$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/50c22e78-7f05-4b92-b53b-6653311aea7e.roa File: 50c22e78-7f05-4b92-b53b-6653311aea7e.roa (raw, json) Hash identifier: 9ftbfNDNZRl2oaqM1dLwx+/pVmWisugJ24I4Y4KD/bw= Subject key identifier: 10:CA:3F:01:9E:19:EF:1F:67:FA:BA:D3:2F:3C:02:CA:71:66:55:77 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4D0BA61959F99330CE25C6C0F191CCB05D172C7D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/50c22e78-7f05-4b92-b53b-6653311aea7e.roa Signing time: Mon 19 Oct 2026 01:50:06 +0000 ROA not before: Mon 19 Oct 2026 01:50:06 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0b:a6:19:59:f9:93:30:ce:25:c6:c0:f1:91:cc:b0:5d:17:2c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 01:50:06 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=9a9e54d49c32541105627df74ea5739be509542e88eade184dcbc16ccf476d8e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:22:51:dc:51:a0:90:c0:3d:54:6b:e1:f9: bf:c0:fd:c5:94:65:18:8d:bb:b3:98:05:7f:88:a8: 9b:91:90:13:5a:54:cf:a2:54:79:37:c1:b8:87:9b: 8e:c9:e7:66:6e:b2:10:90:f1:ef:a1:08:46:7c:c6: 3a:aa:17:74:7a:43:c1:c7:da:90:96:ce:1b:3e:83: fe:08:91:ba:97:d2:fa:92:8f:94:6b:83:b7:2d:67: 55:dc:ec:87:ad:ff:49:c2:07:6b:af:29:b4:03:f9: 0e:83:d0:08:62:60:aa:0a:98:56:1f:f5:3d:1a:d8: 7a:bd:9d:c3:a4:e4:c4:8b:96:0e:87:19:fc:5b:b0: c1:d2:4e:c6:f9:c8:ee:2d:c0:29:f2:60:0a:42:d3: 75:2d:93:4d:5c:c9:56:2f:71:0c:be:93:9b:57:12: 31:57:5a:6c:f3:bf:25:56:74:c7:4c:b1:25:7b:47: a9:0a:74:1d:38:51:f1:07:38:b7:e5:57:3e:6b:a8: 8e:5e:3b:0b:dc:68:48:fa:f8:c9:89:1e:2e:c7:47: f9:85:e1:b3:37:f0:c7:e7:28:31:7c:0e:15:4b:7d: 03:55:39:e1:f0:ea:1d:14:5e:02:ef:e9:f5:a3:ab: a6:da:da:0f:d2:7f:34:36:b3:2d:bb:28:42:9b:c4: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CA:3F:01:9E:19:EF:1F:67:FA:BA:D3:2F:3C:02:CA:71:66:55:77 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/50c22e78-7f05-4b92-b53b-6653311aea7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.49.0/24 Signature Algorithm: sha256WithRSAEncryption 93:b7:9b:d9:dd:52:ac:61:76:cb:d6:a1:76:a3:ec:76:22:22: 9a:4e:d5:a1:78:21:72:1f:47:78:97:f7:60:88:d2:7e:fe:13: 39:77:fe:91:8e:ca:73:60:c7:8d:dd:25:a7:05:7e:cf:e8:f4: ae:51:08:45:ae:2d:5d:b6:ad:c5:e5:dc:96:27:a7:a6:66:29: d4:a9:e4:7e:96:57:fe:28:94:5c:11:f4:30:07:4d:a0:f8:10: e7:2e:80:b3:f2:3d:ca:a4:ef:73:c1:af:b7:66:96:00:0a:13: c2:e7:98:70:01:02:73:62:aa:e2:7d:bd:0e:86:bc:73:f1:7c: 6a:12:f1:7e:99:e2:6a:f0:67:8e:68:e0:26:71:a2:5d:c9:a8: 7e:04:1c:8e:be:f2:74:3f:a0:2b:5a:15:cf:42:09:5d:e2:23: 7f:bc:35:84:6c:15:82:e4:e7:ae:fa:bc:e0:af:42:cc:c0:5d: 5c:27:b5:39:8b:4f:2c:47:74:fb:3e:fb:91:cf:54:09:12:43: e1:5f:51:c4:f7:08:1f:65:ba:13:ef:04:86:e6:f4:a7:cf:53: 0f:c1:60:22:4a:ab:23:88:a5:e2:8e:ef:77:4a:9a:39:cd:59: d1:a9:9a:f3:d9:b5:37:ab:f8:70:e8:4e:b6:64:56:11:b4:20: 3d:5c:8d:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTQumGVn5kzDOJcbA8ZHMsF0XLH0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE5MDE1MDA2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTllNTRkNDljMzI1NDExMDU2MjdkZjc0ZWE1NzM5YmU1 MDk1NDJlODhlYWRlMTg0ZGNiYzE2Y2NmNDc2ZDhlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaeyJR3FGgkMA9VGvh+b/A/cWUZRiNu7OYBX+IqJuRkBNa VM+iVHk3wbiHm47J52ZushCQ8e+hCEZ8xjqqF3R6Q8HH2pCWzhs+g/4IkbqX0vqS j5Rrg7ctZ1Xc7Iet/0nCB2uvKbQD+Q6D0AhiYKoKmFYf9T0a2Hq9ncOk5MSLlg6H GfxbsMHSTsb5yO4twCnyYApC03Utk01cyVYvcQy+k5tXEjFXWmzzvyVWdMdMsSV7 R6kKdB04UfEHOLflVz5rqI5eOwvcaEj6+MmJHi7HR/mF4bM38MfnKDF8DhVLfQNV OeHw6h0UXgLv6fWjq6ba2g/SfzQ2sy27KEKbxK1bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEMo/AZ4Z7x9n+rrTLzwCynFmVXcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzUwYzIyZTc4LTdmMDUtNGI5Mi1iNTNiLTY2NTMzMTFhZWE3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDEwDQYJKoZIhvcNAQELBQADggEBAJO3m9ndUqxhdsvWoXaj7HYiIppO 1aF4IXIfR3iX92CI0n7+Ezl3/pGOynNgx43dJacFfs/o9K5RCEWuLV22rcXl3JYn p6ZmKdSp5H6WV/4olFwR9DAHTaD4EOcugLPyPcqk73PBr7dmlgAKE8LnmHABAnNi quJ9vQ6GvHPxfGoS8X6Z4mrwZ45o4CZxol3JqH4EHI6+8nQ/oCtaFc9CCV3iI3+8 NYRsFYLk5676vOCvQszAXVwntTmLTyxHdPs++5HPVAkSQ+FfUcT3CB9luhPvBIbm 9KfPUw/BYCJKqyOIpeKO73dKmjnNWdGpmvPZtTer+HDoTrZkVhG0ID1cjYQ= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:47 2026 by rpki-client