$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b1249ac-b74a-4544-80b2-2b577af731f1.roa File: 8b1249ac-b74a-4544-80b2-2b577af731f1.roa (raw, json) Hash identifier: nLbhqnTcekeoLADQLJZoIkxJ5h3DBvY9X1sRtZWfl5g= Subject key identifier: 85:F5:1A:EE:DD:B2:33:08:94:C0:F3:F3:CF:D2:1A:D2:86:82:49:E3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3DC5AFDEAF6B447AAB83EDBE5BDD4BC640F59A95 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b1249ac-b74a-4544-80b2-2b577af731f1.roa Signing time: Sun 11 Oct 2026 14:50:19 +0000 ROA not before: Sun 11 Oct 2026 14:50:19 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c5:af:de:af:6b:44:7a:ab:83:ed:be:5b:dd:4b:c6:40:f5:9a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:19 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=01c09b47b74bfcd11c32b0fe55fb15b1547f9de3e58dd18bb98001fa65e4cb83, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:66:db:66:8a:af:20:f3:24:d1:21:44:d5: 38:e4:0b:73:7e:fa:dc:44:6e:b9:de:12:1a:5c:0d: 81:51:6f:f3:ba:ac:9a:ef:cb:76:ca:36:ca:f4:17: 86:72:04:62:22:1a:48:4b:14:8d:b3:83:eb:f3:bf: 19:1e:84:3c:7c:9a:e7:5d:96:41:9e:bc:9c:e0:8c: 41:6b:5c:77:3b:15:56:13:03:38:52:72:95:79:96: b4:7c:f6:f8:f7:7b:5a:37:3e:d8:88:0f:79:b6:38: 5d:21:bc:43:12:a6:90:12:56:75:53:bf:04:16:0c: c0:fe:b3:dd:b9:91:2c:73:3e:e7:24:af:31:83:0b: d0:13:83:96:85:e3:af:2c:f0:84:3f:44:84:66:20: cf:f9:4c:a0:a8:15:5b:80:f7:19:a7:62:00:00:e3: 8e:17:95:e9:1d:0f:58:3f:b9:8b:35:1f:79:fd:c9: b0:95:53:d5:db:7b:e6:ba:57:63:72:94:fe:92:df: c8:20:83:44:e2:0c:85:28:19:2d:2f:4e:88:28:34: e7:2e:19:fe:06:4f:0a:d8:0f:da:a2:ac:9a:0e:af: 8b:79:1c:fc:7c:b6:a9:99:17:28:85:e4:19:f4:93: d9:47:be:18:31:5f:57:f2:dc:8f:46:51:94:bd:ab: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F5:1A:EE:DD:B2:33:08:94:C0:F3:F3:CF:D2:1A:D2:86:82:49:E3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b1249ac-b74a-4544-80b2-2b577af731f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 31:93:15:29:37:28:c3:83:d7:be:52:e2:7d:2b:24:a9:89:40: 2c:39:f8:ef:b6:cd:84:ee:87:3b:8a:c5:35:bf:bb:b2:d5:0d: b7:a2:4e:6b:21:11:fd:95:c6:c2:e7:5d:47:53:23:10:43:f4: 1b:fe:a6:78:43:32:4c:4f:b7:d1:f9:3b:34:48:1e:6b:07:9e: 6d:3c:c4:8e:3a:07:59:65:66:d8:8a:33:9b:1c:8b:47:16:3c: 75:37:06:5c:31:57:71:41:81:fa:44:31:97:c8:e8:25:e6:ef: 53:a9:dc:5e:6f:e9:07:a2:83:a3:ab:b1:81:a2:31:cd:6a:94: fa:95:47:a0:1c:c0:63:8b:92:17:6d:6d:8f:9a:25:cd:d9:29: 38:06:79:08:74:45:72:1b:d2:c8:c8:8f:c3:2d:7c:0f:b8:23: d2:33:19:32:ba:b7:c4:10:18:2c:49:99:40:d2:38:fd:6b:95: e1:97:54:63:8a:e2:ab:b2:91:37:79:37:1b:bb:a1:24:d9:a2: 9f:85:e9:d8:0f:43:f7:57:7b:c2:0f:a3:84:94:fb:9f:ea:b6: c7:da:61:77:13:91:57:71:92:8b:b3:25:14:ca:81:47:57:7e: 54:4b:e3:37:2d:49:99:96:33:24:38:a0:c5:5c:ed:2e:01:1f: 82:00:b7:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPcWv3q9rRHqrg+2+W91LxkD1mpUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDE5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWMwOWI0N2I3NGJmY2QxMWMzMmIwZmU1NWZiMTViMTU0 N2Y5ZGUzZTU4ZGQxOGJiOTgwMDFmYTY1ZTRjYjgzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDWWbbZoqvIPMk0SFE1TjkC3N++txEbrneEhpcDYFRb/O6 rJrvy3bKNsr0F4ZyBGIiGkhLFI2zg+vzvxkehDx8muddlkGevJzgjEFrXHc7FVYT AzhScpV5lrR89vj3e1o3PtiID3m2OF0hvEMSppASVnVTvwQWDMD+s925kSxzPuck rzGDC9ATg5aF468s8IQ/RIRmIM/5TKCoFVuA9xmnYgAA444XlekdD1g/uYs1H3n9 ybCVU9Xbe+a6V2NylP6S38ggg0TiDIUoGS0vTogoNOcuGf4GTwrYD9qirJoOr4t5 HPx8tqmZFyiF5Bn0k9lHvhgxX1fy3I9GUZS9q1uFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhfUa7t2yMwiUwPPzz9Ia0oaCSeMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhiMTI0OWFjLWI3NGEtNDU0NC04MGIyLTJiNTc3YWY3MzFmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBQwDQYJKoZIhvcNAQELBQADggEBADGTFSk3KMOD175S4n0rJKmJQCw5 +O+2zYTuhzuKxTW/u7LVDbeiTmshEf2VxsLnXUdTIxBD9Bv+pnhDMkxPt9H5OzRI HmsHnm08xI46B1llZtiKM5sci0cWPHU3BlwxV3FBgfpEMZfI6CXm71Op3F5v6Qei g6OrsYGiMc1qlPqVR6AcwGOLkhdtbY+aJc3ZKTgGeQh0RXIb0sjIj8MtfA+4I9Iz GTK6t8QQGCxJmUDSOP1rleGXVGOK4quykTd5Nxu7oSTZop+F6dgPQ/dXe8IPo4SU +5/qtsfaYXcTkVdxkouzJRTKgUdXflRL4zctSZmWMyQ4oMVc7S4BH4IAt3o= -----END CERTIFICATE-----Generated at Thu Nov 5 03:59:54 2026 by rpki-client