$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2b15c9d1-408d-403d-9973-829e5c92c101.roa File: 2b15c9d1-408d-403d-9973-829e5c92c101.roa (raw, json) Hash identifier: Zij/za+fXUxZ1aStiE2EFIMEHn4/eU2MD/5sxwxVTaA= Subject key identifier: 7B:3F:47:82:F6:08:10:C2:06:D6:95:13:AD:9A:F7:86:CE:F6:70:26 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 17005717A7A8608C74394AA948E274AC52613436 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2b15c9d1-408d-403d-9973-829e5c92c101.roa Signing time: Sun 11 Oct 2026 14:50:24 +0000 ROA not before: Sun 11 Oct 2026 14:50:24 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:00:57:17:a7:a8:60:8c:74:39:4a:a9:48:e2:74:ac:52:61:34:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:24 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=a23ef2f84315199f55f6b9601f80e6c0aa3ff066aa9cab8e2016db72f4cff46c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fe:a7:22:77:bf:eb:4b:42:c0:c7:6e:ee:75: f0:85:5d:b8:bb:54:b4:96:ff:db:6c:6f:ac:94:55: 75:b6:ba:90:90:62:a5:ed:94:f6:b9:71:38:1a:3d: bf:dc:e7:5a:39:7d:4d:58:8b:17:d0:45:d3:ad:f6: 9d:c7:6a:02:01:70:a5:db:6b:eb:be:d3:0c:e8:38: 9e:66:a9:39:0c:18:bf:3e:ee:d0:f8:1b:ee:f2:74: 22:bf:30:f1:25:75:5f:15:0f:00:ce:41:68:6d:c8: 87:52:b4:57:b7:b0:51:9f:51:43:3a:ec:1a:90:d3: b7:7c:c1:42:9c:d1:af:05:50:23:21:c1:cc:af:54: 16:cb:4e:4b:73:a3:31:ff:e8:53:03:5a:23:3d:18: 5c:8a:66:5e:fc:6e:e2:fe:d5:4d:19:fe:87:f5:27: d0:97:05:b5:f6:d7:9b:14:1d:d5:ce:cb:05:26:dd: db:b5:8a:e0:3f:a9:8a:36:38:96:59:6d:72:18:25: 3d:4a:3a:58:63:5c:d5:cc:90:9f:ea:ff:d8:b4:1c: 38:ee:14:7a:64:9c:c8:1d:53:78:e5:ca:56:37:fe: 0a:65:73:7d:e0:20:c8:a9:f5:eb:bb:66:75:54:3e: 99:99:bb:03:21:81:69:ec:de:e6:a2:7a:be:92:2f: fa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3F:47:82:F6:08:10:C2:06:D6:95:13:AD:9A:F7:86:CE:F6:70:26 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2b15c9d1-408d-403d-9973-829e5c92c101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.26.0/23 Signature Algorithm: sha256WithRSAEncryption 51:34:cf:71:dc:6e:68:5b:8c:38:51:6b:ab:8a:04:e9:28:b2: fe:d5:0b:2d:47:98:e8:fd:7b:74:5d:6b:76:00:8c:07:fe:93: fa:9d:43:96:0d:6a:f5:71:5d:df:9c:92:22:09:4e:bf:8d:ef: 19:4d:66:71:08:1b:8a:ad:a6:ec:34:4e:ac:c7:1d:01:72:b4: 1c:d2:59:7e:8e:08:34:cc:41:22:bf:b4:97:e4:a1:5c:d3:f4: 1d:c0:ec:cf:b1:4e:55:a5:6c:7a:97:ab:b5:87:30:89:fa:55: a4:fe:8e:34:21:91:e0:67:ea:69:29:57:e5:95:2d:02:e1:61: 61:28:51:67:11:28:3f:30:b2:d3:cf:c5:0c:f8:d1:f8:00:d3: bf:e4:30:5e:52:3c:12:cc:50:43:70:88:44:73:66:41:e8:ae: be:cd:2a:69:9e:82:8a:55:ba:8f:1a:59:75:cf:e5:79:ee:ed: e0:f3:33:9b:9b:47:a6:82:d6:4b:60:c9:15:3b:55:4f:1e:1e: 71:d5:59:f4:53:99:5d:05:8a:47:24:04:b6:85:e9:d7:ff:0e: 75:93:b5:c5:24:ed:62:34:b2:84:5c:4f:9a:6f:69:09:0c:dd: 1b:51:8d:35:0e:ab:71:af:cf:76:75:40:7e:3f:a3:92:ef:63: ea:0a:01:46 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFwBXF6eoYIx0OUqpSOJ0rFJhNDYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDI0WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjNlZjJmODQzMTUxOTlmNTVmNmI5NjAxZjgwZTZjMGFh M2ZmMDY2YWE5Y2FiOGUyMDE2ZGI3MmY0Y2ZmNDZjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS/qcid7/rS0LAx27udfCFXbi7VLSW/9tsb6yUVXW2upCQ YqXtlPa5cTgaPb/c51o5fU1YixfQRdOt9p3HagIBcKXba+u+0wzoOJ5mqTkMGL8+ 7tD4G+7ydCK/MPEldV8VDwDOQWhtyIdStFe3sFGfUUM67BqQ07d8wUKc0a8FUCMh wcyvVBbLTktzozH/6FMDWiM9GFyKZl78buL+1U0Z/of1J9CXBbX215sUHdXOywUm 3du1iuA/qYo2OJZZbXIYJT1KOlhjXNXMkJ/q/9i0HDjuFHpknMgdU3jlylY3/gpl c33gIMip9eu7ZnVUPpmZuwMhgWns3uaier6SL/pHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUez9HgvYIEMIG1pUTrZr3hs72cCYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJiMTVjOWQxLTQwOGQtNDAzZC05OTczLTgyOWU1YzkyYzEwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBowDQYJKoZIhvcNAQELBQADggEBAFE0z3HcbmhbjDhRa6uKBOkosv7V Cy1HmOj9e3Rda3YAjAf+k/qdQ5YNavVxXd+ckiIJTr+N7xlNZnEIG4qtpuw0TqzH HQFytBzSWX6OCDTMQSK/tJfkoVzT9B3A7M+xTlWlbHqXq7WHMIn6VaT+jjQhkeBn 6mkpV+WVLQLhYWEoUWcRKD8wstPPxQz40fgA07/kMF5SPBLMUENwiERzZkHorr7N KmmegopVuo8aWXXP5Xnu7eDzM5ubR6aC1ktgyRU7VU8eHnHVWfRTmV0FikckBLaF 6df/DnWTtcUk7WI0soRcT5pvaQkM3RtRjTUOq3Gvz3Z1QH4/o5LvY+oKAUY= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:36 2026 by rpki-client