$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa File: 8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa (raw, json) Hash identifier: KEfvlVLBVt9k/Xm3K0N15xJ3puvpisMIB8lKMlOQ/6c= Subject key identifier: 3B:F5:8E:B6:EF:A1:00:5B:DF:6E:12:AF:38:EE:A5:7A:5E:41:46:1D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 354A919D345C59BA52970DBCE57D8318CECABE2D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa Signing time: Mon 19 Oct 2026 01:50:07 +0000 ROA not before: Mon 19 Oct 2026 01:50:07 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.111.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4a:91:9d:34:5c:59:ba:52:97:0d:bc:e5:7d:83:18:ce:ca:be:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 01:50:07 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=90285f5b6bbf676d1fdf6e085107aa97a2f9324403420e6f3f47b24a74592390, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:60:89:aa:53:be:a2:6e:cb:6a:98:d3:30: cd:5d:bf:53:ba:40:7f:29:97:96:09:d3:f6:14:56: 78:21:96:18:3f:9b:36:16:bc:53:05:7e:b1:de:86: e8:44:40:2e:b7:74:85:e9:3d:bd:74:23:1d:ef:69: 91:e0:43:4e:55:d5:68:24:46:e5:9e:71:87:46:1b: 8e:29:86:c2:70:30:f9:50:9a:29:27:32:ff:e0:32: 0f:c6:7b:55:b3:64:03:95:fc:92:92:32:14:41:3f: 9e:9d:66:cc:c0:99:db:7c:45:e5:13:0d:b4:1e:c8: 51:aa:9c:a2:fd:32:f6:05:ca:69:ff:80:6d:76:72: e2:aa:f4:06:d3:cc:b3:cf:f9:d3:8b:4a:25:d3:80: d9:bb:a7:49:03:8b:f2:9c:f6:00:c7:d4:58:7c:2b: 64:82:ed:04:20:f4:40:f4:ab:26:b2:3a:9c:31:b1: d1:db:a2:85:18:50:6a:fa:59:52:8d:fc:b2:fb:cc: f3:9e:51:ec:d2:90:06:a2:ff:91:21:b4:80:02:eb: f7:a0:08:6f:14:ba:2d:22:97:89:c2:db:b1:88:2e: 05:a7:48:de:42:a2:7e:32:00:2f:23:9b:40:a1:c6: eb:68:4a:3a:93:98:20:fc:fc:c8:a2:60:f0:b3:7e: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F5:8E:B6:EF:A1:00:5B:DF:6E:12:AF:38:EE:A5:7A:5E:41:46:1D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.252.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:a1:09:e2:62:ad:f5:a4:8e:4d:c9:ff:8f:01:a1:d6:f5:98: b1:bf:48:35:38:f1:26:a8:fe:06:bd:2f:0d:99:22:03:91:d8: fd:a1:e5:d4:94:0f:64:b1:17:4d:c6:f0:1f:9f:db:54:b1:be: ac:0f:64:c8:c1:bf:27:2b:e7:e6:30:27:07:c6:67:62:24:e3: f7:31:70:fb:6f:62:24:aa:a9:92:ae:af:7c:92:3c:ab:73:e6: b4:bb:c3:a3:ec:51:0a:27:f5:e3:6a:c7:c4:62:81:a3:ab:a6: 1e:fc:1b:1a:30:4a:f5:57:ec:e1:9c:ef:d0:e7:c3:1f:a2:85: ef:99:ba:d6:c5:ce:38:8f:42:17:8d:58:ce:f6:a9:5c:b1:d9: 26:48:1e:cc:b7:76:34:2a:d5:c0:37:30:91:25:d3:2b:b4:1d: 04:64:5f:b5:c9:fe:31:29:fd:c9:0f:b8:6e:2e:5b:01:7b:54: a4:2b:34:7a:f1:7e:7e:42:ad:d9:61:a0:4f:73:92:8d:df:ca: ba:2d:2e:55:0d:09:e4:d3:60:cd:0f:2a:c0:89:f2:8d:96:f3: f2:38:fd:45:4b:8e:41:06:02:a1:5c:1b:2f:bf:43:e4:f0:c2: a7:84:1b:26:d9:4a:95:37:98:9e:77:5a:ec:70:72:9c:98:06: 8f:4c:d2:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNUqRnTRcWbpSlw285X2DGM7Kvi0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE5MDE1MDA3WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDI4NWY1YjZiYmY2NzZkMWZkZjZlMDg1MTA3YWE5N2Ey ZjkzMjQ0MDM0MjBlNmYzZjQ3YjI0YTc0NTkyMzkwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCM+WCJqlO+om7LapjTMM1dv1O6QH8pl5YJ0/YUVnghlhg/ mzYWvFMFfrHehuhEQC63dIXpPb10Ix3vaZHgQ05V1WgkRuWecYdGG44phsJwMPlQ miknMv/gMg/Ge1WzZAOV/JKSMhRBP56dZszAmdt8ReUTDbQeyFGqnKL9MvYFymn/ gG12cuKq9AbTzLPP+dOLSiXTgNm7p0kDi/Kc9gDH1Fh8K2SC7QQg9ED0qyayOpwx sdHbooUYUGr6WVKN/LL7zPOeUezSkAai/5EhtIAC6/egCG8Uui0il4nC27GILgWn SN5Con4yAC8jm0ChxutoSjqTmCD8/MiiYPCzflSzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO/WOtu+hAFvfbhKvOO6lel5BRh0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg2MDBmYmUyLTI2ZTAtNDI5Mi1hNGYwLTMwNzdlYjhlMWUzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/wwDQYJKoZIhvcNAQELBQADggEBAAuhCeJirfWkjk3J/48Bodb1mLG/ SDU48Sao/ga9Lw2ZIgOR2P2h5dSUD2SxF03G8B+f21SxvqwPZMjBvycr5+YwJwfG Z2Ik4/cxcPtvYiSqqZKur3ySPKtz5rS7w6PsUQon9eNqx8RigaOrph78GxowSvVX 7OGc79Dnwx+ihe+ZutbFzjiPQheNWM72qVyx2SZIHsy3djQq1cA3MJEl0yu0HQRk X7XJ/jEp/ckPuG4uWwF7VKQrNHrxfn5CrdlhoE9zko3fyrotLlUNCeTTYM0PKsCJ 8o2W8/I4/UVLjkEGAqFcGy+/Q+TwwqeEGybZSpU3mJ53WuxwcpyYBo9M0g8= -----END CERTIFICATE-----Generated at Sun Nov 15 21:42:18 2026 by rpki-client