$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/27feea1a-4933-4577-b9c4-9488e2a550f0.roa File: 27feea1a-4933-4577-b9c4-9488e2a550f0.roa (raw, json) Hash identifier: cJmPv0fVT52qKzO3A/A0ATuLOmIG7PB8Fl+e22UCY4o= Subject key identifier: EE:4C:92:95:58:D7:CA:0E:BA:AE:15:DB:6B:83:FF:95:2F:BD:F3:EC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3A57EF08FEF9A7AF11B103878BA17C4BFD1B7E07 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/27feea1a-4933-4577-b9c4-9488e2a550f0.roa Signing time: Mon 27 Jul 2026 02:50:11 +0000 ROA not before: Mon 27 Jul 2026 02:50:11 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:57:ef:08:fe:f9:a7:af:11:b1:03:87:8b:a1:7c:4b:fd:1b:7e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 27 02:50:11 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=5dba20fa03e18548fb90b4a479f7c7125ea26f00b447f464189895f640f24a1b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:4e:95:fb:b9:19:7f:d2:32:62:bd:b3:de: 9a:03:8d:dc:e2:43:f6:45:35:fe:9f:a9:c1:5f:c4: bf:1a:5c:0b:72:8d:6f:23:40:24:f0:47:03:a8:4e: 57:69:bf:b7:cd:1e:a8:88:12:49:05:bf:51:d5:64: 4c:38:08:b0:06:b2:74:8b:fd:d3:a2:a9:93:ed:18: dd:b6:a2:b1:fa:d6:38:87:d7:23:34:e6:8f:01:b7: 82:9b:23:7a:e7:c0:e2:dd:a8:ba:5d:d2:39:1d:e5: 32:d0:e6:2e:04:ad:4d:26:43:69:71:87:57:ef:48: 33:f7:7e:61:ad:38:82:ff:a0:d9:b1:57:0d:68:02: 04:2f:27:81:57:3b:45:33:81:9d:54:c4:9a:27:a6: 55:39:53:58:8b:89:b5:85:2e:8a:be:d2:69:f7:ac: b6:1c:f6:34:5d:e9:1b:5c:98:fd:3e:cf:1b:21:e1: 5b:56:b3:9f:3e:1a:49:4c:99:4d:99:7e:14:ed:d9: a4:4e:e7:cb:3e:32:15:53:38:18:ef:41:26:44:61: a7:49:a4:fb:69:03:de:80:41:2f:f4:a0:b0:cf:98: ac:fc:02:80:e1:30:5e:15:41:d7:6e:52:b2:ac:12: a7:f5:6f:63:00:c9:e6:0e:cd:ca:21:d4:9f:be:23: 9c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4C:92:95:58:D7:CA:0E:BA:AE:15:DB:6B:83:FF:95:2F:BD:F3:EC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/27feea1a-4933-4577-b9c4-9488e2a550f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.244.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:f5:6e:69:32:c6:d7:b7:8f:f6:19:22:b3:ce:59:8a:6a:ea: c6:46:ea:5a:43:29:1f:fe:62:c2:3e:fd:b2:79:a3:72:1d:29: 1d:d9:26:68:46:e0:05:5e:62:2b:83:f5:2c:44:5b:97:82:0e: bc:6e:4c:a8:8c:ff:7c:c0:c2:21:c7:13:5e:12:e2:c4:4b:fa: 7a:95:43:25:38:a6:18:df:7f:57:f6:37:4b:19:67:6f:c4:ca: 01:b8:79:85:c1:66:9b:f9:3e:6c:ca:46:c6:f3:10:2a:07:31: a9:da:67:55:0f:b9:29:04:4c:fd:04:a6:fe:b0:23:7a:60:60: 0f:df:b5:42:ff:54:46:1f:b2:9f:c7:e1:1c:4f:55:f4:0a:20: 50:70:0f:8b:84:63:eb:f6:79:dc:f4:90:17:3f:13:1d:87:d0: 68:d7:8a:fe:8c:66:96:24:14:a2:f0:78:f7:d8:f2:81:ba:e3: 71:f3:a9:8d:ca:e9:cd:03:24:66:83:43:9b:73:63:71:76:f4: 75:4e:ce:0f:24:64:ca:1a:32:78:3f:fc:95:f5:44:39:f5:63: 5a:f6:18:00:28:c7:71:e1:dc:30:89:2f:47:c2:25:ca:ad:9a: cd:8f:24:cb:6f:2b:be:e0:31:1e:9d:ea:ec:c4:d8:cf:44:00: 0b:d5:8e:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOlfvCP75p68RsQOHi6F8S/0bfgcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzI3MDI1MDExWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGJhMjBmYTAzZTE4NTQ4ZmI5MGI0YTQ3OWY3YzcxMjVl YTI2ZjAwYjQ0N2Y0NjQxODk4OTVmNjQwZjI0YTFiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv906V+7kZf9IyYr2z3poDjdziQ/ZFNf6fqcFfxL8aXAty jW8jQCTwRwOoTldpv7fNHqiIEkkFv1HVZEw4CLAGsnSL/dOiqZPtGN22orH61jiH 1yM05o8Bt4KbI3rnwOLdqLpd0jkd5TLQ5i4ErU0mQ2lxh1fvSDP3fmGtOIL/oNmx Vw1oAgQvJ4FXO0UzgZ1UxJonplU5U1iLibWFLoq+0mn3rLYc9jRd6RtcmP0+zxsh 4VtWs58+GklMmU2ZfhTt2aRO58s+MhVTOBjvQSZEYadJpPtpA96AQS/0oLDPmKz8 AoDhMF4VQdduUrKsEqf1b2MAyeYOzcoh1J++I5wrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7kySlVjXyg66rhXba4P/lS+98+wwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzI3ZmVlYTFhLTQ5MzMtNDU3Ny1iOWM0LTk0ODhlMmE1NTBmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPQwDQYJKoZIhvcNAQELBQADggEBAE71bmkyxte3j/YZIrPOWYpq6sZG 6lpDKR/+YsI+/bJ5o3IdKR3ZJmhG4AVeYiuD9SxEW5eCDrxuTKiM/3zAwiHHE14S 4sRL+nqVQyU4phjff1f2N0sZZ2/EygG4eYXBZpv5PmzKRsbzECoHManaZ1UPuSkE TP0Epv6wI3pgYA/ftUL/VEYfsp/H4RxPVfQKIFBwD4uEY+v2edz0kBc/Ex2H0GjX iv6MZpYkFKLwePfY8oG643HzqY3K6c0DJGaDQ5tzY3F29HVOzg8kZMoaMng//JX1 RDn1Y1r2GAAox3Hh3DCJL0fCJcqtms2PJMtvK77gMR6d6uzE2M9EAAvVjuo= -----END CERTIFICATE-----Generated at Wed Jul 29 01:59:46 2026 by rpki-client