$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/22f66e2d-2753-44a1-9aec-16b69cdffad1.roa File: 22f66e2d-2753-44a1-9aec-16b69cdffad1.roa (raw, json) Hash identifier: 4rt3LdWtNiDHbxMPVj5nabu0YTzGAdsRf2NSvAEpMjc= Subject key identifier: B0:98:89:33:C4:7E:1A:3B:DC:84:9C:D4:4A:9F:3B:B5:98:6C:98:05 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 30C8C43DB97BEE139A994FC23C961D34036626FB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/22f66e2d-2753-44a1-9aec-16b69cdffad1.roa Signing time: Wed 20 May 2026 00:00:29 +0000 ROA not before: Wed 20 May 2026 00:00:29 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c8:c4:3d:b9:7b:ee:13:9a:99:4f:c2:3c:96:1d:34:03:66:26:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 20 00:00:29 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=586f6449f396a336ecd66ece9283ae02b26bc503ba1dfd3e4191976c78918bd3, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:d7:f7:e0:79:f2:6b:45:4d:c1:6d:ad:52: 89:be:59:94:37:eb:ef:af:f7:91:98:39:5a:13:5d: c3:c0:36:0f:39:5f:aa:9b:88:31:63:92:c2:b1:aa: 7d:77:c6:b8:d3:85:ff:af:5e:63:47:cc:d3:ea:80: 35:b7:c0:d5:00:27:5c:5e:de:3b:40:28:eb:84:b3: 29:df:e9:d2:3c:fa:0c:83:20:38:b7:da:87:93:d5: 9b:a4:66:53:44:1b:c1:6b:d4:d8:b7:17:ad:fd:43: d5:fa:d6:28:9c:db:38:92:46:ca:a1:6d:8c:59:d5: d7:c7:4f:da:3e:df:d2:e5:e4:9b:95:be:15:34:8b: 5d:76:c2:b9:e3:9d:a6:84:0c:3a:02:39:fd:18:be: 0b:e5:6f:74:31:cd:a7:1d:d2:65:1c:1f:42:47:ad: a8:87:ae:3d:57:71:65:86:0f:cc:2c:fb:22:1d:0d: b3:56:37:6f:33:28:dd:f7:27:1e:2e:49:b4:2b:19: b8:1a:83:17:7f:61:cf:21:1e:77:d9:7c:46:83:e0: 25:b1:9b:22:07:c5:15:87:f2:63:f5:b4:1e:e2:ff: 6e:0a:b6:d8:eb:5c:28:7e:25:ca:88:c7:48:62:16: d7:f6:d1:b2:1c:11:56:84:59:72:b3:80:43:c1:59: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:98:89:33:C4:7E:1A:3B:DC:84:9C:D4:4A:9F:3B:B5:98:6C:98:05 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/22f66e2d-2753-44a1-9aec-16b69cdffad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.1.0/24 Signature Algorithm: sha256WithRSAEncryption 99:07:be:b4:9e:a0:95:25:4d:85:d2:5e:e7:5f:40:03:08:6a: e6:1b:e7:96:95:36:07:2c:77:b8:9c:b5:88:f2:3b:93:11:6e: 0c:bc:f2:2f:b8:69:d1:fe:18:aa:21:90:6d:00:1d:0e:e9:01: bf:78:0f:91:31:50:a9:b3:27:e8:e7:c6:ee:f1:91:b6:ac:e8: 7d:e9:65:8e:f8:b9:f2:77:3c:59:93:da:4e:cd:41:d8:87:6c: c3:34:cc:30:fe:3c:ef:95:10:ee:ca:6a:c9:39:8b:26:8d:f9: d5:0c:d6:cd:46:ee:96:43:9d:a7:5d:57:ac:3c:73:a4:b7:99: eb:e8:54:0a:3e:0a:dc:a4:27:56:2e:f1:4d:2d:be:e3:07:6c: 24:c3:c1:7a:59:8e:92:3f:e0:08:49:8e:43:8a:f7:12:b6:f2: 98:56:7e:a4:57:09:d8:31:36:92:2b:b9:2a:dc:cf:27:8e:7d: 32:e3:e1:69:ad:0a:6a:bf:e4:12:87:47:5c:93:63:1c:7c:16: 26:9c:36:03:3b:94:ae:a2:e3:d4:25:74:cf:69:d2:04:45:9f: 36:c1:f4:49:5a:66:a7:93:06:bc:06:8f:79:33:4d:98:91:2b: af:05:39:8b:78:c7:a5:c2:eb:48:2c:42:c4:eb:de:0e:f2:2d: e5:99:d7:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMMjEPbl77hOamU/CPJYdNANmJvswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTIwMDAwMDI5WhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODZmNjQ0OWYzOTZhMzM2ZWNkNjZlY2U5MjgzYWUwMmIy NmJjNTAzYmExZGZkM2U0MTkxOTc2Yzc4OTE4YmQzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPsNf34Hnya0VNwW2tUom+WZQ36++v95GYOVoTXcPANg85 X6qbiDFjksKxqn13xrjThf+vXmNHzNPqgDW3wNUAJ1xe3jtAKOuEsynf6dI8+gyD IDi32oeT1ZukZlNEG8Fr1Ni3F639Q9X61iic2ziSRsqhbYxZ1dfHT9o+39Ll5JuV vhU0i112wrnjnaaEDDoCOf0Yvgvlb3Qxzacd0mUcH0JHraiHrj1XcWWGD8ws+yId DbNWN28zKN33Jx4uSbQrGbgagxd/Yc8hHnfZfEaD4CWxmyIHxRWH8mP1tB7i/24K ttjrXCh+JcqIx0hiFtf20bIcEVaEWXKzgEPBWVoVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsJiJM8R+GjvchJzUSp87tZhsmAUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzIyZjY2ZTJkLTI3NTMtNDRhMS05YWVjLTE2YjY5Y2RmZmFkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAEwDQYJKoZIhvcNAQELBQADggEBAJkHvrSeoJUlTYXSXudfQAMIauYb 55aVNgcsd7ictYjyO5MRbgy88i+4adH+GKohkG0AHQ7pAb94D5ExUKmzJ+jnxu7x kbas6H3pZY74ufJ3PFmT2k7NQdiHbMM0zDD+PO+VEO7Kask5iyaN+dUM1s1G7pZD naddV6w8c6S3mevoVAo+CtykJ1Yu8U0tvuMHbCTDwXpZjpI/4AhJjkOK9xK28phW fqRXCdgxNpIruSrczyeOfTLj4WmtCmq/5BKHR1yTYxx8FiacNgM7lK6i49QldM9p 0gRFnzbB9ElaZqeTBrwGj3kzTZiRK68FOYt4x6XC60gsQsTr3g7yLeWZ18g= -----END CERTIFICATE-----Generated at Sat Jun 13 08:03:28 2026 by rpki-client