$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa File: 8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa (raw, json) Hash identifier: A1/CuRYIh5h5VEPPBJJI9PBjjWazW+CrLO2130XsF7w= Subject key identifier: 9D:E3:AA:86:F1:98:BD:82:F8:30:C2:DE:62:8B:6B:03:74:A9:FD:7E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 52429C3633B59E3750C4533A5082AACE14D8F8DC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa Signing time: Mon 27 Jul 2026 03:00:03 +0000 ROA not before: Mon 27 Jul 2026 03:00:03 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:42:9c:36:33:b5:9e:37:50:c4:53:3a:50:82:aa:ce:14:d8:f8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 27 03:00:03 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=90bf657930b9556db69ed5b1a26c71ae6b30a5bc0333b27f962a6545bca0298d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:79:be:24:7f:e5:48:9e:98:06:d3:f0:64:6e: c6:f0:b8:1a:a8:a5:bc:fd:98:61:45:9f:2d:6a:c2: 48:cf:72:40:36:86:e7:0d:fc:d3:85:92:31:eb:bf: 46:61:3e:ab:34:b9:4b:c3:cc:07:fd:74:63:79:31: 47:ad:a6:69:36:7d:04:af:46:0b:41:b9:82:cd:e8: af:68:b2:d3:e0:87:f8:71:d2:23:86:5e:5f:47:d4: f3:3a:ae:82:ac:75:51:d8:90:20:ca:67:97:53:4a: c4:04:4e:5a:f4:8d:c3:1f:0b:d0:a6:40:74:45:39: 1d:22:39:cc:7b:bf:bd:53:da:d5:38:ba:cd:bf:12: d7:13:01:2d:6a:7f:b0:72:27:ad:f5:41:ba:3f:f0: b8:68:0f:ff:49:9c:24:52:4c:0a:b4:38:c4:b7:4c: 0c:de:6c:60:03:3a:9e:c2:58:3e:1b:68:a7:3d:a3: 2c:46:0e:9f:d7:80:0e:2e:09:5a:df:b0:9a:47:4f: 1d:47:d4:43:d8:a4:3b:f7:06:92:aa:58:db:4f:e2: 22:e0:7d:b6:74:ae:f9:72:b6:48:ad:ee:48:7c:27: 1e:b2:12:de:c5:5c:38:f0:73:37:8d:19:b9:24:10: ae:92:91:2c:aa:17:d7:f2:41:1d:dd:4c:98:d7:c1: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E3:AA:86:F1:98:BD:82:F8:30:C2:DE:62:8B:6B:03:74:A9:FD:7E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.8.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:4e:a7:59:59:6d:03:69:bf:a8:56:37:69:39:34:d6:ff:73: bd:b3:b9:f6:a3:17:e0:bc:bc:f7:d4:95:e4:8c:05:69:a8:f0: 66:da:34:f5:25:a4:08:3e:3d:7d:dd:e2:0c:83:73:b3:03:4e: fe:60:d1:41:b9:22:da:3d:f8:43:6f:8a:b1:d6:2b:9f:56:61: 7d:40:62:35:88:8c:1b:6d:db:ef:8f:d0:a8:69:3a:26:7a:b1: d7:0e:9e:fb:13:33:49:85:6c:0f:6a:e7:7e:1e:4c:f6:42:ad: 1e:04:14:6c:44:0b:d8:82:73:ef:79:bd:11:3c:ef:75:cb:47: ed:38:18:de:56:13:81:d7:a0:e2:66:a0:ef:e3:76:96:50:53: 7b:32:8c:9a:43:ae:4e:1e:7b:a5:1f:29:de:aa:d5:f3:d6:fd: 6a:b9:27:52:27:98:30:72:33:55:2e:98:2f:f1:b9:18:39:b3: 93:ac:53:c4:a2:c8:ff:5d:2c:19:ec:de:88:13:63:81:a1:1b: 92:d4:c3:be:2a:71:c2:6d:94:f9:31:66:59:19:53:78:bf:cf: cb:96:f9:45:18:6a:5d:61:ae:87:de:fa:51:5a:c5:7c:68:8d: 0b:24:1f:07:cd:87:fb:2e:a6:f6:c5:41:46:d3:fb:39:11:3a: b2:92:d1:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUkKcNjO1njdQxFM6UIKqzhTY+NwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzI3MDMwMDAzWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MGJmNjU3OTMwYjk1NTZkYjY5ZWQ1YjFhMjZjNzFhZTZi MzBhNWJjMDMzM2IyN2Y5NjJhNjU0NWJjYTAyOThkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDceb4kf+VInpgG0/BkbsbwuBqopbz9mGFFny1qwkjPckA2 hucN/NOFkjHrv0ZhPqs0uUvDzAf9dGN5MUetpmk2fQSvRgtBuYLN6K9ostPgh/hx 0iOGXl9H1PM6roKsdVHYkCDKZ5dTSsQETlr0jcMfC9CmQHRFOR0iOcx7v71T2tU4 us2/EtcTAS1qf7ByJ631Qbo/8LhoD/9JnCRSTAq0OMS3TAzebGADOp7CWD4baKc9 oyxGDp/XgA4uCVrfsJpHTx1H1EPYpDv3BpKqWNtP4iLgfbZ0rvlytkit7kh8Jx6y Et7FXDjwczeNGbkkEK6SkSyqF9fyQR3dTJjXwa/3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUneOqhvGYvYL4MMLeYotrA3Sp/X4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhlODgzOThmLTgwY2QtNGIwNi1iYmRmLWUzZmFiNmU2YWJlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAgwDQYJKoZIhvcNAQELBQADggEBAAxOp1lZbQNpv6hWN2k5NNb/c72z ufajF+C8vPfUleSMBWmo8GbaNPUlpAg+PX3d4gyDc7MDTv5g0UG5Ito9+ENvirHW K59WYX1AYjWIjBtt2++P0KhpOiZ6sdcOnvsTM0mFbA9q534eTPZCrR4EFGxEC9iC c+95vRE873XLR+04GN5WE4HXoOJmoO/jdpZQU3syjJpDrk4ee6UfKd6q1fPW/Wq5 J1InmDByM1UumC/xuRg5s5OsU8SiyP9dLBns3ogTY4GhG5LUw74qccJtlPkxZlkZ U3i/z8uW+UUYal1hrofe+lFaxXxojQskHwfNh/supvbFQUbT+zkROrKS0SE= -----END CERTIFICATE-----Generated at Wed Jul 29 03:08:02 2026 by rpki-client