$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b7f51c8-2141-46fa-9e5c-3cc85fbe6b3e.roa File: 8b7f51c8-2141-46fa-9e5c-3cc85fbe6b3e.roa (raw, json) Hash identifier: Ho7X10QdMRrFC132tuACY6LD3Mnj7a8Lz03PBq3pZGU= Subject key identifier: 72:07:93:3A:8C:EE:6A:15:51:7C:D7:6F:AD:F0:E2:3E:8E:E9:4C:0D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 546457A2277E300FF514876DEA92EAC55A517EC5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b7f51c8-2141-46fa-9e5c-3cc85fbe6b3e.roa Signing time: Fri 13 Feb 2026 15:00:06 +0000 ROA not before: Fri 13 Feb 2026 15:00:06 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:64:57:a2:27:7e:30:0f:f5:14:87:6d:ea:92:ea:c5:5a:51:7e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 13 15:00:06 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=b2f7fb3ebf92f770729e221aea26aff8b00b9f71be2d72c98bccdbd4a0c62bae, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:eb:fa:cf:ed:f1:a1:cf:d1:ec:c7:1b:18: 32:83:9b:07:0c:1e:a5:f9:37:26:8a:8a:e3:81:5f: 98:c1:47:c5:9b:03:73:49:24:f4:3c:ec:ff:7d:06: 0b:90:29:41:5b:ee:13:be:8f:5a:7f:84:40:a2:c6: 4c:40:24:9f:b2:88:dc:28:47:87:95:3f:ba:79:2a: 64:67:72:96:7f:ec:f4:79:ef:fe:4f:f1:1c:2f:d0: eb:dc:24:ed:38:22:50:a9:1e:d5:a8:62:dc:24:61: f2:90:a4:a2:81:ff:d7:ca:1b:8d:5d:e0:88:92:ba: 08:f5:07:6e:e9:17:42:64:4b:44:8c:80:35:04:bc: c2:df:ca:62:f8:15:84:bb:d1:11:62:a2:76:56:56: 1d:ff:ce:a8:dd:9d:04:7e:a6:3a:29:c1:50:1e:91: ba:da:6a:67:fd:0c:54:ef:49:24:bc:aa:76:0c:57: 36:3b:cb:49:3c:68:01:45:58:43:f6:18:18:64:44: 3f:b5:2f:3c:f9:37:42:1a:b2:b7:d0:fe:d1:9f:2f: d4:75:d9:f9:b9:e1:33:13:38:c1:20:74:b5:0d:2f: 1f:74:d6:7d:f1:7d:cd:de:7d:f0:72:c7:48:e8:46: 15:f2:87:52:98:a7:15:03:8f:7e:da:42:53:f4:d5: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:07:93:3A:8C:EE:6A:15:51:7C:D7:6F:AD:F0:E2:3E:8E:E9:4C:0D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b7f51c8-2141-46fa-9e5c-3cc85fbe6b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.16.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:b1:b1:6d:92:30:ae:4b:9d:a6:4a:da:f5:c4:06:08:7b:a4: fe:bb:e6:7c:8f:1d:90:7d:67:18:a7:1b:c6:1b:53:c9:54:c4: 16:08:06:33:23:a5:10:27:2b:42:f7:6b:4b:12:f9:42:b9:17: a1:fe:02:09:82:8e:50:d7:fa:fc:ed:b4:e4:e1:99:07:2d:b8: c6:6e:b7:bb:e9:6d:35:f8:19:f7:6d:da:de:ac:f8:dc:0d:67: 3a:69:ca:be:e2:d5:ae:a0:61:07:9e:7e:15:d8:fb:c5:f4:9a: 68:14:0d:21:77:81:c9:e8:23:ec:8f:b5:f5:7b:d6:9b:b1:c0: 42:e7:a7:42:70:4b:02:0d:7c:7c:07:5a:f9:2d:51:fb:e3:2c: 6b:ad:bd:df:3c:86:b8:25:a7:5d:b7:a1:bb:f3:5d:3a:27:e2: 1e:ef:59:54:3f:4b:c8:dd:d9:59:b1:38:71:38:87:7f:97:91: 8f:06:aa:7c:ce:1b:7a:30:b8:88:2f:1c:c3:17:d9:86:e5:6d: 60:e3:90:b3:b3:a0:38:04:48:ba:b1:c3:62:f8:f1:0b:e7:06: bb:8f:cc:4a:b5:0a:35:e1:a5:35:74:ae:4f:6d:57:fe:99:10: 9a:fa:17:d7:36:51:ca:a5:35:ba:cc:c8:b7:78:db:7d:03:f5: 75:a7:63:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVGRXoid+MA/1FIdt6pLqxVpRfsUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjEzMTUwMDA2WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmY3ZmIzZWJmOTJmNzcwNzI5ZTIyMWFlYTI2YWZmOGIw MGI5ZjcxYmUyZDcyYzk4YmNjZGJkNGEwYzYyYmFlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRMev6z+3xoc/R7McbGDKDmwcMHqX5NyaKiuOBX5jBR8Wb A3NJJPQ87P99BguQKUFb7hO+j1p/hECixkxAJJ+yiNwoR4eVP7p5KmRncpZ/7PR5 7/5P8Rwv0OvcJO04IlCpHtWoYtwkYfKQpKKB/9fKG41d4IiSugj1B27pF0JkS0SM gDUEvMLfymL4FYS70RFionZWVh3/zqjdnQR+pjopwVAekbraamf9DFTvSSS8qnYM VzY7y0k8aAFFWEP2GBhkRD+1Lzz5N0IasrfQ/tGfL9R12fm54TMTOMEgdLUNLx90 1n3xfc3effByx0joRhXyh1KYpxUDj37aQlP01V7lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcgeTOozuahVRfNdvrfDiPo7pTA0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhiN2Y1MWM4LTIxNDEtNDZmYS05ZTVjLTNjYzg1ZmJlNmIzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBAwDQYJKoZIhvcNAQELBQADggEBAEuxsW2SMK5LnaZK2vXEBgh7pP67 5nyPHZB9ZxinG8YbU8lUxBYIBjMjpRAnK0L3a0sS+UK5F6H+AgmCjlDX+vzttOTh mQctuMZut7vpbTX4Gfdt2t6s+NwNZzppyr7i1a6gYQeefhXY+8X0mmgUDSF3gcno I+yPtfV71puxwELnp0JwSwINfHwHWvktUfvjLGutvd88hrglp123obvzXTon4h7v WVQ/S8jd2VmxOHE4h3+XkY8GqnzOG3owuIgvHMMX2YblbWDjkLOzoDgESLqxw2L4 8QvnBruPzEq1CjXhpTV0rk9tV/6ZEJr6F9c2UcqlNbrMyLd4230D9XWnY4A= -----END CERTIFICATE-----Generated at Mon Mar 2 01:02:00 2026 by rpki-client