$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa File: 38682ae8-11e8-4bbd-9b5b-0703a469a802.roa (raw, json) Hash identifier: ECGTTePd9agAF91lDdir3EsysQ1aNw7XlQVjy37TaZo= Subject key identifier: 46:05:54:9F:C1:58:49:86:52:EA:8F:6F:02:CB:D8:47:5E:9E:59:EA Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1AAD6C194118A27E5E6BB7630AAB89036EA3844F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa Signing time: Sat 28 Feb 2026 01:00:09 +0000 ROA not before: Sat 28 Feb 2026 01:00:09 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ad:6c:19:41:18:a2:7e:5e:6b:b7:63:0a:ab:89:03:6e:a3:84:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 28 01:00:09 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=5c689ca0299d3cbb69359d9e40d343940018c2d03e63a59b2e53143766f8ec07, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:24:04:92:96:02:7b:ef:ac:96:78:71:9e:fb: 43:91:8f:de:21:56:3d:2d:ad:a8:ef:68:f7:c5:de: 2b:21:0a:52:c1:3e:3d:8c:c2:ad:fd:fa:fd:89:18: 66:cb:b7:f1:ed:27:7d:c1:e2:6f:bf:08:71:0d:98: 3d:4a:d1:90:af:3c:d5:8e:78:cf:d1:80:78:b9:5f: af:45:79:24:52:45:63:d0:fc:78:1f:f4:7d:f8:21: 88:87:c4:12:f1:f4:da:d1:89:12:8c:52:2a:f0:de: b9:bf:d2:f5:bd:12:e3:16:06:6a:c5:f8:8b:02:2d: 5d:a1:98:c6:23:0f:6d:09:46:df:84:5a:73:08:5b: c0:59:cf:6b:ed:10:22:df:f5:97:2a:ac:71:a6:4f: 1e:3b:0f:e5:28:77:f7:8d:1b:26:4c:fa:0b:d6:48: 02:e9:25:72:b4:f0:2e:d7:8e:54:4a:4a:4f:c3:88: ef:17:86:eb:73:47:1a:1a:58:62:6a:50:03:35:ce: dc:08:1a:e8:e5:18:d3:4e:18:4b:dc:ad:17:45:80: 76:05:38:c7:15:38:23:d6:c2:c1:51:bb:2a:3d:c2: 0f:d4:58:9c:33:a0:3b:c4:6a:9a:88:41:84:e1:f5: 26:10:ff:a9:4c:b9:24:e8:88:1c:6a:05:42:68:54: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:05:54:9F:C1:58:49:86:52:EA:8F:6F:02:CB:D8:47:5E:9E:59:EA X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.46.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:18:35:db:41:4e:a0:63:0d:d3:7d:d3:c3:fd:2a:99:e8:57: 37:bc:7a:32:ca:13:6f:37:17:ed:0e:90:b1:cd:2d:2b:7c:0f: 64:c8:36:ae:b2:b7:b0:f8:2c:2b:7c:ba:90:ac:91:2b:75:b3: ae:e8:1f:24:7a:79:4a:88:85:8f:5a:d9:78:7b:27:62:ca:18: db:41:62:f6:99:9e:92:ca:87:c7:23:9e:21:9a:92:cc:d9:fe: 50:a7:ab:dd:7c:1d:77:bb:50:e0:e6:2a:a3:80:3d:da:14:28: a7:56:30:eb:98:59:31:e7:45:81:29:29:de:c4:0b:28:5e:ec: 34:3b:8c:35:d0:5b:60:b6:e6:ba:45:da:4a:63:0f:43:9d:fb: f4:f9:c7:2c:aa:37:f4:3a:13:c3:6d:61:ac:6b:68:f7:9e:63: d2:2c:06:10:29:72:22:d4:90:e2:20:35:cb:b7:87:d1:d9:4e: ef:65:90:9c:4e:76:c4:95:ef:82:71:4d:52:a7:61:26:02:9e: 12:48:d3:ac:50:09:79:fc:0b:21:54:fb:35:11:66:23:2b:2a: 1d:31:22:03:80:f6:ee:aa:b5:83:c9:6c:b4:48:4f:a3:15:bf: 0c:19:73:f3:5b:1a:17:a7:65:6f:2c:e6:f0:5b:bc:ca:a9:d4: 9d:0d:39:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGq1sGUEYon5ea7djCquJA26jhE8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI4MDEwMDA5WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzY4OWNhMDI5OWQzY2JiNjkzNTlkOWU0MGQzNDM5NDAw MThjMmQwM2U2M2E1OWIyZTUzMTQzNzY2ZjhlYzA3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD8JASSlgJ776yWeHGe+0ORj94hVj0trajvaPfF3ishClLB Pj2Mwq39+v2JGGbLt/HtJ33B4m+/CHENmD1K0ZCvPNWOeM/RgHi5X69FeSRSRWPQ /Hgf9H34IYiHxBLx9NrRiRKMUirw3rm/0vW9EuMWBmrF+IsCLV2hmMYjD20JRt+E WnMIW8BZz2vtECLf9ZcqrHGmTx47D+Uod/eNGyZM+gvWSALpJXK08C7XjlRKSk/D iO8XhutzRxoaWGJqUAM1ztwIGujlGNNOGEvcrRdFgHYFOMcVOCPWwsFRuyo9wg/U WJwzoDvEapqIQYTh9SYQ/6lMuSToiBxqBUJoVHTNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURgVUn8FYSYZS6o9vAsvYR16eWeowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzM4NjgyYWU4LTExZTgtNGJiZC05YjViLTA3MDNhNDY5YTgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC4wDQYJKoZIhvcNAQELBQADggEBAI8YNdtBTqBjDdN908P9KpnoVze8 ejLKE283F+0OkLHNLSt8D2TINq6yt7D4LCt8upCskSt1s67oHyR6eUqIhY9a2Xh7 J2LKGNtBYvaZnpLKh8cjniGakszZ/lCnq918HXe7UODmKqOAPdoUKKdWMOuYWTHn RYEpKd7ECyhe7DQ7jDXQW2C25rpF2kpjD0Od+/T5xyyqN/Q6E8NtYaxraPeeY9Is BhApciLUkOIgNcu3h9HZTu9lkJxOdsSV74JxTVKnYSYCnhJI06xQCXn8CyFU+zUR ZiMrKh0xIgOA9u6qtYPJbLRIT6MVvwwZc/NbGhenZW8s5vBbvMqp1J0NOaM= -----END CERTIFICATE-----Generated at Mon Mar 2 03:23:35 2026 by rpki-client