$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa File: 2ac091c5-8143-4a71-81c4-f34c33d996aa.roa (raw, json) Hash identifier: MXG7gwXhdBuNOldJyU7a08I9dZaA91ZOnzLv+riBiBA= Subject key identifier: 25:1F:98:74:D0:9B:1B:21:E9:BD:25:6D:76:C7:3D:8B:DF:8E:DD:65 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 63F973799E7C83485CB4BFC0F400626990D1A995 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa Signing time: Sat 24 Oct 2026 01:50:25 +0000 ROA not before: Sat 24 Oct 2026 01:50:25 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f9:73:79:9e:7c:83:48:5c:b4:bf:c0:f4:00:62:69:90:d1:a9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:25 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=8355d928a60f4907d3c762be66bb0ba1ae2fa408c725215300c9f4aa324e8911, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:24:aa:5b:88:39:31:68:ed:c8:85:ef:9a:1b: 64:7e:c8:ad:59:dc:c7:68:41:06:71:81:ff:aa:1d: 40:36:15:46:a5:0f:f0:d9:e8:f2:97:5b:82:3d:d0: ec:bd:cf:fb:4b:6e:9b:a9:98:41:25:5e:11:2a:fb: 92:dc:f0:9b:d7:3a:7a:9b:db:b7:22:0e:f1:bf:64: 3e:35:65:8d:09:6a:59:9e:e9:53:ab:ff:25:e7:78: 99:85:74:6d:25:5d:4e:66:6c:dd:bb:7e:77:44:00: 28:40:79:12:0c:80:c4:82:a1:76:17:60:54:4b:24: 5d:47:c2:d1:04:f8:79:c1:03:3e:1f:2c:03:af:72: fe:1f:9d:73:3f:26:2f:99:1b:f5:b0:f5:c0:c4:a4: f0:5a:ef:ba:fb:69:f3:e7:22:f1:01:53:a2:65:43: ae:a0:94:f9:11:8f:ab:db:cc:56:d4:ea:3a:c4:d3: 37:26:a5:58:c1:45:8e:dc:7d:92:9c:9c:66:a2:25: 6a:1d:ae:b9:ec:56:28:ff:de:03:eb:0a:5e:7f:bc: d2:c4:a3:71:b7:99:9e:98:d5:58:29:ed:b5:4e:36: d3:1b:e7:73:81:ef:8e:74:5c:a9:c1:b6:2f:28:32: 4c:3d:18:ba:01:c5:91:76:85:9c:7b:be:25:bb:ab: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1F:98:74:D0:9B:1B:21:E9:BD:25:6D:76:C7:3D:8B:DF:8E:DD:65 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.38.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:06:b6:56:89:3f:b2:29:a9:e6:ca:a8:57:38:99:a6:97:70: 47:e1:f9:6f:a0:0f:09:85:ae:b3:cb:8a:05:86:63:92:31:2f: d8:3b:09:80:a0:3b:eb:de:02:c1:20:13:58:1e:54:fc:32:08: 2f:0f:54:92:3e:ee:ab:d6:74:93:16:fc:22:12:4c:db:c2:90: 4d:30:4a:e8:1a:22:3e:d8:e8:99:8a:e6:fe:e2:0a:28:3d:ae: cb:f7:98:3b:cb:18:18:9b:12:19:1a:ce:fe:13:70:73:51:5e: 32:40:e9:85:a9:02:6a:c7:8d:ed:a2:64:70:c3:5b:19:57:72: 36:01:98:30:7c:4b:33:55:8e:95:6a:74:5c:ac:47:2d:ae:ee: 42:a3:e5:71:ea:7a:07:81:d4:a6:23:ed:05:04:9e:ec:d3:e3: 0f:49:5f:aa:bc:3c:e3:c3:c4:eb:2a:af:bf:f9:3b:ad:ad:bb: e5:f3:ce:58:77:bb:a7:0f:e1:8a:f0:50:de:13:b4:80:1d:79: 25:2d:c9:6e:c6:17:e5:df:02:36:74:e2:45:c4:36:2b:98:7b: da:27:de:dc:14:b5:18:de:16:06:c3:74:f6:31:93:e0:20:29: 09:6b:ce:0b:7f:af:7f:b0:da:c4:2b:1b:ed:54:7f:66:43:d4: 17:95:6c:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY/lzeZ58g0hctL/A9ABiaZDRqZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDI1WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzU1ZDkyOGE2MGY0OTA3ZDNjNzYyYmU2NmJiMGJhMWFl MmZhNDA4YzcyNTIxNTMwMGM5ZjRhYTMyNGU4OTExMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtJKpbiDkxaO3Ihe+aG2R+yK1Z3MdoQQZxgf+qHUA2FUal D/DZ6PKXW4I90Oy9z/tLbpupmEElXhEq+5Lc8JvXOnqb27ciDvG/ZD41ZY0Jalme 6VOr/yXneJmFdG0lXU5mbN27fndEAChAeRIMgMSCoXYXYFRLJF1HwtEE+HnBAz4f LAOvcv4fnXM/Ji+ZG/Ww9cDEpPBa77r7afPnIvEBU6JlQ66glPkRj6vbzFbU6jrE 0zcmpVjBRY7cfZKcnGaiJWodrrnsVij/3gPrCl5/vNLEo3G3mZ6Y1Vgp7bVONtMb 53OB7450XKnBti8oMkw9GLoBxZF2hZx7viW7q8xJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJR+YdNCbGyHpvSVtdsc9i9+O3WUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJhYzA5MWM1LTgxNDMtNGE3MS04MWM0LWYzNGMzM2Q5OTZhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCYwDQYJKoZIhvcNAQELBQADggEBAH8GtlaJP7IpqebKqFc4maaXcEfh +W+gDwmFrrPLigWGY5IxL9g7CYCgO+veAsEgE1geVPwyCC8PVJI+7qvWdJMW/CIS TNvCkE0wSugaIj7Y6JmK5v7iCig9rsv3mDvLGBibEhkazv4TcHNRXjJA6YWpAmrH je2iZHDDWxlXcjYBmDB8SzNVjpVqdFysRy2u7kKj5XHqegeB1KYj7QUEnuzT4w9J X6q8POPDxOsqr7/5O62tu+Xzzlh3u6cP4YrwUN4TtIAdeSUtyW7GF+XfAjZ04kXE NiuYe9on3twUtRjeFgbDdPYxk+AgKQlrzgt/r3+w2sQrG+1Uf2ZD1BeVbP8= -----END CERTIFICATE-----Generated at Sun Nov 15 21:51:05 2026 by rpki-client