$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa File: 2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa (raw, json) Hash identifier: fnPcC06j69jfLltNTpdwHfOYRKv96LYAhw5cWs+Kh30= Subject key identifier: E3:5B:7B:19:6C:58:39:BC:0C:CE:87:13:CA:46:9C:16:C5:BA:87:A3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7932196FB9EF0720A9A61BD0A0CA538CA444A71E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa Signing time: Fri 13 Feb 2026 14:50:11 +0000 ROA not before: Fri 13 Feb 2026 14:50:11 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:32:19:6f:b9:ef:07:20:a9:a6:1b:d0:a0:ca:53:8c:a4:44:a7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 13 14:50:11 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=e498a24c0870da9da7722c09bf36a4b839c115bb4bc701f6ebc66a6bb0da7538, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:bc:e2:75:9b:db:eb:d2:79:17:97:96:b7: f3:f5:f9:36:9a:00:2b:a2:3c:bd:01:2b:f8:d0:79: 71:18:01:32:2a:cd:e6:0c:de:ec:8a:d3:bf:7c:5b: 1d:68:d8:c5:85:72:38:1a:d3:6c:55:34:61:c2:fc: 28:7a:b2:1d:51:72:4c:69:ba:93:23:f1:8c:97:58: 6a:1c:60:93:5c:28:f3:fd:f3:ca:e5:e4:ab:34:6a: 0e:f3:c0:07:f2:f8:ab:e6:2a:15:0d:08:2d:24:7b: 25:3c:dc:75:0b:2b:3c:d1:5f:8f:23:0b:cb:7e:d4: aa:16:a3:c2:0a:2e:99:de:39:b1:d9:99:72:95:7f: da:2c:d9:b8:27:ae:5c:09:8f:16:63:d5:9a:e0:2f: b5:1c:fa:f9:e5:8b:65:37:9c:02:2e:b9:9f:0d:88: 7a:49:4a:19:8e:f1:6b:96:ac:fe:0f:1e:9c:cb:64: f1:4a:06:ad:d1:cb:87:19:e1:07:5d:01:57:91:df: ad:e8:89:2f:40:01:fd:ca:69:e2:91:61:17:61:c1: 5d:1c:91:50:53:a9:52:19:ad:88:87:90:63:56:32: e2:f7:0b:72:0e:9f:87:09:e9:c1:2a:23:81:a1:ac: 7a:81:56:87:a0:1d:fc:55:c1:dc:3d:08:02:4c:87: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5B:7B:19:6C:58:39:BC:0C:CE:87:13:CA:46:9C:16:C5:BA:87:A3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 23:e1:b5:ea:a8:dc:f9:8b:11:67:d0:65:46:a0:29:1e:1c:6c: 52:77:3f:4a:be:2d:a3:96:1c:e9:bc:41:15:be:fe:0e:cf:7d: d1:dd:06:af:a6:06:93:01:f7:91:be:ff:84:61:b4:46:21:d6: 60:da:04:af:d5:7e:1f:9e:ca:35:77:6a:12:af:ff:4c:ab:bc: 6d:2b:57:3c:77:bd:82:c0:41:80:3f:6c:82:b9:1a:ac:b0:b3: 05:fc:a2:82:37:13:e9:4f:f2:1d:91:4d:8c:ab:dd:0e:06:3d: a4:92:5c:44:8e:eb:17:9f:cf:e9:49:30:fb:8e:24:1d:84:06: ce:59:bc:c0:a2:a1:a4:11:14:f8:94:3b:f4:03:3a:4d:f6:e0: d1:98:92:39:ed:4f:47:33:9b:df:e9:5e:a8:3f:51:31:3e:e4: 38:e3:fb:ea:20:8e:88:ea:41:b1:e5:b9:45:78:fe:13:e0:2f: 3f:44:b6:3f:a7:b1:54:bf:aa:d3:ad:cd:7e:b1:72:48:54:d2: b3:09:90:95:41:8f:8b:ee:ec:37:1c:03:47:fc:9e:2f:25:a2: 9a:2c:b2:20:e5:a7:24:25:7e:3e:82:b0:ef:83:95:57:d3:e0: b1:30:dc:d4:23:0f:94:73:85:78:88:a1:d6:cc:f2:a7:b9:20: c9:fb:69:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeTIZb7nvByCpphvQoMpTjKREpx4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjEzMTQ1MDExWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDk4YTI0YzA4NzBkYTlkYTc3MjJjMDliZjM2YTRiODM5 YzExNWJiNGJjNzAxZjZlYmM2NmE2YmIwZGE3NTM4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2vbzidZvb69J5F5eWt/P1+TaaACuiPL0BK/jQeXEYATIq zeYM3uyK0798Wx1o2MWFcjga02xVNGHC/Ch6sh1RckxpupMj8YyXWGocYJNcKPP9 88rl5Ks0ag7zwAfy+KvmKhUNCC0keyU83HULKzzRX48jC8t+1KoWo8IKLpneObHZ mXKVf9os2bgnrlwJjxZj1ZrgL7Uc+vnli2U3nAIuuZ8NiHpJShmO8WuWrP4PHpzL ZPFKBq3Ry4cZ4QddAVeR363oiS9AAf3KaeKRYRdhwV0ckVBTqVIZrYiHkGNWMuL3 C3IOn4cJ6cEqI4GhrHqBVoegHfxVwdw9CAJMhyjNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU41t7GWxYObwMzocTykacFsW6h6MwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJjM2Q3MjQ3LWUwN2ItNGQxYy1hNmVlLWViYWExM2ZiZDljYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBACPhteqo3PmLEWfQZUagKR4cbFJ3 P0q+LaOWHOm8QRW+/g7PfdHdBq+mBpMB95G+/4RhtEYh1mDaBK/Vfh+eyjV3ahKv /0yrvG0rVzx3vYLAQYA/bIK5GqywswX8ooI3E+lP8h2RTYyr3Q4GPaSSXESO6xef z+lJMPuOJB2EBs5ZvMCioaQRFPiUO/QDOk324NGYkjntT0czm9/pXqg/UTE+5Djj ++ogjojqQbHluUV4/hPgLz9Etj+nsVS/qtOtzX6xckhU0rMJkJVBj4vu7DccA0f8 ni8lopossiDlpyQlfj6CsO+DlVfT4LEw3NQjD5RzhXiIodbM8qe5IMn7aeQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:48:51 2026 by rpki-client