$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/71148066-49a2-41d1-9e03-9f35254905d3.roa File: 71148066-49a2-41d1-9e03-9f35254905d3.roa (raw, json) Hash identifier: JAbQs3rjK55VIX5VmP6U0W2s4ah1dJWhJtm0ViUBlN4= Subject key identifier: 39:2D:43:E0:21:1C:04:92:54:2E:6F:13:C2:58:05:7E:92:AE:C1:19 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3EAC026350F069066D9740C5B74B24FAC658F31F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/71148066-49a2-41d1-9e03-9f35254905d3.roa Signing time: Thu 26 Feb 2026 01:50:32 +0000 ROA not before: Thu 26 Feb 2026 01:50:32 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ac:02:63:50:f0:69:06:6d:97:40:c5:b7:4b:24:fa:c6:58:f3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 26 01:50:32 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=bf4efa910e7bde56984c7ce49d0805d0459ba6d0cd0bf8c6c76f0ce8921bf48b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:72:ff:89:c9:4c:21:00:c6:79:06:37:68: e9:9d:a4:1f:8a:58:e8:5f:6a:d0:59:eb:70:fa:ad: 70:81:90:0d:42:77:84:c4:67:0e:79:e1:01:1d:03: ff:a2:b4:1a:56:d8:8a:bd:36:5a:d7:40:a5:35:78: e9:26:1e:b9:e3:82:49:25:29:56:fc:db:4a:48:bd: 91:86:05:24:bd:63:56:c9:20:3f:69:9d:a9:11:2c: 8c:01:18:cd:fc:93:60:cf:f6:63:f1:79:7d:bb:a6: fd:49:9d:eb:31:91:70:c8:19:74:d8:6b:fe:b9:2b: 44:ca:3d:da:b1:43:4d:67:eb:77:5a:50:42:b9:a7: 98:e1:29:92:08:56:93:ee:86:1f:a0:4e:4c:cb:98: b5:75:95:e2:d0:c4:ad:5c:0f:ff:1f:0e:95:16:d1: 2d:03:03:89:2c:1b:a3:c9:d1:4c:d8:df:8e:60:0c: 49:3b:d1:82:45:46:93:63:ce:2d:74:52:67:1a:99: 38:5b:a1:30:9e:97:9e:7c:85:74:d2:bc:94:d2:cd: 2a:c1:96:50:35:e8:00:a1:62:dd:2a:2e:86:86:60: 72:65:1a:08:9d:e9:12:27:8e:4f:83:6b:eb:1a:f7: 7f:d3:d8:c7:79:07:85:6c:ea:63:ab:b7:20:c8:96: 35:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2D:43:E0:21:1C:04:92:54:2E:6F:13:C2:58:05:7E:92:AE:C1:19 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/71148066-49a2-41d1-9e03-9f35254905d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 68:c2:8b:1f:1b:c0:f0:0d:ba:2b:b3:a9:4f:c3:d7:57:23:18: b9:7c:b9:82:8a:6a:8f:f6:48:be:7e:08:09:31:d4:56:22:8d: 0b:a4:98:7c:19:60:fa:9b:98:f8:11:cc:a4:c0:af:de:e6:47: ab:8e:6c:ce:75:c1:5c:3c:e1:93:71:37:1e:c6:0e:26:a1:5f: 80:32:23:2c:a5:31:28:94:e8:fe:d3:b7:61:36:55:4a:87:0a: 44:77:cf:95:0c:80:4b:c4:82:43:c7:48:d0:06:5a:ca:ef:47: a6:5a:c6:ff:68:ae:29:98:1b:a4:81:70:c2:73:3d:59:90:87: 1c:12:68:52:71:76:94:ce:bf:c0:a3:8f:7c:c3:e6:9f:58:80: 02:5c:e9:eb:ae:9b:54:33:75:6f:8d:db:cc:24:15:05:54:7d: 85:6e:7c:ac:55:e1:d7:44:e1:d4:e2:d3:85:95:67:25:e3:55: dc:7b:60:ba:7e:8c:db:f2:00:5a:93:fa:12:4f:60:11:e8:fe: 18:34:70:30:c2:2c:d8:da:af:9f:fd:d9:a9:86:25:c6:a7:be: bb:d2:8d:32:b8:bb:c0:63:57:ac:63:d6:a5:55:d3:8b:a2:8a: fa:a8:9f:7c:fc:5e:c2:a1:d8:de:fc:95:8d:bf:21:12:28:92: 8f:cc:0b:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPqwCY1DwaQZtl0DFt0sk+sZY8x8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI2MDE1MDMyWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjRlZmE5MTBlN2JkZTU2OTg0YzdjZTQ5ZDA4MDVkMDQ1 OWJhNmQwY2QwYmY4YzZjNzZmMGNlODkyMWJmNDhiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKq3L/iclMIQDGeQY3aOmdpB+KWOhfatBZ63D6rXCBkA1C d4TEZw554QEdA/+itBpW2Iq9NlrXQKU1eOkmHrnjgkklKVb820pIvZGGBSS9Y1bJ ID9pnakRLIwBGM38k2DP9mPxeX27pv1JnesxkXDIGXTYa/65K0TKPdqxQ01n63da UEK5p5jhKZIIVpPuhh+gTkzLmLV1leLQxK1cD/8fDpUW0S0DA4ksG6PJ0UzY345g DEk70YJFRpNjzi10UmcamThboTCel558hXTSvJTSzSrBllA16AChYt0qLoaGYHJl Ggid6RInjk+Da+sa93/T2Md5B4Vs6mOrtyDIljVjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOS1D4CEcBJJULm8TwlgFfpKuwRkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcxMTQ4MDY2LTQ5YTItNDFkMS05ZTAzLTlmMzUyNTQ5MDVkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAGjCix8bwPANuiuzqU/D11cjGLl8 uYKKao/2SL5+CAkx1FYijQukmHwZYPqbmPgRzKTAr97mR6uObM51wVw84ZNxNx7G DiahX4AyIyylMSiU6P7Tt2E2VUqHCkR3z5UMgEvEgkPHSNAGWsrvR6Zaxv9orimY G6SBcMJzPVmQhxwSaFJxdpTOv8Cjj3zD5p9YgAJc6euum1QzdW+N28wkFQVUfYVu fKxV4ddE4dTi04WVZyXjVdx7YLp+jNvyAFqT+hJPYBHo/hg0cDDCLNjar5/92amG JcanvrvSjTK4u8BjV6xj1qVV04uiivqon3z8XsKh2N78lY2/IRIoko/MC4Q= -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:41 2026 by rpki-client