$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa File: 98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa (raw, json) Hash identifier: glL8Dl6wxx2TZ4Oj3jGaQIOhVCWCtr/dBXQT7zJsOK0= Subject key identifier: 9E:1B:46:2F:1A:37:5B:19:6C:05:19:66:96:48:FD:17:8E:AC:28:3E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 758008F23C8E23D0B5835A6C2F755B19A8D93C0D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa Signing time: Sun 11 Oct 2026 14:50:05 +0000 ROA not before: Sun 11 Oct 2026 14:50:05 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:80:08:f2:3c:8e:23:d0:b5:83:5a:6c:2f:75:5b:19:a8:d9:3c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 11 14:50:05 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=83bbe6904148dad564dfa5b6168f576bb2e462543b17e6e0b2e98624be15bf67, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:77:b0:d4:57:1c:d5:b3:e7:bc:c6:96:77: 13:32:4c:79:ff:0c:df:a7:69:fb:8f:b1:9e:46:a9: 91:d8:2d:76:d0:99:7b:44:65:a9:78:42:74:24:64: ac:e7:de:37:30:53:e8:c6:11:b9:93:11:09:4a:6a: bb:b0:de:ed:64:63:5c:8a:25:b1:9a:d2:ec:54:84: f3:28:56:5b:d7:78:64:d9:c4:77:94:a1:10:89:b7: 45:05:98:c7:82:b5:72:49:2f:cf:f2:e2:1a:d1:f1: d3:c3:cf:6b:21:de:5e:9a:35:00:87:40:f2:9f:8f: 42:ef:d6:f5:1d:f3:ee:76:f7:db:5e:06:29:28:8b: e1:aa:6c:45:09:a2:ce:ff:b4:9f:6c:46:73:3a:0f: 7d:20:95:49:60:6d:70:58:0f:6b:d1:8b:68:b0:48: 06:3d:bc:75:b1:63:31:d6:c8:28:1a:ba:84:cb:c8: 91:84:2e:ff:9d:e7:d1:9e:5f:23:55:e2:56:88:0d: f6:d1:c3:d2:25:62:9e:0f:25:dd:99:9e:d3:05:8c: 36:6d:1a:5b:8e:c6:ee:9e:f1:f8:f9:af:c8:87:8b: 48:04:8e:e1:e5:d5:5f:b8:06:05:5d:ea:0f:1a:70: 38:fa:6f:78:c9:b8:c3:de:01:99:b7:09:b2:b3:67: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1B:46:2F:1A:37:5B:19:6C:05:19:66:96:48:FD:17:8E:AC:28:3E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 40:71:6e:30:8d:e1:09:bb:56:a6:ec:d2:bf:38:26:68:7a:63: 17:1f:e8:fb:ea:e7:f2:76:9d:1d:5c:56:ce:b6:de:aa:d7:95: d7:7c:bc:d9:ab:c0:e4:20:81:37:e2:59:d9:61:8e:a8:0a:4b: bd:01:b4:f1:a3:c0:2a:9d:12:2e:2d:69:23:8f:ac:e9:59:9e: 55:5f:9d:ea:6d:d1:c9:1e:3c:08:50:25:98:91:a5:72:0b:df: d6:2a:39:27:a5:5b:76:00:15:7e:09:68:a4:91:ba:e2:17:b2: b0:0a:90:5f:66:28:f6:fa:88:c5:3e:f9:19:fe:b6:30:d5:d3: f3:c1:99:2c:51:16:92:ad:72:a3:04:69:10:aa:04:e8:4c:8d: 3b:7d:a4:de:fb:de:1e:81:c3:74:b3:28:09:06:65:42:bb:e6: 47:71:71:23:ea:3f:3e:d4:f1:4a:28:8f:78:fe:c0:67:7f:1f: 5b:55:1b:7c:f5:ba:52:37:04:67:68:d4:57:8d:b3:33:6a:e9: 92:24:8f:c8:62:a5:f9:11:b6:30:9b:99:3e:d9:77:23:fd:a1: 8b:83:51:06:5f:77:60:d2:bf:41:56:17:ce:22:a9:a3:31:3a: ec:a7:36:79:9b:96:e9:95:cb:54:e6:7d:ac:a5:3c:e9:36:6a: 32:71:e2:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdYAI8jyOI9C1g1psL3VbGajZPA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDExMTQ1MDA1WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2JiZTY5MDQxNDhkYWQ1NjRkZmE1YjYxNjhmNTc2YmIy ZTQ2MjU0M2IxN2U2ZTBiMmU5ODYyNGJlMTViZjY3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnu3ew1Fcc1bPnvMaWdxMyTHn/DN+nafuPsZ5GqZHYLXbQ mXtEZal4QnQkZKzn3jcwU+jGEbmTEQlKaruw3u1kY1yKJbGa0uxUhPMoVlvXeGTZ xHeUoRCJt0UFmMeCtXJJL8/y4hrR8dPDz2sh3l6aNQCHQPKfj0Lv1vUd8+5299te Bikoi+GqbEUJos7/tJ9sRnM6D30glUlgbXBYD2vRi2iwSAY9vHWxYzHWyCgauoTL yJGELv+d59GeXyNV4laIDfbRw9IlYp4PJd2ZntMFjDZtGluOxu6e8fj5r8iHi0gE juHl1V+4BgVd6g8acDj6b3jJuMPeAZm3CbKzZ7z3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnhtGLxo3WxlsBRlmlkj9F46sKD4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4YjVjODkwLTQ3ZjEtNGY3Zi1hOWRkLTMyMjg5NTU0ZjFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBAEBxbjCN4Qm7Vqbs0r84Jmh6Yxcf 6Pvq5/J2nR1cVs623qrXldd8vNmrwOQggTfiWdlhjqgKS70BtPGjwCqdEi4taSOP rOlZnlVfnept0ckePAhQJZiRpXIL39YqOSelW3YAFX4JaKSRuuIXsrAKkF9mKPb6 iMU++Rn+tjDV0/PBmSxRFpKtcqMEaRCqBOhMjTt9pN773h6Bw3SzKAkGZUK75kdx cSPqPz7U8Uooj3j+wGd/H1tVG3z1ulI3BGdo1FeNszNq6ZIkj8hipfkRtjCbmT7Z dyP9oYuDUQZfd2DSv0FWF84iqaMxOuynNnmblumVy1TmfaylPOk2ajJx4iA= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:13 2026 by rpki-client