$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7410036b-a503-456e-a06c-b7b863590354.roa File: 7410036b-a503-456e-a06c-b7b863590354.roa (raw, json) Hash identifier: ievMB7xHucI8Dej+/JspuGjNkNWJbKWNRgwmPMkn/Rw= Subject key identifier: 6D:35:AF:1A:BD:0B:7F:35:74:E3:93:13:48:3D:48:2B:0A:04:AD:D0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 65736B458C75AB86748B7A21CCBCAB0EBC956A23 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7410036b-a503-456e-a06c-b7b863590354.roa Signing time: Mon 19 Oct 2026 01:50:04 +0000 ROA not before: Mon 19 Oct 2026 01:50:04 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 35.96.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:73:6b:45:8c:75:ab:86:74:8b:7a:21:cc:bc:ab:0e:bc:95:6a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 01:50:04 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=4a7729cbc53d55b517e82f3c2616b3569958beef12cfcd128440bd341dda4440, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:2e:0e:94:8e:2d:c4:3e:c4:d4:5d:89:b7: 9e:6a:eb:85:fd:7f:f2:a1:08:9f:44:1d:94:e5:dd: 30:43:f9:97:81:e4:a4:13:ee:cc:21:2d:8b:35:2f: 75:24:25:f6:e4:a3:fd:aa:a0:41:61:f2:49:97:5d: 0e:c7:82:9a:54:54:d8:fb:0f:15:9b:ba:64:09:43: 1b:59:3f:ce:17:2a:cb:1a:63:92:5b:50:11:2d:50: 30:1b:c3:00:ba:24:db:eb:07:c4:f0:b2:a9:fb:96: c1:38:a9:aa:b0:95:b1:b8:ee:b2:84:ea:89:cc:b6: b4:13:15:34:ce:7a:2a:f8:14:04:c8:99:1c:1f:5b: ef:c8:d6:c2:39:9c:45:fe:8f:c3:24:6e:ff:00:85: 90:d3:98:f1:02:75:71:47:8d:72:4d:4c:48:9b:65: 59:a3:93:dc:68:e3:10:59:4d:c1:50:f5:67:b9:3e: 1a:52:76:ff:24:d0:06:05:60:2b:78:fe:3d:32:f6: 62:12:6d:ef:1d:d6:46:7d:3e:36:b4:c7:18:6b:48: ed:ba:45:e9:41:9e:14:00:e1:02:8e:d7:0b:67:0b: 7e:28:e5:95:8c:4a:df:45:da:ec:3d:4f:4d:69:0e: 9d:c9:33:00:f6:7f:19:f1:58:7f:20:38:91:72:62: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:35:AF:1A:BD:0B:7F:35:74:E3:93:13:48:3D:48:2B:0A:04:AD:D0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7410036b-a503-456e-a06c-b7b863590354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.50.0/24 Signature Algorithm: sha256WithRSAEncryption 04:0a:5c:b6:ce:ad:c2:63:fc:16:44:46:34:0d:75:25:dd:74: 58:ec:fc:24:01:cf:79:e7:91:f2:6a:70:0b:f8:f4:07:99:51: bc:7f:04:aa:83:17:92:9f:48:8b:ea:c0:1f:69:82:d5:cd:b6: 20:2c:0e:c6:22:5f:ef:94:47:ad:c7:a3:95:6b:5d:48:6e:8f: 88:9a:b6:ff:c7:bf:ae:23:4a:05:17:98:9b:d8:28:3c:e4:a6: b8:0a:e0:da:ec:96:13:7d:f9:cd:5d:c4:aa:c7:58:4c:bc:81: c9:30:57:53:55:ee:98:ad:37:47:49:bc:83:e7:aa:72:6c:8a: 0a:19:e8:73:ef:d1:6d:5e:26:6c:99:3c:6f:1b:9c:e5:e1:57: 17:36:22:39:ce:2c:e9:2a:05:d7:ae:9c:8f:6a:ef:0d:43:43: 81:fb:d6:76:09:2b:56:08:d3:a2:ed:70:53:7d:a4:1b:80:e5: 7d:ed:2b:4e:d6:79:9b:22:16:8c:6a:0d:72:81:29:26:31:c3: 80:ce:4c:59:8f:4d:b0:9d:2d:c8:8a:f2:8e:3f:47:0e:4b:b4: e1:da:1e:b1:7e:49:40:b0:8f:89:7f:f7:5b:a7:52:40:af:0b: 3c:dd:8b:92:37:49:31:b7:1d:48:cc:66:a7:cc:55:9a:d5:81: d9:18:7e:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZXNrRYx1q4Z0i3ohzLyrDryVaiMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE5MDE1MDA0WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTc3MjljYmM1M2Q1NWI1MTdlODJmM2MyNjE2YjM1Njk5 NThiZWVmMTJjZmNkMTI4NDQwYmQzNDFkZGE0NDQwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFSy4OlI4txD7E1F2Jt55q64X9f/KhCJ9EHZTl3TBD+ZeB 5KQT7swhLYs1L3UkJfbko/2qoEFh8kmXXQ7HgppUVNj7DxWbumQJQxtZP84XKssa Y5JbUBEtUDAbwwC6JNvrB8Twsqn7lsE4qaqwlbG47rKE6onMtrQTFTTOeir4FATI mRwfW+/I1sI5nEX+j8Mkbv8AhZDTmPECdXFHjXJNTEibZVmjk9xo4xBZTcFQ9We5 PhpSdv8k0AYFYCt4/j0y9mISbe8d1kZ9Pja0xxhrSO26RelBnhQA4QKO1wtnC34o 5ZWMSt9F2uw9T01pDp3JMwD2fxnxWH8gOJFyYui/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbTWvGr0LfzV045MTSD1IKwoErdAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzc0MTAwMzZiLWE1MDMtNDU2ZS1hMDZjLWI3Yjg2MzU5MDM1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDIwDQYJKoZIhvcNAQELBQADggEBAAQKXLbOrcJj/BZERjQNdSXddFjs /CQBz3nnkfJqcAv49AeZUbx/BKqDF5KfSIvqwB9pgtXNtiAsDsYiX++UR63Ho5Vr XUhuj4iatv/Hv64jSgUXmJvYKDzkprgK4NrslhN9+c1dxKrHWEy8gckwV1NV7pit N0dJvIPnqnJsigoZ6HPv0W1eJmyZPG8bnOXhVxc2IjnOLOkqBdeunI9q7w1DQ4H7 1nYJK1YI06LtcFN9pBuA5X3tK07WeZsiFoxqDXKBKSYxw4DOTFmPTbCdLciK8o4/ Rw5LtOHaHrF+SUCwj4l/91unUkCvCzzdi5I3STG3HUjMZqfMVZrVgdkYfgo= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:44 2026 by rpki-client