$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa File: 38682ae8-11e8-4bbd-9b5b-0703a469a802.roa (raw, json) Hash identifier: 2bf37/KcCGymS9LaAtzJI9kROSp00CXiTa0oCfNXW4E= Subject key identifier: 9B:05:21:4F:A2:86:27:A8:CD:1A:BC:37:53:FB:F6:A7:B6:83:84:0A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4C385E10A39D0A8AB91C6918CCEF2BA698066861 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa Signing time: Mon 26 Oct 2026 02:40:07 +0000 ROA not before: Mon 26 Oct 2026 02:40:07 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:38:5e:10:a3:9d:0a:8a:b9:1c:69:18:cc:ef:2b:a6:98:06:68:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 26 02:40:07 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=bce4e1767fe001e70699abc92076dc615ad7f78a42c35d716835958709a4b694, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:ec:85:8c:cb:bb:a1:bc:06:af:5d:ae:4a: 27:f3:12:51:13:a7:54:e2:6f:e5:6a:d3:ad:1a:6c: ec:7d:92:05:b0:90:bf:da:32:84:c8:2e:35:4b:1d: 65:dd:11:6c:df:7d:61:cf:ce:3d:be:28:3f:29:4b: ef:9d:98:3e:36:bf:ca:c3:5b:48:b5:ce:bb:d0:66: 00:10:ea:fd:02:80:95:e2:4a:a5:01:8c:e5:23:b3: 64:a5:82:08:84:67:8c:76:b3:e0:e1:dc:c6:23:2f: 0b:63:3d:03:f5:f0:6f:67:79:4f:5b:41:fb:1f:44: 8b:0b:fe:67:ec:9b:8b:53:82:18:63:8e:1b:db:40: 14:a9:46:40:73:80:a5:d0:1e:77:ed:b6:f2:92:8a: c1:6d:27:20:f6:2d:89:d7:63:d1:70:dd:08:97:6b: 9d:d3:bd:d3:5d:e4:bf:b0:04:31:67:08:88:de:cc: 64:b5:4e:6f:d1:c1:45:8a:ca:34:4e:3b:70:ca:29: 40:19:ed:91:9c:9d:56:d1:72:c5:e1:23:3c:d4:9c: bb:9a:c9:d0:05:c0:fe:65:17:53:21:da:0e:8e:55: 93:27:40:0a:3e:e6:e4:9c:d3:7c:4d:40:61:b6:24: 77:ea:75:47:80:26:db:eb:b5:47:f2:dc:45:73:06: e3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:05:21:4F:A2:86:27:A8:CD:1A:BC:37:53:FB:F6:A7:B6:83:84:0A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.46.0/24 Signature Algorithm: sha256WithRSAEncryption 11:11:8c:c9:3e:6b:9d:65:f8:c2:49:53:c6:78:b2:f5:2a:08: 4e:9a:2f:da:e3:2b:5d:8e:4f:d1:ff:0e:c8:51:69:e4:e6:63: 71:7f:30:e8:a9:bb:d8:8a:d6:22:5b:9f:16:ff:b8:82:2f:a2: 1f:36:18:eb:ed:c5:27:c7:9c:51:96:b3:25:c0:19:18:a7:5b: 15:94:1f:96:4d:ea:08:e4:af:2f:a1:11:e3:96:cf:c8:92:c9: 81:83:b7:0c:01:fc:be:76:f0:5f:0b:08:f7:c1:de:a3:75:6d: 78:ef:6f:c8:56:84:c4:6e:82:0e:b8:80:be:2e:44:73:6b:4b: 62:cf:0d:87:c8:d5:62:cf:f1:df:1c:4a:ac:16:95:a2:ae:a8: 9c:ec:69:e7:c2:cf:e9:07:15:6a:7a:21:29:d3:ea:41:7e:69: 92:23:5f:d5:be:c7:be:9b:07:fa:09:3d:89:1d:9a:d9:3e:58: 12:e7:7e:24:88:da:6e:0a:c7:67:27:ea:3d:c9:7c:b1:e6:66: c7:04:5d:97:e2:ae:e9:31:19:ee:78:65:fa:1f:24:bf:90:94: 38:c8:b0:a2:e7:b9:1d:81:93:59:07:c2:90:50:3f:87:d1:8f: ec:41:41:27:d3:b6:e8:27:1b:eb:63:2f:3d:78:03:4a:3a:5e: 24:86:e5:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTDheEKOdCoq5HGkYzO8rppgGaGEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI2MDI0MDA3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2U0ZTE3NjdmZTAwMWU3MDY5OWFiYzkyMDc2ZGM2MTVh ZDdmNzhhNDJjMzVkNzE2ODM1OTU4NzA5YTRiNjk0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJx+yFjMu7obwGr12uSifzElETp1Tib+Vq060abOx9kgWw kL/aMoTILjVLHWXdEWzffWHPzj2+KD8pS++dmD42v8rDW0i1zrvQZgAQ6v0CgJXi SqUBjOUjs2SlggiEZ4x2s+Dh3MYjLwtjPQP18G9neU9bQfsfRIsL/mfsm4tTghhj jhvbQBSpRkBzgKXQHnfttvKSisFtJyD2LYnXY9Fw3QiXa53TvdNd5L+wBDFnCIje zGS1Tm/RwUWKyjROO3DKKUAZ7ZGcnVbRcsXhIzzUnLuaydAFwP5lF1Mh2g6OVZMn QAo+5uSc03xNQGG2JHfqdUeAJtvrtUfy3EVzBuMVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmwUhT6KGJ6jNGrw3U/v2p7aDhAowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzM4NjgyYWU4LTExZTgtNGJiZC05YjViLTA3MDNhNDY5YTgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC4wDQYJKoZIhvcNAQELBQADggEBABERjMk+a51l+MJJU8Z4svUqCE6a L9rjK12OT9H/DshRaeTmY3F/MOipu9iK1iJbnxb/uIIvoh82GOvtxSfHnFGWsyXA GRinWxWUH5ZN6gjkry+hEeOWz8iSyYGDtwwB/L528F8LCPfB3qN1bXjvb8hWhMRu gg64gL4uRHNrS2LPDYfI1WLP8d8cSqwWlaKuqJzsaefCz+kHFWp6ISnT6kF+aZIj X9W+x76bB/oJPYkdmtk+WBLnfiSI2m4Kx2cn6j3JfLHmZscEXZfirukxGe54Zfof JL+QlDjIsKLnuR2Bk1kHwpBQP4fRj+xBQSfTtugnG+tjLz14A0o6XiSG5fQ= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:10 2026 by rpki-client