$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa File: 07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa (raw, json) Hash identifier: JRRvG+pAUtOjErhjeZAMH4022khahYLvvZGTj3T+TPE= Subject key identifier: CD:E4:2D:BF:F9:CC:75:0D:C7:1D:41:6C:E3:45:68:0D:41:A7:F4:5D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 501DE5376B9922633AC4D70A1D0D1742B879C218 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa Signing time: Sat 24 Oct 2026 01:50:05 +0000 ROA not before: Sat 24 Oct 2026 01:50:05 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1d:e5:37:6b:99:22:63:3a:c4:d7:0a:1d:0d:17:42:b8:79:c2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:05 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=8ce58e39bb71b0d17fa2262c1b6f34166044536992891757298be6e6bcaca8d6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:47:cd:1d:fb:bb:0b:a6:71:18:e0:de:f7:d9: 73:67:20:2e:1c:79:fd:1e:34:ff:21:d2:3d:9b:dd: 62:84:83:b2:f2:a1:6e:16:fa:65:95:fe:32:47:5b: d5:98:2b:d1:77:74:0a:08:46:de:0b:8a:8e:c4:67: fd:45:bf:b6:93:83:d2:34:dc:dc:3f:1a:72:4e:0a: ba:d6:4d:a7:ca:ca:7d:81:5b:7a:8b:ba:a9:d3:ac: 3f:ef:73:ad:5e:56:f6:bb:ea:fa:4c:f6:da:19:f0: 5f:fd:9d:f3:0e:bd:19:90:af:9a:4e:df:e3:d3:f3: 70:bd:79:3d:02:9e:b5:41:29:63:2e:25:0b:57:c1: 8b:fa:5c:65:73:34:61:31:35:aa:2d:f8:ff:35:2d: e6:cf:b8:36:42:2a:27:2f:24:d4:d8:98:d9:13:df: 41:e4:8d:1d:79:34:b8:de:6d:48:76:d4:51:4c:f1: 0d:36:08:34:dd:0c:93:6c:de:50:01:0a:21:e7:72: df:c0:98:76:c4:cf:60:d4:1f:d1:87:ea:7c:a6:af: de:55:7a:26:5b:e1:21:96:3f:24:4e:72:db:7d:e2: 65:15:c9:90:00:1a:ee:da:24:bf:b9:ae:75:ef:3c: 4e:b7:e5:7f:34:66:98:f6:4b:44:bd:c7:ea:0b:d5: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E4:2D:BF:F9:CC:75:0D:C7:1D:41:6C:E3:45:68:0D:41:A7:F4:5D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.37.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:32:5f:04:99:6b:32:63:80:aa:49:4e:28:1a:71:8f:7b:29: 05:38:03:7b:23:3b:70:ab:22:45:40:99:31:86:6d:ed:8c:4f: f8:c7:64:1d:7b:2d:ae:c4:70:0c:35:fc:76:7a:7e:1c:16:32: 50:85:a5:c3:4e:7e:e7:d9:a9:62:ab:80:de:d5:0f:2c:d1:bd: 50:fb:de:67:e3:a3:8c:e3:25:38:5a:5a:e6:7c:0c:ae:41:78: 37:4a:af:df:ac:ac:5b:39:af:de:c5:4c:73:07:a0:4e:9f:4f: ed:87:33:8b:3a:e2:85:08:a1:68:05:ea:5e:e9:04:a7:1d:e4: 08:28:69:5d:a9:ed:ad:be:52:a4:2c:49:4c:df:de:61:d4:e1: 85:4e:76:b2:a7:47:2b:4e:ad:d5:27:86:9d:25:60:17:d0:ba: 6d:54:83:c0:e2:93:2c:30:f5:9e:ec:59:08:39:4d:f0:e7:65: 7b:4f:3c:5b:f9:13:19:a7:f1:06:b2:ce:c1:bb:17:fb:14:d5: e5:4f:ef:c1:40:6b:fb:9e:6f:31:b6:29:d6:2e:11:65:d0:3e: 08:84:12:15:7c:d8:42:f5:f1:ed:cd:77:62:2d:8b:d4:03:19: fc:62:1b:74:2f:b2:00:36:9c:84:40:88:b1:3c:3c:4d:6d:57: 09:5a:03:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUB3lN2uZImM6xNcKHQ0XQrh5whgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDA1WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2U1OGUzOWJiNzFiMGQxN2ZhMjI2MmMxYjZmMzQxNjYw NDQ1MzY5OTI4OTE3NTcyOThiZTZlNmJjYWNhOGQ2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFR80d+7sLpnEY4N732XNnIC4cef0eNP8h0j2b3WKEg7Ly oW4W+mWV/jJHW9WYK9F3dAoIRt4Lio7EZ/1Fv7aTg9I03Nw/GnJOCrrWTafKyn2B W3qLuqnTrD/vc61eVva76vpM9toZ8F/9nfMOvRmQr5pO3+PT83C9eT0CnrVBKWMu JQtXwYv6XGVzNGExNaot+P81LebPuDZCKicvJNTYmNkT30HkjR15NLjebUh21FFM 8Q02CDTdDJNs3lABCiHnct/AmHbEz2DUH9GH6nymr95VeiZb4SGWPyROctt94mUV yZAAGu7aJL+5rnXvPE635X80Zpj2S0S9x+oL1TdvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzeQtv/nMdQ3HHUFs40VoDUGn9F0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3YTFkZTk2LTU4NTMtNGM3Yy1hYTY4LTVhNTVlYzZiNjU0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCUwDQYJKoZIhvcNAQELBQADggEBAA8yXwSZazJjgKpJTigacY97KQU4 A3sjO3CrIkVAmTGGbe2MT/jHZB17La7EcAw1/HZ6fhwWMlCFpcNOfufZqWKrgN7V DyzRvVD73mfjo4zjJThaWuZ8DK5BeDdKr9+srFs5r97FTHMHoE6fT+2HM4s64oUI oWgF6l7pBKcd5AgoaV2p7a2+UqQsSUzf3mHU4YVOdrKnRytOrdUnhp0lYBfQum1U g8Dikyww9Z7sWQg5TfDnZXtPPFv5Exmn8QayzsG7F/sU1eVP78FAa/uebzG2KdYu EWXQPgiEEhV82EL18e3Nd2Iti9QDGfxiG3QvsgA2nIRAiLE8PE1tVwlaAw0= -----END CERTIFICATE-----Generated at Sun Nov 15 21:43:53 2026 by rpki-client