$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5326ca5e-a778-4b74-be6f-4744733301e8.roa File: 5326ca5e-a778-4b74-be6f-4744733301e8.roa (raw, json) Hash identifier: 3F9YnWadoew6EZPFeqDmPjMpih5k/dWn+Ne9951vo84= Subject key identifier: E1:A3:10:B2:11:B0:64:09:AE:1A:AE:1E:41:92:E2:9B:B1:65:58:0D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0620B49446595F8AB360CDE5D00DE01B3496E7FD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5326ca5e-a778-4b74-be6f-4744733301e8.roa Signing time: Mon 23 Feb 2026 00:00:32 +0000 ROA not before: Mon 23 Feb 2026 00:00:32 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 35.111.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:20:b4:94:46:59:5f:8a:b3:60:cd:e5:d0:0d:e0:1b:34:96:e7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 23 00:00:32 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=d4ce9902aaedf7005b012ca37371b65ca5db07d4522991ec40f2b51c9581a1cb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:52:5e:33:6c:e5:4b:30:56:bd:f9:b0:f8: ee:d7:27:d0:99:57:d6:7c:ae:ed:8d:31:f8:0c:d5: 10:ca:de:66:14:82:b7:86:27:c7:a0:12:5a:22:c8: fa:79:3d:13:88:e4:78:c6:7a:c8:86:b4:b3:02:a0: cd:e5:0b:11:4e:58:f2:33:03:1c:b1:4f:5a:b2:11: d1:8a:c6:bb:8d:a2:af:85:40:95:f1:a8:32:f0:ae: cf:89:76:f6:47:b1:05:c2:6f:a9:77:06:d1:c6:dd: 2b:b1:eb:90:33:29:1d:3a:b8:3c:f0:35:26:08:ce: cc:14:30:30:cf:2e:a3:71:e1:c0:65:e1:0b:42:fe: a0:a6:4a:4e:77:dc:2c:0c:49:b7:8f:1b:30:6f:e9: 21:17:7b:54:eb:f0:3a:b8:ba:fe:4b:f5:b0:4d:fb: 0d:ec:14:cf:30:40:4a:55:4f:0d:ca:78:ca:31:0b: fc:ae:2b:03:92:fc:62:5c:e8:6b:6b:ef:0b:36:95: 09:7e:05:4d:b2:07:26:ae:c3:64:2f:3e:f6:bf:2e: ba:01:ab:f1:c3:05:b7:87:d9:c2:f5:4b:cc:ae:fa: b9:a4:23:6e:74:f9:b1:3c:c8:ed:b4:45:1f:5e:79: f7:7b:a1:bf:85:f8:8e:0f:f0:5f:8f:18:8a:5f:84: 34:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A3:10:B2:11:B0:64:09:AE:1A:AE:1E:41:92:E2:9B:B1:65:58:0D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5326ca5e-a778-4b74-be6f-4744733301e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.253.0/24 Signature Algorithm: sha256WithRSAEncryption 67:22:97:8f:47:35:3d:48:12:e0:91:54:da:41:26:74:dc:65: 50:21:5c:e0:9d:be:3c:f0:32:65:92:fe:ec:d3:2c:3f:0b:d4: 74:24:50:33:40:86:a2:11:89:80:89:fc:0c:c7:e9:cb:1b:12: 40:b9:bd:4d:c2:0f:d2:a7:9f:d1:ad:90:26:9a:99:98:b1:6b: f4:a0:cd:cb:09:41:65:7e:04:37:81:ca:63:23:6c:66:30:0c: d1:1e:e4:99:79:45:94:2f:83:d4:20:26:b3:06:99:5e:ed:7a: 09:fe:ae:a2:27:80:12:ca:54:99:69:d1:5e:3b:83:e3:fc:0c: 27:60:c8:b3:83:b2:5a:42:81:f5:50:cf:ae:37:c1:80:bf:81: 37:5f:e5:38:9e:e2:ba:0d:f1:c2:cf:79:6c:84:e6:0e:0f:69: 4b:96:7b:92:fc:ea:06:36:97:2a:4b:a4:6b:a5:38:20:9b:48: 23:d5:d5:c3:99:fe:6c:3b:d6:e8:ef:7a:86:ad:7a:d8:0e:aa: 49:80:75:12:65:fc:1d:2d:d7:de:1f:fa:a4:92:c7:46:86:bd: 2c:ae:3a:55:ee:70:42:fe:26:e6:d8:a9:83:29:10:e9:c8:0b: af:a7:9b:5e:9f:a8:3e:eb:fa:a5:8a:ac:06:02:ff:0c:9a:24: c4:d9:ce:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBiC0lEZZX4qzYM3l0A3gGzSW5/0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjIzMDAwMDMyWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGNlOTkwMmFhZWRmNzAwNWIwMTJjYTM3MzcxYjY1Y2E1 ZGIwN2Q0NTIyOTkxZWM0MGYyYjUxYzk1ODFhMWNiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrNlJeM2zlSzBWvfmw+O7XJ9CZV9Z8ru2NMfgM1RDK3mYU greGJ8egEloiyPp5PROI5HjGesiGtLMCoM3lCxFOWPIzAxyxT1qyEdGKxruNoq+F QJXxqDLwrs+JdvZHsQXCb6l3BtHG3Sux65AzKR06uDzwNSYIzswUMDDPLqNx4cBl 4QtC/qCmSk533CwMSbePGzBv6SEXe1Tr8Dq4uv5L9bBN+w3sFM8wQEpVTw3KeMox C/yuKwOS/GJc6Gtr7ws2lQl+BU2yByauw2QvPva/LroBq/HDBbeH2cL1S8yu+rmk I250+bE8yO20RR9eefd7ob+F+I4P8F+PGIpfhDQtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4aMQshGwZAmuGq4eQZLim7FlWA0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzUzMjZjYTVlLWE3NzgtNGI3NC1iZTZmLTQ3NDQ3MzMzMDFlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/0wDQYJKoZIhvcNAQELBQADggEBAGcil49HNT1IEuCRVNpBJnTcZVAh XOCdvjzwMmWS/uzTLD8L1HQkUDNAhqIRiYCJ/AzH6csbEkC5vU3CD9Knn9GtkCaa mZixa/SgzcsJQWV+BDeBymMjbGYwDNEe5Jl5RZQvg9QgJrMGmV7tegn+rqIngBLK VJlp0V47g+P8DCdgyLODslpCgfVQz643wYC/gTdf5Tie4roN8cLPeWyE5g4PaUuW e5L86gY2lypLpGulOCCbSCPV1cOZ/mw71ujveoatetgOqkmAdRJl/B0t194f+qSS x0aGvSyuOlXucEL+JubYqYMpEOnIC6+nm16fqD7r+qWKrAYC/wyaJMTZzhw= -----END CERTIFICATE-----Generated at Mon Mar 2 01:02:50 2026 by rpki-client