$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa File: 909e65c8-aef7-492e-84d6-88536c902cda.roa (raw, json) Hash identifier: rrGDrpO0uYlhNPbDjBRNjzsUMwAne3bftpHwASM1E1o= Subject key identifier: 7E:52:68:20:7D:8D:8E:ED:20:DA:FB:7B:30:CE:3A:F8:3F:9E:6E:93 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6578DD06194FDAAFCCB9D454E291C1E3039617CC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa Signing time: Fri 13 Feb 2026 15:00:04 +0000 ROA not before: Fri 13 Feb 2026 15:00:04 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:78:dd:06:19:4f:da:af:cc:b9:d4:54:e2:91:c1:e3:03:96:17:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 13 15:00:04 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=7a1852800856dd35ffd829b28286c451e6d33178af449e1087af0e891057d3ae, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:bb:f5:24:05:c0:50:e8:3b:e3:ed:48:e5: 00:7f:13:8d:fb:f8:a9:e4:44:3c:bf:47:94:7a:8f: 8b:cd:17:9d:8c:4e:0e:cf:17:8b:f7:0b:52:25:40: 70:04:99:19:bb:5c:8b:47:db:21:98:c1:b4:2a:6b: d6:5e:61:81:9b:f9:a6:7e:b9:84:0e:74:d0:01:6e: d5:0d:61:6f:94:45:51:80:85:62:04:cc:a9:35:e1: 2c:8e:84:bc:01:95:48:8d:62:9d:8e:05:95:60:98: 32:5c:9a:24:e0:8f:8c:84:c0:fc:6f:5b:d2:b3:9f: 03:c0:d5:a7:b0:0a:3b:0f:79:e4:ff:d3:cf:c6:ee: 09:52:1f:c3:cf:e8:68:37:7f:a7:f6:e3:2a:39:47: a0:cd:49:10:46:38:dc:c3:1c:59:5b:6c:34:43:03: 76:ee:db:d2:db:ff:bc:5e:84:9e:75:bc:71:7c:c9: a0:d3:5e:2f:bb:c8:7e:09:a2:be:90:d6:92:6f:2b: 56:f7:cb:e9:42:28:c4:93:a6:52:2c:0f:a3:4d:18: 5a:42:e6:af:b8:81:1b:7f:69:05:86:4d:e9:2f:eb: 5a:80:5d:27:83:a2:4d:9c:dc:f7:17:94:42:9d:d6: 9c:87:7c:7d:78:40:2d:e6:29:7c:aa:0e:bd:bb:a7: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:52:68:20:7D:8D:8E:ED:20:DA:FB:7B:30:CE:3A:F8:3F:9E:6E:93 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 15:3f:88:3c:63:6f:ca:1e:16:e7:b9:c2:97:29:86:ce:88:e5: b3:ca:28:81:d4:81:10:6c:ec:cb:22:3a:f8:63:44:d6:22:63: 51:ef:7a:dc:8c:c9:c7:30:b5:f0:31:16:4d:71:cb:cd:ff:a6: 2b:9e:51:18:ab:1a:a1:48:2d:23:88:56:93:f5:4f:61:96:c7: 12:f4:5a:bc:c3:5e:42:56:b3:92:1e:d0:18:b4:72:e7:85:3f: 0c:db:50:26:44:24:58:14:0d:65:07:2e:26:d8:28:10:2d:a7: 81:e2:ee:ea:ff:8b:78:a4:22:34:3e:1d:4e:ec:e3:90:44:46: 4f:ea:67:d6:64:0f:c0:03:f7:71:f2:71:8a:ec:11:8c:d2:a4: b1:f2:67:93:bf:ec:07:57:4e:ba:e8:67:e2:a4:49:27:af:c6: 48:18:c9:8f:c8:08:cf:11:4c:d7:ce:84:98:a3:f3:1f:b1:34: 48:df:2b:ed:5d:a2:f8:ac:82:11:3a:3a:e8:bd:4f:29:f3:66: ee:1f:80:e7:ef:97:8f:cb:a6:e9:e8:df:9b:96:89:f3:44:c8: 8a:92:95:2e:bb:91:28:d3:73:bc:9a:e4:32:1f:e6:90:02:3c: 38:56:7e:36:bb:02:c7:c2:be:a9:96:6c:4e:2e:40:b1:f9:80: 7d:de:21:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZXjdBhlP2q/MudRU4pHB4wOWF8wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjEzMTUwMDA0WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTE4NTI4MDA4NTZkZDM1ZmZkODI5YjI4Mjg2YzQ1MWU2 ZDMzMTc4YWY0NDllMTA4N2FmMGU4OTEwNTdkM2FlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8z7v1JAXAUOg74+1I5QB/E437+KnkRDy/R5R6j4vNF52M Tg7PF4v3C1IlQHAEmRm7XItH2yGYwbQqa9ZeYYGb+aZ+uYQOdNABbtUNYW+URVGA hWIEzKk14SyOhLwBlUiNYp2OBZVgmDJcmiTgj4yEwPxvW9KznwPA1aewCjsPeeT/ 08/G7glSH8PP6Gg3f6f24yo5R6DNSRBGONzDHFlbbDRDA3bu29Lb/7xehJ51vHF8 yaDTXi+7yH4Jor6Q1pJvK1b3y+lCKMSTplIsD6NNGFpC5q+4gRt/aQWGTekv61qA XSeDok2c3PcXlEKd1pyHfH14QC3mKXyqDr27p237AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUflJoIH2Nju0g2vt7MM46+D+ebpMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkwOWU2NWM4LWFlZjctNDkyZS04NGQ2LTg4NTM2YzkwMmNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBQwDQYJKoZIhvcNAQELBQADggEBABU/iDxjb8oeFue5wpcphs6I5bPK KIHUgRBs7MsiOvhjRNYiY1HvetyMyccwtfAxFk1xy83/piueURirGqFILSOIVpP1 T2GWxxL0WrzDXkJWs5Ie0Bi0cueFPwzbUCZEJFgUDWUHLibYKBAtp4Hi7ur/i3ik IjQ+HU7s45BERk/qZ9ZkD8AD93HycYrsEYzSpLHyZ5O/7AdXTrroZ+KkSSevxkgY yY/ICM8RTNfOhJij8x+xNEjfK+1dovisghE6Oui9TynzZu4fgOfvl4/Lpuno35uW ifNEyIqSlS67kSjTc7ya5DIf5pACPDhWfja7AsfCvqmWbE4uQLH5gH3eIUk= -----END CERTIFICATE-----Generated at Mon Mar 2 01:03:05 2026 by rpki-client