$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/89f6527b-adbb-4687-9a24-ace3d28006fb.roa File: 89f6527b-adbb-4687-9a24-ace3d28006fb.roa (raw, json) Hash identifier: MZhQpwnkxUDs3AG0FCYaGOf8plMFOvF6R+CDckzgckU= Subject key identifier: 83:91:EA:CF:34:E3:BC:4F:C3:42:34:9C:3E:A3:94:4E:8B:0B:CF:32 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 476B79364C5A6D8B3C3C4A2FFA68C86D216CF286 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/89f6527b-adbb-4687-9a24-ace3d28006fb.roa Signing time: Sun 11 Oct 2026 14:50:20 +0000 ROA not before: Sun 11 Oct 2026 14:50:20 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6b:79:36:4c:5a:6d:8b:3c:3c:4a:2f:fa:68:c8:6d:21:6c:f2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:20 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=d3faf0bbd0d0de099de4cc5c87954d5d0a3f26710e08e6b29b0d48e84f055906, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:ad:47:86:e9:ea:f5:87:a5:25:b0:e9:d2: 7e:cb:9a:8a:3f:c3:13:35:24:bf:bd:5f:d4:aa:ab: d7:2f:1d:f5:a8:97:5d:ea:08:ce:fa:2c:f3:fe:fa: 83:b1:e7:42:00:49:25:8d:fa:0f:80:bb:e2:67:1f: 32:e5:59:a9:d2:cd:98:f4:1f:41:d0:70:80:95:21: 40:cb:98:90:e9:c8:d0:13:fa:71:bb:2b:2a:2b:12: 40:33:1b:2c:e3:27:d9:12:4e:18:63:8d:5c:58:bf: 37:d2:b6:71:8f:36:b8:46:70:f0:78:06:f4:a2:9b: 47:10:cc:3d:43:cd:59:04:1c:3d:bf:6c:85:26:80: 4c:33:e2:15:3a:db:1d:97:84:89:d8:fb:da:88:61: 93:63:78:84:6a:e9:0e:b7:e4:2d:95:6a:43:0b:21: 1a:65:a2:a5:26:5a:de:d3:96:cf:3d:c8:68:a3:5b: 50:9e:fe:06:49:29:e1:95:41:d4:9f:5c:e2:29:84: 35:5d:f7:22:de:77:6f:78:ca:a7:f0:52:4c:b8:ba: 27:ce:ac:7d:e9:5f:5d:33:48:8c:b8:49:f2:e7:e6: a8:17:ff:7b:53:43:9b:f7:22:ff:05:b5:3d:f2:f5: c7:10:6d:d6:f5:0e:af:a7:ac:4d:43:77:b8:eb:61: 14:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:91:EA:CF:34:E3:BC:4F:C3:42:34:9C:3E:A3:94:4E:8B:0B:CF:32 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/89f6527b-adbb-4687-9a24-ace3d28006fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.16.0/23 Signature Algorithm: sha256WithRSAEncryption 79:33:09:b2:7c:81:d9:88:28:c8:99:be:32:de:d2:c1:51:72: fe:f4:88:cf:89:90:e5:31:44:7c:03:5c:f3:e5:16:8c:fc:07: 9d:48:2f:32:57:27:af:a6:45:88:81:a2:fa:54:9a:75:87:d6: 6a:ee:63:1b:f6:65:6e:90:fd:7d:24:e4:f2:af:d9:a4:05:db: 53:60:d9:f0:02:88:27:af:cf:a2:c4:86:66:c9:b2:91:83:37: c7:62:b9:1f:be:db:48:47:cd:0b:d5:16:fd:04:dc:79:b3:b6: cc:25:64:3d:4d:7e:d6:ac:47:8c:47:75:d5:be:1e:c6:4e:98: 4a:9a:e0:a0:e8:2f:24:d1:08:85:03:1d:c1:bb:43:3c:0f:58: 46:79:6f:54:22:b2:3d:a7:24:e9:2f:6d:1f:4d:9d:c9:d1:aa: 86:d1:5c:6d:e3:00:c9:db:11:f0:a6:cd:b1:c8:61:da:56:09: 78:44:92:f6:63:1d:00:ce:7a:70:3e:64:66:33:01:28:4a:5e: b2:80:ca:78:73:5f:39:c5:40:d6:00:03:58:47:75:83:c6:d9: 3e:0e:02:5c:7a:a5:ae:98:45:68:8a:8b:ec:16:b7:16:12:4e: 0c:67:cc:3a:2c:1e:ca:00:09:64:24:d2:77:d8:41:94:ac:1d: 9a:1b:d2:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR2t5NkxabYs8PEov+mjIbSFs8oYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDIwWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2ZhZjBiYmQwZDBkZTA5OWRlNGNjNWM4Nzk1NGQ1ZDBh M2YyNjcxMGUwOGU2YjI5YjBkNDhlODRmMDU1OTA2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl+q1Hhunq9YelJbDp0n7Lmoo/wxM1JL+9X9Sqq9cvHfWo l13qCM76LPP++oOx50IASSWN+g+Au+JnHzLlWanSzZj0H0HQcICVIUDLmJDpyNAT +nG7KyorEkAzGyzjJ9kSThhjjVxYvzfStnGPNrhGcPB4BvSim0cQzD1DzVkEHD2/ bIUmgEwz4hU62x2XhInY+9qIYZNjeIRq6Q635C2VakMLIRploqUmWt7Tls89yGij W1Ce/gZJKeGVQdSfXOIphDVd9yLed294yqfwUky4uifOrH3pX10zSIy4SfLn5qgX /3tTQ5v3Iv8FtT3y9ccQbdb1Dq+nrE1Dd7jrYRSfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg5HqzzTjvE/DQjScPqOUTosLzzIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg5ZjY1MjdiLWFkYmItNDY4Ny05YTI0LWFjZTNkMjgwMDZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBAwDQYJKoZIhvcNAQELBQADggEBAHkzCbJ8gdmIKMiZvjLe0sFRcv70 iM+JkOUxRHwDXPPlFoz8B51ILzJXJ6+mRYiBovpUmnWH1mruYxv2ZW6Q/X0k5PKv 2aQF21Ng2fACiCevz6LEhmbJspGDN8diuR++20hHzQvVFv0E3HmztswlZD1Nftas R4xHddW+HsZOmEqa4KDoLyTRCIUDHcG7QzwPWEZ5b1Qisj2nJOkvbR9NncnRqobR XG3jAMnbEfCmzbHIYdpWCXhEkvZjHQDOenA+ZGYzAShKXrKAynhzXznFQNYAA1hH dYPG2T4OAlx6pa6YRWiKi+wWtxYSTgxnzDosHsoACWQk0nfYQZSsHZob0gA= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:18 2026 by rpki-client