$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa File: 9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa (raw, json) Hash identifier: tTWd/JtS3br5tMG1BlLvPPX1hma+5/OilVnh9kw6FFg= Subject key identifier: 51:81:F2:57:50:54:2D:1D:AB:DD:3C:CF:69:94:08:A2:FB:9C:C5:86 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 59D675E751EE7E6D7B10DB67A037ECCA9992A750 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa Signing time: Sat 24 Oct 2026 01:50:31 +0000 ROA not before: Sat 24 Oct 2026 01:50:31 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d6:75:e7:51:ee:7e:6d:7b:10:db:67:a0:37:ec:ca:99:92:a7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:31 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=0a801f84a55bda12fd72a82af82890c3b7c1176da9361c7bedebfa82377a5b49, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:74:d2:5d:f2:f1:9f:bc:c9:a9:d6:4b:d6: d8:bc:98:92:9e:8e:8a:a9:db:18:b9:4f:72:97:5a: e0:29:da:c4:77:cb:9b:b9:f8:b0:72:10:9c:d1:af: f5:87:fc:38:8e:90:7b:be:ee:3c:43:1d:d6:05:68: 15:42:e5:a3:1b:e3:13:70:78:98:54:18:ac:a7:8c: e8:63:1c:63:7f:2b:6c:08:8f:a2:f8:07:e2:9d:d3: 6c:c8:0f:6e:bb:fd:03:1a:88:f4:cb:d7:14:19:a2: fb:57:c8:50:5f:6e:75:d1:38:5c:00:99:e9:85:91: 88:fa:2d:f7:fa:c7:da:8f:44:81:27:ea:3c:fb:4b: 06:77:0a:51:a6:d9:88:11:9d:0f:14:a0:44:ac:17: da:11:d4:ff:74:65:3c:d4:8f:bd:32:2d:60:f5:3c: 5a:f7:5a:79:85:9b:dc:a9:9c:63:07:bd:0b:dc:1b: eb:03:7f:a4:c2:c8:03:71:cc:d8:de:cf:40:98:48: 8b:75:f3:6c:a2:90:fe:02:6d:56:8c:65:44:cb:81: 34:f6:ee:51:0e:ca:18:33:d6:4f:56:34:1c:df:4c: 3e:66:e4:b1:ec:79:63:0f:fb:71:1e:10:52:ff:19: 2e:0d:ba:5e:61:5a:0d:0d:20:b9:2d:00:84:53:13: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:81:F2:57:50:54:2D:1D:AB:DD:3C:CF:69:94:08:A2:FB:9C:C5:86 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 41:30:18:3e:2c:18:a5:12:1f:70:d2:a4:ac:23:b5:af:78:2d: 22:e7:d3:b0:be:4a:56:14:c0:ee:84:1e:19:f8:f0:9f:d0:b8: cb:3f:f6:83:52:66:63:bc:e6:97:b6:b8:5a:60:a7:e0:ae:9d: f4:99:f8:b2:59:65:9e:06:a6:60:20:b3:23:3b:6b:75:59:7b: 8e:48:f5:50:bd:dd:56:39:11:a8:2e:41:86:16:66:d0:c7:69: a9:1b:71:8f:a1:5d:0a:a1:a0:b5:46:dc:8d:d7:09:95:9b:04: 57:49:2a:02:a7:fa:11:ce:2b:59:ea:73:f2:c8:88:8e:e4:98: e4:45:03:0a:e6:1d:9e:e8:0b:0a:5a:70:c6:06:0a:20:08:78: 49:f7:8c:0c:f1:1e:c9:9d:e5:58:26:38:dc:18:94:dc:52:9d: 42:df:a5:bf:84:3d:14:b9:49:3f:46:27:a4:27:b5:e5:9b:bf: 01:7e:03:ae:8a:99:10:d3:25:2d:29:6a:46:1d:31:f3:38:27: 58:e1:87:44:af:c3:13:2c:23:c1:27:73:cf:68:f9:54:b5:46: 77:7f:e7:5d:ae:24:17:0b:31:20:d2:b8:60:b4:7e:f4:59:55: 6b:0c:d4:3e:bb:9e:b2:be:99:3c:22:de:f7:e0:87:f3:4d:da: ae:4f:94:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWdZ151Hufm17ENtnoDfsypmSp1AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDMxWhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTgwMWY4NGE1NWJkYTEyZmQ3MmE4MmFmODI4OTBjM2I3 YzExNzZkYTkzNjFjN2JlZGViZmE4MjM3N2E1YjQ5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVcnTSXfLxn7zJqdZL1ti8mJKejoqp2xi5T3KXWuAp2sR3 y5u5+LByEJzRr/WH/DiOkHu+7jxDHdYFaBVC5aMb4xNweJhUGKynjOhjHGN/K2wI j6L4B+Kd02zID267/QMaiPTL1xQZovtXyFBfbnXROFwAmemFkYj6Lff6x9qPRIEn 6jz7SwZ3ClGm2YgRnQ8UoESsF9oR1P90ZTzUj70yLWD1PFr3WnmFm9ypnGMHvQvc G+sDf6TCyANxzNjez0CYSIt182yikP4CbVaMZUTLgTT27lEOyhgz1k9WNBzfTD5m 5LHseWMP+3EeEFL/GS4Nul5hWg0NILktAIRTE+qRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUYHyV1BULR2r3TzPaZQIovucxYYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljYWY1MGQ3LTE1MTEtNDhhNy1hYmNmLWQyNjFkZWQ3ZjdjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBAEEwGD4sGKUSH3DSpKwjta94LSLn 07C+SlYUwO6EHhn48J/QuMs/9oNSZmO85pe2uFpgp+CunfSZ+LJZZZ4GpmAgsyM7 a3VZe45I9VC93VY5EaguQYYWZtDHaakbcY+hXQqhoLVG3I3XCZWbBFdJKgKn+hHO K1nqc/LIiI7kmORFAwrmHZ7oCwpacMYGCiAIeEn3jAzxHsmd5VgmONwYlNxSnULf pb+EPRS5ST9GJ6QnteWbvwF+A66KmRDTJS0pakYdMfM4J1jhh0SvwxMsI8Enc89o +VS1Rnd/512uJBcLMSDSuGC0fvRZVWsM1D67nrK+mTwi3vfgh/NN2q5PlK0= -----END CERTIFICATE-----Generated at Thu Nov 5 07:19:53 2026 by rpki-client