$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa File: 5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa (raw, json) Hash identifier: iu9Mi4eBXW1etqDj3a6Zuxd1jHEBVi9kIBWFWvrZRiU= Subject key identifier: 12:DA:CB:06:96:AC:83:32:4E:F7:A1:40:30:36:F7:BB:F2:27:AE:BD Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3327F20037C15798F3C2A2E3EF122522B1BB400D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa Signing time: Mon 19 Oct 2026 01:50:05 +0000 ROA not before: Mon 19 Oct 2026 01:50:05 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:27:f2:00:37:c1:57:98:f3:c2:a2:e3:ef:12:25:22:b1:bb:40:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 01:50:05 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=c1da70d21b7d1bc6fde7b7d5d0e47f750dedc989dd057f7acc0e849889fb35ce, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ec:d1:9b:a8:89:78:d9:8f:d3:63:da:db:88: d2:ec:41:f0:1d:80:a8:3a:97:fd:75:6e:37:ec:fc: d0:67:c5:4b:21:b6:30:7d:19:b2:36:7e:cc:0e:1d: de:97:09:0d:ae:9b:12:88:17:ef:59:21:54:67:d6: ea:d1:b7:78:61:44:e0:4b:0f:ad:1f:70:4f:ae:97: bd:72:c7:9a:76:de:da:2f:ec:c7:f0:e2:84:12:07: 42:26:0e:19:e1:a1:30:19:d0:73:a4:6e:d8:9a:60: 3c:f6:95:6b:40:2b:c4:2b:5a:09:8f:fd:13:7d:44: fc:62:eb:3b:21:d5:c1:24:46:5e:0a:32:b4:18:fe: 72:45:5f:55:5f:e9:07:33:82:f4:43:3c:54:e2:b4: d5:31:7f:18:2d:eb:f7:42:1e:0b:bb:29:2c:35:ba: 28:6c:18:77:82:c6:02:ba:8e:36:8a:98:3e:f0:86: 17:ae:6f:d4:ab:51:b4:04:ea:0a:a3:1e:e5:b0:2c: f1:b5:6c:94:56:9b:42:d5:14:0b:e0:f7:8a:6d:be: 9d:04:45:99:e6:62:b8:7b:cf:98:88:90:d9:72:13: 5e:93:ca:80:86:17:25:cd:b9:bb:4b:45:ff:fe:33: f1:cd:fa:79:92:ad:6d:f2:68:68:5b:82:35:c0:9b: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DA:CB:06:96:AC:83:32:4E:F7:A1:40:30:36:F7:BB:F2:27:AE:BD X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.52.0/24 Signature Algorithm: sha256WithRSAEncryption 86:87:b3:b8:be:e2:e9:6b:f3:64:1e:07:54:cd:06:b3:ed:c2: 56:a5:0b:46:8a:ed:67:c1:57:a0:7b:60:c6:e9:50:c5:72:ed: b4:37:d3:4e:09:22:60:62:b3:1b:19:94:33:09:fb:0c:a2:cf: 8d:ae:16:1c:c0:7e:df:2a:3a:89:e9:25:11:bc:ab:cd:3b:58: aa:d4:2e:9c:90:ff:4c:dd:52:33:8f:48:c3:c1:ef:53:89:a0: fc:f7:ab:17:6e:a4:31:1e:cf:5b:6d:31:60:81:1a:03:79:d5: 7b:45:fe:5c:3c:59:69:ce:b9:17:b9:a3:61:d5:27:54:88:4c: 45:e0:5d:2f:bc:03:93:41:ec:3e:08:43:84:37:32:17:3f:cf: 23:04:da:65:d2:db:88:f0:87:52:70:e4:df:36:85:5d:92:a1: 18:17:5f:a7:76:e4:ee:bd:f0:59:c1:ac:a6:04:bb:4f:4d:d4: 69:63:2e:9c:ef:76:ad:d1:af:93:aa:83:85:17:6c:09:21:31: f6:48:7c:5e:e0:87:8e:97:02:63:98:83:71:bf:26:15:b2:8d: 1f:91:15:96:66:24:c2:66:f1:55:08:c5:76:6e:fe:ab:f5:a3: e0:e4:ab:0e:2e:81:0e:35:c5:e4:f6:2e:ca:6d:63:d4:5c:ee: eb:7b:3f:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMyfyADfBV5jzwqLj7xIlIrG7QA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE5MDE1MDA1WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWRhNzBkMjFiN2QxYmM2ZmRlN2I3ZDVkMGU0N2Y3NTBk ZWRjOTg5ZGQwNTdmN2FjYzBlODQ5ODg5ZmIzNWNlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDd7NGbqIl42Y/TY9rbiNLsQfAdgKg6l/11bjfs/NBnxUsh tjB9GbI2fswOHd6XCQ2umxKIF+9ZIVRn1urRt3hhROBLD60fcE+ul71yx5p23tov 7Mfw4oQSB0ImDhnhoTAZ0HOkbtiaYDz2lWtAK8QrWgmP/RN9RPxi6zsh1cEkRl4K MrQY/nJFX1Vf6QczgvRDPFTitNUxfxgt6/dCHgu7KSw1uihsGHeCxgK6jjaKmD7w hheub9SrUbQE6gqjHuWwLPG1bJRWm0LVFAvg94ptvp0ERZnmYrh7z5iIkNlyE16T yoCGFyXNubtLRf/+M/HN+nmSrW3yaGhbgjXAm/3DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEtrLBpasgzJO96FAMDb3u/Inrr0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVmNjRmZDI2LTFkOWEtNDg1OC05OGYwLTgwYzZlODg0YmNlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDQwDQYJKoZIhvcNAQELBQADggEBAIaHs7i+4ulr82QeB1TNBrPtwlal C0aK7WfBV6B7YMbpUMVy7bQ3004JImBisxsZlDMJ+wyiz42uFhzAft8qOonpJRG8 q807WKrULpyQ/0zdUjOPSMPB71OJoPz3qxdupDEez1ttMWCBGgN51XtF/lw8WWnO uRe5o2HVJ1SITEXgXS+8A5NB7D4IQ4Q3Mhc/zyME2mXS24jwh1Jw5N82hV2SoRgX X6d25O698FnBrKYEu09N1GljLpzvdq3Rr5Oqg4UXbAkhMfZIfF7gh46XAmOYg3G/ JhWyjR+RFZZmJMJm8VUIxXZu/qv1o+Dkqw4ugQ41xeT2LsptY9Rc7ut7Pys= -----END CERTIFICATE-----Generated at Thu Nov 5 16:29:26 2026 by rpki-client