$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8902dca3-16e2-4c21-bbce-339e14129fe7.roa File: 8902dca3-16e2-4c21-bbce-339e14129fe7.roa (raw, json) Hash identifier: GunOKDIgkLwK/qkTkaveLYb8+YeKUfX9gfSs+biGSr8= Subject key identifier: 6A:7C:A8:2B:96:1C:95:EA:99:18:14:7F:35:89:90:BC:9B:9A:55:86 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 055CB4F2FBBDEFA9633B4FDE6839A4DCE040D6F5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8902dca3-16e2-4c21-bbce-339e14129fe7.roa Signing time: Tue 13 Oct 2026 00:30:11 +0000 ROA not before: Tue 13 Oct 2026 00:30:11 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.98.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5c:b4:f2:fb:bd:ef:a9:63:3b:4f:de:68:39:a4:dc:e0:40:d6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 13 00:30:11 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=4a93a0cc1bc57022e4171d04162d0eec01e4a100af7c57ac98950caee5b6bdc4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:51:e3:65:44:9c:05:d5:59:c5:01:f9:15: 45:2d:93:99:be:db:f7:a8:32:d4:2e:63:ea:65:2a: 83:cc:27:c0:89:39:77:0b:32:e1:05:7f:c0:5c:8b: 63:a6:c5:db:88:e3:df:6d:24:a1:15:d2:02:a7:c0: 49:c1:f2:fb:72:9a:f5:f9:15:7f:70:41:7c:bb:2b: e9:1e:8e:0d:c0:ca:8e:0b:bf:aa:dd:1f:74:5e:97: 45:ee:07:5c:e5:81:26:3e:8a:cc:64:3b:fe:c9:fa: 4e:49:5a:3d:23:32:bc:06:b7:56:24:6b:6f:fd:24: c5:c5:c9:f5:1f:43:f1:40:2b:df:9c:63:6b:da:82: 10:71:be:70:41:d4:d5:93:0a:f2:c5:dd:bf:61:fe: 68:97:90:d9:e4:77:57:12:20:04:5a:0c:99:10:10: 5e:50:e1:e3:36:cd:32:eb:ac:81:44:d2:83:6a:e2: 57:60:71:1c:af:27:69:c5:ba:64:1d:2c:e0:7f:98: b7:23:b4:09:be:ad:b5:b1:e2:94:29:80:c5:ff:7d: f8:a9:c2:11:06:8b:5a:78:a7:b3:98:81:cf:73:7e: 89:83:a4:9d:27:61:b1:cd:be:ad:05:3a:79:0b:f4: ac:f4:7f:1c:ef:3c:4d:71:4f:e2:ff:07:02:c2:c9: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7C:A8:2B:96:1C:95:EA:99:18:14:7F:35:89:90:BC:9B:9A:55:86 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8902dca3-16e2-4c21-bbce-339e14129fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.98.224.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:34:ab:5c:80:c1:70:91:c9:67:da:5a:2b:39:03:5c:35:11: 2e:1d:27:aa:9e:86:a4:82:f3:bb:94:21:41:47:06:6a:d9:00: 29:99:3b:59:2e:2d:39:46:bd:c5:a5:a5:c5:7c:25:a4:2d:7b: 0d:53:81:97:33:dd:dd:ee:68:45:d2:2e:81:60:c1:d9:48:5d: 96:d9:78:16:39:b3:52:6c:f5:12:c5:8a:aa:ff:85:a1:f8:57: c0:50:ad:aa:92:46:eb:c2:4e:c9:8a:4f:fc:1b:ec:f4:4f:d7: 2e:b8:4d:75:fe:1c:2b:39:41:b6:88:f3:7b:8c:49:19:44:7a: 83:0c:99:fe:32:4a:76:fa:14:e8:93:c1:de:17:87:62:83:65: 53:27:bb:74:d1:b1:e4:53:71:f8:32:6d:58:43:fb:64:58:89: 97:bf:8a:18:12:de:9b:8b:7f:c5:9d:07:e5:06:a0:2c:9b:8e: 40:9a:81:79:a7:bb:9b:80:40:0d:63:63:c6:57:12:45:3e:e1: f3:37:18:c5:d9:99:5b:74:5b:89:4d:eb:0a:10:87:d1:d6:39: c6:72:0c:1f:12:66:b5:ff:bb:2d:22:25:f0:9d:28:5a:fa:88: ba:3f:d3:ac:0f:86:a2:27:69:85:45:0c:72:f6:0b:45:2e:0a: 6d:46:64:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBVy08vu976ljO0/eaDmk3OBA1vUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDEzMDAzMDExWhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTkzYTBjYzFiYzU3MDIyZTQxNzFkMDQxNjJkMGVlYzAx ZTRhMTAwYWY3YzU3YWM5ODk1MGNhZWU1YjZiZGM0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7XFHjZUScBdVZxQH5FUUtk5m+2/eoMtQuY+plKoPMJ8CJ OXcLMuEFf8Bci2OmxduI499tJKEV0gKnwEnB8vtymvX5FX9wQXy7K+kejg3Ayo4L v6rdH3Rel0XuB1zlgSY+isxkO/7J+k5JWj0jMrwGt1Yka2/9JMXFyfUfQ/FAK9+c Y2vaghBxvnBB1NWTCvLF3b9h/miXkNnkd1cSIARaDJkQEF5Q4eM2zTLrrIFE0oNq 4ldgcRyvJ2nFumQdLOB/mLcjtAm+rbWx4pQpgMX/ffipwhEGi1p4p7OYgc9zfomD pJ0nYbHNvq0FOnkL9Kz0fxzvPE1xT+L/BwLCyYgrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUanyoK5YcleqZGBR/NYmQvJuaVYYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg5MDJkY2EzLTE2ZTItNGMyMS1iYmNlLTMzOWUxNDEyOWZlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYuAwDQYJKoZIhvcNAQELBQADggEBACw0q1yAwXCRyWfaWis5A1w1ES4d J6qehqSC87uUIUFHBmrZACmZO1kuLTlGvcWlpcV8JaQtew1TgZcz3d3uaEXSLoFg wdlIXZbZeBY5s1Js9RLFiqr/haH4V8BQraqSRuvCTsmKT/wb7PRP1y64TXX+HCs5 QbaI83uMSRlEeoMMmf4ySnb6FOiTwd4Xh2KDZVMnu3TRseRTcfgybVhD+2RYiZe/ ihgS3puLf8WdB+UGoCybjkCagXmnu5uAQA1jY8ZXEkU+4fM3GMXZmVt0W4lN6woQ h9HWOcZyDB8SZrX/uy0iJfCdKFr6iLo/06wPhqInaYVFDHL2C0UuCm1GZIQ= -----END CERTIFICATE-----Generated at Sun Nov 15 21:43:32 2026 by rpki-client