$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e3df936-84bf-45b3-be48-5b4b85107581.roa File: 8e3df936-84bf-45b3-be48-5b4b85107581.roa (raw, json) Hash identifier: HoGuSQOkmxWHC7tZRm89gM8a/vL0ncVLF35CfTLju7g= Subject key identifier: 3D:60:9E:B9:A5:D9:F2:B6:69:CF:81:21:24:72:6A:5D:39:48:33:A1 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1F72F18DA8F8BF861B682610680E0A8ADCEF9DE6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e3df936-84bf-45b3-be48-5b4b85107581.roa Signing time: Sat 24 Oct 2026 01:50:29 +0000 ROA not before: Sat 24 Oct 2026 01:50:29 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:72:f1:8d:a8:f8:bf:86:1b:68:26:10:68:0e:0a:8a:dc:ef:9d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:29 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=e330cfe1c77472983f6b42db5a13913b472560425fc6fc31048049b27567b76f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:54:0d:3f:e4:8f:b4:69:0c:dd:b9:8b:1e: f2:d8:8d:5f:ab:c3:71:9e:95:c9:47:72:90:73:e6: 31:5c:de:01:46:8c:af:7c:dc:c9:87:0a:cf:a4:27: fe:15:0f:ea:7e:9a:fa:4a:27:c7:3a:0b:42:ef:ae: fb:e2:d3:92:bc:f5:57:92:8f:c3:c6:18:b9:ee:69: 58:4a:c0:54:5e:fb:17:b5:f5:9b:91:4f:9f:31:b5: b1:98:b2:09:05:b3:cb:cc:8c:86:9e:ea:41:60:c1: 90:d3:37:c4:b4:2d:cf:02:16:18:0f:59:2a:0a:d8: 86:12:34:18:09:b7:ae:ae:95:62:9c:96:8c:81:31: bb:13:42:e8:4e:4f:6e:23:e6:2f:a0:55:73:16:46: 7b:c8:9a:ae:19:02:a8:a3:d1:16:db:19:b4:4d:ab: e4:74:79:5c:81:55:90:6b:a0:bf:69:4b:6e:92:08: 3a:a9:74:49:84:47:f4:e5:e0:47:f8:0a:78:43:99: f6:06:ae:26:c7:87:82:84:dd:99:d9:c3:96:eb:75: 24:e9:cb:72:76:c2:b6:5f:69:66:cf:6b:af:43:c9: 00:86:6c:8b:a0:75:2a:a1:a2:13:eb:90:f2:a0:86: 8e:f9:d9:8f:a2:24:df:7f:c1:70:bd:9a:13:64:06: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:60:9E:B9:A5:D9:F2:B6:69:CF:81:21:24:72:6A:5D:39:48:33:A1 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e3df936-84bf-45b3-be48-5b4b85107581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.34.0/24 Signature Algorithm: sha256WithRSAEncryption 40:80:2d:06:60:bf:38:72:0d:11:a9:c2:ae:23:d6:1c:2a:ab: 15:99:c4:c3:ac:23:5d:be:86:c6:a6:23:fe:b6:2f:00:e2:34: 83:7c:a9:69:bb:71:d0:54:73:1e:67:ff:94:35:c7:54:6a:e8: 33:e3:c8:db:86:ff:13:fe:c6:04:1d:a5:6f:71:08:d0:8b:0d: 47:2e:1c:7d:9b:bc:7c:f3:aa:04:d4:4d:19:7d:41:d3:fe:43: 11:05:7f:7e:3f:92:b2:5d:68:85:cf:88:f5:5f:26:fe:9a:d3: 73:7b:c4:c8:b6:11:8e:d4:5c:51:ae:72:84:d9:e2:44:28:42: aa:2b:04:91:3a:8e:d7:49:a4:3f:1e:04:50:b1:f6:e0:11:16: 1f:bc:14:10:f9:2d:91:e8:03:1f:91:6e:b9:56:70:9d:3b:b4: 21:68:3e:62:10:81:e2:c0:10:9c:4e:83:73:64:04:dc:24:04: 70:1d:25:35:8e:49:d7:91:0f:37:c3:69:e1:5a:68:4c:d3:5a: 39:b2:75:3d:8a:df:0d:a7:88:1a:71:e1:c4:3a:3a:0c:71:77: bc:b4:15:78:b9:f6:44:01:cc:71:bb:20:de:94:6f:ed:b3:ee: bc:7b:b6:fb:4d:c5:4a:63:b2:76:42:7c:75:e6:3e:b5:de:2a: d1:c5:b3:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH3Lxjaj4v4YbaCYQaA4KitzvneYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDI5WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzMwY2ZlMWM3NzQ3Mjk4M2Y2YjQyZGI1YTEzOTEzYjQ3 MjU2MDQyNWZjNmZjMzEwNDgwNDliMjc1NjdiNzZmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7UVQNP+SPtGkM3bmLHvLYjV+rw3GelclHcpBz5jFc3gFG jK983MmHCs+kJ/4VD+p+mvpKJ8c6C0Lvrvvi05K89VeSj8PGGLnuaVhKwFRe+xe1 9ZuRT58xtbGYsgkFs8vMjIae6kFgwZDTN8S0Lc8CFhgPWSoK2IYSNBgJt66ulWKc loyBMbsTQuhOT24j5i+gVXMWRnvImq4ZAqij0RbbGbRNq+R0eVyBVZBroL9pS26S CDqpdEmER/Tl4Ef4CnhDmfYGribHh4KE3ZnZw5brdSTpy3J2wrZfaWbPa69DyQCG bIugdSqhohPrkPKgho752Y+iJN9/wXC9mhNkBpy5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPWCeuaXZ8rZpz4EhJHJqXTlIM6EwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhlM2RmOTM2LTg0YmYtNDViMy1iZTQ4LTViNGI4NTEwNzU4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCIwDQYJKoZIhvcNAQELBQADggEBAECALQZgvzhyDRGpwq4j1hwqqxWZ xMOsI12+hsamI/62LwDiNIN8qWm7cdBUcx5n/5Q1x1Rq6DPjyNuG/xP+xgQdpW9x CNCLDUcuHH2bvHzzqgTUTRl9QdP+QxEFf34/krJdaIXPiPVfJv6a03N7xMi2EY7U XFGucoTZ4kQoQqorBJE6jtdJpD8eBFCx9uARFh+8FBD5LZHoAx+RbrlWcJ07tCFo PmIQgeLAEJxOg3NkBNwkBHAdJTWOSdeRDzfDaeFaaEzTWjmydT2K3w2niBpx4cQ6 Ogxxd7y0FXi59kQBzHG7IN6Ub+2z7rx7tvtNxUpjsnZCfHXmPrXeKtHFs1s= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:25 2026 by rpki-client