$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa File: 9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa (raw, json) Hash identifier: cnnVFcyas8TtVhkRr17cRd0zR+NW4hR5gN6dmC7aez0= Subject key identifier: 4A:AD:A7:F3:2E:75:E8:1C:C6:A1:3F:D9:8D:08:B7:96:3D:44:03:B3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 419EF5901799FBF589DEE4B233E2DF300D68E0F1 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa Signing time: Thu 26 Feb 2026 01:50:08 +0000 ROA not before: Thu 26 Feb 2026 01:50:08 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9e:f5:90:17:99:fb:f5:89:de:e4:b2:33:e2:df:30:0d:68:e0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 26 01:50:08 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=9ee528bfafb85a13b12f66d534575ee14c61d927dd4ed4b98507868698bae738, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:1e:58:e1:28:70:9e:f0:7f:f0:10:4a:12: 9b:45:4b:e8:4c:19:7c:34:e3:bd:a2:a1:7a:de:46: 09:b7:69:75:cb:b2:a5:3b:2d:fe:f7:6d:5d:f3:01: 28:a3:74:13:2e:93:aa:f1:97:b9:4c:d2:27:28:cb: 8c:33:7f:30:a9:ab:eb:1a:b0:5c:e8:7d:c1:96:13: 2f:e8:8b:9e:03:1d:af:a0:1a:36:d9:77:87:1e:20: d9:76:d5:e6:35:50:f1:a6:a2:9f:6e:e7:2a:be:0a: 84:86:26:41:31:f0:1b:4c:f7:f3:05:ab:cf:c9:81: d2:9b:42:49:32:29:b3:03:af:a9:8c:d8:3e:be:03: 62:93:d9:eb:ca:37:a8:9e:57:47:6a:aa:f9:db:6a: cb:5d:91:84:c2:8b:bb:56:e4:c6:5e:6e:41:d4:8a: 6f:56:b2:40:44:03:e3:6b:cc:de:d0:c3:d8:fe:c4: 85:d4:73:e5:a9:da:a5:be:20:ec:d8:8a:44:5d:23: 6c:f1:d4:6d:c8:a1:63:b5:b8:c3:57:83:92:52:43: ee:54:5d:6e:f6:bf:cd:4c:b4:56:7f:06:51:3a:03: 84:4d:36:b4:d8:42:dc:94:2b:c6:26:c1:28:fb:8d: a5:5a:00:a4:d6:5d:38:88:b7:c2:ba:e5:b7:b2:65: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:A7:F3:2E:75:E8:1C:C6:A1:3F:D9:8D:08:B7:96:3D:44:03:B3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 07:17:c3:9c:b5:61:f4:52:29:e8:0e:fe:6a:f1:c0:1b:63:0d: ce:62:ba:dc:b3:05:2d:3a:ff:a8:b2:77:f9:66:4c:26:91:bb: 75:5c:f4:6d:47:e6:05:b8:49:ea:b8:a0:ff:bf:a2:ed:ca:60: c8:7a:08:e9:a4:ba:61:23:6f:f6:ad:5c:f5:75:f6:d8:c7:bf: cb:7a:eb:6c:56:bc:66:83:e9:19:74:dc:4a:dc:17:b4:47:e7: d1:73:2c:ac:90:78:91:07:79:23:b5:fb:d5:03:d8:c0:aa:3d: 4e:b6:e2:da:27:84:74:b1:6d:fe:57:24:f5:77:78:7b:7b:2c: d6:47:c7:a3:ed:31:ba:cb:e8:ec:fa:ae:7e:71:71:05:51:16: d7:e0:68:93:55:85:4f:95:42:f6:b8:b8:8a:41:98:ee:7c:b9: e2:64:4a:31:7b:7f:fb:7f:f3:82:49:69:3b:68:d2:b3:14:8e: bd:1c:c7:6d:15:67:51:09:90:89:17:80:67:1e:78:b7:66:f3: eb:ce:10:21:d2:4b:cd:a2:ad:fb:6d:2a:27:03:e5:7a:fc:a0: 2b:23:4f:46:93:97:67:88:60:34:84:1c:a7:38:90:c9:62:76: 2b:1a:9e:da:af:eb:03:60:f4:6e:db:72:d5:12:00:c5:dd:44: dc:95:e1:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQZ71kBeZ+/WJ3uSyM+LfMA1o4PEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI2MDE1MDA4WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWU1MjhiZmFmYjg1YTEzYjEyZjY2ZDUzNDU3NWVlMTRj NjFkOTI3ZGQ0ZWQ0Yjk4NTA3ODY4Njk4YmFlNzM4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyGx5Y4ShwnvB/8BBKEptFS+hMGXw0472ioXreRgm3aXXL sqU7Lf73bV3zASijdBMuk6rxl7lM0icoy4wzfzCpq+sasFzofcGWEy/oi54DHa+g GjbZd4ceINl21eY1UPGmop9u5yq+CoSGJkEx8BtM9/MFq8/JgdKbQkkyKbMDr6mM 2D6+A2KT2evKN6ieV0dqqvnbastdkYTCi7tW5MZebkHUim9WskBEA+NrzN7Qw9j+ xIXUc+Wp2qW+IOzYikRdI2zx1G3IoWO1uMNXg5JSQ+5UXW72v81MtFZ/BlE6A4RN NrTYQtyUK8YmwSj7jaVaAKTWXTiIt8K65beyZYi5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSq2n8y516BzGoT/ZjQi3lj1EA7MwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljYWY1MGQ3LTE1MTEtNDhhNy1hYmNmLWQyNjFkZWQ3ZjdjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBAAcXw5y1YfRSKegO/mrxwBtjDc5i utyzBS06/6iyd/lmTCaRu3Vc9G1H5gW4Seq4oP+/ou3KYMh6COmkumEjb/atXPV1 9tjHv8t662xWvGaD6Rl03ErcF7RH59FzLKyQeJEHeSO1+9UD2MCqPU624tonhHSx bf5XJPV3eHt7LNZHx6PtMbrL6Oz6rn5xcQVRFtfgaJNVhU+VQva4uIpBmO58ueJk SjF7f/t/84JJaTto0rMUjr0cx20VZ1EJkIkXgGceeLdm8+vOECHSS82irfttKicD 5Xr8oCsjT0aTl2eIYDSEHKc4kMlidisantqv6wNg9G7bctUSAMXdRNyV4cw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:04:30 2026 by rpki-client