$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa File: a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa (raw, json) Hash identifier: ZwcA9Y86shJ375GvXkQAf0rFJSpH5OID4pR5ygIyPiM= Subject key identifier: E1:4A:4F:EC:67:DF:8B:31:39:E4:48:CD:2C:F9:B0:D5:FC:E4:57:43 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4A0013D02CACF50B731B8764641161B91B01FD2B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa Signing time: Thu 26 Feb 2026 01:50:25 +0000 ROA not before: Thu 26 Feb 2026 01:50:25 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:00:13:d0:2c:ac:f5:0b:73:1b:87:64:64:11:61:b9:1b:01:fd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 26 01:50:25 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=cef3e2c3a2da2abcee4827dcf763817c63a32cc6507d580af557d722ec97ad38, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:3b:51:a4:76:d2:47:dc:88:7a:f8:1b:9b: 26:1e:01:1c:87:0e:a0:4c:4a:eb:3c:f9:dd:71:da: b2:72:9a:27:13:36:a2:46:76:61:b8:8f:6d:93:7c: e7:36:ec:84:72:a4:8f:d4:8c:8d:b5:64:71:95:19: a6:03:a3:fc:1e:15:7f:87:2b:9b:f7:df:45:6a:80: 06:41:79:9c:8a:a0:14:bd:0d:14:3c:16:a9:04:59: 98:d4:40:70:48:98:4c:7e:f9:44:28:cf:51:c1:ce: 2b:df:13:45:b0:f4:33:c7:a7:59:ce:53:17:f8:e6: 0a:72:20:53:f8:64:88:7e:ec:66:13:ed:65:e7:fc: 12:8e:d4:44:9b:ad:27:b2:7b:07:70:7c:5d:84:96: 0a:8f:d4:02:04:f9:52:19:ed:9f:e1:e3:67:6f:dd: e9:14:6d:da:65:51:6c:84:c7:28:ad:f8:72:a2:8b: 45:56:14:6d:25:38:43:09:16:9c:ba:16:63:e4:cb: a4:a9:8b:5d:e8:14:7f:6b:90:c7:16:c3:6c:9f:07: 8b:7d:62:9c:3c:9f:87:c8:cc:93:ff:22:4b:98:fe: 5d:ae:ce:19:87:42:64:f7:75:58:7a:22:97:47:46: 31:ac:31:6a:d2:0d:8e:d5:84:c3:3c:13:91:49:a6: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4A:4F:EC:67:DF:8B:31:39:E4:48:CD:2C:F9:B0:D5:FC:E4:57:43 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a2ca7e70-4b6e-43a6-93a2-5628eb545d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.43.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:ba:07:79:95:44:6f:f4:63:63:49:d9:a4:20:34:44:e7:ca: 60:02:f8:c6:8e:a0:98:33:03:a0:4d:0d:33:a0:58:56:19:0e: f0:d7:2f:0e:54:45:2f:ba:5f:5d:ed:34:63:b3:5e:fd:da:52: d4:b8:82:43:a6:61:83:6a:d8:7a:e5:0d:1b:92:9e:df:cc:7b: 9b:bd:29:ce:1e:ba:10:e6:4b:bc:c4:11:83:63:cf:cf:b8:d8: b9:91:44:a9:b6:4b:98:91:c7:60:ef:60:c3:5e:e8:42:b0:92: 44:90:17:f2:81:e6:06:14:12:3c:0e:14:6c:7a:4f:70:43:59: 64:b3:22:16:57:05:3c:e8:4a:e1:48:30:ac:5e:3b:df:62:2e: d2:50:11:4b:94:33:ac:e5:9c:81:f9:71:10:d5:f7:9e:5f:86: 40:a4:83:5e:c7:3c:3f:5a:14:f3:9c:19:4c:f4:e3:44:ea:69: 04:52:bf:33:6e:af:2e:2d:98:00:d5:ae:19:74:8a:56:34:3b: 1f:18:07:98:44:3d:d7:f6:f4:d8:e7:77:c3:4e:c7:23:c5:94: 45:af:ee:8d:6e:fd:ff:20:0a:35:2e:7a:d4:5d:e2:75:5d:5d: bc:7f:2a:db:c3:10:8c:b7:06:2e:e8:fc:78:96:fc:13:35:82: 9c:ec:3e:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSgAT0Cys9QtzG4dkZBFhuRsB/SswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI2MDE1MDI1WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWYzZTJjM2EyZGEyYWJjZWU0ODI3ZGNmNzYzODE3YzYz YTMyY2M2NTA3ZDU4MGFmNTU3ZDcyMmVjOTdhZDM4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7dztRpHbSR9yIevgbmyYeARyHDqBMSus8+d1x2rJymicT NqJGdmG4j22TfOc27IRypI/UjI21ZHGVGaYDo/weFX+HK5v330VqgAZBeZyKoBS9 DRQ8FqkEWZjUQHBImEx++UQoz1HBzivfE0Ww9DPHp1nOUxf45gpyIFP4ZIh+7GYT 7WXn/BKO1ESbrSeyewdwfF2ElgqP1AIE+VIZ7Z/h42dv3ekUbdplUWyExyit+HKi i0VWFG0lOEMJFpy6FmPky6Spi13oFH9rkMcWw2yfB4t9Ypw8n4fIzJP/IkuY/l2u zhmHQmT3dVh6IpdHRjGsMWrSDY7VhMM8E5FJphmvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4UpP7GffizE55EjNLPmw1fzkV0MwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2EyY2E3ZTcwLTRiNmUtNDNhNi05M2EyLTU2MjhlYjU0NWQxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCswDQYJKoZIhvcNAQELBQADggEBAA+6B3mVRG/0Y2NJ2aQgNETnymAC +MaOoJgzA6BNDTOgWFYZDvDXLw5URS+6X13tNGOzXv3aUtS4gkOmYYNq2HrlDRuS nt/Me5u9Kc4euhDmS7zEEYNjz8+42LmRRKm2S5iRx2DvYMNe6EKwkkSQF/KB5gYU EjwOFGx6T3BDWWSzIhZXBTzoSuFIMKxeO99iLtJQEUuUM6zlnIH5cRDV955fhkCk g17HPD9aFPOcGUz040TqaQRSvzNury4tmADVrhl0ilY0Ox8YB5hEPdf29Njnd8NO xyPFlEWv7o1u/f8gCjUuetRd4nVdXbx/KtvDEIy3Bi7o/HiW/BM1gpzsPg0= -----END CERTIFICATE-----Generated at Mon Mar 2 01:02:10 2026 by rpki-client