$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa File: 11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa (raw, json) Hash identifier: K6ieBqJpjFRhqJlmr0w2yH+7eW/q+9zYugsP2MaVS1U= Subject key identifier: FC:C7:95:16:C3:1F:00:F8:7A:02:26:C9:E5:A7:5E:B4:38:10:32:63 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2D6F569924C850ABFC27ECBDCBAC87DFEBF63814 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa Signing time: Thu 15 Oct 2026 03:10:09 +0000 ROA not before: Thu 15 Oct 2026 03:10:09 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6f:56:99:24:c8:50:ab:fc:27:ec:bd:cb:ac:87:df:eb:f6:38:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 15 03:10:09 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=f07ee22783520381b48e22467563fa2586a225ff033bbb7df3483507a4ef7da9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:0a:e0:2e:00:db:94:ad:24:51:9e:ad:76: e4:0d:66:82:0a:52:52:dd:f4:46:b9:d3:a5:7f:7a: 79:d9:e6:8d:20:48:32:d6:fb:d6:f9:53:4f:09:99: ce:e7:be:d7:5c:a5:38:4f:44:00:f3:57:1c:03:f6: 6d:0e:a9:ae:8d:ed:61:f9:c5:3e:f0:aa:d0:38:30: ef:57:c3:5e:e1:32:ec:ed:60:31:0e:31:56:87:4f: 34:49:5a:58:80:4e:0e:d1:3e:ba:a8:6f:4a:f7:fa: 8b:65:b2:78:4c:ec:3d:59:7c:86:39:6b:2f:c0:75: 72:b4:da:cb:97:43:4e:1b:57:cb:d7:66:8e:c1:cb: fe:4d:ff:31:5d:65:a4:2e:ff:1b:a7:f0:48:c0:94: 4a:3e:80:64:08:80:c5:6f:89:81:e3:ec:73:f5:ec: f6:1e:63:35:89:b0:09:87:57:17:63:01:b1:b8:0e: e9:37:9e:e1:9e:18:f5:54:de:67:e1:46:77:15:82: 20:dc:6f:be:0d:fe:c1:f5:9d:1f:4a:bc:bf:67:20: 12:76:98:ef:d4:e3:84:78:94:ab:f2:07:5a:71:e8: e9:db:8f:f2:de:d2:b3:c6:45:0f:2d:59:89:26:8c: 1b:72:d0:7e:57:2c:ed:d6:84:64:b7:ee:a5:d7:e4: 2f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C7:95:16:C3:1F:00:F8:7A:02:26:C9:E5:A7:5E:B4:38:10:32:63 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.244.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:36:98:9b:e3:87:28:06:aa:34:fe:c0:6b:17:0c:e0:66:33: 38:a5:86:a8:90:ae:3a:cd:7d:b9:3e:ed:ef:f4:71:56:93:0f: da:83:78:6f:94:81:43:f2:38:66:ab:42:ed:e1:05:09:2e:70: 93:97:8a:59:a9:e8:18:20:26:28:13:31:d0:f2:9f:ce:b4:b3: 22:54:05:bd:63:61:69:8b:26:38:cf:66:c9:96:a7:e4:a5:11: 2f:cf:ab:da:c3:a1:29:9e:a4:f2:38:ef:c0:be:59:96:b3:4c: 04:bd:b7:06:4e:59:9c:97:ec:b3:af:c5:6e:2f:f7:d9:5f:9b: 2a:55:98:a6:b7:43:9c:18:5e:04:8e:07:13:20:d5:f2:7e:99: 61:1e:11:c8:23:17:96:36:a0:dd:50:13:64:b6:dc:71:89:68: 98:d7:3b:cb:4c:72:c1:78:6a:9f:11:58:b9:2b:99:38:71:6e: 04:94:43:5a:e3:4f:31:77:b2:bb:ee:d5:af:19:e4:6d:26:fe: bc:7b:b2:d4:99:4e:56:da:5b:a6:8c:4e:eb:ce:e3:92:39:a5: 0e:59:04:55:08:fb:e1:6a:27:a5:41:f0:87:ad:b8:5c:82:ed: e2:55:fb:53:a7:a2:61:b7:f2:88:fb:18:79:e3:9c:88:59:46: e2:4c:dd:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULW9WmSTIUKv8J+y9y6yH3+v2OBQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE1MDMxMDA5WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDdlZTIyNzgzNTIwMzgxYjQ4ZTIyNDY3NTYzZmEyNTg2 YTIyNWZmMDMzYmJiN2RmMzQ4MzUwN2E0ZWY3ZGE5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWkQrgLgDblK0kUZ6tduQNZoIKUlLd9Ea506V/ennZ5o0g SDLW+9b5U08Jmc7nvtdcpThPRADzVxwD9m0Oqa6N7WH5xT7wqtA4MO9Xw17hMuzt YDEOMVaHTzRJWliATg7RPrqob0r3+otlsnhM7D1ZfIY5ay/AdXK02suXQ04bV8vX Zo7By/5N/zFdZaQu/xun8EjAlEo+gGQIgMVviYHj7HP17PYeYzWJsAmHVxdjAbG4 Duk3nuGeGPVU3mfhRncVgiDcb74N/sH1nR9KvL9nIBJ2mO/U44R4lKvyB1px6Onb j/Le0rPGRQ8tWYkmjBty0H5XLO3WhGS37qXX5C8DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/MeVFsMfAPh6AibJ5adetDgQMmMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzExYjA4NTMzLTdlNGYtNGRkZS04Zjc4LWJiOGZhMGNiZTI3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPQwDQYJKoZIhvcNAQELBQADggEBAF82mJvjhygGqjT+wGsXDOBmMzil hqiQrjrNfbk+7e/0cVaTD9qDeG+UgUPyOGarQu3hBQkucJOXilmp6BggJigTMdDy n860syJUBb1jYWmLJjjPZsmWp+SlES/Pq9rDoSmepPI478C+WZazTAS9twZOWZyX 7LOvxW4v99lfmypVmKa3Q5wYXgSOBxMg1fJ+mWEeEcgjF5Y2oN1QE2S23HGJaJjX O8tMcsF4ap8RWLkrmThxbgSUQ1rjTzF3srvu1a8Z5G0m/rx7stSZTlbaW6aMTuvO 45I5pQ5ZBFUI++FqJ6VB8IetuFyC7eJV+1OnomG38oj7GHnjnIhZRuJM3UQ= -----END CERTIFICATE-----Generated at Sun Nov 15 21:42:33 2026 by rpki-client