$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/59a41d2d-a58c-4843-9b09-5d7d72571b49.roa File: 59a41d2d-a58c-4843-9b09-5d7d72571b49.roa (raw, json) Hash identifier: Hr27m5BSEN+tafL9sg/KN9OOfx3peHG9GNmvZHfBKas= Subject key identifier: 12:CC:85:06:44:43:A1:F8:F3:2B:4A:A0:BF:49:AF:41:13:4F:60:02 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 268CA2A7C3F3FF5EB0F9D3AAA9E2380FD651CD23 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/59a41d2d-a58c-4843-9b09-5d7d72571b49.roa Signing time: Tue 19 May 2026 04:00:11 +0000 ROA not before: Tue 19 May 2026 04:00:11 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 699 IP address blocks: 35.111.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:8c:a2:a7:c3:f3:ff:5e:b0:f9:d3:aa:a9:e2:38:0f:d6:51:cd:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 19 04:00:11 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=f50f9663738b28f1a2d32b117c655ca24e0ad1a67fa2f1bf6600bbf170d0f8db, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:6d:fb:99:32:38:0d:fc:50:86:3c:e5:7f: 24:75:9b:8a:b5:ce:dd:cf:ec:d9:70:44:ae:28:de: bd:45:91:ae:c3:27:40:52:af:6e:7b:82:d0:7f:2a: de:70:9b:5d:f8:e1:7d:07:80:7c:3c:50:af:ae:ef: 97:24:ef:63:e6:d3:ca:c7:69:b0:da:9e:8d:b0:cb: 45:3c:6e:16:af:a7:f6:c9:f2:c8:b6:d8:13:22:3d: 46:96:fa:b7:26:d7:97:96:49:f2:d2:bb:a3:3e:50: 56:7a:fe:58:81:da:4c:57:29:f1:c1:a2:5f:c4:ec: 7a:07:80:20:6e:c5:ff:e9:ac:0f:93:f1:e7:78:d8: 7c:55:4e:78:13:e3:cc:58:4d:da:23:37:af:20:58: 63:2a:1e:46:d5:95:c7:fa:32:57:22:69:2c:80:1c: 7f:d1:98:fd:3c:f6:28:4a:0d:ee:8c:50:e9:b4:bd: c5:85:ef:ba:5b:2f:15:b6:38:29:42:bc:8f:78:22: ec:de:c1:0e:00:02:1d:4a:f0:33:41:8f:e8:ce:e8: 3d:19:f6:3d:a1:77:a6:e1:7a:9e:b8:dd:18:4c:c4: 11:2c:29:f9:6e:ae:d1:34:25:8b:2f:22:a6:21:f9: 00:0e:73:23:ce:42:ad:71:87:a9:cb:85:58:74:5c: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CC:85:06:44:43:A1:F8:F3:2B:4A:A0:BF:49:AF:41:13:4F:60:02 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/59a41d2d-a58c-4843-9b09-5d7d72571b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.160.0/19 Signature Algorithm: sha256WithRSAEncryption 05:55:cd:25:0f:fd:b6:ed:84:0a:d2:7a:f6:50:7c:f7:eb:8a: ff:20:23:3d:24:6e:69:31:6a:d4:ff:e0:cf:24:8b:24:de:88: 27:d7:ce:50:70:89:96:b5:aa:91:ad:a8:c2:d3:7a:c8:89:41: ca:41:34:ed:7d:b2:c4:70:58:d0:66:37:8f:ba:03:47:ae:29: 4b:51:51:50:ab:07:cc:2e:16:43:39:69:e8:45:16:ed:e5:ef: bf:c1:1f:aa:f5:73:4c:08:d8:0f:9b:ca:d0:13:90:30:5f:56: 4e:5f:7b:87:23:bf:67:73:c7:7f:3c:6a:01:59:1c:7d:67:9d: 76:52:00:74:49:cf:c0:cb:d1:9a:b7:22:24:2b:3b:90:24:c1: 48:64:88:f8:04:69:bf:78:5c:e2:72:8a:a7:02:7d:63:17:72: d6:45:c4:3a:dd:48:98:2d:72:93:54:18:b9:c5:54:5c:18:4b: cd:a3:f0:00:f5:1a:f1:37:25:99:02:39:9f:bd:ae:d8:7d:9b: 91:71:26:3e:d5:c4:85:e5:92:00:5a:e7:ad:b7:46:8b:de:19: d3:d7:1a:b2:a6:b2:71:5b:d5:f6:4d:e0:89:38:de:01:37:0c: 2f:7a:97:fb:5f:f6:0f:55:42:c1:e5:ca:2e:a8:ec:92:25:43: f3:b9:f2:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJoyip8Pz/16w+dOqqeI4D9ZRzSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE5MDQwMDExWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTBmOTY2MzczOGIyOGYxYTJkMzJiMTE3YzY1NWNhMjRl MGFkMWE2N2ZhMmYxYmY2NjAwYmJmMTcwZDBmOGRiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV0237mTI4DfxQhjzlfyR1m4q1zt3P7NlwRK4o3r1Fka7D J0BSr257gtB/Kt5wm1344X0HgHw8UK+u75ck72Pm08rHabDano2wy0U8bhavp/bJ 8si22BMiPUaW+rcm15eWSfLSu6M+UFZ6/liB2kxXKfHBol/E7HoHgCBuxf/prA+T 8ed42HxVTngT48xYTdojN68gWGMqHkbVlcf6MlciaSyAHH/RmP089ihKDe6MUOm0 vcWF77pbLxW2OClCvI94IuzewQ4AAh1K8DNBj+jO6D0Z9j2hd6bhep643RhMxBEs KflurtE0JYsvIqYh+QAOcyPOQq1xh6nLhVh0XK9zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEsyFBkRDofjzK0qgv0mvQRNPYAIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzU5YTQxZDJkLWE1OGMtNDg0My05YjA5LTVkN2Q3MjU3MWI0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUjb6AwDQYJKoZIhvcNAQELBQADggEBAAVVzSUP/bbthArSevZQfPfriv8g Iz0kbmkxatT/4M8kiyTeiCfXzlBwiZa1qpGtqMLTesiJQcpBNO19ssRwWNBmN4+6 A0euKUtRUVCrB8wuFkM5aehFFu3l77/BH6r1c0wI2A+bytATkDBfVk5fe4cjv2dz x388agFZHH1nnXZSAHRJz8DL0Zq3IiQrO5AkwUhkiPgEab94XOJyiqcCfWMXctZF xDrdSJgtcpNUGLnFVFwYS82j8AD1GvE3JZkCOZ+9rth9m5FxJj7VxIXlkgBa5623 RoveGdPXGrKmsnFb1fZN4Ik43gE3DC96l/tf9g9VQsHlyi6o7JIlQ/O58lM= -----END CERTIFICATE-----Generated at Sat Jun 13 09:27:37 2026 by rpki-client