$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa File: 0be6e662-afc9-4903-9919-894f035a475c.roa (raw, json) Hash identifier: iTE/99/GWuspsXVknWBWjoW4iT41wqJak/H18PviJ54= Subject key identifier: D5:1D:37:3E:BD:64:B4:DA:28:60:47:E5:F8:18:6B:89:4D:AC:9A:14 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 077E90E45C439AAEC44AE37E2AB1785F67D2096B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa Signing time: Sat 24 Oct 2026 01:50:28 +0000 ROA not before: Sat 24 Oct 2026 01:50:28 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:7e:90:e4:5c:43:9a:ae:c4:4a:e3:7e:2a:b1:78:5f:67:d2:09:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:28 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=ce0582414a561a282a1e0c02a8d5e4427c1f8355e93b6aa5cf6ab9ef4a0f3fac, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:55:b1:e4:48:7e:ab:7e:6a:06:a6:82:9a: 54:64:83:fe:59:91:cd:63:5e:72:6e:53:c7:63:d4: 99:a8:48:d6:c6:dd:0e:3d:2d:7e:e6:d3:bc:1c:09: e7:3b:4d:cc:79:dc:b7:26:51:20:53:dc:8a:cd:fd: 5a:81:55:3d:a9:aa:d4:b1:58:7b:02:88:6c:09:14: 37:b7:d8:20:1e:b4:ae:42:c4:3a:fc:79:bc:6c:86: e3:ef:39:b6:a9:25:34:99:55:02:6a:b2:18:ab:88: 50:cb:e8:97:7e:9b:d5:59:41:57:05:d0:a2:9c:63: f4:da:9f:ef:83:5b:62:69:6c:35:0d:00:51:5e:c9: ee:63:6b:d7:d5:2a:8d:79:46:c6:08:71:f0:a7:75: 9f:8c:6d:eb:25:76:b0:6c:a1:b3:f0:61:21:a8:bc: ea:a9:a0:86:52:70:63:f7:11:6a:0a:4a:da:11:f4: 7d:08:db:45:71:84:4e:bc:b6:35:ed:9e:c1:5b:d3: 83:d4:5c:25:c1:7d:86:a9:4c:27:b7:0b:30:41:8a: f0:a1:85:1f:22:76:7c:d2:7b:36:1a:77:79:c7:e8: 2e:b5:1c:b1:8b:d7:04:f7:3d:75:aa:46:bf:ed:33: 13:f4:f3:2c:b3:f2:c8:55:0c:8d:9b:46:fa:90:23: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1D:37:3E:BD:64:B4:DA:28:60:47:E5:F8:18:6B:89:4D:AC:9A:14 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 89:01:7e:e4:d1:8d:7e:6f:a7:e1:38:cc:93:11:18:4f:f6:0d: 99:b2:50:6e:11:ca:4a:9e:37:4a:6f:0c:5f:0f:c9:57:6f:b6: 4a:12:d1:3e:7e:bf:44:e5:14:8e:1a:68:dd:62:74:42:3e:98: 5d:89:6f:96:14:c6:f1:ba:6e:f4:72:2a:ae:8a:f0:82:c8:92: fb:49:f3:ce:ec:3a:c0:19:fb:87:6f:d4:ba:a9:07:27:3c:75: e6:dc:14:5e:33:26:d1:07:2a:f4:f9:01:5d:5a:78:76:2f:80: cd:1e:ee:09:ee:15:f0:12:35:24:b4:51:91:bb:bb:d4:db:7a: ed:97:b1:75:2d:52:e7:c4:a6:5b:ac:7e:3e:66:28:dd:61:66: 48:fb:c5:3f:27:71:f3:be:93:9b:c3:93:2a:a5:44:f3:54:98: 45:d0:66:af:90:10:67:92:24:37:1a:13:a9:17:24:73:c1:d7: 36:b6:71:1d:40:99:65:df:ab:09:a8:9d:c0:1b:3e:c8:32:5b: d9:91:f2:21:64:fb:62:fb:60:83:69:56:e1:24:1c:47:69:e8: 00:3e:be:a9:65:7e:29:49:f2:65:3a:a8:d3:61:c3:6f:c4:5b: 5a:4a:08:e3:10:53:15:7f:e1:97:cf:90:a3:6e:30:7d:0b:88: c8:4f:4d:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB36Q5FxDmq7ESuN+KrF4X2fSCWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDI4WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTA1ODI0MTRhNTYxYTI4MmExZTBjMDJhOGQ1ZTQ0Mjdj MWY4MzU1ZTkzYjZhYTVjZjZhYjllZjRhMGYzZmFjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkwFWx5Eh+q35qBqaCmlRkg/5Zkc1jXnJuU8dj1JmoSNbG 3Q49LX7m07wcCec7Tcx53LcmUSBT3IrN/VqBVT2pqtSxWHsCiGwJFDe32CAetK5C xDr8ebxshuPvObapJTSZVQJqshiriFDL6Jd+m9VZQVcF0KKcY/Tan++DW2JpbDUN AFFeye5ja9fVKo15RsYIcfCndZ+MbesldrBsobPwYSGovOqpoIZScGP3EWoKStoR 9H0I20VxhE68tjXtnsFb04PUXCXBfYapTCe3CzBBivChhR8idnzSezYad3nH6C61 HLGL1wT3PXWqRr/tMxP08yyz8shVDI2bRvqQIyMfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1R03Pr1ktNooYEfl+BhriU2smhQwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBiZTZlNjYyLWFmYzktNDkwMy05OTE5LTg5NGYwMzVhNDc1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBAIkBfuTRjX5vp+E4zJMRGE/2DZmy UG4RykqeN0pvDF8PyVdvtkoS0T5+v0TlFI4aaN1idEI+mF2Jb5YUxvG6bvRyKq6K 8ILIkvtJ887sOsAZ+4dv1LqpByc8debcFF4zJtEHKvT5AV1aeHYvgM0e7gnuFfAS NSS0UZG7u9Tbeu2XsXUtUufEplusfj5mKN1hZkj7xT8ncfO+k5vDkyqlRPNUmEXQ Zq+QEGeSJDcaE6kXJHPB1za2cR1AmWXfqwmoncAbPsgyW9mR8iFk+2L7YINpVuEk HEdp6AA+vqllfilJ8mU6qNNhw2/EW1pKCOMQUxV/4ZfPkKNuMH0LiMhPTZM= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:50 2026 by rpki-client