$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/90515f46-7842-4990-8fd3-2073350be0ea.roa File: 90515f46-7842-4990-8fd3-2073350be0ea.roa (raw, json) Hash identifier: UJ8yGRqMAamGQ1L0AWCqbtY+5qLBciA8mnoRfETDIAM= Subject key identifier: 26:19:E2:02:62:97:7E:CD:BD:1A:39:9A:99:E4:0E:27:E6:0F:1F:61 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4E8CECD0FA6A488A86F8A08AA9B06B79792B28CB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/90515f46-7842-4990-8fd3-2073350be0ea.roa Signing time: Thu 10 Sep 2026 00:10:07 +0000 ROA not before: Thu 10 Sep 2026 00:10:07 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.98.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8c:ec:d0:fa:6a:48:8a:86:f8:a0:8a:a9:b0:6b:79:79:2b:28:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 10 00:10:07 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=b8382a96909e0a0fabe7f00a38aa08015c3c4921337b28dd966da82c421edde4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:83:6e:ca:62:f4:c3:06:ff:53:f2:0b:c7:60: 09:89:d6:43:54:34:dd:5d:2c:b0:0e:68:4f:f3:f2: 61:16:c9:48:ce:00:ef:5b:69:29:d9:af:5f:4e:9d: bc:29:a3:9c:bd:10:28:7c:4f:72:1f:3e:94:9c:ce: c3:d8:f1:7b:22:1d:a9:57:59:09:35:4a:4c:f1:84: ec:6d:19:dc:d5:e4:ed:1b:7c:7b:fc:c3:68:ab:e9: 68:df:75:8a:37:55:b7:c1:5e:31:2e:43:11:6a:c5: 07:ee:ac:d2:86:5b:2f:88:92:f5:ff:f8:9e:07:f0: 55:05:eb:78:2d:39:54:8b:f2:6a:15:65:3a:52:cd: dd:4b:12:d6:41:dd:a5:92:2d:e3:df:b3:69:d7:af: f4:77:4a:dd:c0:10:5a:f3:7a:e6:e6:2f:91:6a:12: 8d:f4:0a:05:e7:70:34:63:94:f9:7c:27:a0:37:5e: 39:87:f4:1a:51:a6:94:a9:13:59:c3:a4:bc:b7:a1: df:45:4f:91:b6:41:18:04:b8:85:a9:68:96:2f:b5: 53:16:d9:8d:4d:e3:84:5e:c7:86:6a:6d:73:e8:a3: 97:46:5d:33:2f:0f:ed:09:b7:6e:42:81:9d:37:69: 7d:45:34:67:95:30:f4:7e:35:87:5b:d9:d0:4b:15: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:19:E2:02:62:97:7E:CD:BD:1A:39:9A:99:E4:0E:27:E6:0F:1F:61 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/90515f46-7842-4990-8fd3-2073350be0ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.98.64.0/20 Signature Algorithm: sha256WithRSAEncryption 44:f1:97:b3:d6:97:6a:df:6e:1b:34:fa:1e:40:80:e5:38:dc: 9f:1d:12:1d:e6:48:03:5f:4f:51:64:7b:50:44:67:ec:fd:a2: a7:45:60:ce:d5:53:f6:74:05:7d:6b:cc:0d:95:01:81:14:dd: 6b:67:ff:17:b4:0f:7a:fa:ae:df:f6:7c:cb:45:5b:d7:93:4c: c7:e2:56:06:5f:40:36:94:27:38:b6:8a:f5:c4:e7:08:c6:05: 39:59:64:33:21:34:b3:b9:fc:96:0b:6b:7f:cf:21:a4:06:6e: 89:3c:92:15:e1:a5:9e:7c:92:c7:32:96:60:08:1e:56:16:37: d8:dd:91:ea:1d:51:d5:39:85:f1:21:36:72:be:c0:10:9e:17: 37:88:33:21:28:a7:00:63:2e:2d:30:f5:27:e7:bd:aa:22:5e: 95:33:83:1f:df:f9:f1:f9:10:9b:c3:e8:ac:2d:3d:94:e1:00: 63:80:3a:6d:b2:91:ca:9f:35:08:9f:c3:b0:a1:3f:a4:98:53: 3e:7a:90:1d:93:d3:a3:87:03:89:cf:22:36:11:a0:ac:de:2f: 05:d7:af:9c:39:b1:55:a3:f2:93:2a:57:74:c6:e2:0f:7a:a0: 1c:6a:23:83:5c:ea:da:a4:f6:a0:de:77:af:67:41:8c:9a:77: 14:57:91:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTozs0PpqSIqG+KCKqbBreXkrKMswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwOTEwMDAxMDA3WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODM4MmE5NjkwOWUwYTBmYWJlN2YwMGEzOGFhMDgwMTVj M2M0OTIxMzM3YjI4ZGQ5NjZkYTgyYzQyMWVkZGU0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHg27KYvTDBv9T8gvHYAmJ1kNUNN1dLLAOaE/z8mEWyUjO AO9baSnZr19Onbwpo5y9ECh8T3IfPpSczsPY8XsiHalXWQk1SkzxhOxtGdzV5O0b fHv8w2ir6WjfdYo3VbfBXjEuQxFqxQfurNKGWy+IkvX/+J4H8FUF63gtOVSL8moV ZTpSzd1LEtZB3aWSLePfs2nXr/R3St3AEFrzeubmL5FqEo30CgXncDRjlPl8J6A3 XjmH9BpRppSpE1nDpLy3od9FT5G2QRgEuIWpaJYvtVMW2Y1N44Rex4ZqbXPoo5dG XTMvD+0Jt25CgZ03aX1FNGeVMPR+NYdb2dBLFd83AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJhniAmKXfs29GjmameQOJ+YPH2EwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkwNTE1ZjQ2LTc4NDItNDk5MC04ZmQzLTIwNzMzNTBiZTBlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYkAwDQYJKoZIhvcNAQELBQADggEBAETxl7PWl2rfbhs0+h5AgOU43J8d Eh3mSANfT1Fke1BEZ+z9oqdFYM7VU/Z0BX1rzA2VAYEU3Wtn/xe0D3r6rt/2fMtF W9eTTMfiVgZfQDaUJzi2ivXE5wjGBTlZZDMhNLO5/JYLa3/PIaQGbok8khXhpZ58 kscylmAIHlYWN9jdkeodUdU5hfEhNnK+wBCeFzeIMyEopwBjLi0w9SfnvaoiXpUz gx/f+fH5EJvD6KwtPZThAGOAOm2ykcqfNQifw7ChP6SYUz56kB2T06OHA4nPIjYR oKzeLwXXr5w5sVWj8pMqV3TG4g96oBxqI4Nc6tqk9qDed69nQYyadxRXkX0= -----END CERTIFICATE-----Generated at Mon Sep 21 15:36:48 2026 by rpki-client