$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/71148066-49a2-41d1-9e03-9f35254905d3.roa File: 71148066-49a2-41d1-9e03-9f35254905d3.roa (raw, json) Hash identifier: FrA50MBPx26CCsdrNtDETKuQAqZq9auW72kXbRuvOWg= Subject key identifier: 2E:15:7F:C8:ED:13:31:21:16:AC:37:E2:02:81:C9:43:4F:16:83:8A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 46811D7679B4295E09F0754C71F7B9964AB9820B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/71148066-49a2-41d1-9e03-9f35254905d3.roa Signing time: Sat 24 Oct 2026 01:50:10 +0000 ROA not before: Sat 24 Oct 2026 01:50:10 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:81:1d:76:79:b4:29:5e:09:f0:75:4c:71:f7:b9:96:4a:b9:82:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:10 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=043956a9de62dd3ea2f53ba3d6f25da1f4262751f9b783953c3ff819714339c0, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:7b:ba:aa:51:12:ab:d4:a8:dd:48:df:84: ba:47:04:6f:3e:00:cf:9c:26:a2:d7:5c:35:e7:fa: 43:1c:19:d3:fe:51:b7:05:2c:66:22:9a:00:35:97: be:ff:55:53:19:af:2f:b6:b7:b8:47:af:fb:87:a7: 68:94:6c:42:c0:e0:7e:2e:9b:b1:ec:88:1a:02:e1: 87:47:92:d2:6a:95:e6:7c:53:b9:e1:4e:95:ae:42: 2c:db:fe:3d:8e:d0:e7:ba:8a:c6:b5:13:18:f3:14: 2b:01:06:2c:4f:f3:ed:fb:65:3a:f9:9c:94:05:5f: 55:a3:70:39:c5:9b:57:55:a0:c4:d6:80:66:66:64: 3f:e8:8b:56:1b:e0:41:76:c7:f0:2f:6c:c4:74:94: fd:f7:50:c3:e7:1f:9c:aa:87:62:26:8e:a1:59:f0: c4:2e:0d:2e:e0:1e:59:e2:4e:cf:1f:82:67:af:0f: 34:4f:f0:2a:2e:39:9b:04:38:ce:59:44:43:61:42: cf:f8:ae:70:da:c6:fe:f3:22:93:04:f1:74:2e:c4: f2:62:60:ab:46:75:1e:88:99:49:f1:ad:ff:e7:2b: 68:c6:13:fc:4b:f7:0b:cd:c0:1e:10:78:61:25:73: cb:d9:74:6d:96:8e:f4:9e:42:66:f1:1e:6c:24:ed: e9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:15:7F:C8:ED:13:31:21:16:AC:37:E2:02:81:C9:43:4F:16:83:8A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/71148066-49a2-41d1-9e03-9f35254905d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 49:f4:0f:b6:54:2a:26:3a:de:79:4f:bb:15:95:e6:bb:7b:5b: e1:2e:b5:75:33:10:80:94:66:8a:05:6e:1c:c1:2d:c9:fc:fa: ed:a7:71:88:6b:98:aa:5a:f2:bc:f5:eb:48:28:f9:31:79:be: d5:d5:60:29:63:0d:91:f2:6f:ca:11:13:d3:89:56:bf:4f:03: c7:a2:72:be:93:5f:4b:10:39:36:a5:76:b0:c9:79:0e:ea:97: cf:b8:74:8d:2c:94:c2:e2:fb:78:9e:e1:6e:2b:3b:f6:4c:c4: 97:cd:cb:84:47:5a:58:c0:39:2e:95:91:1d:6f:fc:11:ce:7f: c0:5d:34:29:f5:87:cd:a5:c1:a5:2e:4e:31:dd:43:aa:64:08: 84:5d:60:0e:e0:79:c4:45:c3:fe:8a:91:6b:b2:37:8a:b9:ab: 2f:57:2c:09:4c:30:ec:ef:21:03:6d:80:03:46:f0:de:1e:b7: 80:35:66:2f:34:4c:ec:a0:77:0b:42:0d:c4:e0:aa:43:c1:ef: d9:c0:34:93:d8:e7:bb:3c:bb:a6:05:b1:e4:32:a0:86:57:0f: 26:8f:ad:ea:11:a0:cb:d2:00:2f:45:f4:0f:b5:9b:25:ca:5d: 4f:25:47:f9:7a:8e:b0:2f:8a:31:f1:24:41:fa:14:c9:00:b5: 77:3b:c7:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURoEddnm0KV4J8HVMcfe5lkq5ggswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDEwWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDM5NTZhOWRlNjJkZDNlYTJmNTNiYTNkNmYyNWRhMWY0 MjYyNzUxZjliNzgzOTUzYzNmZjgxOTcxNDMzOWMwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsJnu6qlESq9So3UjfhLpHBG8+AM+cJqLXXDXn+kMcGdP+ UbcFLGYimgA1l77/VVMZry+2t7hHr/uHp2iUbELA4H4um7HsiBoC4YdHktJqleZ8 U7nhTpWuQizb/j2O0Oe6isa1ExjzFCsBBixP8+37ZTr5nJQFX1WjcDnFm1dVoMTW gGZmZD/oi1Yb4EF2x/AvbMR0lP33UMPnH5yqh2ImjqFZ8MQuDS7gHlniTs8fgmev DzRP8CouOZsEOM5ZRENhQs/4rnDaxv7zIpME8XQuxPJiYKtGdR6ImUnxrf/nK2jG E/xL9wvNwB4QeGElc8vZdG2WjvSeQmbxHmwk7eknAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULhV/yO0TMSEWrDfiAoHJQ08Wg4owHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcxMTQ4MDY2LTQ5YTItNDFkMS05ZTAzLTlmMzUyNTQ5MDVkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAEn0D7ZUKiY63nlPuxWV5rt7W+Eu tXUzEICUZooFbhzBLcn8+u2ncYhrmKpa8rz160go+TF5vtXVYCljDZHyb8oRE9OJ Vr9PA8eicr6TX0sQOTaldrDJeQ7ql8+4dI0slMLi+3ie4W4rO/ZMxJfNy4RHWljA OS6VkR1v/BHOf8BdNCn1h82lwaUuTjHdQ6pkCIRdYA7gecRFw/6KkWuyN4q5qy9X LAlMMOzvIQNtgANG8N4et4A1Zi80TOygdwtCDcTgqkPB79nANJPY57s8u6YFseQy oIZXDyaPreoRoMvSAC9F9A+1myXKXU8lR/l6jrAvijHxJEH6FMkAtXc7x7s= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:47 2026 by rpki-client