$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa File: 9820da12-0a89-4f05-a638-5ca08cc892e3.roa (raw, json) Hash identifier: z6rcvU81xoQqGb0cMYRowhVYw57OztNuQ+k+7PH314o= Subject key identifier: 21:4B:A2:E0:8D:2D:63:E3:A3:F7:5F:16:39:FA:4B:14:77:0E:79:A0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 67EC531A51E51BD9D1611B66E533B89D10008250 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa Signing time: Sun 11 Oct 2026 14:50:23 +0000 ROA not before: Sun 11 Oct 2026 14:50:23 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ec:53:1a:51:e5:1b:d9:d1:61:1b:66:e5:33:b8:9d:10:00:82:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:23 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=de55a6e2b864e8b87c31b92a4464a7d87baa5d2e79082ca82ad421900dbe62c7, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:be:4f:0e:c8:11:95:81:9e:44:e5:3c:03: 2c:b6:33:86:97:a8:51:11:4d:2e:65:ae:dd:6f:e9: a0:03:0f:db:20:1a:d7:4b:e4:eb:13:31:6c:f3:8b: 0e:c7:fc:f0:ba:0d:84:fe:f7:b9:99:bc:18:a0:a4: cd:b9:7b:37:5e:c0:e0:e8:b7:75:9f:99:7b:4f:02: dc:6e:7d:0a:67:0b:6b:a8:7b:31:cb:98:cf:90:37: 3d:88:12:f2:8b:d5:87:83:a6:8b:d6:de:06:cc:c1: 20:b2:46:3a:4f:62:1f:f2:d9:76:10:03:4d:46:7e: 0e:ca:7c:58:6c:e0:8b:b3:6a:ab:7a:64:bd:21:19: 3d:71:2e:d4:93:23:33:9a:5e:34:3b:1a:c5:4c:b1: 59:d0:45:cd:1a:4c:97:94:8e:df:ec:cc:c0:8a:ca: ae:6a:bf:6c:ec:b4:17:ce:c4:fd:dc:4a:d7:ff:1a: 2f:97:ec:15:f8:7d:37:f1:12:90:9d:d5:f5:80:e2: e9:68:e3:57:4c:2e:0f:d8:b9:76:1b:cb:44:6e:6f: 0a:ce:c7:66:9c:1f:5b:e1:5c:d0:f2:c7:83:ce:0a: 83:1b:79:80:31:9f:b6:0f:07:35:b9:52:96:7c:60: 6c:d9:b6:e0:45:ad:8a:05:f1:a2:4b:72:6f:4a:95: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4B:A2:E0:8D:2D:63:E3:A3:F7:5F:16:39:FA:4B:14:77:0E:79:A0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.253.0/24 Signature Algorithm: sha256WithRSAEncryption 30:47:ae:5e:b1:38:5c:10:55:b9:d2:47:2b:37:72:af:ec:62: f5:61:98:33:e1:49:03:00:89:da:c2:c7:c0:89:9f:4a:5d:f3: 5a:cb:66:e4:92:31:58:b3:f5:11:ff:74:bd:55:78:6e:d9:71: 22:fe:16:4a:93:ba:39:94:54:f0:9a:0b:b5:da:96:fd:aa:4e: 90:52:08:43:4c:67:df:a7:90:19:c8:1f:60:70:a0:d3:67:e5: 2b:79:ec:2b:8b:ed:0e:14:24:a7:70:78:1b:8c:56:80:17:bd: a5:7e:6d:87:dd:03:6e:04:59:99:7c:ac:e7:1d:d0:1f:1b:04: 83:27:9c:9a:c2:eb:c7:8b:93:53:43:46:52:ba:72:47:d1:72: 26:cf:d0:62:65:2e:93:1f:c6:1c:72:d5:e7:e7:c7:1f:c8:b2: 49:34:d4:aa:23:3b:4f:31:a2:56:c0:76:f9:6e:8d:74:3f:68: b5:e6:32:6e:89:6b:ea:36:29:d0:b4:7d:dc:fe:1e:7b:68:eb: a1:c4:05:1c:79:a0:e1:64:c5:b1:ac:97:df:ef:dd:9c:cc:3f: f2:37:c5:21:de:ed:b0:60:99:5a:72:24:aa:49:a2:0b:67:77: b2:85:56:b8:6c:e0:f3:7f:fe:4f:1a:d0:e5:5b:af:26:e2:1a: 2f:9f:d1:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ+xTGlHlG9nRYRtm5TO4nRAAglAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDIzWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTU1YTZlMmI4NjRlOGI4N2MzMWI5MmE0NDY0YTdkODdi YWE1ZDJlNzkwODJjYTgyYWQ0MjE5MDBkYmU2MmM3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkV75PDsgRlYGeROU8Ayy2M4aXqFERTS5lrt1v6aADD9sg GtdL5OsTMWzziw7H/PC6DYT+97mZvBigpM25ezdewODot3WfmXtPAtxufQpnC2uo ezHLmM+QNz2IEvKL1YeDpovW3gbMwSCyRjpPYh/y2XYQA01Gfg7KfFhs4Iuzaqt6 ZL0hGT1xLtSTIzOaXjQ7GsVMsVnQRc0aTJeUjt/szMCKyq5qv2zstBfOxP3cStf/ Gi+X7BX4fTfxEpCd1fWA4ulo41dMLg/YuXYby0RubwrOx2acH1vhXNDyx4POCoMb eYAxn7YPBzW5UpZ8YGzZtuBFrYoF8aJLcm9KlXfnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIUui4I0tY+Oj918WOfpLFHcOeaAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4MjBkYTEyLTBhODktNGYwNS1hNjM4LTVjYTA4Y2M4OTJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYP0wDQYJKoZIhvcNAQELBQADggEBADBHrl6xOFwQVbnSRys3cq/sYvVh mDPhSQMAidrCx8CJn0pd81rLZuSSMViz9RH/dL1VeG7ZcSL+FkqTujmUVPCaC7Xa lv2qTpBSCENMZ9+nkBnIH2BwoNNn5St57CuL7Q4UJKdweBuMVoAXvaV+bYfdA24E WZl8rOcd0B8bBIMnnJrC68eLk1NDRlK6ckfRcibP0GJlLpMfxhxy1efnxx/Iskk0 1KojO08xolbAdvlujXQ/aLXmMm6Ja+o2KdC0fdz+Hnto66HEBRx5oOFkxbGsl9/v 3ZzMP/I3xSHe7bBgmVpyJKpJogtnd7KFVrhs4PN//k8a0OVbrybiGi+f0dQ= -----END CERTIFICATE-----Generated at Thu Nov 5 07:19:50 2026 by rpki-client