$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/070f035c-929a-4988-90b1-3eb5df15552f.roa File: 070f035c-929a-4988-90b1-3eb5df15552f.roa (raw, json) Hash identifier: h/o3FRWLBsw/uhG9K6ix5sI6zQOfRueXTtfOc7os3Ig= Subject key identifier: 92:3B:CD:CE:45:1F:FD:73:17:64:1B:C3:E9:DB:93:1D:12:8C:AA:EF Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 62D9256BAB131657A108F63462DBF7F443317964 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/070f035c-929a-4988-90b1-3eb5df15552f.roa Signing time: Mon 27 Jul 2026 02:50:06 +0000 ROA not before: Mon 27 Jul 2026 02:50:06 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d9:25:6b:ab:13:16:57:a1:08:f6:34:62:db:f7:f4:43:31:79:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 27 02:50:06 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=7ab817938a0ef19a8d96c92781c6629d1bad65c0bfadea19afe460271eca7685, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:32:78:3e:ae:9b:95:47:64:f5:01:f9:ba: bb:83:1b:83:a4:c2:a6:2d:de:10:78:55:64:37:3e: 87:da:a4:8d:28:ce:0f:f7:1f:e5:53:ff:3d:c6:7a: 7c:51:bf:91:4e:02:07:28:a4:8a:f9:3f:e2:42:b5: 40:c3:68:91:30:51:87:73:c2:88:9b:22:7e:c7:de: f5:1c:6e:ad:49:9d:43:ae:09:25:29:c3:17:3e:fc: e4:a2:19:ec:99:d6:76:37:54:20:df:19:60:c6:d1: bf:b7:2b:bf:06:17:08:2c:07:63:be:e5:64:8a:bc: 26:34:90:b3:95:08:5f:1e:79:0e:21:96:46:37:05: 51:20:97:c2:57:f7:ff:e4:f2:32:63:99:e2:25:00: 27:16:fe:f7:50:fd:64:af:68:10:b9:11:07:eb:01: 6f:1a:ef:94:94:cf:e8:51:6d:3d:17:45:99:57:f4: a5:0e:a8:85:14:d8:d9:18:56:fb:64:0f:99:d5:36: 64:4a:d1:d6:4b:8a:e8:07:33:64:d8:f7:28:fa:e4: 7e:54:9a:87:0f:a4:2d:48:de:b7:32:76:c0:1f:b5: d4:f6:d8:4f:00:cd:68:5f:e5:84:96:51:88:df:36: 99:af:f0:15:08:c4:eb:79:75:19:de:f8:84:12:bf: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3B:CD:CE:45:1F:FD:73:17:64:1B:C3:E9:DB:93:1D:12:8C:AA:EF X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/070f035c-929a-4988-90b1-3eb5df15552f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.33.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:29:40:82:dc:77:dd:d6:0b:3c:79:a5:13:03:d4:63:7e:da: 2c:3b:69:5c:b9:5a:c4:9c:cf:e8:66:8f:31:24:0f:06:c4:ea: 90:6e:56:6d:8f:4e:0d:7f:75:7f:3b:3c:33:cb:41:4c:5f:ca: 11:03:b0:f7:07:b4:f5:d0:a7:ab:87:2a:93:37:33:10:e8:30: 00:e3:25:43:0b:57:76:77:8e:ed:bc:e3:04:93:61:fd:8d:d5: 5f:eb:56:5b:ab:83:f3:78:d7:36:74:b2:70:2b:1d:6a:a2:96: c6:8b:69:b6:0d:e1:5a:f3:cb:40:2d:51:b2:c4:8c:54:5a:b8: 3d:9c:d8:a5:02:a1:1f:e6:76:79:d3:4f:8c:da:09:76:21:fb: 3b:e3:3d:a9:66:52:20:84:f4:c4:45:cc:a4:f5:25:ef:31:ec: 96:4f:13:04:4b:14:95:e0:89:8d:af:1b:e0:76:38:62:0b:1b: 34:03:c7:a7:2e:fb:60:29:fb:4c:e9:33:e6:34:20:1d:b1:eb: 9b:c9:4b:90:1e:5d:34:2a:4d:95:0d:8f:be:4b:0e:a4:0b:f3: c6:96:be:f2:e7:d6:5e:24:9c:29:23:f1:48:ff:f5:14:2e:36: 00:0c:fa:c8:89:eb:c7:a4:5b:27:d1:a3:b4:04:c6:66:8e:f8: f3:95:ce:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYtkla6sTFlehCPY0Ytv39EMxeWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzI3MDI1MDA2WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YWI4MTc5MzhhMGVmMTlhOGQ5NmM5Mjc4MWM2NjI5ZDFi YWQ2NWMwYmZhZGVhMTlhZmU0NjAyNzFlY2E3Njg1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCosjJ4Pq6blUdk9QH5uruDG4OkwqYt3hB4VWQ3PofapI0o zg/3H+VT/z3GenxRv5FOAgcopIr5P+JCtUDDaJEwUYdzwoibIn7H3vUcbq1JnUOu CSUpwxc+/OSiGeyZ1nY3VCDfGWDG0b+3K78GFwgsB2O+5WSKvCY0kLOVCF8eeQ4h lkY3BVEgl8JX9//k8jJjmeIlACcW/vdQ/WSvaBC5EQfrAW8a75SUz+hRbT0XRZlX 9KUOqIUU2NkYVvtkD5nVNmRK0dZLiugHM2TY9yj65H5UmocPpC1I3rcydsAftdT2 2E8AzWhf5YSWUYjfNpmv8BUIxOt5dRne+IQSv7bxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkjvNzkUf/XMXZBvD6duTHRKMqu8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3MGYwMzVjLTkyOWEtNDk4OC05MGIxLTNlYjVkZjE1NTUyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCEwDQYJKoZIhvcNAQELBQADggEBAF4pQILcd93WCzx5pRMD1GN+2iw7 aVy5WsScz+hmjzEkDwbE6pBuVm2PTg1/dX87PDPLQUxfyhEDsPcHtPXQp6uHKpM3 MxDoMADjJUMLV3Z3ju284wSTYf2N1V/rVlurg/N41zZ0snArHWqilsaLabYN4Vrz y0AtUbLEjFRauD2c2KUCoR/mdnnTT4zaCXYh+zvjPalmUiCE9MRFzKT1Je8x7JZP EwRLFJXgiY2vG+B2OGILGzQDx6cu+2Ap+0zpM+Y0IB2x65vJS5AeXTQqTZUNj75L DqQL88aWvvLn1l4knCkj8Uj/9RQuNgAM+siJ68ekWyfRo7QExmaO+POVzvA= -----END CERTIFICATE-----Generated at Wed Jul 29 01:59:52 2026 by rpki-client