$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04680ebe-26a9-4026-b39a-4013f87a31f2.roa File: 04680ebe-26a9-4026-b39a-4013f87a31f2.roa (raw, json) Hash identifier: eQffG6XW3Qe7B5eNjvdt0fdkUvBJ13bMk51bY3x8EBs= Subject key identifier: 0D:94:5D:B0:7C:5C:59:01:77:76:57:3A:41:08:FB:30:BC:6C:A4:92 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 31C74FCB29649D315D5981808F31A78966E37275 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04680ebe-26a9-4026-b39a-4013f87a31f2.roa Signing time: Sat 24 Oct 2026 02:02:59 +0000 ROA not before: Sat 24 Oct 2026 02:02:59 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 7224 IP address blocks: 35.97.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c7:4f:cb:29:64:9d:31:5d:59:81:80:8f:31:a7:89:66:e3:72:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 02:02:59 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=b553103cc0afc9efe468766bed2e8ce27f8912d99dae20769c1835f82e239c7c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:3f:eb:cd:14:db:c0:57:9b:84:96:c9:76: c8:15:14:85:41:f3:a8:ce:20:e4:94:6a:81:1e:0e: 19:8e:23:4a:84:22:80:7b:c3:0b:12:38:a4:f7:c6: 87:f4:13:e3:1d:c5:62:74:7d:c7:3d:3c:b4:f3:64: 00:f4:6c:2a:70:f2:c2:a1:b6:71:33:f5:32:70:c8: b9:aa:c1:7a:7c:67:8e:ba:e7:3e:f9:1c:96:1e:5e: 5f:04:14:b8:b1:70:9e:ef:a1:7a:d9:15:86:7e:9b: bb:49:7e:1e:ff:bc:02:c4:e7:cc:91:92:c7:91:37: 9a:c6:3e:2c:40:94:fe:2e:36:73:36:3d:6a:6c:a9: 1e:ff:9d:9c:ce:68:1b:2e:c8:08:7e:35:18:63:4b: ce:f8:2c:1b:b3:36:a9:0c:1f:e6:59:a3:8e:86:07: 97:b5:41:36:46:b4:7f:ac:be:9c:53:fc:90:f1:b3: 6a:8a:d4:ad:0c:6e:53:55:14:6d:eb:d7:06:de:8d: 84:70:13:db:20:e9:f5:0c:d5:ee:f5:97:d4:c3:35: ea:03:9c:58:de:ca:93:e6:62:51:d1:0b:72:dc:8e: 74:95:5b:49:69:78:57:08:53:fc:a8:89:70:f3:87: 28:72:10:11:02:24:27:db:c6:29:1c:86:f1:be:a2: 5c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:94:5D:B0:7C:5C:59:01:77:76:57:3A:41:08:FB:30:BC:6C:A4:92 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04680ebe-26a9-4026-b39a-4013f87a31f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.97.126.0/23 Signature Algorithm: sha256WithRSAEncryption 74:57:2e:a7:24:14:b9:62:46:b3:d1:d2:9d:21:03:0d:78:b3: 16:cb:59:15:c1:29:fa:04:74:00:d9:57:4d:8c:46:0e:c8:54: ab:0b:04:80:77:09:cf:ae:6b:04:ee:6f:a1:73:9f:a3:65:13: 97:e7:60:24:97:31:c9:f2:3e:c2:7b:05:44:56:b8:94:46:24: d0:79:a2:68:19:3b:a6:e6:0c:67:80:be:4a:ca:90:dd:f3:2d: a0:4c:11:8a:6d:23:61:dc:74:1c:7d:57:0f:e8:2a:57:b9:f0: c6:51:50:71:3d:0a:f8:0f:28:d4:af:e7:ad:2e:c6:9f:e3:5e: 46:c2:3f:89:4f:84:96:ea:7b:49:34:3f:68:4c:04:7d:2b:f2: ff:ae:69:79:3c:c2:5a:61:bb:c3:db:70:11:57:19:d5:ca:d6: 1b:95:4a:83:81:14:08:69:fe:a1:69:fa:c7:87:27:4e:9c:1e: 8c:ea:32:30:68:1b:56:4d:4d:01:c3:48:84:85:ca:20:5d:10: cc:84:14:47:0e:71:6a:65:4d:56:9a:45:eb:41:6a:3a:91:aa: 20:34:b1:2b:66:1c:32:eb:e9:38:e5:6a:ad:6a:35:45:5d:1d: 24:a7:91:32:79:8f:73:0a:3b:03:8c:3c:82:76:5c:21:fa:87: 52:4d:88:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMcdPyylknTFdWYGAjzGniWbjcnUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDIwMjU5WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTUzMTAzY2MwYWZjOWVmZTQ2ODc2NmJlZDJlOGNlMjdm ODkxMmQ5OWRhZTIwNzY5YzE4MzVmODJlMjM5YzdjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1tD/rzRTbwFebhJbJdsgVFIVB86jOIOSUaoEeDhmOI0qE IoB7wwsSOKT3xof0E+MdxWJ0fcc9PLTzZAD0bCpw8sKhtnEz9TJwyLmqwXp8Z466 5z75HJYeXl8EFLixcJ7voXrZFYZ+m7tJfh7/vALE58yRkseRN5rGPixAlP4uNnM2 PWpsqR7/nZzOaBsuyAh+NRhjS874LBuzNqkMH+ZZo46GB5e1QTZGtH+svpxT/JDx s2qK1K0MblNVFG3r1wbejYRwE9sg6fUM1e71l9TDNeoDnFjeypPmYlHRC3LcjnSV W0lpeFcIU/yoiXDzhyhyEBECJCfbxikchvG+olwZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDZRdsHxcWQF3dlc6QQj7MLxspJIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA0NjgwZWJlLTI2YTktNDAyNi1iMzlhLTQwMTNmODdhMzFmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYX4wDQYJKoZIhvcNAQELBQADggEBAHRXLqckFLliRrPR0p0hAw14sxbL WRXBKfoEdADZV02MRg7IVKsLBIB3Cc+uawTub6Fzn6NlE5fnYCSXMcnyPsJ7BURW uJRGJNB5omgZO6bmDGeAvkrKkN3zLaBMEYptI2HcdBx9Vw/oKle58MZRUHE9CvgP KNSv560uxp/jXkbCP4lPhJbqe0k0P2hMBH0r8v+uaXk8wlphu8PbcBFXGdXK1huV SoOBFAhp/qFp+seHJ06cHozqMjBoG1ZNTQHDSISFyiBdEMyEFEcOcWplTVaaRetB ajqRqiA0sStmHDLr6Tjlaq1qNUVdHSSnkTJ5j3MKOwOMPIJ2XCH6h1JNiK0= -----END CERTIFICATE-----Generated at Mon Nov 9 08:49:44 2026 by rpki-client