$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa File: 07bd3aac-7c97-429a-9a81-6751e4001f6d.roa (raw, json) Hash identifier: bmIhAltN5DAb2bw8Bl4heni7imrX+yLCbcmb/DDuI+8= Subject key identifier: 3D:F4:0B:7C:FE:BF:C9:62:E9:7A:2B:27:20:D9:D7:A4:9E:38:4A:93 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 470792554196EC81EFF34AF67E2B6E4E1CD897D5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa Signing time: Sat 28 Feb 2026 01:00:12 +0000 ROA not before: Sat 28 Feb 2026 01:00:12 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:07:92:55:41:96:ec:81:ef:f3:4a:f6:7e:2b:6e:4e:1c:d8:97:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 28 01:00:12 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=df83137adf047f378bcdc152bdd65071ac2cde2f2b15fc7ffd7f4db62faf1b7b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:de:86:7c:58:51:73:b5:26:2c:d7:44:bd: 80:49:37:10:09:8d:4a:20:e1:19:34:92:3d:cd:45: d1:5c:e8:33:23:dd:43:40:2b:c1:03:51:ff:54:c0: e9:15:db:2c:5a:68:21:1d:35:aa:9e:e4:a9:dc:57: 45:c3:3a:6f:73:ee:c8:15:bb:73:42:fc:90:f2:cd: 06:24:57:eb:b8:45:20:96:4e:9b:2b:93:1e:4a:a5: 24:56:49:e5:4b:e5:5b:a9:ba:6e:ff:27:38:09:06: d2:70:c3:65:b6:ce:7e:41:fc:93:a2:89:e5:96:16: a5:73:ce:63:3f:ba:7b:30:a8:e8:63:08:ec:43:2f: 94:a9:39:42:02:a0:39:6d:75:48:96:db:08:3f:53: c3:7e:a2:d9:da:bd:e7:6a:ef:fe:c5:b0:ce:8c:42: c3:c1:c1:bc:9a:cf:82:77:a7:3d:61:89:49:6e:3d: ea:b6:ca:68:6c:ee:03:76:4a:57:a7:ce:25:fc:53: fd:1b:bf:e1:0e:ad:41:bd:ca:87:ab:78:8a:e1:ea: 86:bc:33:96:16:06:2c:73:8b:7d:87:25:17:79:f4: f9:86:20:43:16:71:d2:fd:03:e6:9a:a0:f1:b4:1e: 36:ec:ab:40:c4:06:d8:69:6f:e1:ff:a4:4b:fb:59: d7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F4:0B:7C:FE:BF:C9:62:E9:7A:2B:27:20:D9:D7:A4:9E:38:4A:93 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.6.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:60:69:34:bf:a7:7c:82:c5:f6:c0:41:54:20:c5:05:bd:7a: 28:d6:38:3b:6e:45:8b:00:16:82:90:24:96:c2:09:a5:c7:93: 85:02:f4:4b:94:69:8d:d1:2c:0c:79:e2:d4:01:d4:33:22:06: 56:e6:65:3a:b7:74:1e:3f:5d:9c:65:09:66:51:d2:92:9b:44: 0a:21:3d:3f:02:61:d3:98:5e:e7:e7:a1:3d:f6:86:19:06:98: 8a:34:30:03:b7:c4:a3:d5:ff:18:78:45:c8:94:f3:e5:24:4b: e9:f0:ce:f5:1f:bd:18:f2:35:04:86:8e:0c:8a:28:5d:b9:4c: 9e:86:21:54:ae:c3:e6:81:36:ab:a1:49:1f:84:81:31:7a:2d: 4c:a9:92:a2:b2:14:5a:bf:41:16:db:29:1b:4b:c2:c6:71:ea: 7f:05:0b:0e:75:43:d0:d5:e1:22:a4:ba:81:9b:6a:e2:80:6f: 33:c9:9e:81:3d:fe:a2:bf:e6:b8:bb:aa:c3:8f:e8:83:6a:bd: 43:bb:51:be:50:9e:cb:6d:78:85:08:6b:c1:dc:12:fc:b1:57: 9a:82:a6:5e:69:9c:e4:aa:44:f4:64:93:60:41:aa:28:61:62: cd:e2:1c:2e:12:c4:87:93:92:21:15:50:2f:1f:fc:2f:5e:79: f4:a0:71:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURweSVUGW7IHv80r2fituThzYl9UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI4MDEwMDEyWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjgzMTM3YWRmMDQ3ZjM3OGJjZGMxNTJiZGQ2NTA3MWFj MmNkZTJmMmIxNWZjN2ZmZDdmNGRiNjJmYWYxYjdiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8AN6GfFhRc7UmLNdEvYBJNxAJjUog4Rk0kj3NRdFc6DMj 3UNAK8EDUf9UwOkV2yxaaCEdNaqe5KncV0XDOm9z7sgVu3NC/JDyzQYkV+u4RSCW Tpsrkx5KpSRWSeVL5Vupum7/JzgJBtJww2W2zn5B/JOiieWWFqVzzmM/unswqOhj COxDL5SpOUICoDltdUiW2wg/U8N+otnavedq7/7FsM6MQsPBwbyaz4J3pz1hiUlu Peq2ymhs7gN2SlenziX8U/0bv+EOrUG9yoereIrh6oa8M5YWBixzi32HJRd59PmG IEMWcdL9A+aaoPG0Hjbsq0DEBthpb+H/pEv7WddRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPfQLfP6/yWLpeisnINnXpJ44SpMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3YmQzYWFjLTdjOTctNDI5YS05YTgxLTY3NTFlNDAwMWY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAYwDQYJKoZIhvcNAQELBQADggEBACpgaTS/p3yCxfbAQVQgxQW9eijW ODtuRYsAFoKQJJbCCaXHk4UC9EuUaY3RLAx54tQB1DMiBlbmZTq3dB4/XZxlCWZR 0pKbRAohPT8CYdOYXufnoT32hhkGmIo0MAO3xKPV/xh4RciU8+UkS+nwzvUfvRjy NQSGjgyKKF25TJ6GIVSuw+aBNquhSR+EgTF6LUypkqKyFFq/QRbbKRtLwsZx6n8F Cw51Q9DV4SKkuoGbauKAbzPJnoE9/qK/5ri7qsOP6INqvUO7Ub5QnstteIUIa8Hc EvyxV5qCpl5pnOSqRPRkk2BBqihhYs3iHC4SxIeTkiEVUC8f/C9eefSgcZY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:49 2026 by rpki-client