$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5d6508ce-47a1-4002-b03b-9ce21b16cf60.roa File: 5d6508ce-47a1-4002-b03b-9ce21b16cf60.roa (raw, json) Hash identifier: VnhbpilEMExS6trxeBukzw7i/hFiS+gLvR+kaG3dt+4= Subject key identifier: 43:03:9B:DA:68:5D:D4:66:3B:73:37:34:20:57:DE:A6:60:60:38:F0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4548DB486B21B33E3C181AE6D8E617992AB547D8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5d6508ce-47a1-4002-b03b-9ce21b16cf60.roa Signing time: Mon 26 Oct 2026 02:50:07 +0000 ROA not before: Mon 26 Oct 2026 02:50:07 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:48:db:48:6b:21:b3:3e:3c:18:1a:e6:d8:e6:17:99:2a:b5:47:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 26 02:50:07 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=ab8b0e47d67dfcc994e8be773cf452ed63591f8f048058771a64388c34cc93c8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:63:40:ed:87:d2:bf:34:02:fa:5b:cd:8a: 62:89:de:c7:bc:61:63:b8:4d:fc:9f:ae:50:73:39: f7:16:db:c5:8b:84:9c:23:d1:fd:0a:62:3a:f5:ef: c9:46:fd:d7:9c:ae:f4:ac:ac:f2:85:fb:a4:d4:e2: 9c:1e:84:00:b0:42:ac:83:d6:30:8c:f2:8d:ed:cf: fc:1e:03:08:bb:e3:e2:a4:8a:ff:68:c8:de:1a:95: 76:8d:ec:4f:8f:64:69:e0:f2:53:a2:0b:29:e1:dd: 78:ba:9b:aa:24:01:e4:9b:8f:b4:05:e7:e5:3b:03: 74:44:c9:d5:0a:c2:dd:61:d3:70:ec:54:2f:6b:39: e7:19:36:54:4a:94:c3:0e:0d:af:e5:2f:1c:5b:57: 5a:e2:4a:26:ed:18:72:af:39:20:1a:0f:0b:72:84: be:94:9f:d9:02:b1:c2:6a:60:51:2f:35:5c:ab:b9: be:14:fa:ac:77:12:1f:0e:8b:70:f8:bf:37:21:19: 59:6a:d6:b2:1d:e2:8d:01:61:fe:ed:3a:51:59:dc: 09:bb:8b:e5:ca:8a:05:f2:ed:fb:63:07:b0:bc:2a: 53:bb:9d:31:5d:ad:c9:ad:03:99:99:db:40:46:0c: e4:b0:88:6f:c6:88:ed:13:9a:df:4c:f7:6f:b5:e5: f0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:9B:DA:68:5D:D4:66:3B:73:37:34:20:57:DE:A6:60:60:38:F0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5d6508ce-47a1-4002-b03b-9ce21b16cf60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.14.0/24 Signature Algorithm: sha256WithRSAEncryption 10:65:f7:49:93:90:25:43:4d:62:e1:5b:e8:12:45:54:96:91: 03:59:2e:74:db:4e:5b:86:22:3b:6f:8c:25:77:fd:0d:17:c9: 05:e7:72:88:60:00:e6:f0:b9:23:a1:03:a4:5d:5d:08:d1:8d: 8a:c5:09:81:46:80:0e:4d:a6:71:3c:07:a1:0c:ae:70:4e:6e: 88:20:43:43:c7:7a:fa:c9:44:3e:80:c0:78:12:5d:d3:30:f7: 15:9e:6a:bf:2f:65:12:31:91:52:92:ba:6c:53:07:ef:b5:c2: d8:1d:90:6a:71:86:15:ba:3b:8a:1f:11:6d:9a:9b:60:5b:21: 76:73:11:36:b8:c6:ca:06:61:4e:dc:5a:0f:70:ed:02:e8:49: cb:9e:18:d0:9a:5f:15:e7:2c:c0:09:bb:b8:a9:66:1d:01:3d: 16:a2:f4:02:5d:26:15:02:ce:11:b8:9e:fe:cd:b3:c2:51:0c: 07:c3:b2:26:1c:71:24:cf:95:52:4d:29:0f:96:ac:92:82:58: 74:bf:bf:63:66:85:c2:42:f9:db:1c:e5:74:52:fe:bd:00:82: 7b:5f:84:d9:c1:6f:6b:b8:1b:8e:e9:a3:98:7c:89:86:07:47: fe:bc:de:fa:d9:ce:70:8f:2a:31:4a:10:84:6e:69:2e:86:98: c6:c5:6b:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURUjbSGshsz48GBrm2OYXmSq1R9gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI2MDI1MDA3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjhiMGU0N2Q2N2RmY2M5OTRlOGJlNzczY2Y0NTJlZDYz NTkxZjhmMDQ4MDU4NzcxYTY0Mzg4YzM0Y2M5M2M4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC7WNA7YfSvzQC+lvNimKJ3se8YWO4TfyfrlBzOfcW28WL hJwj0f0KYjr178lG/decrvSsrPKF+6TU4pwehACwQqyD1jCM8o3tz/weAwi74+Kk iv9oyN4alXaN7E+PZGng8lOiCynh3Xi6m6okAeSbj7QF5+U7A3REydUKwt1h03Ds VC9rOecZNlRKlMMODa/lLxxbV1riSibtGHKvOSAaDwtyhL6Un9kCscJqYFEvNVyr ub4U+qx3Eh8Oi3D4vzchGVlq1rId4o0BYf7tOlFZ3Am7i+XKigXy7ftjB7C8KlO7 nTFdrcmtA5mZ20BGDOSwiG/GiO0Tmt9M92+15fB9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQwOb2mhd1GY7czc0IFfepmBgOPAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVkNjUwOGNlLTQ3YTEtNDAwMi1iMDNiLTljZTIxYjE2Y2Y2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYA4wDQYJKoZIhvcNAQELBQADggEBABBl90mTkCVDTWLhW+gSRVSWkQNZ LnTbTluGIjtvjCV3/Q0XyQXncohgAObwuSOhA6RdXQjRjYrFCYFGgA5NpnE8B6EM rnBOboggQ0PHevrJRD6AwHgSXdMw9xWear8vZRIxkVKSumxTB++1wtgdkGpxhhW6 O4ofEW2am2BbIXZzETa4xsoGYU7cWg9w7QLoScueGNCaXxXnLMAJu7ipZh0BPRai 9AJdJhUCzhG4nv7Ns8JRDAfDsiYccSTPlVJNKQ+WrJKCWHS/v2NmhcJC+dsc5XRS /r0AgntfhNnBb2u4G47po5h8iYYHR/683vrZznCPKjFKEIRuaS6GmMbFaz0= -----END CERTIFICATE-----Generated at Sun Nov 15 21:43:00 2026 by rpki-client