$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa File: 38682ae8-11e8-4bbd-9b5b-0703a469a802.roa (raw, json) Hash identifier: BTLNNYRf6htUS79HC5dduLxk4CXnwJ6U5APQbdtKwgc= Subject key identifier: 30:16:F5:A9:AD:40:22:95:24:75:60:5A:C2:9E:EB:8E:C5:A7:65:61 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 213D7867C3C2DF903F21F88389E4AF0698CB2EA5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa Signing time: Tue 19 May 2026 04:00:10 +0000 ROA not before: Tue 19 May 2026 04:00:10 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3d:78:67:c3:c2:df:90:3f:21:f8:83:89:e4:af:06:98:cb:2e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 19 04:00:10 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=2e8da5cb73290b29fe75a37de91cc9282b03356a0ddcecaf20bfe4827e221b1b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:50:87:9d:82:fe:94:4c:ee:dc:f2:cc:e7: 1e:cc:34:30:65:8d:00:25:89:38:eb:04:f0:92:fd: 3f:49:87:c2:0e:1f:4c:a5:f1:73:11:11:9a:f8:95: dd:a3:80:8c:15:82:69:20:c5:2a:fd:17:bb:1e:92: 4b:3f:2a:03:2c:ab:71:f9:62:71:b9:af:17:16:41: 0a:c8:45:d6:40:8e:da:fd:16:ed:bf:7f:82:60:72: d1:42:ea:ce:2c:fd:fa:ea:05:6f:19:a1:60:63:cc: 28:80:8d:ff:04:5a:56:c8:5e:f7:ee:23:74:35:ba: e5:0e:aa:69:70:15:5f:b0:5f:fb:b5:12:ee:2b:5a: 79:0d:32:58:30:07:75:07:22:66:f3:5f:8e:7b:b8: f8:d2:6e:3f:3b:38:c1:74:67:69:c8:76:96:28:5f: 3e:6a:2b:9d:8d:b0:40:90:00:47:d4:c9:fd:41:0c: c3:ea:ba:4a:1f:8c:12:f9:c1:6f:b2:9a:89:ff:90: 7d:fb:11:db:d3:df:85:87:c8:9e:15:4f:af:48:50: e5:12:1c:22:0b:bf:3e:3e:01:1e:ca:16:0d:6a:14: a0:3b:ac:1b:22:70:1c:94:58:a8:b6:35:9f:d7:75: 1a:9f:e0:82:c9:7b:9c:ee:f8:6c:cf:8b:7d:7b:ea: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:16:F5:A9:AD:40:22:95:24:75:60:5A:C2:9E:EB:8E:C5:A7:65:61 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.46.0/24 Signature Algorithm: sha256WithRSAEncryption 77:5c:d9:06:63:63:98:ad:b2:a5:d0:c5:e7:f3:76:f1:71:04: 19:8b:a8:d5:92:dc:67:24:b4:78:b5:09:e3:8f:58:29:82:2e: 5e:f2:c7:2d:ff:26:b0:0f:fc:3f:14:6b:fd:79:c1:86:c7:fa: ad:6c:39:97:67:9e:2d:34:c9:27:d3:7c:12:f3:99:4c:ff:9f: 8e:3f:ef:4c:01:f5:93:a8:1b:73:33:14:fc:69:c4:8b:e4:be: 53:d4:33:3a:36:63:7d:0f:ef:7e:d0:80:99:9c:d2:7b:98:f7: f1:c1:2a:71:22:13:11:0c:58:e0:c4:cb:b8:63:af:9d:ee:4e: 03:f9:1e:a6:58:8a:e2:26:23:1a:38:3f:58:6b:c5:8d:75:f2: d4:61:a6:1d:2b:58:93:80:e4:85:b3:93:ae:f8:36:b4:8b:4d: 46:43:8d:6d:84:cd:5b:eb:f0:e2:a2:08:ff:c3:2c:f5:f5:a5: b5:80:2d:30:66:2e:a7:28:19:d0:2e:97:ab:e5:17:f9:22:98: 62:24:c6:fb:f5:a1:04:db:9e:ec:aa:22:fc:a0:18:a8:71:09: 9d:65:14:9f:9f:4d:12:8e:31:52:5f:0f:39:0a:43:33:fe:23: 67:ee:4e:85:b0:8b:10:62:8d:79:48:5d:15:e6:31:88:80:2d: 17:7b:54:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIT14Z8PC35A/IfiDieSvBpjLLqUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE5MDQwMDEwWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZThkYTVjYjczMjkwYjI5ZmU3NWEzN2RlOTFjYzkyODJi MDMzNTZhMGRkY2VjYWYyMGJmZTQ4MjdlMjIxYjFiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGAlCHnYL+lEzu3PLM5x7MNDBljQAliTjrBPCS/T9Jh8IO H0yl8XMREZr4ld2jgIwVgmkgxSr9F7sekks/KgMsq3H5YnG5rxcWQQrIRdZAjtr9 Fu2/f4JgctFC6s4s/frqBW8ZoWBjzCiAjf8EWlbIXvfuI3Q1uuUOqmlwFV+wX/u1 Eu4rWnkNMlgwB3UHImbzX457uPjSbj87OMF0Z2nIdpYoXz5qK52NsECQAEfUyf1B DMPqukofjBL5wW+ymon/kH37EdvT34WHyJ4VT69IUOUSHCILvz4+AR7KFg1qFKA7 rBsicByUWKi2NZ/XdRqf4ILJe5zu+GzPi3176mXvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMBb1qa1AIpUkdWBawp7rjsWnZWEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzM4NjgyYWU4LTExZTgtNGJiZC05YjViLTA3MDNhNDY5YTgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC4wDQYJKoZIhvcNAQELBQADggEBAHdc2QZjY5itsqXQxefzdvFxBBmL qNWS3GcktHi1CeOPWCmCLl7yxy3/JrAP/D8Ua/15wYbH+q1sOZdnni00ySfTfBLz mUz/n44/70wB9ZOoG3MzFPxpxIvkvlPUMzo2Y30P737QgJmc0nuY9/HBKnEiExEM WODEy7hjr53uTgP5HqZYiuImIxo4P1hrxY118tRhph0rWJOA5IWzk674NrSLTUZD jW2EzVvr8OKiCP/DLPX1pbWALTBmLqcoGdAul6vlF/kimGIkxvv1oQTbnuyqIvyg GKhxCZ1lFJ+fTRKOMVJfDzkKQzP+I2fuToWwixBijXlIXRXmMYiALRd7VKg= -----END CERTIFICATE-----Generated at Sat Jun 13 05:44:30 2026 by rpki-client