6:24:5C:88:2C:B6:DA:FD:9F:69 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3FBFBEF99305F5246BF0C1CBFC79159D39E1D99C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0169813a-bb63-4d7c-af7c-621b7522e549.roa Signing time: Sun 11 Oct 2026 14:50:04 +0000 ROA not before: Sun 11 Oct 2026 14:50:04 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bf:be:f9:93:05:f5:24:6b:f0:c1:cb:fc:79:15:9d:39:e1:d9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:04 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=2731f2e0218347df5401ae7148dd5c3a43f93d281c02ae0a4f8077b773bea52b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:43:ba:b6:61:ff:1a:76:fe:4f:7c:5a:13: cb:d2:26:31:e8:e4:b0:2a:66:fd:6e:71:a1:d7:b6: 3f:70:d9:23:f6:69:e0:f9:7f:23:c3:42:7b:5b:d8: 74:65:a4:77:14:2e:b4:c2:a9:4f:90:39:db:e6:6d: 56:66:d5:29:46:55:8c:5e:3a:fc:25:b2:d2:7e:a9: 46:5b:3f:cb:7e:5d:61:fd:43:02:5b:74:4b:ed:f1: 1a:6e:cb:5a:ea:94:07:d5:27:5d:8c:06:6a:79:78: f1:5b:c8:1a:2c:59:35:49:01:72:03:d1:4a:cb:56: 27:59:28:3c:a3:2f:10:44:e5:22:ea:c1:19:c3:c8: 18:f4:09:11:64:b4:e1:6d:34:15:57:d8:f3:6a:e1: e0:ef:36:78:0b:2d:97:d0:fe:f7:b2:ca:b0:15:db: 57:19:db:5b:68:87:0c:1a:8c:bf:8b:bb:af:3d:99: ea:d5:2a:4b:f7:e8:d7:4b:8c:aa:41:d6:2f:f0:f7: 4b:0a:e8:59:83:f6:41:cb:5c:94:bb:7a:8c:11:d0: ea:55:59:2f:5b:9b:19:f7:84:61:80:22:ca:c5:d6: e8:58:3a:4a:be:61:52:f6:d6:e8:a5:a7:8b:c3:62: 2e:9f:45:1a:55:7b:9b:f4:bc:35:3b:bc:16:7b:26: e8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:55:C5:FD:7A:E1:1D:E9:68:5C:D6:24:5C:88:2C:B6:DA:FD:9F:69 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0169813a-bb63-4d7c-af7c-621b7522e549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.24.0/23 Signature Algorithm: sha256WithRSAEncryption 69:de:84:ef:32:08:21:c1:10:84:2a:55:cd:11:0a:63:d7:7e: 4c:b6:6f:f0:39:f1:2a:06:b9:02:c6:37:f5:e6:21:bc:92:38: 24:b2:8b:8d:95:62:1d:08:a5:b9:d2:32:47:a4:f2:45:86:d1: ca:bb:61:de:ab:58:79:ce:0a:e6:3b:09:92:0f:25:26:3f:09: b5:25:f5:74:92:bf:95:93:88:d2:b1:09:b5:f6:83:33:68:96: 5b:36:c9:49:db:40:04:33:d7:6f:c9:28:86:fc:bb:53:f5:3a: 41:c5:4f:be:fe:d1:77:62:d0:73:7a:3f:87:db:e9:e6:ee:ba: 4d:32:94:fa:29:35:ed:eb:0e:21:34:d6:a1:ce:35:54:18:85: 28:e9:b5:8b:ac:82:36:8d:a7:7b:1a:4c:56:ac:fb:36:bd:00: c7:e1:42:b8:14:14:50:ad:5c:72:54:0e:38:1c:66:f4:28:31: 20:ce:ee:50:27:e6:70:bf:60:57:36:b1:cb:4a:9c:a5:68:a1: f7:0f:b1:85:f8:d4:62:c6:7e:4e:da:bc:e6:9a:54:bd:70:ec: 7e:03:c8:e2:78:d8:2b:73:28:0c:a9:26:80:e1:1d:29:b1:e8: 39:9a:06:76:15:cc:f8:f9:7a:ee:f6:76:c3:a3:9d:78:44:a6: 25:2f:dd:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP7+++ZMF9SRr8MHL/HkVnTnh2ZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDA0WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzMxZjJlMDIxODM0N2RmNTQwMWFlNzE0OGRkNWMzYTQz ZjkzZDI4MWMwMmFlMGE0ZjgwNzdiNzczYmVhNTJiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw6UO6tmH/Gnb+T3xaE8vSJjHo5LAqZv1ucaHXtj9w2SP2 aeD5fyPDQntb2HRlpHcULrTCqU+QOdvmbVZm1SlGVYxeOvwlstJ+qUZbP8t+XWH9 QwJbdEvt8Rpuy1rqlAfVJ12MBmp5ePFbyBosWTVJAXID0UrLVidZKDyjLxBE5SLq wRnDyBj0CRFktOFtNBVX2PNq4eDvNngLLZfQ/veyyrAV21cZ21tohwwajL+Lu689 merVKkv36NdLjKpB1i/w90sK6FmD9kHLXJS7eowR0OpVWS9bmxn3hGGAIsrF1uhY Okq+YVL21uilp4vDYi6fRRpVe5v0vDU7vBZ7JujXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfVXF/XrhHeloXNYkXIgsttr9n2kwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzAxNjk4MTNhLWJiNjMtNGQ3Yy1hZjdjLTYyMWI3NTIyZTU0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBgwDQYJKoZIhvcNAQELBQADggEBAGnehO8yCCHBEIQqVc0RCmPXfky2 b/A58SoGuQLGN/XmIbySOCSyi42VYh0IpbnSMkek8kWG0cq7Yd6rWHnOCuY7CZIP JSY/CbUl9XSSv5WTiNKxCbX2gzNolls2yUnbQAQz12/JKIb8u1P1OkHFT77+0Xdi 0HN6P4fb6ebuuk0ylPopNe3rDiE01qHONVQYhSjptYusgjaNp3saTFas+za9AMfh QrgUFFCtXHJUDjgcZvQoMSDO7lAn5nC/YFc2sctKnKVoofcPsYX41GLGfk7avOaa VL1w7H4DyOJ42CtzKAypJoDhHSmx6DmaBnYVzPj5eu72dsOjnXhEpiUv3d0= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:27 2026 by rpki-client