$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa File: 11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa (raw, json) Hash identifier: ll8YE2KF4Wlp98LEgo9SwoMqCgYNYAnFbiivz6m97Cc= Subject key identifier: 29:9E:2E:B0:54:DE:BA:9B:3B:CA:7D:A7:4E:86:35:E7:62:30:B6:89 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 47565CA73116EA852431B1782F844C615A71627A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa Signing time: Tue 17 Feb 2026 02:50:17 +0000 ROA not before: Tue 17 Feb 2026 02:50:17 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:56:5c:a7:31:16:ea:85:24:31:b1:78:2f:84:4c:61:5a:71:62:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 17 02:50:17 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=11da725476bc595cff0caf9ed60a27ce0dc62868bc441c25435d5544409b6274, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:22:d5:ef:2a:a7:34:76:81:1e:96:5e:22: 6e:4f:0d:57:da:4d:a2:a4:a0:a0:43:86:c7:8d:18: 1d:f8:5e:3c:5d:98:33:9d:25:61:29:80:f9:f4:b9: 2f:99:1c:fb:a3:4d:10:ff:63:89:e9:63:47:71:75: 24:07:80:98:0b:b9:06:1f:47:07:fb:87:d7:00:b5: db:72:e7:21:f7:ca:1c:cc:ab:81:61:55:4e:c8:02: 39:03:b2:3c:04:14:83:5f:23:b4:9b:df:8f:ac:78: 6d:ac:b6:3a:f8:8e:32:c9:9e:be:fc:8f:18:32:9a: e9:df:88:1d:7b:e8:df:cf:ff:ad:e1:a5:80:80:ae: da:7b:e0:a6:97:c6:22:91:b5:ea:0c:14:7c:6b:08: dd:64:f7:09:a8:45:b5:81:10:19:01:35:02:e4:0a: a8:46:d3:98:95:76:c2:9a:f6:08:ee:5e:3c:09:fe: b3:d3:2c:9e:39:e9:d4:eb:4b:a8:e3:9d:27:ff:a6: bb:d6:e1:17:b7:c1:dd:20:98:90:6e:b2:48:80:08: f7:74:cb:f6:bf:8b:82:af:9a:63:d8:9a:de:52:d7: 67:5c:5a:8e:3f:59:5a:cd:4e:fe:ca:23:08:68:8e: fd:11:c3:cf:fc:b9:6b:a7:27:85:5d:15:57:ce:6d: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9E:2E:B0:54:DE:BA:9B:3B:CA:7D:A7:4E:86:35:E7:62:30:B6:89 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.244.0/24 Signature Algorithm: sha256WithRSAEncryption 54:f9:cc:2f:b5:2f:9c:05:ef:e9:04:77:ac:cd:8f:f6:7d:07: b9:f0:4d:a5:49:d0:bf:09:49:27:7f:b6:59:50:bd:50:c0:15: 9a:bf:84:4c:64:79:c8:70:91:9e:0c:a2:d4:da:62:d7:e7:9e: df:78:b7:1b:ce:d3:16:59:d7:9b:c5:33:72:76:29:a1:d8:07: 5a:e5:d1:e2:98:c2:66:9d:c8:dc:1e:65:7a:55:08:48:9b:9c: 2b:b5:29:f9:a3:75:2a:66:e9:ee:77:17:b4:94:91:eb:df:6f: e5:8c:52:93:59:ee:e5:fb:79:52:80:71:27:cb:7b:33:a8:fb: c3:e6:c5:60:45:ca:54:c7:22:f4:c8:ae:fa:f7:43:bd:cf:5f: d7:93:85:26:0a:62:b1:11:3b:a4:07:29:9e:38:7a:f5:db:db: 4d:07:79:27:d0:57:b1:4b:a2:fa:fd:d2:c9:34:f4:d1:14:cc: 0d:38:fe:7a:4d:36:16:0a:99:6c:d4:34:d2:ab:a8:47:55:73: c3:61:ac:97:53:a1:1a:65:72:67:0b:88:3f:0f:0d:63:7b:f0: e9:32:c0:b0:4d:e8:86:04:6c:6c:19:8d:79:59:94:ec:f6:0a: ea:76:1e:4b:e3:4e:1e:f1:a3:ca:34:cf:52:59:55:c5:42:84: f4:7b:d7:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR1ZcpzEW6oUkMbF4L4RMYVpxYnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjE3MDI1MDE3WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWRhNzI1NDc2YmM1OTVjZmYwY2FmOWVkNjBhMjdjZTBk YzYyODY4YmM0NDFjMjU0MzVkNTU0NDQwOWI2Mjc0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/7iLV7yqnNHaBHpZeIm5PDVfaTaKkoKBDhseNGB34Xjxd mDOdJWEpgPn0uS+ZHPujTRD/Y4npY0dxdSQHgJgLuQYfRwf7h9cAtdty5yH3yhzM q4FhVU7IAjkDsjwEFINfI7Sb34+seG2stjr4jjLJnr78jxgymunfiB176N/P/63h pYCArtp74KaXxiKRteoMFHxrCN1k9wmoRbWBEBkBNQLkCqhG05iVdsKa9gjuXjwJ /rPTLJ456dTrS6jjnSf/prvW4Re3wd0gmJBuskiACPd0y/a/i4KvmmPYmt5S12dc Wo4/WVrNTv7KIwhojv0Rw8/8uWunJ4VdFVfObYWRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKZ4usFTeups7yn2nToY152IwtokwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzExYjA4NTMzLTdlNGYtNGRkZS04Zjc4LWJiOGZhMGNiZTI3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPQwDQYJKoZIhvcNAQELBQADggEBAFT5zC+1L5wF7+kEd6zNj/Z9B7nw TaVJ0L8JSSd/tllQvVDAFZq/hExkechwkZ4MotTaYtfnnt94txvO0xZZ15vFM3J2 KaHYB1rl0eKYwmadyNweZXpVCEibnCu1KfmjdSpm6e53F7SUkevfb+WMUpNZ7uX7 eVKAcSfLezOo+8PmxWBFylTHIvTIrvr3Q73PX9eThSYKYrERO6QHKZ44evXb200H eSfQV7FLovr90sk09NEUzA04/npNNhYKmWzUNNKrqEdVc8NhrJdToRplcmcLiD8P DWN78OkywLBN6IYEbGwZjXlZlOz2Cup2HkvjTh7xo8o0z1JZVcVChPR711w= -----END CERTIFICATE-----Generated at Mon Mar 2 02:46:56 2026 by rpki-client